$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: gjOiEDQHeS1cfjDwOXlDO2hTd5vg0KyxpYBK5WwXkRI= Subject key identifier: 1B:32:D7:20:BE:40:15:3E:27:62:0F:04:D2:20:E4:76:A1:57:1B:DF Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 0FFB74104C84BBA83FB4F3B7196A384840AC5CC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 0484 Signing time: Fri 08 Aug 2025 10:11:01 +0000 Manifest this update: Fri 08 Aug 2025 10:06:01 +0000 Manifest next update: Mon 11 Aug 2025 11:43:01 +0000 Files and hashes: 1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=) 2: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: lIc8Fl8AGgMNNfhCg/J/ukSJVKo1p9p6jIEaYaDHcXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 11:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fb:74:10:4c:84:bb:a8:3f:b4:f3:b7:19:6a:38:48:40:ac:5c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Aug 8 10:06:01 2025 GMT Not After : Aug 11 11:43:01 2025 GMT Subject: CN=1B32D720BE40153E27620F04D220E476A1571BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:b7:01:59:a2:3c:23:10:f8:85:47:8e:05: a9:19:df:e2:b9:3b:78:3d:c9:b7:de:0b:f2:25:a2: 58:41:5d:03:db:bb:15:0c:4c:41:e4:37:39:f8:74: 35:76:9c:41:4c:d9:dd:43:40:03:93:8e:48:ef:bc: 19:fa:88:2c:b5:56:c0:6d:b9:12:fb:ac:26:8c:2b: 1a:18:42:b0:ed:44:92:6c:47:69:93:9a:12:6a:03: d6:32:b4:e8:ac:12:c7:46:ed:8d:a9:e6:98:04:54: 94:ce:ab:99:a3:d0:bb:6d:14:fa:20:d2:ee:ab:5d: e2:fb:2b:85:a2:ca:25:65:27:63:f6:34:91:c4:1c: 96:c4:90:cc:e5:d6:21:03:56:58:54:53:02:98:88: ec:73:6d:e6:83:0f:96:07:85:e2:4b:b4:36:a9:b7: ec:c1:99:b0:92:2d:9d:81:48:93:9e:f3:fa:25:d8: e5:85:42:0e:07:77:18:0b:42:d5:a2:d8:aa:8e:2d: 37:13:2b:cb:f9:12:aa:54:1d:4e:38:b5:36:10:71: a0:97:3e:7a:a0:b7:9e:1e:22:fd:66:e0:aa:df:99: 56:5a:0b:1b:11:20:95:f5:45:c1:44:84:13:79:5a: 0b:8f:43:3a:12:c7:3e:38:1d:3d:84:f2:c0:b0:1e: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:32:D7:20:BE:40:15:3E:27:62:0F:04:D2:20:E4:76:A1:57:1B:DF X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6c:ee:7c:48:18:6a:f6:8d:62:bf:f4:51:c3:e4:24:50:19: 40:76:e8:41:0b:cc:46:05:83:ef:85:e9:e6:5a:2b:7a:ef:76: 13:b0:c3:4c:70:4b:58:42:fc:44:2f:20:79:a2:3d:66:3e:af: 45:b3:49:eb:44:fa:03:54:41:0b:e1:89:25:b9:f5:d4:91:b3: 74:c8:e8:f2:56:dd:40:91:fe:31:99:75:dd:76:06:22:ca:9c: 5e:f5:1a:0a:6f:5e:20:7c:66:7f:60:af:dc:80:2e:a7:b7:78: 3e:2b:73:8b:21:80:df:8e:92:65:75:a9:ef:09:9c:37:31:a6: 7b:bb:47:dc:0b:ce:30:cd:02:5b:33:23:f1:2e:7d:0f:cc:d6: 3d:a4:94:b3:f4:78:de:06:8c:db:e5:cb:96:f0:4e:a8:5e:31: 56:0f:3d:9e:f1:5f:e1:16:35:99:bf:61:f2:19:b8:07:9d:1b: 97:92:73:c9:cd:28:e8:1a:b5:58:7e:76:c2:f4:c8:57:a3:9b: b5:fd:c4:af:40:b1:cf:6e:1c:11:2f:26:42:17:fe:a3:71:b8: 99:e9:55:78:73:65:f2:f5:00:0c:66:77:46:b5:d8:44:56:89: c8:2b:f8:a6:45:3c:de:2f:a2:c1:07:47:d6:7c:7e:7b:44:41: d0:99:4a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/t0EEyEu6g/tPO3GWo4SECsXMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTA4MDgxMDA2MDFaFw0yNTA4MTExMTQzMDFaMDMxMTAvBgNV BAMTKDFCMzJENzIwQkU0MDE1M0UyNzYyMEYwNEQyMjBFNDc2QTE1NzFCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mbcBWaI8IxD4hUeOBakZ3+K5 O3g9ybfeC/IlolhBXQPbuxUMTEHkNzn4dDV2nEFM2d1DQAOTjkjvvBn6iCy1VsBt uRL7rCaMKxoYQrDtRJJsR2mTmhJqA9YytOisEsdG7Y2p5pgEVJTOq5mj0LttFPog 0u6rXeL7K4WiyiVlJ2P2NJHEHJbEkMzl1iEDVlhUUwKYiOxzbeaDD5YHheJLtDap t+zBmbCSLZ2BSJOe8/ol2OWFQg4HdxgLQtWi2KqOLTcTK8v5EqpUHU44tTYQcaCX Pnqgt54eIv1m4KrfmVZaCxsRIJX1RcFEhBN5WguPQzoSxz44HT2E8sCwHq0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGzLXIL5AFT4nYg8E0iDkdqFXG98wHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFts7nxIGGr2jWK/9FHD5CRQGUB26EELzEYF g++F6eZaK3rvdhOww0xwS1hC/EQvIHmiPWY+r0WzSetE+gNUQQvhiSW59dSRs3TI 6PJW3UCR/jGZdd12BiLKnF71GgpvXiB8Zn9gr9yALqe3eD4rc4shgN+OkmV1qe8J nDcxpnu7R9wLzjDNAlszI/EufQ/M1j2klLP0eN4GjNvly5bwTqheMVYPPZ7xX+EW NZm/YfIZuAedG5eSc8nNKOgatVh+dsL0yFejm7X9xK9Asc9uHBEvJkIX/qNxuJnp VXhzZfL1AAxmd0a12ERWicgr+KZFPN4vosEHR9Z8fntEQdCZSro= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:42 2025 by rpki-client