$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft File: 170979C0E31958FA76259F360B8405233C40BA7A.mft (raw, json) Hash identifier: vO58LjyXBlBQue6OI3rveB0oyUaPJOOG7W/HTr/bfrI= Subject key identifier: 67:11:D8:EB:CB:75:EE:AF:D8:93:36:F2:3F:CC:91:C3:99:6B:A3:79 Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A Certificate serial: 22F55ED3F6545EFB18606FB1333C802B20F432F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft Manifest number: C0 Signing time: Tue 05 Aug 2025 00:40:02 +0000 Manifest this update: Tue 05 Aug 2025 00:35:02 +0000 Manifest next update: Fri 08 Aug 2025 06:42:02 +0000 Files and hashes: 1: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA=) 2: 170979C0E31958FA76259F360B8405233C40BA7A.crl (hash: HFX48chfcsBoqEtn5dCVC+O5hstlxUhZnYY+Yft4OHU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f5:5e:d3:f6:54:5e:fb:18:60:6f:b1:33:3c:80:2b:20:f4:32:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A Validity Not Before: Aug 5 00:35:02 2025 GMT Not After : Aug 8 06:42:02 2025 GMT Subject: CN=6711D8EBCB75EEAFD89336F23FCC91C3996BA379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:f3:b1:5f:17:52:5b:ef:01:a7:4b:a4:18: 3c:22:e8:77:ea:02:40:6b:00:fc:b8:35:52:8e:eb: 44:69:10:63:60:e8:b8:6d:4d:5e:e0:39:3e:94:87: 7d:ba:4d:2a:13:b7:1e:2c:48:b7:2b:71:61:3a:82: c8:f4:90:98:b4:e6:a3:21:4f:cd:a7:91:db:b5:3c: 8d:81:55:2d:24:1d:fc:e4:fc:fb:28:45:8b:03:62: bb:24:96:de:98:23:03:e8:20:9f:01:12:dd:98:24: b9:2b:39:9b:17:da:19:e5:69:4b:c1:0f:59:ef:8f: 83:b3:00:a1:10:45:a8:5d:92:ab:66:8d:2f:33:e0: 85:31:4b:15:43:2a:bb:9d:bc:18:a0:2c:6d:bd:2e: f9:5a:08:8a:1d:fc:15:66:4e:9c:6a:89:0d:0e:9d: 04:c6:75:92:a4:d9:13:ca:40:90:a2:8c:1f:cd:d0: b5:4b:da:8e:c1:9e:3b:89:56:32:4f:d9:f3:51:f0: fe:bf:b1:96:f6:87:3e:37:ea:2d:0a:2d:35:e5:7f: c1:3a:b1:aa:7b:a9:a0:ff:5d:e1:d0:62:c5:f4:49: 87:d5:e7:6e:57:ce:36:d2:14:44:4f:e1:52:70:6c: f1:ed:a8:c1:93:5a:13:99:6d:88:e8:c2:c1:e3:5e: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:D8:EB:CB:75:EE:AF:D8:93:36:F2:3F:CC:91:C3:99:6B:A3:79 X509v3 Authority Key Identifier: keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f5:f9:c8:33:63:5b:95:cb:d4:d5:40:fb:73:a0:b3:c8:78: 3c:10:ed:2e:73:af:f0:ca:3c:2b:d6:1e:db:76:3f:7d:c4:ed: f3:76:e4:43:83:ea:a2:ab:7b:ad:a0:61:16:97:cb:c8:8a:ae: 7b:76:0f:24:a2:c0:f8:0b:1e:0a:a0:aa:87:79:21:9a:e5:d0: 7b:02:41:42:b6:8c:40:f2:92:99:86:cc:d0:4e:08:42:de:42: 79:9f:26:e0:ba:bb:98:cb:3c:39:50:e1:f5:2b:93:04:84:ee: 2d:c8:35:a3:6f:67:e6:c4:72:2d:99:dc:f1:cb:d0:23:c5:46: e9:e1:6a:27:c6:9e:9f:cf:d5:d5:66:8a:36:a4:27:76:d4:45: fb:07:5c:ae:8f:f5:b4:7a:67:4d:89:2e:ed:aa:cf:e1:db:db: d2:84:33:a7:38:30:1f:0f:71:c0:f5:7b:24:b2:2a:77:e2:cd: bd:de:6f:61:a3:ab:89:d5:9b:05:4f:8e:4a:8d:e5:28:bd:b6: af:bc:d3:b1:76:ce:99:c3:a1:c0:69:7f:7b:cb:51:9c:b3:70: 76:be:5a:46:9b:7d:f1:c0:63:4d:a3:79:9f:c0:ef:d7:05:7c: 4a:94:70:cc:11:f1:df:bf:76:68:25:0a:98:65:94:b3:63:92: 6d:b4:4f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvVe0/ZUXvsYYG+xMzyAKyD0MvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMz QzQwQkE3QTAeFw0yNTA4MDUwMDM1MDJaFw0yNTA4MDgwNjQyMDJaMDMxMTAvBgNV BAMTKDY3MTFEOEVCQ0I3NUVFQUZEODkzMzZGMjNGQ0M5MUMzOTk2QkEzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SvOxXxdSW+8Bp0ukGDwi6Hfq AkBrAPy4NVKO60RpEGNg6LhtTV7gOT6Uh326TSoTtx4sSLcrcWE6gsj0kJi05qMh T82nkdu1PI2BVS0kHfzk/PsoRYsDYrsklt6YIwPoIJ8BEt2YJLkrOZsX2hnlaUvB D1nvj4OzAKEQRahdkqtmjS8z4IUxSxVDKrudvBigLG29LvlaCIod/BVmTpxqiQ0O nQTGdZKk2RPKQJCijB/N0LVL2o7BnjuJVjJP2fNR8P6/sZb2hz436i0KLTXlf8E6 sap7qaD/XeHQYsX0SYfV525XzjbSFERP4VJwbPHtqMGTWhOZbYjowsHjXot1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxHY68t17q/YkzbyP8yRw5lro3kwHwYDVR0j BBgwFoAUFwl5wOMZWPp2JZ82C4QFIzxAunowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTkyYmYyNi1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMC8xNzA5NzlDMEUz MTk1OEZBNzYyNTlGMzYwQjg0MDUyMzNDNDBCQTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMzQzQw QkE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli MzMtZWEzYTJhZjU1N2YwLzAvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1 MjMzQzQwQkE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv1+cgzY1uVy9TVQPtzoLPIeDwQ7S5zr/DK PCvWHtt2P33E7fN25EOD6qKre62gYRaXy8iKrnt2DySiwPgLHgqgqod5IZrl0HsC QUK2jEDykpmGzNBOCELeQnmfJuC6u5jLPDlQ4fUrkwSE7i3INaNvZ+bEci2Z3PHL 0CPFRunhaifGnp/P1dVmijakJ3bURfsHXK6P9bR6Z02JLu2qz+Hb29KEM6c4MB8P ccD1eySyKnfizb3eb2Gjq4nVmwVPjkqN5Si9tq+807F2zpnDocBpf3vLUZyzcHa+ WkabffHAY02jeZ/A79cFfEqUcMwR8d+/dmglCphllLNjkm20T2g= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:45 2025 by rpki-client