$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: 6lws5DYYZaZrxsxmaNIjaX4a8x4zrf7o/Zs2mqDbZEI= Subject key identifier: 5B:88:8B:A8:B5:26:2A:85:7E:6F:96:2A:71:E5:D7:51:42:AC:72:04 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 54838EF987E1A5324BEAB3049642709CB471500C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0277 Signing time: Thu 07 Aug 2025 01:00:42 +0000 Manifest this update: Thu 07 Aug 2025 00:55:42 +0000 Manifest next update: Sun 10 Aug 2025 09:18:42 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) 2: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: tekUOOc2WC3eI4W1t8bszk0ZQ1W/LM2iwDMNbR7GyKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:83:8e:f9:87:e1:a5:32:4b:ea:b3:04:96:42:70:9c:b4:71:50:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Aug 7 00:55:42 2025 GMT Not After : Aug 10 09:18:42 2025 GMT Subject: CN=5B888BA8B5262A857E6F962A71E5D75142AC7204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:76:4e:70:e5:dd:f2:d0:ad:75:46:01:ee: ac:7d:2f:1f:d7:0e:a9:25:91:3d:24:53:b9:5d:5f: 09:e6:41:85:05:65:00:72:68:1c:cd:8b:59:f2:8b: e1:bc:5c:f2:5a:18:fe:66:6d:36:db:93:67:2a:a2: 57:cc:91:7b:e8:3b:e2:6c:f5:77:28:db:c7:1a:46: 30:a0:6e:b7:c6:0b:e3:7b:71:77:e0:1c:02:be:0d: c8:06:a6:a3:73:bf:85:47:72:7d:2c:7b:c6:dc:cd: 07:82:58:58:71:77:9f:a6:d3:0f:c8:c5:68:56:28: 51:ea:9e:36:20:e6:37:d1:36:e3:4a:64:93:0b:20: cc:5a:9f:fb:9e:e9:df:cb:0c:2e:7b:55:07:e4:d8: 88:f3:e5:c1:be:65:20:aa:4f:02:1e:14:f1:ca:06: 8b:ee:15:9c:f1:80:4b:40:69:43:0a:9d:33:9f:a5: 0c:7a:0d:ff:a0:72:21:70:5e:5f:28:14:45:d8:71: b5:0f:ef:59:50:75:83:96:80:23:89:e8:f6:e9:a0: 65:7c:e1:d5:cf:31:12:9b:c0:2c:21:2f:b0:f6:cd: 45:18:ef:e6:12:1b:6d:4a:fd:91:6e:57:48:f1:7e: 64:ff:ca:b8:f7:da:bb:a0:7c:41:fe:0e:f0:5d:d9: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:8B:A8:B5:26:2A:85:7E:6F:96:2A:71:E5:D7:51:42:AC:72:04 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:63:1f:65:4b:0c:0d:33:d5:67:36:76:2d:a0:89:44:98:a3: 84:51:1c:46:e5:56:1e:87:79:c6:e9:f4:b4:45:90:b2:c7:3b: 33:4f:71:4b:60:a5:15:73:e5:f5:59:5c:3e:ee:9b:49:fa:b8: f0:f5:fe:33:c7:29:fa:3a:6e:55:ef:d3:92:38:a1:7c:3a:85: 62:03:70:0e:33:a2:37:a8:56:3a:37:7f:f1:6b:0d:69:16:f3: 56:96:cf:6c:86:c1:3a:29:f9:41:c1:30:67:2d:2c:5c:39:bd: 97:a2:df:20:48:0c:2c:e2:fd:a5:29:0f:af:84:98:68:ba:84: 51:47:0e:78:5a:3e:f8:16:fc:a3:fb:d5:e9:de:04:0e:91:5d: 63:2b:45:7f:1b:1a:5f:87:bc:4c:18:20:fc:6e:86:2a:b5:cb: 2a:c6:47:dc:96:9b:1c:cf:d5:53:64:5c:00:c0:37:ce:d1:d1: cd:9a:17:07:a4:94:ed:ca:9d:43:ae:e2:d7:70:93:33:1c:73: 5a:8c:99:65:f2:50:a3:bb:6c:8f:60:c1:2d:58:8d:01:10:22: 8d:85:ee:12:c2:1c:24:ec:ea:09:d6:51:0e:4d:1c:ec:71:20: ef:7d:6c:cb:82:24:5c:94:cb:cf:da:2a:f3:b2:5d:0c:d4:8b: 9a:68:2b:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIOO+YfhpTJL6rMElkJwnLRxUAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA4MDcwMDU1NDJaFw0yNTA4MTAwOTE4NDJaMDMxMTAvBgNV BAMTKDVCODg4QkE4QjUyNjJBODU3RTZGOTYyQTcxRTVENzUxNDJBQzcyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiHZOcOXd8tCtdUYB7qx9Lx/X DqklkT0kU7ldXwnmQYUFZQByaBzNi1nyi+G8XPJaGP5mbTbbk2cqolfMkXvoO+Js 9Xco28caRjCgbrfGC+N7cXfgHAK+DcgGpqNzv4VHcn0se8bczQeCWFhxd5+m0w/I xWhWKFHqnjYg5jfRNuNKZJMLIMxan/ue6d/LDC57VQfk2Ijz5cG+ZSCqTwIeFPHK BovuFZzxgEtAaUMKnTOfpQx6Df+gciFwXl8oFEXYcbUP71lQdYOWgCOJ6PbpoGV8 4dXPMRKbwCwhL7D2zUUY7+YSG21K/ZFuV0jxfmT/yrj32rugfEH+DvBd2R3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4iLqLUmKoV+b5YqceXXUUKscgQwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpjH2VLDA0z1Wc2di2giUSYo4RRHEblVh6H ecbp9LRFkLLHOzNPcUtgpRVz5fVZXD7um0n6uPD1/jPHKfo6blXv05I4oXw6hWID cA4zojeoVjo3f/FrDWkW81aWz2yGwTop+UHBMGctLFw5vZei3yBIDCzi/aUpD6+E mGi6hFFHDnhaPvgW/KP71eneBA6RXWMrRX8bGl+HvEwYIPxuhiq1yyrGR9yWmxzP 1VNkXADAN87R0c2aFweklO3KnUOu4tdwkzMcc1qMmWXyUKO7bI9gwS1YjQEQIo2F 7hLCHCTs6gnWUQ5NHOxxIO99bMuCJFyUy8/aKvOyXQzUi5poK/c= -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:34 2025 by rpki-client