$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: nHY0Fz7SVQrZ0Zcfi49W+Q9PrVj+gRMMv1RXNvxmp6c= Subject key identifier: 7D:0B:E9:16:28:6C:FA:0A:98:5B:DB:7D:F6:93:D3:A2:00:18:13:C2 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 7391DBF7541AE1CF901822E800AF99363E4D70E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0201 Signing time: Fri 08 Aug 2025 15:20:39 +0000 Manifest this update: Fri 08 Aug 2025 15:15:39 +0000 Manifest next update: Mon 11 Aug 2025 21:32:39 +0000 Files and hashes: 1: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: T8wUIAcc1wCCZQVHNJgMsmxJQ6R75rPoa6L/ecb402Y=) 2: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: nbEpopwiojWgYGehW+g9TqMlbT1/tFwqFVAFzwn9bm8=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: UeRCOjo57wOeUyYDJJ1YZ67dLYbNF8SefWTH/DR2yv8=) 4: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:91:db:f7:54:1a:e1:cf:90:18:22:e8:00:af:99:36:3e:4d:70:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Aug 8 15:15:39 2025 GMT Not After : Aug 11 21:32:39 2025 GMT Subject: CN=7D0BE916286CFA0A985BDB7DF693D3A2001813C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:c4:5b:2e:60:2c:34:e2:f9:f9:5e:67:3a: 68:48:b6:e8:71:ef:a8:48:1f:52:64:57:9f:5a:e0: d9:43:9d:75:5b:06:f3:ca:01:f7:ca:cb:a1:f9:e7: 50:54:76:fc:26:f4:ce:2f:12:b7:4a:69:9d:1c:56: 50:40:af:0d:00:a3:b1:5f:b9:93:91:3b:ee:6d:33: 91:7c:eb:99:bb:80:18:f0:e0:bd:e2:53:d3:f0:cf: 21:36:4c:53:4e:c4:a0:3f:7c:9e:74:2d:54:5f:07: de:44:bb:09:da:87:aa:1d:2d:48:0a:4e:cb:2d:11: f3:ff:45:05:c4:70:c4:42:a5:ee:f4:19:11:d4:b9: 14:fb:6a:ed:39:e2:5e:3b:79:5e:db:4e:63:d0:96: 25:8b:94:be:37:ec:0f:bf:62:aa:30:d9:35:8d:f4: 09:86:02:f4:81:31:61:18:14:17:61:20:6c:c9:c0: 6e:28:12:f4:ce:2c:98:7b:70:5e:47:77:8a:a6:0c: c6:3a:0f:1b:c3:4e:aa:a9:1b:16:30:67:ca:14:6d: 71:de:aa:b2:e2:0e:0f:11:62:db:59:98:34:f9:f4: 4d:e2:62:0f:fc:5f:8c:cb:d0:c8:c1:df:fa:3d:70: e7:82:0d:c7:a1:d2:09:95:84:59:e8:3a:79:bf:6f: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0B:E9:16:28:6C:FA:0A:98:5B:DB:7D:F6:93:D3:A2:00:18:13:C2 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d1:aa:7d:c9:57:74:3c:7c:e5:be:fa:49:d0:43:7d:5a:9f: e5:dc:f5:00:76:56:20:b7:bd:e2:26:4d:75:73:07:61:3b:f9: fc:8c:19:75:2a:ed:f1:f4:c8:b9:7b:b0:ec:29:67:6c:92:5c: 55:2a:55:d4:db:e2:5a:e7:24:46:ae:84:c3:da:30:dc:6a:03: db:55:4b:b3:45:0f:ab:b4:91:fe:32:b9:42:90:ae:92:28:c6: a9:74:4e:7f:42:5f:46:45:95:4d:6d:72:a3:69:69:2a:9e:da: 37:a4:3d:16:37:3b:b2:25:f6:f4:b2:20:15:f6:c0:df:7a:12: df:08:cc:fd:d4:aa:71:97:fe:08:cf:45:de:13:9b:fd:ad:f1: ef:32:2f:48:86:c1:82:84:c4:55:3b:d8:5d:61:00:99:03:b6: 6a:ff:5a:f4:c3:b7:f9:c8:5a:75:fa:97:cf:27:f2:0b:db:e7: 81:17:dd:e8:28:a9:f2:b0:3b:8c:27:2d:6f:a6:d6:8f:4f:3c: d0:e1:7e:c3:d7:59:ff:4f:59:2e:0b:e5:0c:10:80:b5:bd:9e: cb:48:f1:38:e4:79:08:04:b4:17:82:d1:d8:18:56:b7:f7:5c: 9c:e4:58:41:ea:8d:a1:3c:19:41:17:f7:9b:53:7f:62:4b:c0: c3:66:17:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5Hb91Qa4c+QGCLoAK+ZNj5NcOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTA4MDgxNTE1MzlaFw0yNTA4MTEyMTMyMzlaMDMxMTAvBgNV BAMTKDdEMEJFOTE2Mjg2Q0ZBMEE5ODVCREI3REY2OTNEM0EyMDAxODEzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkO8RbLmAsNOL5+V5nOmhItuhx 76hIH1JkV59a4NlDnXVbBvPKAffKy6H551BUdvwm9M4vErdKaZ0cVlBArw0Ao7Ff uZORO+5tM5F865m7gBjw4L3iU9PwzyE2TFNOxKA/fJ50LVRfB95Euwnah6odLUgK TsstEfP/RQXEcMRCpe70GRHUuRT7au054l47eV7bTmPQliWLlL437A+/Yqow2TWN 9AmGAvSBMWEYFBdhIGzJwG4oEvTOLJh7cF5Hd4qmDMY6DxvDTqqpGxYwZ8oUbXHe qrLiDg8RYttZmDT59E3iYg/8X4zL0MjB3/o9cOeCDceh0gmVhFnoOnm/b/kFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQvpFihs+gqYW9t99pPTogAYE8IwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArRqn3JV3Q8fOW++knQQ31an+Xc9QB2ViC3 veImTXVzB2E7+fyMGXUq7fH0yLl7sOwpZ2ySXFUqVdTb4lrnJEauhMPaMNxqA9tV S7NFD6u0kf4yuUKQrpIoxql0Tn9CX0ZFlU1tcqNpaSqe2jekPRY3O7Il9vSyIBX2 wN96Et8IzP3UqnGX/gjPRd4Tm/2t8e8yL0iGwYKExFU72F1hAJkDtmr/WvTDt/nI WnX6l88n8gvb54EX3egoqfKwO4wnLW+m1o9PPNDhfsPXWf9PWS4L5QwQgLW9nstI 8TjkeQgEtBeC0dgYVrf3XJzkWEHqjaE8GUEX95tTf2JLwMNmFzU= -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:36 2025 by rpki-client