$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: H7+A9o/6QHaH2jMNdxqJxt5f1/m0PHZA0rb7FhCsCvs= Subject key identifier: 8A:56:48:BA:9F:40:D1:BC:1D:E4:77:83:8B:E5:AF:12:22:35:7B:D6 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 170C35CBFA052B28BADC8582D9E8D1EDD8DBB063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 017B Signing time: Wed 06 Aug 2025 07:10:36 +0000 Manifest this update: Wed 06 Aug 2025 07:05:36 +0000 Manifest next update: Sat 09 Aug 2025 14:51:36 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) 2: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 3: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 4: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: 1WhYPLnt2c9q2JS5uRspAbmMgKZ34y7cliPGb1TxtnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:35:cb:fa:05:2b:28:ba:dc:85:82:d9:e8:d1:ed:d8:db:b0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Aug 6 07:05:36 2025 GMT Not After : Aug 9 14:51:36 2025 GMT Subject: CN=8A5648BA9F40D1BC1DE477838BE5AF1222357BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:8a:ee:75:98:aa:f5:df:71:74:78:be:86: 27:74:83:a0:da:9c:1f:7e:65:79:06:12:68:86:f6: 0a:13:a7:01:30:22:92:86:2e:3e:5c:30:5a:9a:df: 1d:d1:7b:11:16:42:1b:e4:50:0b:e5:d2:31:fa:36: a1:d5:20:31:c9:ce:82:f0:35:6a:72:4b:19:0d:cb: c9:42:8b:35:fc:a7:18:ce:0a:84:72:04:07:cb:22: e9:d6:54:e5:c1:5c:43:e2:a3:3b:f2:3a:7c:3b:dc: 63:d6:43:58:20:fc:b9:cc:fb:3a:79:29:46:1c:0b: 45:35:06:59:96:dc:26:f0:fd:0d:ee:8d:dd:11:9f: 32:93:ae:b6:94:70:ab:42:45:09:87:25:88:55:17: 10:77:0f:6a:ce:3d:fc:48:6e:40:76:8b:1c:9d:96: 97:ca:18:b2:d9:c3:27:22:88:dd:6e:d5:e6:f9:20: 5d:78:ca:d6:30:a2:e6:f3:44:92:74:d4:4a:17:29: e8:df:f1:2a:fd:3b:eb:80:70:a2:95:8d:b1:11:17: 30:18:a7:89:55:a7:c8:a5:ac:79:1d:53:a3:27:d4: f4:ba:61:f0:38:4a:13:c9:9b:1c:95:f4:01:1b:85: 63:44:cd:a4:94:f6:3b:a1:ca:a6:c0:3b:d1:bd:fd: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:48:BA:9F:40:D1:BC:1D:E4:77:83:8B:E5:AF:12:22:35:7B:D6 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:19:ce:a7:24:9f:d8:87:70:57:0c:49:cc:5a:1e:ff:c2:1d: 48:fd:25:6e:37:04:bb:8c:2a:72:ca:93:49:3a:4f:13:fb:42: 36:87:38:3c:8d:e9:9d:ff:88:f4:15:86:60:e3:22:fb:96:fd: 19:50:d3:70:86:9d:ba:4f:33:fe:02:13:a9:0f:b7:f4:b8:11: 57:ac:7a:3d:79:98:0f:7c:bb:db:70:a4:ad:16:5c:e4:fe:b0: 03:aa:13:a9:b7:92:8d:b5:7e:58:ec:4e:fd:ab:07:34:11:17: ed:82:63:3d:92:ae:c0:d7:50:00:3f:15:8a:52:9d:7d:68:e7: 57:bf:4b:2d:e0:0c:02:67:00:80:66:76:0e:57:89:8e:81:c8: 90:e4:7d:b8:b8:39:1e:2c:18:e8:bd:47:8b:87:70:92:d0:9e: fe:5d:39:35:fb:46:15:95:0f:b9:c1:a3:c2:91:39:b2:0e:30: f3:e2:51:b6:fb:43:dc:87:5e:e6:c4:52:42:8d:1c:df:20:e2: 5d:2b:5c:c9:87:31:79:24:cb:f2:40:a4:28:1a:8e:dc:fc:45: 07:9c:0b:38:c6:37:58:87:57:06:ec:89:0b:6e:61:58:5e:cf: 6c:77:81:56:a8:cf:cc:55:5d:ef:95:bd:60:ac:39:e7:f9:b1: b6:a7:b7:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFww1y/oFKyi63IWC2ejR7djbsGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA4MDYwNzA1MzZaFw0yNTA4MDkxNDUxMzZaMDMxMTAvBgNV BAMTKDhBNTY0OEJBOUY0MEQxQkMxREU0Nzc4MzhCRTVBRjEyMjIzNTdCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPIrudZiq9d9xdHi+hid0g6Da nB9+ZXkGEmiG9goTpwEwIpKGLj5cMFqa3x3RexEWQhvkUAvl0jH6NqHVIDHJzoLw NWpySxkNy8lCizX8pxjOCoRyBAfLIunWVOXBXEPiozvyOnw73GPWQ1gg/LnM+zp5 KUYcC0U1BlmW3Cbw/Q3ujd0RnzKTrraUcKtCRQmHJYhVFxB3D2rOPfxIbkB2ixyd lpfKGLLZwyciiN1u1eb5IF14ytYwoubzRJJ01EoXKejf8Sr9O+uAcKKVjbERFzAY p4lVp8ilrHkdU6Mn1PS6YfA4ShPJmxyV9AEbhWNEzaSU9juhyqbAO9G9/TPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilZIup9A0bwd5HeDi+WvEiI1e9YwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoZzqckn9iHcFcMScxaHv/CHUj9JW43BLuM KnLKk0k6TxP7QjaHODyN6Z3/iPQVhmDjIvuW/RlQ03CGnbpPM/4CE6kPt/S4EVes ej15mA98u9twpK0WXOT+sAOqE6m3ko21fljsTv2rBzQRF+2CYz2SrsDXUAA/FYpS nX1o51e/Sy3gDAJnAIBmdg5XiY6ByJDkfbi4OR4sGOi9R4uHcJLQnv5dOTX7RhWV D7nBo8KRObIOMPPiUbb7Q9yHXubEUkKNHN8g4l0rXMmHMXkky/JApCgajtz8RQec CzjGN1iHVwbsiQtuYVhez2x3gVaoz8xVXe+VvWCsOef5sbantw4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:28 2025 by rpki-client