$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: bt21oFXkehHwG9nFDtSoRSGSrsj/7d/bWSX54cU5XWs= Subject key identifier: 5C:EC:C6:C5:45:1C:12:28:4C:60:48:4A:3C:DA:95:3F:23:C7:E8:D9 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 5F5C7D86F98640A1A40E7BF9925117D27FD72899 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 8B Signing time: Fri 08 Aug 2025 10:11:51 +0000 Manifest this update: Fri 08 Aug 2025 10:06:51 +0000 Manifest next update: Mon 11 Aug 2025 19:54:51 +0000 Files and hashes: 1: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) 2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: f8ab6G7VRA567hwqen06RFSP3rJOhfMDOgPQju7q/UQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5c:7d:86:f9:86:40:a1:a4:0e:7b:f9:92:51:17:d2:7f:d7:28:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Aug 8 10:06:51 2025 GMT Not After : Aug 11 19:54:51 2025 GMT Subject: CN=5CECC6C5451C12284C60484A3CDA953F23C7E8D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ad:50:d8:7f:5c:ee:7f:b5:d4:6b:1d:69:7a: 8c:8c:39:fa:79:d8:ea:61:5f:49:99:85:f6:3f:7c: 80:a6:f8:24:22:8d:a4:37:ce:a7:c7:48:f0:0b:c3: 55:49:cc:62:38:87:14:9b:c9:d7:0c:e1:0d:f0:6d: 70:c1:c8:38:5c:7c:4c:b5:c5:cf:c9:c0:0d:03:ad: 90:21:bc:ad:d8:7b:ed:d0:b7:b9:ca:bf:74:00:43: 3c:91:74:7c:e1:79:3c:f2:1e:7d:6f:63:af:ef:c6: 2f:61:ce:dc:eb:45:10:96:2a:53:a2:01:dc:9e:c5: 1b:82:27:e0:6a:92:fc:f1:65:f6:cb:23:6e:a2:56: b4:b2:f8:98:24:d4:12:88:6e:1e:35:db:14:c9:78: 2e:6c:27:dd:a3:61:d4:f1:79:c5:73:81:a8:7b:05: 77:cf:a9:b3:1b:70:23:d7:25:44:a2:ab:8a:0f:1c: d9:85:e2:ae:b4:32:f7:2f:45:14:9b:9e:d3:1e:8c: a0:f3:d1:08:42:f0:a1:2b:a7:46:8c:9e:5a:a1:44: 8c:d7:fe:7f:b1:41:af:32:9f:9e:67:87:23:ad:b9: 32:23:10:9c:f2:74:58:9e:33:99:96:5b:d3:f0:f3: 82:46:5b:7e:8d:16:48:2f:05:79:4c:e1:ad:98:0e: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:C6:C5:45:1C:12:28:4C:60:48:4A:3C:DA:95:3F:23:C7:E8:D9 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:70:4b:32:01:bc:b5:11:f2:0a:16:45:24:26:39:fe:b1:5a: f0:31:f7:4f:14:98:f4:2a:ce:c6:55:e5:74:f7:81:bb:da:f9: c2:10:15:4a:d3:d7:05:fe:8b:b5:b5:44:99:01:26:85:f3:36: 09:b9:ce:e6:19:c0:2f:ea:fb:a4:d2:5c:b9:9f:f4:74:6b:6f: 01:0f:98:b2:1e:74:a2:5b:88:14:16:b5:0b:de:4d:a1:af:c2: 02:d0:ef:73:95:b6:97:97:e3:d2:ac:ed:d7:75:7e:16:0b:bc: 96:20:42:5d:17:15:e3:6c:5a:80:23:d7:ae:fd:08:87:d3:84: f4:d1:cc:23:8e:26:0c:2b:72:dc:28:c2:65:1d:5f:b4:99:46: b9:dd:48:02:b0:48:5f:ef:b9:c8:c0:a5:4f:39:af:b1:e3:3d: 3b:d8:25:52:ae:d8:79:e6:83:82:84:e9:61:36:e9:c7:e7:05: 2f:13:6a:22:09:23:de:d7:b7:dc:ff:55:47:72:98:d7:34:0e: ce:17:c9:7f:2d:d8:a2:a3:51:08:e1:ca:1d:ff:2c:3c:50:df: 39:9a:dc:b4:6f:f6:87:b7:1b:2f:95:1a:20:52:89:89:97:61: 60:4a:43:8a:d1:f4:39:b0:47:b5:e1:d9:6a:ba:97:97:42:92: a2:72:20:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1x9hvmGQKGkDnv5klEX0n/XKJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTA4MDgxMDA2NTFaFw0yNTA4MTExOTU0NTFaMDMxMTAvBgNV BAMTKDVDRUNDNkM1NDUxQzEyMjg0QzYwNDg0QTNDREE5NTNGMjNDN0U4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDurVDYf1zuf7XUax1peoyMOfp5 2OphX0mZhfY/fICm+CQijaQ3zqfHSPALw1VJzGI4hxSbydcM4Q3wbXDByDhcfEy1 xc/JwA0DrZAhvK3Ye+3Qt7nKv3QAQzyRdHzheTzyHn1vY6/vxi9hztzrRRCWKlOi AdyexRuCJ+BqkvzxZfbLI26iVrSy+Jgk1BKIbh412xTJeC5sJ92jYdTxecVzgah7 BXfPqbMbcCPXJUSiq4oPHNmF4q60MvcvRRSbntMejKDz0QhC8KErp0aMnlqhRIzX /n+xQa8yn55nhyOtuTIjEJzydFieM5mWW9Pw84JGW36NFkgvBXlM4a2YDkdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOzGxUUcEihMYEhKPNqVPyPH6NkwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5wSzIBvLUR8goWRSQmOf6xWvAx908UmPQq zsZV5XT3gbva+cIQFUrT1wX+i7W1RJkBJoXzNgm5zuYZwC/q+6TSXLmf9HRrbwEP mLIedKJbiBQWtQveTaGvwgLQ73OVtpeX49Ks7dd1fhYLvJYgQl0XFeNsWoAj1679 CIfThPTRzCOOJgwrctwowmUdX7SZRrndSAKwSF/vucjApU85r7HjPTvYJVKu2Hnm g4KE6WE26cfnBS8TaiIJI97Xt9z/VUdymNc0Ds4XyX8t2KKjUQjhyh3/LDxQ3zma 3LRv9oe3Gy+VGiBSiYmXYWBKQ4rR9DmwR7Xh2Wq6l5dCkqJyIIg= -----END CERTIFICATE-----Generated at Sat Aug 9 05:50:53 2025 by rpki-client