$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: 5AySWllWE84m38sQwdrDapBcwh9NEeO/q9a6eUxAlK8= Subject key identifier: C7:4F:3E:87:6B:52:0F:A8:9C:73:FD:0D:20:8E:27:8A:58:36:B2:FA Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 5307274808F1123CE64DF8E3300F78CBE0514B5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01DE Signing time: Tue 05 Aug 2025 22:30:36 +0000 Manifest this update: Tue 05 Aug 2025 22:25:36 +0000 Manifest next update: Sat 09 Aug 2025 03:18:36 +0000 Files and hashes: 1: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: YFzQ6vWoGJhqRLRShzJgTnzB4u0P0Hgv+ZHl8vxM3Tc=) 2: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 3: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 4: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 5: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:07:27:48:08:f1:12:3c:e6:4d:f8:e3:30:0f:78:cb:e0:51:4b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Aug 5 22:25:36 2025 GMT Not After : Aug 9 03:18:36 2025 GMT Subject: CN=C74F3E876B520FA89C73FD0D208E278A5836B2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1b:e2:88:e5:2d:11:88:ce:2d:8e:01:cb:5b: 2c:5a:70:84:1e:08:dc:0e:30:e6:cf:c6:85:6f:34: d0:bf:e6:62:05:61:9e:2f:7f:9a:5b:cb:73:1c:19: 7c:da:2f:84:ed:37:9d:31:66:20:d2:c7:6d:2f:e7: ff:4c:98:36:bd:3d:07:19:ab:37:b7:16:7e:22:3d: 4f:67:54:7d:2b:20:e6:3f:ce:48:86:19:95:90:78: c9:ff:a6:cf:76:24:04:e8:2c:9b:7c:6b:72:fa:cb: 8d:eb:79:8c:5b:be:a6:a0:3d:df:5b:22:6a:0a:c9: 8b:36:39:fe:f5:5b:9a:b4:ee:6d:e5:47:d9:07:9f: 7e:1f:9d:eb:72:8c:bf:ff:a1:f2:2b:d3:c1:80:bf: 5e:f4:a6:10:35:ed:17:d1:99:f8:04:bc:fd:79:bd: 0f:37:55:c1:90:2e:b0:5b:77:f2:39:fa:19:00:28: dd:d8:b3:46:82:a1:91:4f:9f:af:70:a0:22:15:c8: 7f:d7:f1:08:f6:79:14:90:a0:68:46:e5:07:ed:41: 2a:80:c7:82:66:13:23:1d:f1:f0:d3:ef:4f:5b:37: 57:46:c6:02:43:75:ce:69:13:c8:31:24:fb:a1:cb: 31:d9:da:fb:bb:25:0a:e8:74:5b:70:ff:15:8e:5b: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:3E:87:6B:52:0F:A8:9C:73:FD:0D:20:8E:27:8A:58:36:B2:FA X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:20:88:53:4e:82:84:63:55:9b:3b:02:71:10:36:e0:7b: 8f:6e:cf:54:f2:47:47:d5:de:08:4d:3e:63:f0:0e:9d:2c:20: fa:3f:b4:23:dc:2b:47:0c:e6:c8:74:70:ba:2f:50:56:4e:22: 1f:f7:ff:50:11:43:33:13:13:04:24:3b:5e:b4:5d:68:cb:7f: 04:9c:10:5c:9d:6c:a8:28:21:00:d1:d9:5c:20:a6:ab:a2:24: 3c:8f:36:d3:69:37:86:d8:65:cd:32:4e:c2:ca:2f:05:69:e6: 2c:a0:c9:0f:71:51:3b:a5:fb:d8:b5:d9:d8:ec:09:58:04:c8: e5:84:e1:d4:65:b7:cd:62:54:8e:aa:32:67:2f:28:e6:9e:83: 70:91:60:99:91:1a:d6:ef:e9:ed:e9:72:7b:d5:11:05:ac:51: fd:53:a5:06:f7:1e:68:af:13:c8:6c:4b:06:b7:70:a1:c6:fe: 8f:68:de:c1:23:1d:a4:ad:c2:e7:9f:f5:a6:c5:43:54:6a:2b: 7d:13:f2:c3:c2:61:36:18:06:ee:ae:ba:88:e9:e4:d2:44:ee: 1a:99:f1:28:1c:31:64:3f:17:db:88:1a:63:54:3f:4f:dd:df: e4:dd:0b:eb:7e:53:eb:75:71:2e:ea:69:ba:15:4a:24:fd:b5: d7:a6:40:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwcnSAjxEjzmTfjjMA94y+BRS10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA4MDUyMjI1MzZaFw0yNTA4MDkwMzE4MzZaMDMxMTAvBgNV BAMTKEM3NEYzRTg3NkI1MjBGQTg5QzczRkQwRDIwOEUyNzhBNTgzNkIyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuG+KI5S0RiM4tjgHLWyxacIQe CNwOMObPxoVvNNC/5mIFYZ4vf5pby3McGXzaL4TtN50xZiDSx20v5/9MmDa9PQcZ qze3Fn4iPU9nVH0rIOY/zkiGGZWQeMn/ps92JAToLJt8a3L6y43reYxbvqagPd9b ImoKyYs2Of71W5q07m3lR9kHn34fnetyjL//ofIr08GAv170phA17RfRmfgEvP15 vQ83VcGQLrBbd/I5+hkAKN3Ys0aCoZFPn69woCIVyH/X8Qj2eRSQoGhG5QftQSqA x4JmEyMd8fDT709bN1dGxgJDdc5pE8gxJPuhyzHZ2vu7JQrodFtw/xWOW0hfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx08+h2tSD6icc/0NII4nilg2svowHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtdIIhTToKEY1WbOwJxEDbge49uz1TyR0fV 3ghNPmPwDp0sIPo/tCPcK0cM5sh0cLovUFZOIh/3/1ARQzMTEwQkO160XWjLfwSc EFydbKgoIQDR2VwgpquiJDyPNtNpN4bYZc0yTsLKLwVp5iygyQ9xUTul+9i12djs CVgEyOWE4dRlt81iVI6qMmcvKOaeg3CRYJmRGtbv6e3pcnvVEQWsUf1TpQb3Hmiv E8hsSwa3cKHG/o9o3sEjHaStwuef9abFQ1RqK30T8sPCYTYYBu6uuojp5NJE7hqZ 8SgcMWQ/F9uIGmNUP0/d3+TdC+t+U+t1cS7qaboVSiT9tdemQOM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:07 2025 by rpki-client