$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: wQewwM2tX5SbuoTqpe1r7bCGXECcQIgLTciL2wIefX8= Subject key identifier: 0F:21:35:CC:BE:87:EC:78:DE:7C:96:0A:E2:3A:98:85:BF:43:06:A4 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 30DC33F33ED07DFC7B7826C7B4E7E2D99FCF381F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 011A Signing time: Sat 09 Aug 2025 02:32:22 +0000 Manifest this update: Sat 09 Aug 2025 02:27:22 +0000 Manifest next update: Tue 12 Aug 2025 12:55:22 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: lJsu2SIIzlHsscvhrOk3RdSRDaFJqk0k8VQ4EL5Jp7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 12:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dc:33:f3:3e:d0:7d:fc:7b:78:26:c7:b4:e7:e2:d9:9f:cf:38:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Aug 9 02:27:22 2025 GMT Not After : Aug 12 12:55:22 2025 GMT Subject: CN=0F2135CCBE87EC78DE7C960AE23A9885BF4306A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:47:ef:51:51:a7:f3:c8:f8:e1:e4:3b:75: 47:ab:1b:ef:de:2c:d0:bb:94:79:70:14:8b:1d:be: 8a:6b:ce:61:21:22:6a:e0:dd:60:92:24:0f:7b:72: 57:e7:be:6a:70:fe:14:d6:98:25:92:46:77:61:63: 04:80:d1:21:5e:0d:fb:8c:ef:a1:d7:d8:e7:75:55: c7:38:26:fd:e4:b7:8a:58:e4:fa:68:0d:99:7a:eb: aa:28:1c:72:03:2c:c5:03:3a:e3:cc:5e:26:e6:ee: 02:28:cc:33:90:61:4c:29:8b:be:44:ff:e5:4d:12: 92:47:a6:59:bc:a7:53:2b:e7:11:6a:7f:db:cc:4e: 95:be:62:09:7f:2b:a0:20:8e:48:60:7d:93:b3:f7: 4c:c0:e0:b9:33:12:ed:86:cc:3e:5f:ad:2b:d9:3e: 12:a0:e7:36:b3:d4:47:96:b8:3c:47:c1:ab:94:0d: ad:5f:f4:0f:2e:22:6f:1b:57:64:c8:7f:d5:cd:af: d6:9b:f8:3e:28:9c:91:57:0b:fc:57:e4:e5:d3:ef: 88:54:1b:af:e1:1a:3d:e4:0e:aa:22:cf:6c:7f:84: 59:e8:72:85:60:c9:37:a4:80:69:ce:11:83:89:d0: 89:cd:04:67:af:b5:82:61:dc:62:02:18:8f:fa:0a: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:35:CC:BE:87:EC:78:DE:7C:96:0A:E2:3A:98:85:BF:43:06:A4 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:dd:52:44:8c:81:e6:62:c4:cd:ff:14:10:46:d4:fa:cd: cd:37:a2:66:6e:9d:be:9d:99:10:8c:35:0f:8e:59:d1:43:19: c8:f1:bf:6d:c8:77:40:5e:ee:01:da:9b:69:51:52:cd:21:f6: 9b:de:20:d0:a8:b7:d7:b8:a3:88:14:91:ce:38:ed:1b:6f:1b: 2a:87:5b:b4:31:6a:b0:13:8d:8f:c5:60:d2:3e:3d:26:af:58: 27:6b:04:37:a8:a6:10:fa:12:3a:71:0b:32:5e:fd:bc:38:20: 53:88:42:9e:c9:91:85:48:47:a6:84:c7:6e:6c:ca:90:7e:11: 85:98:7f:9e:f2:50:a2:0a:6a:79:2b:3b:84:90:49:19:17:65: 33:82:7f:0f:6d:db:96:69:ce:a1:6a:1b:83:4d:38:f8:dc:b7: f1:8f:b3:d6:f7:e5:a2:8f:95:80:d5:18:4e:87:d8:58:a8:6a: 33:ec:74:6b:34:f0:a8:80:1b:28:4f:21:86:7d:0e:0d:15:e9: 4f:19:b4:59:4a:d1:49:67:c4:3a:66:cb:e9:e2:f4:a2:69:6b: 30:d9:7a:f1:c2:3e:1e:8f:cb:ff:ee:eb:46:d5:f3:cf:8d:e2: a7:ec:8f:6c:7a:7d:88:58:26:12:7f:92:68:a8:2d:e6:ec:fb: ac:ec:08:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNwz8z7Qffx7eCbHtOfi2Z/POB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA4MDkwMjI3MjJaFw0yNTA4MTIxMjU1MjJaMDMxMTAvBgNV BAMTKDBGMjEzNUNDQkU4N0VDNzhERTdDOTYwQUUyM0E5ODg1QkY0MzA2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSEfvUVGn88j44eQ7dUerG+/e LNC7lHlwFIsdvoprzmEhImrg3WCSJA97clfnvmpw/hTWmCWSRndhYwSA0SFeDfuM 76HX2Od1Vcc4Jv3kt4pY5PpoDZl666ooHHIDLMUDOuPMXibm7gIozDOQYUwpi75E /+VNEpJHplm8p1Mr5xFqf9vMTpW+Ygl/K6AgjkhgfZOz90zA4LkzEu2GzD5frSvZ PhKg5zaz1EeWuDxHwauUDa1f9A8uIm8bV2TIf9XNr9ab+D4onJFXC/xX5OXT74hU G6/hGj3kDqoiz2x/hFnocoVgyTekgGnOEYOJ0InNBGevtYJh3GICGI/6CnLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyE1zL6H7HjefJYK4jqYhb9DBqQwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1w3VJEjIHmYsTN/xQQRtT6zc03omZunb6d mRCMNQ+OWdFDGcjxv23Id0Be7gHam2lRUs0h9pveINCot9e4o4gUkc447RtvGyqH W7QxarATjY/FYNI+PSavWCdrBDeophD6EjpxCzJe/bw4IFOIQp7JkYVIR6aEx25s ypB+EYWYf57yUKIKankrO4SQSRkXZTOCfw9t25ZpzqFqG4NNOPjct/GPs9b35aKP lYDVGE6H2FioajPsdGs08KiAGyhPIYZ9Dg0V6U8ZtFlK0UlnxDpmy+ni9KJpazDZ evHCPh6Py//u60bV88+N4qfsj2x6fYhYJhJ/kmioLebs+6zsCA0= -----END CERTIFICATE-----Generated at Sun Aug 10 10:47:10 2025 by rpki-client