$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: cnd0NIBhmTkGMybJHnmdAQMZY4YrBYpf24MHDw83waE= Subject key identifier: A9:E3:0F:96:EA:D8:06:A8:1C:6D:F1:C9:40:4B:08:8F:79:6C:32:D2 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 249AAF317D99F0A7FB42001E64D9AAD0F8270617 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 01D8 Signing time: Mon 11 Aug 2025 01:50:44 +0000 Manifest this update: Mon 11 Aug 2025 01:45:44 +0000 Manifest next update: Thu 14 Aug 2025 10:22:44 +0000 Files and hashes: 1: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: Z2sCoffsGynIwEfStGRHnevM3RQDj09Ve7zsiGuRChg=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313530323736.roa (hash: sdEV/rX6xPiB6f5qiFa9ouK5Ut6ycF59qx3vu3jtOiw=) 3: 3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa (hash: vy4zhIdLEqZCtXS9+fGip5FORyw2IGWmyRchCzclHqY=) 4: 3130332e34312e3234382e302f32332d3234203d3e20313530323736.roa (hash: 8uxRYWUgHIUfwr7n9e7HylSwtUQGrI8/5t+zL346WDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 10:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9a:af:31:7d:99:f0:a7:fb:42:00:1e:64:d9:aa:d0:f8:27:06:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Aug 11 01:45:44 2025 GMT Not After : Aug 14 10:22:44 2025 GMT Subject: CN=A9E30F96EAD806A81C6DF1C9404B088F796C32D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:63:fb:ac:ba:7d:04:f2:1b:03:56:ac:20: 7f:62:2a:0a:e5:fb:f9:ab:ec:cb:af:ac:ba:2e:2c: 15:39:9b:bb:1a:61:47:69:5f:61:7a:a8:3e:61:b4: d7:7c:30:ca:f4:20:0d:8d:65:68:b2:f0:d5:f9:70: f9:9e:84:a2:04:87:4d:7e:0c:87:db:43:6f:1c:6a: af:b9:8f:26:e4:4d:3a:c4:ad:ab:f5:1c:c4:44:07: 19:72:4a:06:f3:02:65:1b:ea:f9:f7:01:0f:99:fa: 09:7d:b6:cb:9e:4b:a3:ce:82:50:9a:67:65:ba:0f: 96:3e:73:60:be:5d:9d:cd:5f:89:b4:07:52:66:6b: 70:b6:eb:06:fa:4a:00:1c:07:c5:00:07:57:59:c6: 64:c1:88:87:36:ca:6f:78:34:73:5e:23:7c:c8:1d: 1c:7e:a5:32:cd:30:be:02:2a:8f:47:fa:24:3b:c2: 57:9e:d5:90:ea:85:82:67:c0:d5:5d:57:9d:83:23: ee:15:1a:f9:92:31:34:19:29:21:f7:dc:5c:01:26: 1b:30:60:1b:8d:e6:82:1b:a5:d9:14:79:7c:82:e1: 92:2f:2f:93:b8:69:6f:4b:39:7d:a7:6d:9c:42:d6: 98:f6:93:70:5f:e0:21:eb:b2:52:ea:19:91:54:03: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:0F:96:EA:D8:06:A8:1C:6D:F1:C9:40:4B:08:8F:79:6C:32:D2 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:61:a4:ab:19:ea:81:c1:50:17:a8:d0:29:63:02:c7:3f:2d: 26:fc:a5:ae:b5:b6:11:a6:84:59:ef:2e:0e:67:49:4a:a1:cd: b4:f1:22:f8:73:4a:c3:8b:28:20:4e:47:25:c1:a8:09:16:b8: 99:e5:86:df:ea:0f:50:e0:5b:a3:8d:da:23:4e:b5:a4:d7:c7: 66:93:43:9a:54:2d:54:fc:1b:c4:14:34:98:fc:43:08:9d:0c: ef:76:71:cd:19:fa:b3:d3:6c:b3:17:0b:33:30:78:45:dc:39: 24:b8:ae:1c:9a:8f:a2:b8:54:84:f3:b5:28:4c:6f:c3:c5:d9: e2:af:79:4a:42:68:08:f3:2a:e6:f5:b7:7f:92:81:b2:c8:e6: 60:38:19:3e:95:1e:4a:a1:a5:8b:f8:11:b8:f5:c8:41:b9:f6: b6:e3:d9:5f:95:a6:4d:56:dc:66:77:7d:21:0f:b9:4b:01:17: 58:04:8f:0d:b6:d6:d2:d2:05:20:4f:ac:36:65:a2:47:29:b9: 56:68:76:84:39:a3:3d:32:a7:41:04:5f:f9:d9:79:57:8e:ed: 66:64:5b:38:85:da:82:60:97:0a:50:fe:aa:73:b5:1d:03:71: 0c:ac:04:d8:70:ef:bb:d3:ff:38:e7:05:9a:4e:9b:e5:e2:25: ee:1b:f3:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJqvMX2Z8Kf7QgAeZNmq0PgnBhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTA4MTEwMTQ1NDRaFw0yNTA4MTQxMDIyNDRaMDMxMTAvBgNV BAMTKEE5RTMwRjk2RUFEODA2QTgxQzZERjFDOTQwNEIwODhGNzk2QzMyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpGP7rLp9BPIbA1asIH9iKgrl +/mr7MuvrLouLBU5m7saYUdpX2F6qD5htNd8MMr0IA2NZWiy8NX5cPmehKIEh01+ DIfbQ28caq+5jybkTTrErav1HMREBxlySgbzAmUb6vn3AQ+Z+gl9tsueS6POglCa Z2W6D5Y+c2C+XZ3NX4m0B1Jma3C26wb6SgAcB8UAB1dZxmTBiIc2ym94NHNeI3zI HRx+pTLNML4CKo9H+iQ7wlee1ZDqhYJnwNVdV52DI+4VGvmSMTQZKSH33FwBJhsw YBuN5oIbpdkUeXyC4ZIvL5O4aW9LOX2nbZxC1pj2k3Bf4CHrslLqGZFUA5SvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeMPlurYBqgcbfHJQEsIj3lsMtIwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZhpKsZ6oHBUBeo0CljAsc/LSb8pa61thGm hFnvLg5nSUqhzbTxIvhzSsOLKCBORyXBqAkWuJnlht/qD1DgW6ON2iNOtaTXx2aT Q5pULVT8G8QUNJj8QwidDO92cc0Z+rPTbLMXCzMweEXcOSS4rhyaj6K4VITztShM b8PF2eKveUpCaAjzKub1t3+SgbLI5mA4GT6VHkqhpYv4Ebj1yEG59rbj2V+Vpk1W 3GZ3fSEPuUsBF1gEjw221tLSBSBPrDZlokcpuVZodoQ5oz0yp0EEX/nZeVeO7WZk WziF2oJglwpQ/qpztR0DcQysBNhw77vT/zjnBZpOm+XiJe4b80I= -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:05 2025 by rpki-client