$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: zo3FEnPiCZiCZT/BcSjy+hclXIt6XqgcGmfkAvNspWg= Subject key identifier: 68:8C:90:97:FA:DE:80:CD:78:17:CB:B6:0D:2D:4B:22:00:01:B2:BF Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 1B6FD150FA9FBE3F398F650DA6F1DE35EDF6A5A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: BD Signing time: Tue 05 Aug 2025 13:11:56 +0000 Manifest this update: Tue 05 Aug 2025 13:06:56 +0000 Manifest next update: Fri 08 Aug 2025 22:01:56 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: QS3Q+zzqWBZnvGwh9zcmxw9WavoaZVVQJIJLS1EwH/s=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6f:d1:50:fa:9f:be:3f:39:8f:65:0d:a6:f1:de:35:ed:f6:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Aug 5 13:06:56 2025 GMT Not After : Aug 8 22:01:56 2025 GMT Subject: CN=688C9097FADE80CD7817CBB60D2D4B220001B2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:ba:dd:51:95:ce:16:10:a4:5e:50:46:e2: a3:cb:7f:8a:7d:e5:f3:10:d7:4c:fd:14:a3:d3:c9: aa:b4:42:e4:0c:5b:22:73:54:2f:7d:67:e1:83:84: 03:5f:cb:30:fe:39:98:29:27:f1:af:d9:6a:e5:e0: 59:2d:71:c7:d3:61:68:8e:e3:ad:28:7f:fb:cd:1e: 83:9d:86:07:c0:17:c8:da:5d:dc:45:7b:e9:df:2e: 46:79:12:f4:90:35:6c:84:b6:a2:7d:11:c2:cd:f9: 02:ae:f3:cc:94:fe:8b:9b:8c:ab:24:99:f6:b8:bc: 2d:34:6b:ab:24:8d:4a:9a:e8:48:ab:be:a7:0e:49: 30:09:23:4a:06:60:26:d9:84:73:b2:25:e7:b6:d7: 7e:45:d5:5b:b1:56:93:4f:1a:1a:12:6e:49:fd:62: f8:00:8a:52:0a:2c:27:b8:c3:12:f4:b7:ab:1d:21: 19:06:12:f5:ca:54:86:ef:03:d9:89:67:74:50:68: 23:3e:df:74:7e:0a:c5:e9:31:8d:49:32:84:09:ef: b3:3a:af:2f:30:50:84:87:46:ad:97:bb:9e:9e:11: a6:d6:59:db:ef:93:71:eb:05:b1:d9:0b:2f:09:55: 1f:ac:73:70:a6:b4:f7:67:80:f3:0c:b5:72:96:45: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:90:97:FA:DE:80:CD:78:17:CB:B6:0D:2D:4B:22:00:01:B2:BF X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0d:8b:0a:25:20:b1:64:63:dc:0f:f0:9b:61:85:38:0a:b3: 39:2e:03:b5:9f:ce:31:f0:66:ac:ff:f4:5c:f4:82:cc:f3:e5: f5:ad:54:93:a8:52:3d:de:d6:ab:0d:cf:c6:84:f3:4b:f7:e5: 4b:cb:8c:2f:c7:30:ce:91:fa:e8:34:da:c0:89:4b:d5:86:3b: 88:27:14:e2:13:9e:81:a2:ab:68:93:29:4b:5b:8f:bb:ae:a7: 5b:da:23:48:3e:44:4f:f9:54:36:87:a7:88:f8:ad:6f:fc:e0: 6d:9e:37:e5:8b:bb:58:17:b9:2f:cc:bb:ff:3d:98:9d:02:34: 99:77:8b:7e:cc:dc:c2:c6:57:6e:1b:94:ea:e7:58:e4:44:79: 78:8a:2a:98:2c:de:0e:34:90:d7:1b:12:0d:f5:15:1f:c6:2a: dd:1f:62:25:fa:06:51:47:2f:bb:3d:cc:2b:00:c9:5e:0f:13: 65:bb:f1:bc:bc:0c:f8:51:39:74:2e:85:07:c3:49:b3:c3:2a: bc:15:29:ec:cc:a1:dc:c9:e2:67:46:ff:86:a3:de:91:db:5e: 39:b1:ed:38:ae:6d:a9:b5:0c:8b:ea:63:19:71:b0:5c:d2:d5: c7:6a:1d:ff:24:a7:1c:f9:61:f3:0c:bb:a0:68:85:fb:02:3f: a6:4e:b6:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2/RUPqfvj85j2UNpvHeNe32paYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTA4MDUxMzA2NTZaFw0yNTA4MDgyMjAxNTZaMDMxMTAvBgNV BAMTKDY4OEM5MDk3RkFERTgwQ0Q3ODE3Q0JCNjBEMkQ0QjIyMDAwMUIyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwLrdUZXOFhCkXlBG4qPLf4p9 5fMQ10z9FKPTyaq0QuQMWyJzVC99Z+GDhANfyzD+OZgpJ/Gv2Wrl4FktccfTYWiO 460of/vNHoOdhgfAF8jaXdxFe+nfLkZ5EvSQNWyEtqJ9EcLN+QKu88yU/oubjKsk mfa4vC00a6skjUqa6EirvqcOSTAJI0oGYCbZhHOyJee2135F1VuxVpNPGhoSbkn9 YvgAilIKLCe4wxL0t6sdIRkGEvXKVIbvA9mJZ3RQaCM+33R+CsXpMY1JMoQJ77M6 ry8wUISHRq2Xu56eEabWWdvvk3HrBbHZCy8JVR+sc3CmtPdngPMMtXKWRecdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaIyQl/regM14F8u2DS1LIgABsr8wHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcNiwolILFkY9wP8JthhTgKszkuA7WfzjHw Zqz/9Fz0gszz5fWtVJOoUj3e1qsNz8aE80v35UvLjC/HMM6R+ug02sCJS9WGO4gn FOITnoGiq2iTKUtbj7uup1vaI0g+RE/5VDaHp4j4rW/84G2eN+WLu1gXuS/Mu/89 mJ0CNJl3i37M3MLGV24blOrnWOREeXiKKpgs3g40kNcbEg31FR/GKt0fYiX6BlFH L7s9zCsAyV4PE2W78by8DPhROXQuhQfDSbPDKrwVKezModzJ4mdG/4aj3pHbXjmx 7Tiubam1DIvqYxlxsFzS1cdqHf8kpxz5YfMMu6BohfsCP6ZOtrE= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:25 2025 by rpki-client