$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: K85Y1oGy9YffCAJyNsmKBWqPZ+U6LaQynxujET27+aQ= Subject key identifier: AC:DC:8B:BE:CE:B9:A4:BC:D0:F4:49:C7:52:E0:25:E3:87:92:64:D3 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 3FFEBB2617380228B64963B7FE9A31D37DC56DEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: CF Signing time: Mon 04 Aug 2025 19:12:24 +0000 Manifest this update: Mon 04 Aug 2025 19:07:24 +0000 Manifest next update: Fri 08 Aug 2025 04:12:24 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 3: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: TbIIVJyacBvlxfbFGftm1JOrShj/kGBAJP8Th3g89Rs=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 04:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fe:bb:26:17:38:02:28:b6:49:63:b7:fe:9a:31:d3:7d:c5:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Aug 4 19:07:24 2025 GMT Not After : Aug 8 04:12:24 2025 GMT Subject: CN=ACDC8BBECEB9A4BCD0F449C752E025E3879264D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:80:d9:3e:7c:00:8f:66:24:42:1f:af:0c: e0:28:8d:a7:22:22:ea:25:c3:df:95:a9:bf:cf:49: c9:37:d8:14:ae:35:3f:36:ca:96:46:f1:d1:7a:d9: 92:b8:6d:7b:5b:85:0e:95:eb:77:21:63:00:02:85: f1:cc:67:21:17:f8:26:a9:dd:8f:df:37:a0:a9:06: 17:e7:64:d3:09:aa:26:26:ee:26:4e:00:67:87:71: 01:13:8e:ce:bb:97:04:f9:92:d1:f5:38:7e:8f:77: 20:a1:0d:6a:33:5e:37:41:78:a5:61:26:52:c2:07: d3:e3:0d:ea:36:0e:19:01:8f:d7:04:40:d7:02:5a: 73:29:ad:4e:a3:e2:bd:67:f5:4a:3b:9f:24:fe:da: 8b:b0:35:54:a5:2d:6f:34:78:00:e2:e8:c4:f6:cb: 06:30:50:65:60:bd:30:8c:60:d3:b9:1f:66:f7:c8: 84:c8:c6:3a:95:84:70:ef:9c:21:e9:c0:7d:25:de: dd:f8:06:47:5a:74:d5:db:84:32:d5:00:91:78:4d: 80:85:46:63:71:2f:74:ca:5c:76:11:fb:3e:22:f0: ff:a2:ca:cd:34:2f:d6:4e:0c:94:62:79:6b:a2:d6: cb:06:01:6a:af:1e:4a:85:05:29:ae:f4:ac:8c:1d: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DC:8B:BE:CE:B9:A4:BC:D0:F4:49:C7:52:E0:25:E3:87:92:64:D3 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6c:54:71:17:05:bc:61:a7:2f:c3:5a:5f:45:84:db:b0:a3: 29:d7:b2:e4:e2:6a:29:85:c1:81:a7:cd:67:4c:fb:b3:7d:30: 4d:b9:d8:5b:ef:f1:63:ee:89:e7:bf:be:cb:eb:61:56:ff:97: ff:6e:7f:c5:6d:a1:db:c6:54:3f:23:4d:a2:c5:49:1c:79:54: 8e:da:75:53:59:ce:de:5d:2f:04:e6:37:7d:27:f2:6e:f7:86: 53:15:7b:89:31:12:1a:45:5f:7d:ce:c5:4b:f9:2f:6a:70:bb: 86:37:82:aa:6a:c2:1d:de:a3:eb:93:a3:59:47:ea:43:70:b8: bc:07:b5:76:c7:9e:6e:86:e9:69:ba:a2:52:1f:23:db:0e:6f: 91:13:48:92:6f:36:86:46:7a:56:7b:34:8c:90:32:ff:16:e4: 17:5a:31:c8:0e:79:e5:cf:49:3b:09:c4:d0:d7:e7:b3:a3:25: f1:c7:ce:8b:7b:ef:fa:af:eb:07:ab:8c:0d:20:cc:fe:c1:ba: af:72:99:3c:b5:da:7c:c6:b1:90:bf:7f:6c:f5:c7:b8:42:69: 43:9a:41:8a:d5:ab:c6:bb:34:33:66:56:19:90:a0:13:27:72: dc:43:a8:2a:b5:ef:e6:b6:af:74:62:3b:f4:4a:c9:9f:59:d2: 71:95:cb:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/67Jhc4Aii2SWO3/pox033FbewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA4MDQxOTA3MjRaFw0yNTA4MDgwNDEyMjRaMDMxMTAvBgNV BAMTKEFDREM4QkJFQ0VCOUE0QkNEMEY0NDlDNzUyRTAyNUUzODc5MjY0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdYDZPnwAj2YkQh+vDOAojaci Iuolw9+Vqb/PSck32BSuNT82ypZG8dF62ZK4bXtbhQ6V63chYwAChfHMZyEX+Cap 3Y/fN6CpBhfnZNMJqiYm7iZOAGeHcQETjs67lwT5ktH1OH6PdyChDWozXjdBeKVh JlLCB9PjDeo2DhkBj9cEQNcCWnMprU6j4r1n9Uo7nyT+2ouwNVSlLW80eADi6MT2 ywYwUGVgvTCMYNO5H2b3yITIxjqVhHDvnCHpwH0l3t34BkdadNXbhDLVAJF4TYCF RmNxL3TKXHYR+z4i8P+iys00L9ZODJRieWui1ssGAWqvHkqFBSmu9KyMHfx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNyLvs65pLzQ9EnHUuAl44eSZNMwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRsVHEXBbxhpy/DWl9FhNuwoynXsuTiaimF wYGnzWdM+7N9ME252Fvv8WPuiee/vsvrYVb/l/9uf8VtodvGVD8jTaLFSRx5VI7a dVNZzt5dLwTmN30n8m73hlMVe4kxEhpFX33OxUv5L2pwu4Y3gqpqwh3eo+uTo1lH 6kNwuLwHtXbHnm6G6Wm6olIfI9sOb5ETSJJvNoZGelZ7NIyQMv8W5BdaMcgOeeXP STsJxNDX57OjJfHHzot77/qv6werjA0gzP7Buq9ymTy12nzGsZC/f2z1x7hCaUOa QYrVq8a7NDNmVhmQoBMnctxDqCq17+a2r3RiO/RKyZ9Z0nGVyy4= -----END CERTIFICATE-----Generated at Wed Aug 6 18:25:27 2025 by rpki-client