$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: ICXIb4YetbMmethkgNgKWCPaFnADFSdq1l2rBRD782s= Subject key identifier: EC:76:CA:22:67:17:76:8D:58:E7:58:31:70:61:52:B0:C6:40:5F:11 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 7C85EF155DFE188FE16C722E5499EAD88D31B272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 020A Signing time: Sat 09 Aug 2025 12:12:03 +0000 Manifest this update: Sat 09 Aug 2025 12:07:03 +0000 Manifest next update: Tue 12 Aug 2025 12:50:03 +0000 Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 3: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: DuXdFQXpvctjo0jIrpFsLo0+o5+sGjbxmdy0gmJdKWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 12:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:85:ef:15:5d:fe:18:8f:e1:6c:72:2e:54:99:ea:d8:8d:31:b2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Aug 9 12:07:03 2025 GMT Not After : Aug 12 12:50:03 2025 GMT Subject: CN=EC76CA226717768D58E75831706152B0C6405F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:b4:02:99:2f:78:91:c6:ec:13:6f:21:e0: a0:b1:67:0d:35:af:ee:a5:b3:2a:7d:5e:2a:19:c2: b0:ab:83:01:8f:58:04:19:16:47:92:2c:98:3a:50: c4:1d:90:d8:1b:10:50:e1:98:67:7f:71:c4:10:d0: 0b:9a:49:dc:31:42:83:fd:0d:f3:27:df:c7:c3:95: 8d:1a:5b:c9:bf:ef:08:d3:85:e2:b5:89:93:7d:87: 5d:bf:25:f6:cd:36:79:d2:40:0d:a5:2f:71:7b:09: 07:df:24:8e:13:57:5d:75:a8:2e:f9:2f:d3:c1:14: f9:57:2e:90:a1:ba:1e:c7:c3:b1:80:1a:0c:08:d9: ae:e2:02:31:2a:c3:50:22:6f:61:e9:53:d5:4f:7b: 78:d8:a4:92:b1:7f:b5:45:b3:09:f1:30:8d:b3:a7: 59:96:21:fb:3d:4c:cd:6c:bd:ed:5d:d3:8e:99:fd: 06:29:19:e0:e2:bc:8d:7f:3e:69:92:7b:f7:23:ff: 5b:e6:fe:2a:0f:1d:36:77:bf:58:eb:10:51:c4:01: 1b:ea:86:ec:4f:a2:07:50:65:8b:d0:76:37:31:b8: 40:39:53:89:2a:2d:26:ae:42:fd:d6:a4:37:27:30: a1:66:98:b0:6a:4a:f6:b9:53:58:12:03:e0:f2:59: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:76:CA:22:67:17:76:8D:58:E7:58:31:70:61:52:B0:C6:40:5F:11 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:4c:17:23:13:e0:88:46:5b:c6:a6:59:8b:54:8b:49:94: 4b:cf:72:d3:0c:d2:12:1f:22:55:fd:90:f6:99:6c:99:8c:66: b3:8c:fd:20:47:32:a1:7f:73:0c:4d:41:cb:9f:f1:94:c1:82: f7:39:69:a4:67:74:bd:50:ad:ae:88:db:e8:17:c1:65:ed:8c: 6d:e9:58:0e:ac:94:42:44:99:bf:0c:09:1b:e4:43:6d:e3:7d: 02:15:2c:da:23:fc:64:60:1c:4a:36:09:50:19:00:e5:11:db: 08:00:35:0b:c3:44:2a:31:f5:19:bd:45:9e:00:da:dc:0f:f5: d3:c4:21:84:a5:49:83:92:81:03:f8:6b:cf:0d:19:86:f2:61: 61:91:0c:c5:e9:e8:59:ce:be:55:4a:86:0c:b6:d6:83:9a:c3: 84:e5:a8:78:78:b1:11:77:16:f9:96:e0:63:27:0d:85:ed:90: 18:bd:80:4b:5b:3a:58:80:08:3b:61:52:ee:97:8d:b7:75:78: 1d:f4:fe:2d:fb:f9:cd:61:e1:a2:cb:01:74:c1:68:47:fe:ab: 32:53:c3:65:0c:7a:4b:27:d0:7b:90:5f:73:58:dd:c0:cb:d9: ad:5a:a4:5d:dc:09:f8:76:32:80:cf:bd:67:36:26:0f:e1:8d: de:d2:03:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIXvFV3+GI/hbHIuVJnq2I0xsnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA4MDkxMjA3MDNaFw0yNTA4MTIxMjUwMDNaMDMxMTAvBgNV BAMTKEVDNzZDQTIyNjcxNzc2OEQ1OEU3NTgzMTcwNjE1MkIwQzY0MDVGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVrQCmS94kcbsE28h4KCxZw01 r+6lsyp9XioZwrCrgwGPWAQZFkeSLJg6UMQdkNgbEFDhmGd/ccQQ0AuaSdwxQoP9 DfMn38fDlY0aW8m/7wjTheK1iZN9h12/JfbNNnnSQA2lL3F7CQffJI4TV111qC75 L9PBFPlXLpChuh7Hw7GAGgwI2a7iAjEqw1Aib2HpU9VPe3jYpJKxf7VFswnxMI2z p1mWIfs9TM1sve1d046Z/QYpGeDivI1/PmmSe/cj/1vm/ioPHTZ3v1jrEFHEARvq huxPogdQZYvQdjcxuEA5U4kqLSauQv3WpDcnMKFmmLBqSva5U1gSA+DyWWrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HbKImcXdo1Y51gxcGFSsMZAXxEwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCnTBcjE+CIRlvGplmLVItJlEvPctMM0hIf IlX9kPaZbJmMZrOM/SBHMqF/cwxNQcuf8ZTBgvc5aaRndL1Qra6I2+gXwWXtjG3p WA6slEJEmb8MCRvkQ23jfQIVLNoj/GRgHEo2CVAZAOUR2wgANQvDRCox9Rm9RZ4A 2twP9dPEIYSlSYOSgQP4a88NGYbyYWGRDMXp6FnOvlVKhgy21oOaw4TlqHh4sRF3 FvmW4GMnDYXtkBi9gEtbOliACDthUu6Xjbd1eB30/i37+c1h4aLLAXTBaEf+qzJT w2UMeksn0HuQX3NY3cDL2a1apF3cCfh2MoDPvWc2Jg/hjd7SA9I= -----END CERTIFICATE-----Generated at Mon Aug 11 10:29:35 2025 by rpki-client