$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: IzgANNbvIm+2hPhl2py75yQe32UZo0xx0JOUjZTmff0= Subject key identifier: F5:D3:E0:6B:92:06:6F:9B:A9:8A:70:EC:CC:8E:F5:4F:0C:72:7F:ED Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 0FD0C9484B15F187578B3DA1AC79695557E66BA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 036B Signing time: Fri 08 Aug 2025 20:52:14 +0000 Manifest this update: Fri 08 Aug 2025 20:47:14 +0000 Manifest next update: Mon 11 Aug 2025 21:35:14 +0000 Files and hashes: 1: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: chkS1dY9zI28eVaeKcqgDfDjf9r8piBfvxgdOAPNyOQ=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:c9:48:4b:15:f1:87:57:8b:3d:a1:ac:79:69:55:57:e6:6b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Aug 8 20:47:14 2025 GMT Not After : Aug 11 21:35:14 2025 GMT Subject: CN=F5D3E06B92066F9BA98A70ECCC8EF54F0C727FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:ce:3c:36:76:81:46:9b:13:d4:5e:71:1d: 51:06:d0:ea:2e:97:5e:99:6d:31:00:d0:97:cb:f1: 7f:83:59:2b:17:de:97:b7:b9:b3:87:e3:a5:42:a0: c7:e3:f4:d4:2c:43:2b:14:2d:60:fa:df:40:10:47: fc:db:cb:a8:f0:c6:2d:1c:58:00:32:b7:20:ca:57: 2c:80:3b:f1:27:d0:d2:0d:82:0c:69:b9:ae:12:f7: 42:c2:62:ed:bd:14:f5:77:3d:f8:6f:fc:c9:12:1e: 2d:d5:87:b5:64:04:9b:97:b7:93:f7:38:b7:01:a3: 9d:b6:1d:78:e0:ea:d4:e9:d8:c3:4c:31:47:18:a6: 7a:67:3f:8c:37:ab:70:0b:f8:61:8e:42:3e:6b:56: fc:bd:c9:2e:e1:5e:5c:39:b4:96:0f:fa:7c:ec:f0: b5:68:e5:0d:f0:4b:1e:c8:3a:9b:60:89:56:41:5a: 00:8b:9b:b4:a2:5c:9f:47:d5:4b:55:7f:e7:ff:e9: ad:80:a7:ed:50:f5:8d:d2:d4:c8:45:28:2d:74:53: a7:8a:31:ef:20:48:6f:3c:59:07:bd:cf:1f:83:d9: 37:18:13:2c:fc:83:4e:82:ef:82:80:18:33:c0:a8: ad:be:21:51:53:7f:df:5c:3f:6e:ad:76:b3:ad:c3: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D3:E0:6B:92:06:6F:9B:A9:8A:70:EC:CC:8E:F5:4F:0C:72:7F:ED X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b2:1d:5f:da:f5:11:c2:e6:b5:f4:de:08:3b:2d:02:8a:d6: c6:a5:58:b5:23:60:66:04:88:4d:e1:7a:9c:34:af:34:ad:9c: d4:bf:72:93:c2:e0:08:47:8b:ac:bf:0e:85:ce:1f:d9:61:f3: 05:e1:6d:8c:a3:6e:95:d0:d2:8c:98:9d:f2:31:f0:f7:8b:1b: 47:12:3c:04:ae:ee:cb:e0:7d:f8:3e:70:0b:3d:4c:0c:cd:71: 2d:fb:13:5a:74:42:5d:84:be:76:08:69:16:6d:4e:98:1d:a1: cf:27:bd:26:88:62:37:63:f0:77:24:99:15:35:1f:f8:10:41: 31:c4:98:8e:0a:66:84:d5:94:03:f6:dd:a7:e3:80:07:7c:67: cf:08:9e:4d:80:62:df:00:52:6f:86:55:94:3d:4d:0f:a9:b7: b6:e3:42:59:c5:2a:5d:58:63:90:07:95:68:9f:15:0e:18:37: 7f:ff:d3:09:d0:f4:22:d5:62:67:d3:10:c6:2f:4a:4e:56:3b: b3:59:80:24:98:76:15:ec:ab:cd:fa:16:02:94:56:6a:ca:d3: 26:32:6f:fa:f9:1f:98:c2:05:48:0d:2d:43:19:f0:8d:e1:00: d6:33:2b:5f:08:ab:78:5a:ea:49:c5:69:ec:40:84:71:3a:fb: bf:9f:4e:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9DJSEsV8YdXiz2hrHlpVVfma6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTA4MDgyMDQ3MTRaFw0yNTA4MTEyMTM1MTRaMDMxMTAvBgNV BAMTKEY1RDNFMDZCOTIwNjZGOUJBOThBNzBFQ0NDOEVGNTRGMEM3MjdGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1s48NnaBRpsT1F5xHVEG0Oou l16ZbTEA0JfL8X+DWSsX3pe3ubOH46VCoMfj9NQsQysULWD630AQR/zby6jwxi0c WAAytyDKVyyAO/En0NINggxpua4S90LCYu29FPV3Pfhv/MkSHi3Vh7VkBJuXt5P3 OLcBo522HXjg6tTp2MNMMUcYpnpnP4w3q3AL+GGOQj5rVvy9yS7hXlw5tJYP+nzs 8LVo5Q3wSx7IOptgiVZBWgCLm7SiXJ9H1UtVf+f/6a2Ap+1Q9Y3S1MhFKC10U6eK Me8gSG88WQe9zx+D2TcYEyz8g06C74KAGDPAqK2+IVFTf99cP26tdrOtwwepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9dPga5IGb5upinDszI71Twxyf+0wHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKyHV/a9RHC5rX03gg7LQKK1salWLUjYGYE iE3hepw0rzStnNS/cpPC4AhHi6y/DoXOH9lh8wXhbYyjbpXQ0oyYnfIx8PeLG0cS PASu7svgffg+cAs9TAzNcS37E1p0Ql2EvnYIaRZtTpgdoc8nvSaIYjdj8HckmRU1 H/gQQTHEmI4KZoTVlAP23afjgAd8Z88Ink2AYt8AUm+GVZQ9TQ+pt7bjQlnFKl1Y Y5AHlWifFQ4YN3//0wnQ9CLVYmfTEMYvSk5WO7NZgCSYdhXsq836FgKUVmrK0yYy b/r5H5jCBUgNLUMZ8I3hANYzK18Iq3ha6knFaexAhHE6+7+fTq0= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:17 2025 by rpki-client