$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: +48snQGm53b+EFeyA9/DOYA5Vb95iD2MsbnEQhRdz/Q= Subject key identifier: 9C:A6:EE:FA:66:56:3C:5E:C1:D1:41:01:E9:75:60:51:AF:23:F2:20 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 40E17B1BCC1E10D22A2BF6FEA2665F36D6EF48A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: CD Signing time: Mon 04 Aug 2025 13:51:03 +0000 Manifest this update: Mon 04 Aug 2025 13:46:03 +0000 Manifest next update: Thu 07 Aug 2025 23:03:03 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) 2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 4: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: cTLAsUh5pIX2RePmIhvCHNxghlYwOSnLZNFl0jYUtqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e1:7b:1b:cc:1e:10:d2:2a:2b:f6:fe:a2:66:5f:36:d6:ef:48:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Aug 4 13:46:03 2025 GMT Not After : Aug 7 23:03:03 2025 GMT Subject: CN=9CA6EEFA66563C5EC1D14101E9756051AF23F220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:7e:48:fc:13:16:ee:77:bf:fc:de:33:38: 04:ff:e8:6f:e5:da:fa:1b:a4:90:80:78:6c:25:0d: 99:e3:c4:a3:26:80:2e:3a:5e:d7:e7:41:e5:10:b3: 7b:7e:07:a0:60:51:53:de:ae:df:37:b4:9e:da:bf: 87:3b:fd:2b:4e:80:71:3e:d5:56:b4:26:71:12:14: 6a:cb:cc:59:5e:14:16:30:5d:31:10:8c:f9:06:3a: 7c:51:fa:e1:dd:25:6f:ef:5a:b9:45:85:cc:58:8a: 75:f8:a0:e2:99:79:6d:43:9f:e9:d3:8a:54:55:1c: d7:31:de:23:79:7f:88:ff:ed:a9:4f:6f:52:f5:f3: 19:6a:90:33:c8:2e:9c:4f:45:c1:a4:c0:b6:f4:31: 6f:ea:af:c4:4b:17:7a:96:2c:bb:9f:40:77:fc:9a: 20:0a:aa:be:65:16:ff:fe:0a:7c:63:1d:ec:3a:f9: c0:e3:60:e4:d2:87:32:0a:22:3c:90:39:1f:e7:d4: 4c:34:36:10:1e:86:f0:f7:6f:fe:6e:e9:68:7b:0f: 6c:f4:ff:9b:3e:34:13:cb:ad:78:5b:ed:a0:d6:54: eb:4b:fb:6c:b5:d9:3e:05:55:1c:b4:84:a5:70:47: 2d:d4:08:65:d2:6f:ee:69:cf:57:e4:0d:c7:79:36: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A6:EE:FA:66:56:3C:5E:C1:D1:41:01:E9:75:60:51:AF:23:F2:20 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e0:c6:bc:8a:f0:35:2b:97:08:ae:67:f6:e4:57:e8:a8:6a: 42:13:c8:c1:2b:95:fd:95:93:5f:5e:c4:6f:57:3b:5f:68:e1: ff:46:a1:60:30:a7:28:99:6e:3f:eb:e5:d3:94:cb:f7:ca:ed: 1d:39:4f:47:d7:d8:50:e4:0b:38:15:0f:1a:73:23:fe:f0:d3: 71:2d:35:e1:52:91:a0:b7:45:5d:bb:b4:a4:64:68:78:3f:30: ff:30:02:15:23:55:69:e1:58:95:af:84:f1:9c:c4:e0:06:2b: 48:5d:1c:c3:3a:8a:70:d9:2b:ca:a2:38:f0:c9:08:a6:2c:b4: f1:82:4b:d7:01:bd:ce:5d:59:6b:99:3f:cc:66:98:e7:69:56: d7:25:78:6e:e5:d4:3c:ba:df:1c:ea:ec:5b:45:a3:61:a6:9f: 8a:d8:64:fc:4a:91:5b:6d:ed:74:4c:19:a9:a9:82:15:64:85: f7:dc:a7:4c:a4:72:5c:cc:62:1e:44:e9:c1:7d:2e:72:1d:a2: 08:24:ec:92:dd:0b:5f:3f:bf:41:21:be:73:70:0c:4c:f8:96: 65:15:d7:e0:67:41:c5:df:f1:b5:6c:02:5a:2e:0c:8a:aa:69: 36:d0:fe:fe:e8:4b:df:d7:ed:95:84:5a:22:22:9b:08:8f:3a: 30:5a:81:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOF7G8weENIqK/b+omZfNtbvSKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTA4MDQxMzQ2MDNaFw0yNTA4MDcyMzAzMDNaMDMxMTAvBgNV BAMTKDlDQTZFRUZBNjY1NjNDNUVDMUQxNDEwMUU5NzU2MDUxQUYyM0YyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK935I/BMW7ne//N4zOAT/6G/l 2vobpJCAeGwlDZnjxKMmgC46XtfnQeUQs3t+B6BgUVPert83tJ7av4c7/StOgHE+ 1Va0JnESFGrLzFleFBYwXTEQjPkGOnxR+uHdJW/vWrlFhcxYinX4oOKZeW1Dn+nT ilRVHNcx3iN5f4j/7alPb1L18xlqkDPILpxPRcGkwLb0MW/qr8RLF3qWLLufQHf8 miAKqr5lFv/+CnxjHew6+cDjYOTShzIKIjyQOR/n1Ew0NhAehvD3b/5u6Wh7D2z0 /5s+NBPLrXhb7aDWVOtL+2y12T4FVRy0hKVwRy3UCGXSb+5pz1fkDcd5Nt1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnKbu+mZWPF7B0UEB6XVgUa8j8iAwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXgxryK8DUrlwiuZ/bkV+ioakITyMErlf2V k19exG9XO19o4f9GoWAwpyiZbj/r5dOUy/fK7R05T0fX2FDkCzgVDxpzI/7w03Et NeFSkaC3RV27tKRkaHg/MP8wAhUjVWnhWJWvhPGcxOAGK0hdHMM6inDZK8qiOPDJ CKYstPGCS9cBvc5dWWuZP8xmmOdpVtcleG7l1Dy63xzq7FtFo2Gmn4rYZPxKkVtt 7XRMGampghVkhffcp0ykclzMYh5E6cF9LnIdoggk7JLdC18/v0EhvnNwDEz4lmUV 1+BnQcXf8bVsAlouDIqqaTbQ/v7oS9/X7ZWEWiIimwiPOjBagTA= -----END CERTIFICATE-----Generated at Tue Aug 5 22:57:51 2025 by rpki-client