$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: S26u0m5lqugON9ff7cAFm5orNu+7g72iKC79ftjeWhI= Subject key identifier: E0:BC:27:74:02:8C:04:74:9E:34:5A:68:88:8D:67:9D:F6:3E:39:70 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 3EF6777C75C987373ECAE6EF4693EF367A488DEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: 68 Signing time: Fri 08 Aug 2025 13:52:23 +0000 Manifest this update: Fri 08 Aug 2025 13:47:23 +0000 Manifest next update: Mon 11 Aug 2025 16:13:23 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=) 3: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: j1Aj5gSbjY6iDuj7vnYUpM/4Iy/0KaEY2KKcvdcFB2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f6:77:7c:75:c9:87:37:3e:ca:e6:ef:46:93:ef:36:7a:48:8d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Aug 8 13:47:23 2025 GMT Not After : Aug 11 16:13:23 2025 GMT Subject: CN=E0BC2774028C04749E345A68888D679DF63E3970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:c5:81:22:88:05:cf:b9:3a:b2:c0:12:a0: ac:25:8c:58:96:15:eb:a6:80:f0:4f:8e:b0:f5:f4: e4:75:a1:4b:f4:4c:98:89:ab:1d:76:67:31:05:1f: df:34:3e:ff:c7:53:7b:20:90:1e:17:1e:19:ec:49: 3a:e4:2b:e6:45:19:45:db:95:a4:2d:8e:65:50:04: 73:06:0b:07:6d:1b:51:18:8e:3b:68:4d:4c:ae:29: 3a:09:15:02:c9:4c:ab:f2:67:f7:c8:7a:99:c1:04: 83:72:fd:16:05:90:f8:b5:d4:c0:cb:75:a4:c2:7c: 97:2a:5e:12:46:10:a8:e8:1d:a2:df:be:1a:41:cf: de:1d:0a:a7:56:69:19:f2:48:ff:f9:05:52:d1:c6: 79:d1:65:e1:5b:44:b9:76:31:50:6d:35:c0:4b:01: 98:6d:de:65:f1:31:2b:a1:41:62:93:16:9a:bc:09: 17:88:fb:44:e0:35:71:03:de:f0:e7:29:d0:58:f9: ca:64:69:71:7c:62:81:3d:ca:fb:c4:37:51:0d:b6: 43:4d:c1:cd:5c:62:4d:15:c5:5c:e6:02:03:fd:2f: 98:87:b5:1f:d2:e9:73:44:23:87:25:ca:00:22:5c: 7f:d2:4c:ef:9d:5a:32:98:83:cd:39:fe:ad:c9:64: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:27:74:02:8C:04:74:9E:34:5A:68:88:8D:67:9D:F6:3E:39:70 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:64:38:0d:53:02:cc:1f:86:84:c9:7c:71:ce:2e:54:b4: 16:93:e6:0c:64:dd:57:3a:dc:0c:7f:7c:c0:00:a8:7c:b7:a0: 8e:d9:67:02:44:4e:fc:da:a6:37:67:24:bc:04:5b:a9:d3:10: 5d:72:b3:c3:d0:ee:a2:a7:62:97:84:66:d1:bd:90:0e:c1:c0: df:87:68:f2:5f:e4:32:ab:7a:ff:c3:37:e1:dd:bc:53:3f:2d: 4f:e4:cc:71:4a:7f:a0:a2:49:9a:93:80:98:8c:66:4a:c8:fe: bf:87:7b:2e:f6:74:71:f4:f0:14:08:9a:19:0d:67:18:08:46: d6:c2:11:d7:f1:d2:08:f8:1c:47:90:68:d5:62:d2:b6:4c:c5: d1:62:24:56:5e:61:f6:cd:18:d4:a5:c7:fd:b1:a0:37:78:b0: ad:0f:76:d6:4f:ae:53:ad:93:10:b5:55:3b:56:a4:be:8b:63: f4:3a:fc:41:a4:56:3b:33:82:20:5a:2e:4a:4f:67:4b:80:1a: 29:dd:54:4c:04:65:07:e0:0c:bd:1d:14:ec:66:23:15:59:8c: fa:ed:70:ea:a3:22:3b:48:12:b0:2e:c8:39:37:5d:66:b2:7a: c4:e9:1f:21:fd:60:4d:4c:b6:7d:18:37:fb:85:3b:ff:fd:ad: 64:df:3b:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvZ3fHXJhzc+yubvRpPvNnpIjeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTA4MDgxMzQ3MjNaFw0yNTA4MTExNjEzMjNaMDMxMTAvBgNV BAMTKEUwQkMyNzc0MDI4QzA0NzQ5RTM0NUE2ODg4OEQ2NzlERjYzRTM5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelMWBIogFz7k6ssASoKwljFiW FeumgPBPjrD19OR1oUv0TJiJqx12ZzEFH980Pv/HU3sgkB4XHhnsSTrkK+ZFGUXb laQtjmVQBHMGCwdtG1EYjjtoTUyuKToJFQLJTKvyZ/fIepnBBINy/RYFkPi11MDL daTCfJcqXhJGEKjoHaLfvhpBz94dCqdWaRnySP/5BVLRxnnRZeFbRLl2MVBtNcBL AZht3mXxMSuhQWKTFpq8CReI+0TgNXED3vDnKdBY+cpkaXF8YoE9yvvEN1ENtkNN wc1cYk0VxVzmAgP9L5iHtR/S6XNEI4clygAiXH/STO+dWjKYg805/q3JZIgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4LwndAKMBHSeNFpoiI1nnfY+OXAwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0bZDgNUwLMH4aEyXxxzi5UtBaT5gxk3Vc6 3Ax/fMAAqHy3oI7ZZwJETvzapjdnJLwEW6nTEF1ys8PQ7qKnYpeEZtG9kA7BwN+H aPJf5DKrev/DN+HdvFM/LU/kzHFKf6CiSZqTgJiMZkrI/r+Hey72dHH08BQImhkN ZxgIRtbCEdfx0gj4HEeQaNVi0rZMxdFiJFZeYfbNGNSlx/2xoDd4sK0PdtZPrlOt kxC1VTtWpL6LY/Q6/EGkVjszgiBaLkpPZ0uAGindVEwEZQfgDL0dFOxmIxVZjPrt cOqjIjtIErAuyDk3XWayesTpHyH9YE1Mtn0YN/uFO//9rWTfOzs= -----END CERTIFICATE-----Generated at Sat Aug 9 20:35:06 2025 by rpki-client