$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: Gswyeg0TKtk5opNruYk4IOSNbWnZQzyEPbRCUE+pzXI= Subject key identifier: D4:B8:A7:40:DC:27:E1:9F:A6:E0:6C:D2:48:FC:73:87:17:D8:B8:73 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 11DC1F142A6BA32E0ACDF33D640513B3DC61B3FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: B4 Signing time: Tue 05 Aug 2025 10:31:36 +0000 Manifest this update: Tue 05 Aug 2025 10:26:36 +0000 Manifest next update: Fri 08 Aug 2025 12:01:36 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: UJUVyc6I2h3H7qdQjq0Mbgv4QMX7vrjdlEXS6+wDmW0=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dc:1f:14:2a:6b:a3:2e:0a:cd:f3:3d:64:05:13:b3:dc:61:b3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Aug 5 10:26:36 2025 GMT Not After : Aug 8 12:01:36 2025 GMT Subject: CN=D4B8A740DC27E19FA6E06CD248FC738717D8B873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:5a:ac:2d:da:a4:65:c8:66:29:6a:1f:83: 42:5a:6b:78:43:00:d9:3f:ca:eb:e6:dd:16:62:e0: 3d:43:1c:45:97:c4:e7:2d:d7:3b:5b:b6:7c:0e:25: 3e:87:5d:b1:4e:1e:7d:3b:3e:4b:13:22:d5:a2:fa: e3:80:a4:69:b0:60:4f:a1:77:ce:83:52:ce:69:95: a2:8d:ee:a1:7e:17:78:91:fb:9f:bb:d1:e5:ba:a7: fc:21:c7:46:a9:4f:c9:29:b1:81:6f:60:da:67:33: d3:bc:18:d0:55:c0:f3:d8:de:fe:03:bc:38:fd:b2: 6a:18:35:55:7a:d9:67:e7:e7:e2:5a:49:68:3c:51: 33:84:b3:ee:6e:96:b9:c1:e3:fa:75:f1:23:e4:e9: b6:18:70:02:11:42:90:5a:a2:ff:b8:93:46:5d:f4: 9c:9f:f4:9a:8b:50:f5:1b:7c:a8:7e:7d:58:af:96: 06:23:bb:3d:f4:20:6b:0d:4d:ba:c0:d3:f9:02:a2: 2f:39:d8:be:37:27:ff:95:16:a2:23:e5:a9:74:44: 95:5a:7f:5a:f4:f1:24:d5:b2:5e:51:6f:e3:53:ec: cf:aa:34:90:3d:57:fb:82:d1:5d:c5:a5:ac:56:06: 5c:88:64:7f:6e:61:58:91:9f:de:d4:a6:ad:42:2b: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B8:A7:40:DC:27:E1:9F:A6:E0:6C:D2:48:FC:73:87:17:D8:B8:73 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:14:c0:4e:66:ba:05:0d:2b:cb:52:45:1a:ef:77:b2:62:60: cb:e3:a6:76:73:8a:36:cd:7d:69:bc:4f:68:4f:4f:bb:de:7d: 18:4b:c5:6b:00:ff:b1:b4:92:4f:1d:04:6f:89:4d:7b:5e:0d: 52:6b:df:08:43:58:f0:6a:18:1c:6a:f8:b5:6f:a3:9a:f5:18: 11:e8:ee:53:60:ea:4b:57:2f:19:d0:5a:76:b7:59:31:f6:d5: fa:3e:7d:b5:e5:7c:b5:1c:e6:71:2f:e0:4b:97:f7:ae:af:ed: 85:85:31:12:68:b1:73:e1:bc:c9:61:0a:17:90:12:9a:d4:99: 31:f4:01:08:8b:61:d0:62:bf:55:0e:d1:fc:4e:25:ec:ab:ec: be:03:ad:55:71:8f:bb:14:63:33:26:eb:7f:48:b0:2c:48:1d: 19:09:bb:f4:64:99:0b:18:d7:00:15:d0:31:82:c7:f6:74:60: e9:be:ca:02:94:96:64:1c:e7:0d:4a:dc:db:64:96:12:c6:6b: 48:db:e0:11:fb:eb:96:c5:9f:03:2d:e7:60:cd:c4:d3:27:3e: 2e:46:f4:08:51:d8:8a:7b:54:5c:8b:67:c5:27:2d:13:1d:59: db:58:f1:5c:e1:85:4f:c7:d2:99:e8:9b:4d:71:fa:3e:6b:b0: cd:90:bb:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdwfFCproy4KzfM9ZAUTs9xhs/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTA4MDUxMDI2MzZaFw0yNTA4MDgxMjAxMzZaMDMxMTAvBgNV BAMTKEQ0QjhBNzQwREMyN0UxOUZBNkUwNkNEMjQ4RkM3Mzg3MTdEOEI4NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQalqsLdqkZchmKWofg0Jaa3hD ANk/yuvm3RZi4D1DHEWXxOct1ztbtnwOJT6HXbFOHn07PksTItWi+uOApGmwYE+h d86DUs5plaKN7qF+F3iR+5+70eW6p/whx0apT8kpsYFvYNpnM9O8GNBVwPPY3v4D vDj9smoYNVV62Wfn5+JaSWg8UTOEs+5ulrnB4/p18SPk6bYYcAIRQpBaov+4k0Zd 9Jyf9JqLUPUbfKh+fVivlgYjuz30IGsNTbrA0/kCoi852L43J/+VFqIj5al0RJVa f1r08STVsl5Rb+NT7M+qNJA9V/uC0V3FpaxWBlyIZH9uYViRn97Upq1CK4K3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LinQNwn4Z+m4GzSSPxzhxfYuHMwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcUwE5mugUNK8tSRRrvd7JiYMvjpnZzijbN fWm8T2hPT7vefRhLxWsA/7G0kk8dBG+JTXteDVJr3whDWPBqGBxq+LVvo5r1GBHo 7lNg6ktXLxnQWna3WTH21fo+fbXlfLUc5nEv4EuX966v7YWFMRJosXPhvMlhCheQ EprUmTH0AQiLYdBiv1UO0fxOJeyr7L4DrVVxj7sUYzMm639IsCxIHRkJu/RkmQsY 1wAV0DGCx/Z0YOm+ygKUlmQc5w1K3NtklhLGa0jb4BH765bFnwMt52DNxNMnPi5G 9AhR2Ip7VFyLZ8UnLRMdWdtY8VzhhU/H0pnom01x+j5rsM2Qu08= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:32 2025 by rpki-client