$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft File: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json) Hash identifier: XWm6AOkXU30+JX0GsG5b5yVf26o9jOIWMxpfgyl9v80= Subject key identifier: 40:D5:1D:59:BB:D1:7E:F8:C1:4B:9F:36:C1:19:C3:94:4F:92:40:0A Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C Certificate issuer: /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Certificate serial: 23907EE4CFC666A60A28F481FF1D3977C6EC0FDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft Manifest number: F2 Signing time: Tue 05 Aug 2025 22:50:40 +0000 Manifest this update: Tue 05 Aug 2025 22:45:40 +0000 Manifest next update: Sat 09 Aug 2025 00:04:40 +0000 Files and hashes: 1: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: Er3HbquEys5TYmv68LVqfhzstIWRelOy81vfx2pc4kw=) 2: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (hash: IgVoycKP5/mx7bgYUiplGIVv/fIKosSF5j4o1IpUqEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:90:7e:e4:cf:c6:66:a6:0a:28:f4:81:ff:1d:39:77:c6:ec:0f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Validity Not Before: Aug 5 22:45:40 2025 GMT Not After : Aug 9 00:04:40 2025 GMT Subject: CN=40D51D59BBD17EF8C14B9F36C119C3944F92400A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:dc:4f:54:89:37:aa:58:9f:56:cb:be:9b: 4e:39:4c:3b:f0:ef:8e:c6:c0:e0:23:84:ea:7b:cd: bc:1a:57:aa:0a:23:b2:cb:c5:8b:45:d7:9d:d3:0f: 66:8e:10:a9:f9:cd:7d:90:42:72:b6:02:31:96:3f: 47:5e:e9:a7:45:28:34:90:23:8e:4f:88:6a:35:65: 2a:43:3b:89:e0:d4:b2:09:cb:50:1e:e5:84:9f:c5: 17:5b:10:a3:fa:a9:14:69:07:22:82:0d:aa:20:b0: df:52:17:ee:6f:0a:88:9c:a8:bb:99:63:9f:ff:10: 95:85:a1:85:9d:00:f8:f9:34:c2:de:34:25:4c:4a: 9a:19:92:2d:ed:23:f2:a1:a6:a7:40:38:99:4e:c0: 52:86:88:b3:ec:2d:48:a8:68:5c:61:54:a6:7f:b5: 41:fd:6b:08:a6:ea:15:5d:23:5d:b7:b1:83:8d:6d: b3:af:a6:ba:10:34:ef:73:94:b9:00:fb:42:f7:a0: 73:92:a6:76:f2:cf:25:69:dc:e7:90:dd:0f:63:d2: 5d:a5:02:15:dc:cf:56:ee:31:ca:43:b1:28:ad:14: 85:30:a1:d0:c0:b3:c0:0b:4f:53:cc:9c:0b:17:84: f0:27:ac:77:b2:89:c0:83:d6:c4:b4:1f:bf:0f:d0: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:1D:59:BB:D1:7E:F8:C1:4B:9F:36:C1:19:C3:94:4F:92:40:0A X509v3 Authority Key Identifier: keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:22:45:f2:e3:19:f6:b4:6a:b0:64:03:de:2e:49:7b:35:ef: c9:49:0d:3d:56:a3:e3:33:1a:a1:fb:70:db:98:8a:86:4f:73: 81:d9:8d:4a:3d:53:cd:17:33:39:2d:8d:9c:16:47:97:72:55: 70:66:f5:ee:50:06:bf:e5:ed:4f:d7:be:41:c7:2b:3b:db:b4: cd:63:19:60:b4:63:b7:b8:f5:0e:cb:fb:bf:c0:26:60:d9:96: 3e:0c:4e:21:ad:13:77:77:90:77:da:04:23:a4:db:86:12:74: 82:a8:5f:a3:57:3b:28:9d:6a:8d:f1:d4:52:e2:69:23:85:26: b4:41:eb:0b:af:8f:be:c7:9d:f5:8b:bc:45:c4:6d:a0:51:83: 22:35:16:62:04:e9:9c:5f:78:37:a0:3f:78:3a:3c:bc:3c:d0: 95:83:4d:5e:fe:e5:fb:c3:04:94:8e:2f:7a:d5:d3:88:9e:7c: bb:38:25:ff:3b:40:14:f3:46:bc:e6:41:42:b0:a4:54:30:7e: 09:84:ed:a4:0b:51:e5:a1:29:c8:2d:f9:ec:3a:69:11:1c:b7: 06:fe:51:6e:fc:c8:95:47:36:26:4a:1d:af:3f:b2:e6:50:ac: b4:a0:73:eb:ff:c7:f4:f9:79:eb:f5:68:cc:b2:ea:a0:05:e5: 35:ac:f3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5B+5M/GZqYKKPSB/x05d8bsD9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNG NTA5MkU0QzAeFw0yNTA4MDUyMjQ1NDBaFw0yNTA4MDkwMDA0NDBaMDMxMTAvBgNV BAMTKDQwRDUxRDU5QkJEMTdFRjhDMTRCOUYzNkMxMTlDMzk0NEY5MjQwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDM9xPVIk3qlifVsu+m045TDvw 747GwOAjhOp7zbwaV6oKI7LLxYtF153TD2aOEKn5zX2QQnK2AjGWP0de6adFKDSQ I45PiGo1ZSpDO4ng1LIJy1Ae5YSfxRdbEKP6qRRpByKCDaogsN9SF+5vCoicqLuZ Y5//EJWFoYWdAPj5NMLeNCVMSpoZki3tI/KhpqdAOJlOwFKGiLPsLUioaFxhVKZ/ tUH9awim6hVdI123sYONbbOvproQNO9zlLkA+0L3oHOSpnbyzyVp3OeQ3Q9j0l2l AhXcz1buMcpDsSitFIUwodDAs8ALT1PMnAsXhPAnrHeyicCD1sS0H78P0IPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNUdWbvRfvjBS582wRnDlE+SQAowHwYDVR0j BBgwFoAUlK6hGtwP53QJTKSmZoDD7PUJLkwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRmYzM0MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC85NEFFQTExQURD MEZFNzc0MDk0Q0E0QTY2NjgwQzNFQ0Y1MDkyRTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNGNTA5 MkU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0ZmMzNDAtYWY2OS00ZThlLWE3 NzctNzQ3ZGQ4MjlkYzNmLzAvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMz RUNGNTA5MkU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoiRfLjGfa0arBkA94uSXs178lJDT1Wo+Mz GqH7cNuYioZPc4HZjUo9U80XMzktjZwWR5dyVXBm9e5QBr/l7U/XvkHHKzvbtM1j GWC0Y7e49Q7L+7/AJmDZlj4MTiGtE3d3kHfaBCOk24YSdIKoX6NXOyidao3x1FLi aSOFJrRB6wuvj77HnfWLvEXEbaBRgyI1FmIE6ZxfeDegP3g6PLw80JWDTV7+5fvD BJSOL3rV04iefLs4Jf87QBTzRrzmQUKwpFQwfgmE7aQLUeWhKcgt+ew6aREctwb+ UW78yJVHNiZKHa8/suZQrLSgc+v/x/T5eev1aMyy6qAF5TWs8w8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:21 2025 by rpki-client