$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: BbEnoVuQopMhS81sveBA0p94nEAgA9/dnqC1gNTORyA= Subject key identifier: DB:64:5A:54:C7:84:F2:DC:23:C6:79:56:CC:36:C6:B4:92:E6:3A:0A Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 0B8455D06436976E07829247D58ADDCB4161853B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: B2 Signing time: Thu 07 Aug 2025 06:51:36 +0000 Manifest this update: Thu 07 Aug 2025 06:46:36 +0000 Manifest next update: Sun 10 Aug 2025 18:09:36 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: AgF+5SnQc8x8iP3KMJNXFzIyQHKyIXTuktsiPfIGHd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 18:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:84:55:d0:64:36:97:6e:07:82:92:47:d5:8a:dd:cb:41:61:85:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Aug 7 06:46:36 2025 GMT Not After : Aug 10 18:09:36 2025 GMT Subject: CN=DB645A54C784F2DC23C67956CC36C6B492E63A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:65:8a:1e:b5:9d:e2:cf:85:f2:67:f8:71: b6:ee:d1:bc:70:d5:28:2e:e7:af:ac:7e:06:c3:06: c7:f7:d0:a4:1c:f6:2d:3e:1a:6c:60:5a:35:82:ee: b1:ad:80:7d:09:a2:18:bc:8b:ca:b3:29:bd:d7:6a: ba:5d:2d:ca:ec:f3:41:fe:2b:96:65:a5:0c:9f:05: 2c:54:0b:5b:fd:a6:46:13:25:51:34:c0:3b:06:d8: 71:c1:70:e3:4c:cd:3c:48:65:58:b4:98:48:62:f8: 1e:37:4c:d9:52:69:92:33:d3:75:49:63:ea:45:b9: cc:38:c3:5b:be:07:e3:d8:d2:46:ed:d8:46:f8:24: 99:2f:64:34:40:20:08:47:27:73:1b:4c:e6:0b:aa: 3d:d7:a7:fd:8e:08:19:f0:d5:80:7e:5c:c7:02:ef: f4:ed:57:bd:6c:cc:1c:e3:12:31:77:f8:20:99:a6: 92:a9:57:de:71:c3:a2:c2:69:83:77:0b:85:62:dc: e6:a0:06:aa:94:24:87:56:20:c3:55:4a:3a:fd:20: d6:c4:2c:33:2a:a6:7e:10:1a:2e:95:14:00:2f:e7: 89:72:ce:89:82:f6:12:21:d3:35:d5:4b:63:51:0a: 03:07:c9:59:f2:cd:27:c4:b7:3e:74:b5:a9:fc:0a: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:5A:54:C7:84:F2:DC:23:C6:79:56:CC:36:C6:B4:92:E6:3A:0A X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b6:7d:e2:9a:02:bd:27:36:62:3b:dc:e1:59:24:87:da:f4: 8b:07:13:3f:c9:03:ad:aa:16:5d:9a:85:4c:59:1a:25:f3:69: 0c:a5:41:3d:96:db:39:a6:6d:cc:c4:f4:81:2a:6c:17:47:5a: 1e:bb:d9:37:ec:a7:61:3f:24:9f:4f:f5:35:e8:64:de:50:98: b3:77:f3:76:b2:53:15:4e:84:1f:0f:e4:4f:73:10:83:5f:f0: b3:36:1d:3c:2f:63:f0:4b:36:90:d8:32:48:c7:76:9f:41:45: 86:b3:92:ca:e5:a2:46:89:38:08:03:25:80:a7:ca:5a:0c:6d: 58:aa:20:20:4b:20:78:bf:ae:9d:02:61:51:c0:13:81:7d:6a: 99:4b:df:d6:b9:2d:1d:78:cb:6e:7c:39:db:85:61:51:45:f6: 34:a3:87:64:47:44:c7:49:82:99:46:f1:ab:4d:58:90:8f:27: 14:cc:16:82:5b:39:97:54:dc:42:d5:7d:bb:5b:0f:7c:b5:a9: 12:0e:50:b1:43:da:59:8e:1b:71:3e:28:cb:2b:26:91:0b:d0: b1:d9:d9:a8:e4:bc:f5:a5:61:c2:c7:5b:15:d4:f2:9d:4d:05: ad:74:de:ae:56:0a:a2:e0:fa:cd:d3:79:3d:1f:74:9a:44:ce: 24:dc:8f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4RV0GQ2l24HgpJH1Yrdy0FhhTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA4MDcwNjQ2MzZaFw0yNTA4MTAxODA5MzZaMDMxMTAvBgNV BAMTKERCNjQ1QTU0Qzc4NEYyREMyM0M2Nzk1NkNDMzZDNkI0OTJFNjNBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhmWKHrWd4s+F8mf4cbbu0bxw 1Sgu56+sfgbDBsf30KQc9i0+GmxgWjWC7rGtgH0Johi8i8qzKb3XarpdLcrs80H+ K5ZlpQyfBSxUC1v9pkYTJVE0wDsG2HHBcONMzTxIZVi0mEhi+B43TNlSaZIz03VJ Y+pFucw4w1u+B+PY0kbt2Eb4JJkvZDRAIAhHJ3MbTOYLqj3Xp/2OCBnw1YB+XMcC 7/TtV71szBzjEjF3+CCZppKpV95xw6LCaYN3C4Vi3OagBqqUJIdWIMNVSjr9INbE LDMqpn4QGi6VFAAv54lyzomC9hIh0zXVS2NRCgMHyVnyzSfEtz50tan8CitNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22RaVMeE8twjxnlWzDbGtJLmOgowHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq2feKaAr0nNmI73OFZJIfa9IsHEz/JA62q Fl2ahUxZGiXzaQylQT2W2zmmbczE9IEqbBdHWh672Tfsp2E/JJ9P9TXoZN5QmLN3 83ayUxVOhB8P5E9zEINf8LM2HTwvY/BLNpDYMkjHdp9BRYazksrlokaJOAgDJYCn yloMbViqICBLIHi/rp0CYVHAE4F9aplL39a5LR14y258OduFYVFF9jSjh2RHRMdJ gplG8atNWJCPJxTMFoJbOZdU3ELVfbtbD3y1qRIOULFD2lmOG3E+KMsrJpEL0LHZ 2ajkvPWlYcLHWxXU8p1NBa103q5WCqLg+s3TeT0fdJpEziTcjxw= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:32 2025 by rpki-client