$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: YAtYE7mHcW7G8k457YypTUXFJGWCUwogNO35WD+h1eo= Subject key identifier: 95:B9:71:06:95:6E:22:D3:09:FA:36:58:40:14:2A:43:AD:59:3C:75 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 0A046C886E4BF11E0BA04BA99BB951DAC485F67D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 0367 Signing time: Wed 06 Aug 2025 02:01:44 +0000 Manifest this update: Wed 06 Aug 2025 01:56:44 +0000 Manifest next update: Sat 09 Aug 2025 07:52:44 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: fG7PY9BruuOVx92FOxjxoMiQ3I3NlpN34gdLF+3YECI=) 2: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:6c:88:6e:4b:f1:1e:0b:a0:4b:a9:9b:b9:51:da:c4:85:f6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Aug 6 01:56:44 2025 GMT Not After : Aug 9 07:52:44 2025 GMT Subject: CN=95B97106956E22D309FA365840142A43AD593C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:50:55:07:67:60:f8:4d:9a:31:d7:47:69: 94:ab:38:45:19:e2:9a:dc:38:84:86:63:8a:db:76: b2:06:f1:96:a6:c3:23:d4:f4:7f:9f:65:56:52:2e: 2d:fc:d7:7a:9c:7c:82:31:e5:82:9a:b5:f7:3d:f4: 9f:83:61:d4:19:9d:58:4e:08:d5:23:88:ac:fc:8a: 42:26:83:11:52:22:1e:3e:2f:f5:f0:1d:76:6c:0c: bc:d2:8a:f7:a0:ff:3d:a8:aa:1b:56:6e:41:f1:44: da:a7:59:38:2b:e6:39:40:d5:4c:01:ad:9a:93:6b: 02:c5:2b:2c:e5:f4:11:f0:6a:8e:00:7c:d0:e3:01: 62:e2:04:d8:a1:85:b7:c3:00:21:f9:b9:75:90:46: a9:6f:47:aa:87:00:f6:15:f4:be:eb:fc:13:95:9d: 1d:2b:1b:30:d8:27:fa:36:71:98:96:0a:84:49:da: f0:6a:d2:36:dd:d7:9c:5f:34:d6:31:0a:0c:0c:39: e1:c2:49:aa:c3:5c:3f:da:d2:4f:f8:3c:6f:a9:e0: 92:e9:63:6a:d1:29:df:9b:1e:3f:ac:f7:eb:49:1e: 4c:06:4e:c2:0e:e1:97:6c:7d:17:73:13:e1:c6:be: fc:43:3e:fb:10:c5:45:3a:8b:75:00:49:46:fa:c2: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:71:06:95:6E:22:D3:09:FA:36:58:40:14:2A:43:AD:59:3C:75 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:35:76:1e:ea:c1:55:0d:7a:47:63:5a:34:26:fc:b8:1c:db: b3:02:1e:95:7d:7b:4f:92:3d:a3:52:40:1b:91:f7:a6:7c:84: ca:1b:94:08:db:46:9b:51:5c:b3:3e:b9:d9:20:e5:9c:f0:9e: 31:8e:ef:41:b1:31:5f:b5:45:41:f2:0d:4e:b9:39:d0:50:3d: 4b:d0:03:bb:8a:75:b0:17:cc:4e:1b:a6:c3:90:77:ee:b1:da: 8c:76:5a:14:0e:37:72:12:c8:11:73:91:9a:8e:39:05:3b:65: bd:2a:08:d2:b4:76:36:db:23:48:c2:51:6c:b9:6e:14:98:95: 4c:1d:52:57:1c:1a:17:d2:45:ed:10:41:a0:34:90:66:21:84: e3:47:5a:b4:ef:1a:6e:2a:4a:60:4d:bd:fc:82:7e:67:c0:b9: e2:6a:be:db:a0:4a:41:a7:4d:ad:77:82:4a:6b:38:a0:5d:fb: 54:f9:e2:07:cf:bd:f4:7a:d4:5e:6c:e6:1d:8e:90:b3:35:c2: 39:56:f2:f4:4a:09:4e:29:95:cb:f9:ad:2c:c3:8c:5f:79:aa: 88:03:0c:36:24:10:7e:f9:4b:62:78:ea:f0:ea:27:a3:c4:c9: a5:62:c8:b3:ff:d4:f9:00:5a:29:76:cc:06:b5:a9:c4:84:5a: 26:a2:35:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgRsiG5L8R4LoEupm7lR2sSF9n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTA4MDYwMTU2NDRaFw0yNTA4MDkwNzUyNDRaMDMxMTAvBgNV BAMTKDk1Qjk3MTA2OTU2RTIyRDMwOUZBMzY1ODQwMTQyQTQzQUQ1OTNDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbVBVB2dg+E2aMddHaZSrOEUZ 4prcOISGY4rbdrIG8ZamwyPU9H+fZVZSLi3813qcfIIx5YKatfc99J+DYdQZnVhO CNUjiKz8ikImgxFSIh4+L/XwHXZsDLzSiveg/z2oqhtWbkHxRNqnWTgr5jlA1UwB rZqTawLFKyzl9BHwao4AfNDjAWLiBNihhbfDACH5uXWQRqlvR6qHAPYV9L7r/BOV nR0rGzDYJ/o2cZiWCoRJ2vBq0jbd15xfNNYxCgwMOeHCSarDXD/a0k/4PG+p4JLp Y2rRKd+bHj+s9+tJHkwGTsIO4ZdsfRdzE+HGvvxDPvsQxUU6i3UASUb6wu6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlblxBpVuItMJ+jZYQBQqQ61ZPHUwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ1dh7qwVUNekdjWjQm/Lgc27MCHpV9e0+S PaNSQBuR96Z8hMoblAjbRptRXLM+udkg5ZzwnjGO70GxMV+1RUHyDU65OdBQPUvQ A7uKdbAXzE4bpsOQd+6x2ox2WhQON3ISyBFzkZqOOQU7Zb0qCNK0djbbI0jCUWy5 bhSYlUwdUlccGhfSRe0QQaA0kGYhhONHWrTvGm4qSmBNvfyCfmfAueJqvtugSkGn Ta13gkprOKBd+1T54gfPvfR61F5s5h2OkLM1wjlW8vRKCU4plcv5rSzDjF95qogD DDYkEH75S2J46vDqJ6PEyaViyLP/1PkAWil2zAa1qcSEWiaiNXU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:52 2025 by rpki-client