$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: C8BfOQtIM6PqkAU7s2vMBEkTTEZ5b/2L5q7lkRfSvXc= Subject key identifier: 46:34:CB:9E:F5:47:F0:7C:2E:2D:93:10:C5:77:DA:55:1B:D5:50:0D Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 26344B069F6A39191EE0EFC35D95D51201E29270 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: C0 Signing time: Wed 06 Aug 2025 14:01:29 +0000 Manifest this update: Wed 06 Aug 2025 13:56:29 +0000 Manifest next update: Sat 09 Aug 2025 19:59:29 +0000 Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) 2: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: 80Go9iQlGLKqtYvCmkWC1kQd1eNbyqmvW3ClfFRWT/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:34:4b:06:9f:6a:39:19:1e:e0:ef:c3:5d:95:d5:12:01:e2:92:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Aug 6 13:56:29 2025 GMT Not After : Aug 9 19:59:29 2025 GMT Subject: CN=4634CB9EF547F07C2E2D9310C577DA551BD5500D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:63:87:03:76:3d:00:79:cd:24:85:98:15: 27:0f:3f:b9:b0:27:7c:bd:28:e3:c0:0c:50:c7:e5: 92:6e:16:ed:05:0a:6d:d2:c7:c9:87:d4:e1:16:52: 15:16:0d:4e:84:1a:71:cc:de:cb:43:ed:ae:5e:68: 76:bd:ed:fc:e2:b7:96:e3:d3:d4:89:9e:d1:f1:99: b6:d0:24:0f:32:eb:d2:20:f9:1d:7f:fe:d4:e3:06: ac:89:5a:f2:07:8a:98:32:64:ff:bf:7e:04:3c:cb: 23:7c:47:99:c5:47:73:c9:94:9d:f1:56:02:da:9f: 09:9c:6d:c3:fe:8f:c5:02:8c:27:89:47:0a:fe:e0: b1:fe:1a:10:ad:b9:7a:2b:4c:f3:26:0f:8d:b3:62: 9c:71:7f:ce:a1:e8:2e:b2:d8:3a:d9:84:af:ad:23: 1e:97:c8:69:8c:ed:dd:78:60:0e:a1:a7:2a:50:36: 5a:b5:44:8d:e2:07:2b:c8:e6:6a:2e:d9:2a:e6:8a: 29:b4:a9:be:7a:b8:e6:ce:cb:12:5c:a8:a7:0e:b1: 3d:bd:70:41:44:38:f5:1d:09:13:3f:3c:e5:2c:d8: cd:be:5d:2d:5b:a5:5d:9a:15:34:b8:e3:fa:9f:5b: 4a:87:1d:34:3c:61:9c:bc:34:45:4b:9f:2f:17:53: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:CB:9E:F5:47:F0:7C:2E:2D:93:10:C5:77:DA:55:1B:D5:50:0D X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:43:31:a0:03:af:5b:84:13:cf:2b:6c:ef:6f:8b:a2:29:b2: bf:d8:f7:6e:75:76:ff:85:1b:fd:35:86:28:46:98:db:67:d6: 36:1a:13:f0:35:70:90:b1:c6:2d:76:21:ed:18:3f:cf:22:99: 53:9e:a0:ec:2b:e4:90:87:fa:b4:e5:d3:16:10:4c:b0:b4:ed: 3b:ab:ee:74:d1:82:cb:00:68:74:45:bf:c2:fd:ec:53:de:de: 5d:19:02:12:30:27:f5:e9:b5:0b:ed:38:b4:74:5d:e3:b1:85: 48:67:2d:29:be:5b:cf:c4:10:d8:fe:3e:04:78:cf:57:e5:b4: 87:71:f7:e3:1e:a7:e4:9b:08:41:62:58:1f:05:f5:eb:d4:cd: db:6f:78:71:ed:fe:0a:8a:86:d5:e2:ca:37:78:29:41:30:f6: c1:c9:03:f6:dd:f5:13:4f:df:31:60:b2:dd:ce:ae:54:db:15: e7:1c:41:a1:f6:bb:c9:7e:49:37:5e:cd:10:b4:2f:b6:c5:6d: 9a:4c:39:ad:fa:d1:51:b5:17:6e:30:01:61:52:c3:9c:cd:56: ad:02:3d:45:6b:df:7d:d5:84:b5:97:a8:3b:31:c1:07:59:9c: e4:4f:52:ea:83:82:f0:61:66:76:c8:ab:a5:37:41:96:61:95: f5:30:f4:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjRLBp9qORke4O/DXZXVEgHiknAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTA4MDYxMzU2MjlaFw0yNTA4MDkxOTU5MjlaMDMxMTAvBgNV BAMTKDQ2MzRDQjlFRjU0N0YwN0MyRTJEOTMxMEM1NzdEQTU1MUJENTUwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTO2OHA3Y9AHnNJIWYFScPP7mw J3y9KOPADFDH5ZJuFu0FCm3Sx8mH1OEWUhUWDU6EGnHM3stD7a5eaHa97fzit5bj 09SJntHxmbbQJA8y69Ig+R1//tTjBqyJWvIHipgyZP+/fgQ8yyN8R5nFR3PJlJ3x VgLanwmcbcP+j8UCjCeJRwr+4LH+GhCtuXorTPMmD42zYpxxf86h6C6y2DrZhK+t Ix6XyGmM7d14YA6hpypQNlq1RI3iByvI5mou2Srmiim0qb56uObOyxJcqKcOsT29 cEFEOPUdCRM/POUs2M2+XS1bpV2aFTS44/qfW0qHHTQ8YZy8NEVLny8XUwBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjTLnvVH8HwuLZMQxXfaVRvVUA0wHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1DMaADr1uEE88rbO9vi6Ipsr/Y9251dv+F G/01hihGmNtn1jYaE/A1cJCxxi12Ie0YP88imVOeoOwr5JCH+rTl0xYQTLC07Tur 7nTRgssAaHRFv8L97FPe3l0ZAhIwJ/XptQvtOLR0XeOxhUhnLSm+W8/EENj+PgR4 z1fltIdx9+Mep+SbCEFiWB8F9evUzdtveHHt/gqKhtXiyjd4KUEw9sHJA/bd9RNP 3zFgst3OrlTbFeccQaH2u8l+STdezRC0L7bFbZpMOa360VG1F24wAWFSw5zNVq0C PUVr333VhLWXqDsxwQdZnORPUuqDgvBhZnbIq6U3QZZhlfUw9GU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:34:45 2025 by rpki-client