$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: QCpNL7yuLOVjTQQF4rkLWR5qg1G/87Yx3G9+10+okd4= Subject key identifier: AF:90:F7:AE:0C:12:AD:5A:95:0C:DD:5C:9C:1F:EB:0E:71:5A:6A:5E Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 443FC1A0198401EFB26AA2069FE7B597CAB47A66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 010C Signing time: Tue 05 Aug 2025 23:41:01 +0000 Manifest this update: Tue 05 Aug 2025 23:36:01 +0000 Manifest next update: Sat 09 Aug 2025 10:05:01 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: rVjegUxpLVZ3y1bH450d3c7DFcd/yu30LJyF3ONv7Fc=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3f:c1:a0:19:84:01:ef:b2:6a:a2:06:9f:e7:b5:97:ca:b4:7a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Aug 5 23:36:01 2025 GMT Not After : Aug 9 10:05:01 2025 GMT Subject: CN=AF90F7AE0C12AD5A950CDD5C9C1FEB0E715A6A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:cb:52:98:56:7d:90:39:a6:17:7d:69:21: 8e:04:43:91:8d:1f:2c:77:18:90:e1:57:3a:3a:67: fb:bf:82:ff:46:fe:a7:d8:55:8e:eb:e6:e2:3a:7d: 7e:a8:2b:21:73:4a:76:66:d1:14:c6:d4:30:e3:32: 46:d6:c9:53:04:59:2c:cd:13:86:d4:71:cf:d3:dd: 65:b2:03:70:2c:e6:b1:25:04:29:1b:b1:29:7a:e8: 53:1a:60:d9:56:e5:20:e8:ec:fd:25:2e:b1:a4:c8: fd:10:8b:33:da:e5:63:85:ae:9b:cc:68:c4:5f:82: e4:aa:36:09:16:74:63:e0:67:18:6c:7d:a8:92:89: cf:86:0d:83:51:23:c0:74:87:56:1e:da:97:6a:9f: a0:b9:b3:41:ef:d0:17:fd:1d:ae:4b:bf:73:23:d2: bd:19:91:71:f5:4b:e8:2f:69:fc:b2:3b:56:41:66: 18:4d:7f:9f:24:4b:46:93:49:af:e8:e4:aa:0e:22: 7b:17:93:0d:ec:ba:af:cc:9a:55:35:3f:d4:62:08: 4a:38:7a:61:2e:f8:3e:fb:88:a4:44:9e:c0:7d:00: 6c:d3:c6:0b:b1:46:ad:7e:af:87:2a:a7:b0:a4:62: c1:d2:18:b3:ca:c8:dd:7e:29:e9:8c:13:12:d9:45: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:F7:AE:0C:12:AD:5A:95:0C:DD:5C:9C:1F:EB:0E:71:5A:6A:5E X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3e:66:14:40:44:ed:33:43:77:00:e2:67:6a:78:8f:4b:59: b8:4f:19:64:94:9b:ba:15:fb:ed:90:a9:e4:20:3d:c4:5d:78: df:e6:0f:2e:6e:db:fd:98:c7:6a:0b:bb:09:4b:90:43:95:4d: 6e:ac:76:81:e2:19:52:61:1c:90:84:6c:3e:54:36:ee:e7:43: c9:73:91:43:c9:6d:8b:0f:31:66:a8:7b:60:a4:b6:93:dd:99: d3:cd:bf:ef:2d:f4:48:61:03:6f:59:b7:3b:4d:d9:f2:63:2a: dd:73:d9:c0:43:1e:f6:10:03:d2:21:09:43:13:f4:37:96:08: 84:33:25:8e:b5:da:c5:72:71:77:4c:4f:d7:f7:23:84:75:f0: d0:0b:3b:0c:9f:53:1d:a6:3f:b8:58:72:ee:64:62:e0:82:4b: 22:70:3f:46:0b:3e:f8:0e:00:96:7f:6c:3d:6c:2c:a5:8e:78: 12:64:f1:1b:06:71:36:38:af:ef:fe:77:f0:05:d4:4e:a8:2f: c0:10:b5:d0:67:85:dd:33:fb:0d:7d:22:f9:b7:0d:93:cc:fc: 8a:7d:20:42:24:a9:18:ac:16:01:26:a8:3f:e2:60:ec:01:fd: d2:d6:8f:24:b9:21:88:be:67:ba:46:8b:61:a5:41:03:32:dc: bc:85:94:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURD/BoBmEAe+yaqIGn+e1l8q0emYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA4MDUyMzM2MDFaFw0yNTA4MDkxMDA1MDFaMDMxMTAvBgNV BAMTKEFGOTBGN0FFMEMxMkFENUE5NTBDREQ1QzlDMUZFQjBFNzE1QTZBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WMtSmFZ9kDmmF31pIY4EQ5GN Hyx3GJDhVzo6Z/u/gv9G/qfYVY7r5uI6fX6oKyFzSnZm0RTG1DDjMkbWyVMEWSzN E4bUcc/T3WWyA3As5rElBCkbsSl66FMaYNlW5SDo7P0lLrGkyP0QizPa5WOFrpvM aMRfguSqNgkWdGPgZxhsfaiSic+GDYNRI8B0h1Ye2pdqn6C5s0Hv0Bf9Ha5Lv3Mj 0r0ZkXH1S+gvafyyO1ZBZhhNf58kS0aTSa/o5KoOInsXkw3suq/MmlU1P9RiCEo4 emEu+D77iKREnsB9AGzTxguxRq1+r4cqp7CkYsHSGLPKyN1+KemMExLZRe7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr5D3rgwSrVqVDN1cnB/rDnFaal4wHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8+ZhRARO0zQ3cA4mdqeI9LWbhPGWSUm7oV ++2QqeQgPcRdeN/mDy5u2/2Yx2oLuwlLkEOVTW6sdoHiGVJhHJCEbD5UNu7nQ8lz kUPJbYsPMWaoe2CktpPdmdPNv+8t9EhhA29ZtztN2fJjKt1z2cBDHvYQA9IhCUMT 9DeWCIQzJY612sVycXdMT9f3I4R18NALOwyfUx2mP7hYcu5kYuCCSyJwP0YLPvgO AJZ/bD1sLKWOeBJk8RsGcTY4r+/+d/AF1E6oL8AQtdBnhd0z+w19Ivm3DZPM/Ip9 IEIkqRisFgEmqD/iYOwB/dLWjyS5IYi+Z7pGi2GlQQMy3LyFlDY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:56 2025 by rpki-client