$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: ktBByxWJe/ErQYCVQP54rK1TnzxNOdsibEK0hzg0LfA= Subject key identifier: A9:E4:E8:27:FC:81:21:0F:79:91:D9:FE:E7:7C:33:83:AB:3F:ED:D3 Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 426E54425A669CC5E5B2B3F0ACA4ADB183A3E28B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 0195 Signing time: Wed 06 Aug 2025 07:41:01 +0000 Manifest this update: Wed 06 Aug 2025 07:36:01 +0000 Manifest next update: Sat 09 Aug 2025 19:17:01 +0000 Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=) 2: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=) 3: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: 7b6zchYTa961Mn0vzByAf/JtOKEUW1n0C4cJDoZwpuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6e:54:42:5a:66:9c:c5:e5:b2:b3:f0:ac:a4:ad:b1:83:a3:e2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Aug 6 07:36:01 2025 GMT Not After : Aug 9 19:17:01 2025 GMT Subject: CN=A9E4E827FC81210F7991D9FEE77C3383AB3FEDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:47:bf:42:04:63:d0:05:a3:18:0b:3c:69: f6:b4:0e:20:3c:f8:ea:86:e4:a0:9a:c0:a4:1d:9a: 3a:02:5c:d5:ad:f1:2f:2a:ba:f6:27:2f:59:79:a5: f0:3b:eb:f3:94:f0:24:dc:53:ed:51:43:9c:99:ef: c8:7b:ec:03:75:ad:aa:23:da:d7:38:29:70:53:c2: 7a:7a:4f:a9:a4:27:8d:05:ac:69:3e:e4:7f:d4:4b: 9f:23:1b:14:bb:2d:31:41:42:03:c6:12:07:26:11: af:42:7a:21:67:51:d0:2a:33:3d:30:39:2d:61:68: 98:a1:87:f9:4a:78:e9:09:e2:f9:28:c2:58:b8:e2: 25:01:42:bc:9f:95:fa:22:35:4b:ee:b0:43:de:1b: fa:98:4f:8b:9a:af:e0:c5:da:55:fe:49:24:2b:06: d4:16:46:ad:fb:43:d3:51:cb:7e:79:d6:99:d4:dc: 21:7f:75:84:6c:1e:5a:df:bf:39:f5:2a:55:3a:a4: b5:4f:a4:fc:d5:71:25:23:f6:c8:60:0d:e5:c9:27: 56:ce:dd:d3:01:c4:3a:1d:7b:c9:f7:3a:17:24:bc: 0e:0c:6c:10:ad:83:4d:be:4e:66:14:19:b2:64:33: 1d:0a:d2:0b:79:1d:5c:4f:90:f9:79:f3:7c:b8:1f: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:E8:27:FC:81:21:0F:79:91:D9:FE:E7:7C:33:83:AB:3F:ED:D3 X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a1:1e:a6:9c:3a:b2:0e:e0:42:e8:32:dc:73:86:c9:51:95: db:e7:9d:99:c1:9b:3e:29:b4:c5:4e:30:9e:1c:c4:9f:85:b9: bd:ad:4d:8a:57:3d:29:9e:15:0b:1b:83:44:9f:80:c8:9f:23: 71:bf:ac:03:7e:1a:40:df:8c:43:01:37:ae:df:70:6e:87:53: bb:ea:09:63:9b:2b:4f:1e:2b:d0:38:d5:1e:b3:e8:b9:17:09: 9e:85:71:c0:67:c1:57:90:06:53:3c:0a:18:7b:cf:aa:7e:24: bc:46:54:84:49:44:88:d0:8c:ee:32:62:89:ae:27:56:d9:d1: 21:bf:30:ce:ae:48:c6:e3:3b:d3:2b:a5:e7:5d:8c:5d:31:a3: 35:15:34:1a:8a:fa:41:ad:44:5e:31:f5:4a:de:29:13:97:b9: 7f:a8:f5:cd:36:eb:8c:6c:be:fe:03:90:fc:a8:2b:ab:3d:e5: cc:68:50:9c:8e:ba:c9:ff:04:0f:4b:95:9d:07:e6:05:0d:54: ef:5e:01:8b:bf:22:e9:d5:f9:d9:db:a2:50:e4:9d:28:f9:7d: cc:2b:fc:13:6a:3c:16:5f:98:02:2e:6a:8a:4b:bd:9e:c0:36: ff:0d:a8:7e:56:05:26:ed:3f:1a:55:6b:47:1f:ff:ea:4d:a8: 12:d3:ae:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm5UQlpmnMXlsrPwrKStsYOj4oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTA4MDYwNzM2MDFaFw0yNTA4MDkxOTE3MDFaMDMxMTAvBgNV BAMTKEE5RTRFODI3RkM4MTIxMEY3OTkxRDlGRUU3N0MzMzgzQUIzRkVERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3C0e/QgRj0AWjGAs8afa0DiA8 +OqG5KCawKQdmjoCXNWt8S8quvYnL1l5pfA76/OU8CTcU+1RQ5yZ78h77AN1raoj 2tc4KXBTwnp6T6mkJ40FrGk+5H/US58jGxS7LTFBQgPGEgcmEa9CeiFnUdAqMz0w OS1haJihh/lKeOkJ4vkowli44iUBQryflfoiNUvusEPeG/qYT4uar+DF2lX+SSQr BtQWRq37Q9NRy3551pnU3CF/dYRsHlrfvzn1KlU6pLVPpPzVcSUj9shgDeXJJ1bO 3dMBxDode8n3OhckvA4MbBCtg02+TmYUGbJkMx0K0gt5HVxPkPl583y4HwwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeToJ/yBIQ95kdn+53wzg6s/7dMwHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+hHqacOrIO4ELoMtxzhslRldvnnZnBmz4p tMVOMJ4cxJ+Fub2tTYpXPSmeFQsbg0SfgMifI3G/rAN+GkDfjEMBN67fcG6HU7vq CWObK08eK9A41R6z6LkXCZ6FccBnwVeQBlM8Chh7z6p+JLxGVIRJRIjQjO4yYomu J1bZ0SG/MM6uSMbjO9MrpeddjF0xozUVNBqK+kGtRF4x9UreKROXuX+o9c0264xs vv4DkPyoK6s95cxoUJyOusn/BA9LlZ0H5gUNVO9eAYu/IunV+dnbolDknSj5fcwr /BNqPBZfmAIuaopLvZ7ANv8NqH5WBSbtPxpVa0cf/+pNqBLTrsI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:13 2025 by rpki-client