$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: M7eebhDhw3GQSRKsidGDLeRHy24xoensNYvX6he0EI0= Subject key identifier: 74:63:54:F2:A1:F4:FE:F5:59:84:BA:D4:9B:D8:0E:B5:21:6E:FF:6A Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 358F1D5AC2A6A65742C1893F3F75C2AF40C4BC70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 016F Signing time: Tue 05 Aug 2025 10:00:02 +0000 Manifest this update: Tue 05 Aug 2025 09:55:02 +0000 Manifest next update: Fri 08 Aug 2025 10:10:02 +0000 Files and hashes: 1: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: HWBWhtWDvKHVJr7253Ddoh3FyXpPBgomHBsDNTZAu7k=) 2: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DCx7j/PqY/+rgrc9ArlbSADHe4Cwa01sUUvNHN3T5RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8f:1d:5a:c2:a6:a6:57:42:c1:89:3f:3f:75:c2:af:40:c4:bc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Aug 5 09:55:02 2025 GMT Not After : Aug 8 10:10:02 2025 GMT Subject: CN=746354F2A1F4FEF55984BAD49BD80EB5216EFF6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:7e:e3:55:ed:b6:14:03:a9:0d:3d:22:38: 37:1b:75:ae:c4:3a:4b:01:68:d1:f8:f9:9f:df:ad: 5e:90:f2:1a:39:08:65:d1:ac:c9:17:1f:0e:45:c6: 3e:33:ea:58:8b:9e:b1:a4:bc:18:a8:e6:76:d5:a3: 3b:ee:03:16:df:1d:ae:df:2f:42:1c:cf:8b:60:00: 66:7c:c0:f6:c7:21:39:07:29:bf:57:82:95:36:12: 24:9d:b6:05:00:8c:87:b3:36:fc:d7:d3:1d:b3:56: c2:be:27:e3:d2:25:27:d4:9c:ae:0c:2c:a7:8c:87: d1:0a:cb:e6:17:08:34:41:bf:e0:cb:65:97:3e:15: 01:44:48:fa:2b:bb:41:15:15:d7:e4:d8:a7:e6:a5: 12:0f:0f:8b:16:57:d4:4b:a6:35:1e:f2:51:7f:76: 21:50:68:73:93:79:8b:75:a9:6a:96:3d:a8:f0:15: 29:62:07:ab:a6:66:a0:a4:db:74:ad:8d:e7:27:1a: 73:35:91:e9:27:f2:6a:20:f0:45:da:7d:bd:17:b4: 28:fd:1c:bb:7c:5e:0a:4d:79:2c:3e:03:c5:01:6a: 6f:3f:2a:e1:5c:5d:e5:58:a8:4c:86:66:cb:a6:19: 63:c6:77:fc:6e:dd:e6:eb:00:06:d0:73:c1:49:f5: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:54:F2:A1:F4:FE:F5:59:84:BA:D4:9B:D8:0E:B5:21:6E:FF:6A X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:43:67:61:be:bc:2a:1b:3a:7b:c0:31:d8:bf:e5:ff:06:a1: 3e:30:18:29:b7:b1:b8:59:4a:58:9d:dd:44:06:a2:55:b8:93: f7:fd:c7:58:0f:58:7a:c8:64:7f:07:11:3e:3c:54:5a:42:16: d6:b6:3d:73:79:bb:0a:bc:73:bc:ec:c4:70:f4:78:61:bc:56: 85:a3:47:b4:1e:05:03:24:bc:82:4a:9b:a7:2a:88:a6:8b:24: 40:52:e8:d6:b2:c1:02:a7:ef:c4:65:1a:07:12:0a:75:52:07: db:83:05:99:1d:5b:77:71:50:7b:a1:f8:d7:c2:5d:cc:02:22: 50:bd:90:7f:38:f4:0a:d7:c3:27:ed:75:71:f0:d7:30:05:6b: 88:39:1a:0d:e2:e2:db:23:b5:36:19:4b:3d:d8:41:17:d8:11: 6d:9b:ad:44:39:7e:c6:d3:33:e8:d4:24:e1:fd:fb:e2:68:cd: 7e:d9:b5:2e:25:59:c2:be:71:df:19:ea:d2:9f:31:01:69:fa: 8f:5d:01:34:84:3d:69:f2:0f:ee:34:2e:50:96:3f:e1:82:76: a3:46:1c:42:93:eb:da:ce:d3:23:34:e2:6e:ca:3d:e9:6c:6e: 13:9d:b3:eb:cb:2b:52:32:4a:1d:83:3f:22:4b:64:b5:79:93: 0b:40:8f:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNY8dWsKmpldCwYk/P3XCr0DEvHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNTA4MDUwOTU1MDJaFw0yNTA4MDgxMDEwMDJaMDMxMTAvBgNV BAMTKDc0NjM1NEYyQTFGNEZFRjU1OTg0QkFENDlCRDgwRUI1MjE2RUZGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbH7jVe22FAOpDT0iODcbda7E OksBaNH4+Z/frV6Q8ho5CGXRrMkXHw5Fxj4z6liLnrGkvBio5nbVozvuAxbfHa7f L0Icz4tgAGZ8wPbHITkHKb9XgpU2EiSdtgUAjIezNvzX0x2zVsK+J+PSJSfUnK4M LKeMh9EKy+YXCDRBv+DLZZc+FQFESPoru0EVFdfk2KfmpRIPD4sWV9RLpjUe8lF/ diFQaHOTeYt1qWqWPajwFSliB6umZqCk23StjecnGnM1kekn8mog8EXafb0XtCj9 HLt8XgpNeSw+A8UBam8/KuFcXeVYqEyGZsumGWPGd/xu3ebrAAbQc8FJ9em3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGNU8qH0/vVZhLrUm9gOtSFu/2owHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNDZ2G+vCobOnvAMdi/5f8GoT4wGCm3sbhZ Slid3UQGolW4k/f9x1gPWHrIZH8HET48VFpCFta2PXN5uwq8c7zsxHD0eGG8VoWj R7QeBQMkvIJKm6cqiKaLJEBS6NaywQKn78RlGgcSCnVSB9uDBZkdW3dxUHuh+NfC XcwCIlC9kH849ArXwyftdXHw1zAFa4g5Gg3i4tsjtTYZSz3YQRfYEW2brUQ5fsbT M+jUJOH9++JozX7ZtS4lWcK+cd8Z6tKfMQFp+o9dATSEPWnyD+40LlCWP+GCdqNG HEKT69rO0yM04m7KPelsbhOds+vLK1IySh2DPyJLZLV5kwtAjwY= -----END CERTIFICATE-----Generated at Thu Aug 7 04:37:02 2025 by rpki-client