$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: lH85Txma+IcSxlIcmPCw72imFMja3wEgFRgPHLYo49w= Subject key identifier: D3:E8:AC:68:FE:FF:26:15:33:00:7F:14:CF:62:95:F1:BD:7A:2C:90 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 069508CC698F72B11A15E962093DCA15BD4D86FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: A3 Signing time: Thu 07 Aug 2025 23:30:36 +0000 Manifest this update: Thu 07 Aug 2025 23:25:36 +0000 Manifest next update: Mon 11 Aug 2025 04:22:36 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: 2EMCkyEcmCRfvLw04WS2OE7LBa/p7qgGwCQh/vYzBAM=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 04:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:95:08:cc:69:8f:72:b1:1a:15:e9:62:09:3d:ca:15:bd:4d:86:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Aug 7 23:25:36 2025 GMT Not After : Aug 11 04:22:36 2025 GMT Subject: CN=D3E8AC68FEFF261533007F14CF6295F1BD7A2C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:cc:d1:85:88:5c:18:a2:54:c5:15:55:8b: 6a:37:f4:a7:ab:4b:60:67:2a:e5:8d:76:13:ec:6d: 55:64:f2:f8:91:00:7f:52:d6:03:06:f4:7f:d6:37: d8:8d:6c:59:26:b4:8c:0e:2a:95:1c:9f:fd:82:59: 47:6b:a9:f1:e7:e2:5a:49:44:76:12:5f:18:d8:71: fe:d1:f6:99:6a:e2:66:a2:89:9b:b1:ed:b9:74:5d: bb:59:fe:69:05:0d:8b:a1:84:27:7c:62:4c:8c:0f: a9:fa:47:6d:3c:7d:a7:ac:17:fe:d9:51:d6:af:60: d6:aa:30:07:f4:80:b1:1f:45:79:eb:9c:89:02:d2: 1b:aa:a2:04:02:0f:de:ad:87:ff:6d:53:20:92:65: 35:4c:cf:0b:42:0c:f4:fe:14:6d:24:0e:4c:e1:96: 45:ba:d4:00:1b:5f:39:b0:54:ae:7f:de:8b:e8:fd: 40:53:ac:32:eb:83:af:6e:4f:0f:50:e1:52:c9:0d: d5:db:96:80:2f:8c:55:47:60:5d:fd:f2:85:04:76: fb:57:7e:8b:f6:2f:24:e2:fc:69:ea:30:a2:e8:54: 3f:8c:f6:47:d9:a5:34:65:83:e8:6a:7f:74:b3:c7: b1:e3:f3:4d:92:9d:9c:34:92:61:f5:93:6e:ae:21: f0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:AC:68:FE:FF:26:15:33:00:7F:14:CF:62:95:F1:BD:7A:2C:90 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:05:c2:64:ef:65:a2:ab:bd:fc:68:52:89:03:b7:b8:25:bc: 53:a1:ae:bb:fd:24:3a:66:6b:92:8e:8e:eb:c9:66:c6:c7:d3: 1e:e0:53:de:6c:e0:1c:0e:f3:00:36:6b:ae:f7:ce:7c:07:ff: 54:93:3a:94:89:11:a9:6f:f2:c7:d9:d3:eb:49:7d:85:93:63: 6c:3d:cd:09:3d:22:43:30:93:71:df:0e:48:72:5c:40:96:09: 17:bb:84:df:57:fc:e1:44:fb:d0:c4:7d:ff:44:6f:5a:79:74: 65:c1:8a:2c:d5:79:c6:88:8b:8b:b4:08:fc:5f:c1:c3:ee:98: c3:a6:55:7b:6d:d4:d2:6a:d2:be:d0:88:11:cc:8f:60:d2:29: 60:bb:d9:a7:f9:61:a2:33:5d:73:a0:fe:30:0d:4a:d1:f3:7d: d2:25:f2:d2:74:10:27:90:af:d7:73:ec:8c:c5:70:92:6a:0f: 85:62:37:1c:0e:60:9e:94:87:79:03:0e:7d:8f:85:17:00:58: a4:72:41:ca:e6:f3:1c:7a:2b:ad:22:4f:82:c1:7e:a0:cb:90: ee:2a:84:08:4c:0c:9a:55:fc:53:80:eb:cc:f4:5e:9a:7a:fe: 5d:f1:96:03:98:59:0a:be:e0:66:80:84:9c:76:4a:83:d2:93: 8e:4b:0e:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpUIzGmPcrEaFeliCT3KFb1Nhv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA4MDcyMzI1MzZaFw0yNTA4MTEwNDIyMzZaMDMxMTAvBgNV BAMTKEQzRThBQzY4RkVGRjI2MTUzMzAwN0YxNENGNjI5NUYxQkQ3QTJDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRi8zRhYhcGKJUxRVVi2o39Ker S2BnKuWNdhPsbVVk8viRAH9S1gMG9H/WN9iNbFkmtIwOKpUcn/2CWUdrqfHn4lpJ RHYSXxjYcf7R9plq4maiiZux7bl0XbtZ/mkFDYuhhCd8YkyMD6n6R208faesF/7Z UdavYNaqMAf0gLEfRXnrnIkC0huqogQCD96th/9tUyCSZTVMzwtCDPT+FG0kDkzh lkW61AAbXzmwVK5/3ovo/UBTrDLrg69uTw9Q4VLJDdXbloAvjFVHYF398oUEdvtX fov2LyTi/GnqMKLoVD+M9kfZpTRlg+hqf3Szx7Hj802SnZw0kmH1k26uIfBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+isaP7/JhUzAH8Uz2KV8b16LJAwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoFwmTvZaKrvfxoUokDt7glvFOhrrv9JDpm a5KOjuvJZsbH0x7gU95s4BwO8wA2a673znwH/1STOpSJEalv8sfZ0+tJfYWTY2w9 zQk9IkMwk3HfDkhyXECWCRe7hN9X/OFE+9DEff9Eb1p5dGXBiizVecaIi4u0CPxf wcPumMOmVXtt1NJq0r7QiBHMj2DSKWC72af5YaIzXXOg/jANStHzfdIl8tJ0ECeQ r9dz7IzFcJJqD4ViNxwOYJ6Uh3kDDn2PhRcAWKRyQcrm8xx6K60iT4LBfqDLkO4q hAhMDJpV/FOA68z0Xpp6/l3xlgOYWQq+4GaAhJx2SoPSk45LDqw= -----END CERTIFICATE-----Generated at Sat Aug 9 05:39:26 2025 by rpki-client