$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: 5buBLznLmbw/nvi371nnqhwSNKPh8fRwVrHDO9xr1pM= Subject key identifier: B4:55:2F:0D:F0:68:B3:FD:F3:82:5F:36:D4:58:89:EF:22:AB:7B:C9 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 31CF6FE639D52E93C115D9E4EFCF969F43863A80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: C6 Signing time: Mon 04 Aug 2025 15:31:08 +0000 Manifest this update: Mon 04 Aug 2025 15:26:08 +0000 Manifest next update: Thu 07 Aug 2025 17:47:08 +0000 Files and hashes: 1: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: 4gGCIIUEc9PyOCyVEzNWHy3wiQ08rkkB4Ovbv8ON2yo=) 2: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) 3: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 4: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 17:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cf:6f:e6:39:d5:2e:93:c1:15:d9:e4:ef:cf:96:9f:43:86:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Aug 4 15:26:08 2025 GMT Not After : Aug 7 17:47:08 2025 GMT Subject: CN=B4552F0DF068B3FDF3825F36D45889EF22AB7BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:b2:83:cc:be:02:ec:b2:c2:59:ca:79:83: b3:5d:8b:8e:ef:71:cc:82:bb:63:c9:cf:8d:94:45: 07:79:59:dc:8c:23:ac:0f:48:ec:3f:c0:1a:7b:e3: ca:98:cc:d8:7f:e0:c2:79:cb:1a:b2:a9:2f:50:5a: 23:5d:c1:63:d8:bb:4c:de:9c:75:84:c7:e7:b2:d3: 89:92:71:7a:f1:c1:16:7c:06:53:6d:5c:f7:de:e4: b4:3a:2d:2a:70:cf:f9:48:63:59:51:15:6e:c7:1d: 5d:d7:33:17:a2:09:7f:bd:ed:b4:1e:f3:22:08:b3: 53:5b:f4:09:c8:5c:aa:08:4e:5e:2f:67:5e:20:2d: 06:9c:00:1f:3f:0a:57:63:ff:37:55:f3:95:74:a6: 5c:4a:a0:10:e4:28:23:c9:80:ec:d6:e9:87:e9:e7: 9c:8d:6c:20:27:36:e4:96:f3:96:6d:c1:e2:f7:3e: 3e:33:46:f1:8f:11:ac:d5:9a:de:77:1b:86:b0:11: a2:be:61:82:75:38:4e:ea:10:91:11:78:ff:17:a9: 4e:64:9e:76:a8:e9:71:1a:9c:aa:54:a2:04:8a:40: 7f:cd:f2:95:a8:0f:2c:fa:b3:1a:e8:5f:fb:f1:c6: ae:8c:d2:b1:2b:8e:48:1f:66:41:08:0f:33:12:07: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:55:2F:0D:F0:68:B3:FD:F3:82:5F:36:D4:58:89:EF:22:AB:7B:C9 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:d9:f6:c8:bb:31:0a:25:61:98:bd:df:f2:d9:49:9c:f5:08: 4c:08:b6:45:2b:0a:33:ff:17:7c:1c:44:49:a3:3d:cc:81:c2: 81:b2:f5:46:a7:4e:08:d2:40:94:6e:8a:3c:8f:32:93:7b:2f: 55:d1:8f:2c:c1:22:ae:3d:b3:ed:4f:4d:82:de:22:a5:61:9d: 39:a8:01:5d:de:d2:bb:8e:d1:4c:fd:26:a8:93:56:dd:75:d2: 84:0e:37:a5:75:a8:94:49:3c:6d:f2:cf:74:92:c5:d1:61:2c: c0:2a:a1:c1:f4:3d:54:3e:51:61:fe:53:f7:69:cd:d7:0d:55: 10:c6:61:88:9d:ef:7e:f9:14:21:01:2f:e8:2f:b1:02:fc:c2: f9:57:77:81:d2:f9:d6:4e:20:04:d7:81:72:e0:4c:37:ef:15: 5d:4d:73:b6:77:d3:03:68:20:3a:c1:6f:c2:6b:fa:98:19:6b: e2:08:28:c5:de:9c:89:80:86:7c:df:6e:84:1e:e7:37:78:4e: 29:a5:65:04:88:a1:b4:e2:bd:db:a5:4a:8e:c5:60:5d:91:ce: dc:cc:f3:bd:23:ca:55:dc:af:72:1b:fe:0e:10:94:be:81:68: cb:9a:5e:ac:48:9b:fb:83:5a:32:bf:22:a9:66:91:37:0e:d2: 2b:87:f0:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMc9v5jnVLpPBFdnk78+Wn0OGOoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTA4MDQxNTI2MDhaFw0yNTA4MDcxNzQ3MDhaMDMxMTAvBgNV BAMTKEI0NTUyRjBERjA2OEIzRkRGMzgyNUYzNkQ0NTg4OUVGMjJBQjdCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkbKDzL4C7LLCWcp5g7Ndi47v ccyCu2PJz42URQd5WdyMI6wPSOw/wBp748qYzNh/4MJ5yxqyqS9QWiNdwWPYu0ze nHWEx+ey04mScXrxwRZ8BlNtXPfe5LQ6LSpwz/lIY1lRFW7HHV3XMxeiCX+97bQe 8yIIs1Nb9AnIXKoITl4vZ14gLQacAB8/Cldj/zdV85V0plxKoBDkKCPJgOzW6Yfp 55yNbCAnNuSW85ZtweL3Pj4zRvGPEazVmt53G4awEaK+YYJ1OE7qEJEReP8XqU5k nnao6XEanKpUogSKQH/N8pWoDyz6sxroX/vxxq6M0rErjkgfZkEIDzMSBxlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFUvDfBos/3zgl821FiJ7yKre8kwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN7Z9si7MQolYZi93/LZSZz1CEwItkUrCjP/ F3wcREmjPcyBwoGy9UanTgjSQJRuijyPMpN7L1XRjyzBIq49s+1PTYLeIqVhnTmo AV3e0ruO0Uz9JqiTVt110oQON6V1qJRJPG3yz3SSxdFhLMAqocH0PVQ+UWH+U/dp zdcNVRDGYYid7375FCEBL+gvsQL8wvlXd4HS+dZOIATXgXLgTDfvFV1Nc7Z30wNo IDrBb8Jr+pgZa+IIKMXenImAhnzfboQe5zd4TimlZQSIobTivdulSo7FYF2RztzM 870jylXcr3Ib/g4QlL6BaMuaXqxIm/uDWjK/IqlmkTcO0iuH8Lg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:22:50 2025 by rpki-client