$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: GHoPXqgtLnoIt6GNVvGIbLkWt2VsmCzvUjUtK6SoEbs= Subject key identifier: B7:02:92:54:06:AE:70:17:3A:0E:21:49:4E:AF:B2:EE:DA:4F:3E:53 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 0D23E80CE779B59E27505319C4ACF95ACBFF675D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0502 Signing time: Thu 21 Aug 2025 21:11:53 +0000 Manifest this update: Thu 21 Aug 2025 21:06:53 +0000 Manifest next update: Mon 25 Aug 2025 07:55:53 +0000 Files and hashes: 1: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 2: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: nwSSx/8Nc/6ioGyhTJLZlZrC0VTP43h8Os305t3kXlA=) 3: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:23:e8:0c:e7:79:b5:9e:27:50:53:19:c4:ac:f9:5a:cb:ff:67:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Aug 21 21:06:53 2025 GMT Not After : Aug 25 07:55:53 2025 GMT Subject: CN=B702925406AE70173A0E21494EAFB2EEDA4F3E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:40:02:c0:65:1e:72:ea:f3:c2:f6:44:f7: 6f:96:6f:b6:f2:f9:9f:f8:26:0e:5a:a9:d9:42:87: 16:cf:af:ae:69:ce:7b:53:a7:41:09:bd:1c:36:2d: da:40:4a:47:5a:91:18:91:c7:cb:38:72:29:64:1b: 3d:de:1b:a4:16:2e:31:93:ec:15:64:e6:fb:7f:b5: a5:28:6f:66:33:2b:8f:ca:e1:2c:d8:e8:27:2a:93: ed:d3:8d:f6:e0:04:17:59:b8:79:8e:94:91:1c:7b: 63:3a:64:5b:75:a3:bd:6e:20:24:0f:57:cb:88:0f: 3e:3a:27:be:25:51:b4:41:d8:1f:cc:d4:e7:eb:d6: 51:c8:e6:d6:33:0d:58:49:d2:6c:2d:cc:28:22:e0: bd:82:30:a6:24:05:8d:49:2b:c7:45:2a:7d:9d:d9: b2:1e:da:84:ce:d8:32:dc:49:9a:c5:98:ac:81:3f: 7e:b3:6b:ef:a7:9a:b1:8d:f5:7b:cb:4c:aa:41:24: 6b:55:36:ac:1c:e1:68:53:a8:db:ca:9b:3b:34:b0: 93:26:ed:46:eb:1b:a6:80:6d:ca:dd:d4:1d:56:11: 47:9e:10:7b:5f:f0:97:d8:0b:82:ca:fc:42:a2:c0: 11:5d:84:3e:9a:16:e5:ac:f0:99:a5:24:9d:10:d8: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:02:92:54:06:AE:70:17:3A:0E:21:49:4E:AF:B2:EE:DA:4F:3E:53 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b0:fa:7b:e6:0b:e3:15:d0:2e:b8:3e:2b:b0:cc:8b:4e:e4: 6a:07:c9:f0:fb:d8:2e:b2:6c:9c:bc:17:ed:f9:16:be:bf:65: f2:61:c2:34:27:b7:6f:36:7e:1f:fc:09:c6:3e:9e:6e:41:5b: 24:74:ab:50:a2:9e:7c:38:e3:d6:33:86:7e:85:dc:09:01:67: 94:17:3f:c5:56:5c:d7:74:f8:28:89:09:07:95:b2:c1:35:02: e3:66:34:15:3e:8f:34:eb:ce:3a:e2:f4:4d:dc:01:8d:a8:20: 71:3d:e1:41:70:5e:5f:57:af:17:cb:53:01:af:c9:a5:e7:11: 96:0f:ed:13:72:0b:9a:4a:81:d7:5c:6a:83:b0:ac:e4:9e:43: 54:51:96:f0:ca:9a:ad:d1:2f:61:9c:fb:0a:d0:8b:17:9b:05: 84:7d:77:df:c4:74:2a:98:28:49:f6:e7:ac:66:02:5b:b8:bb: 63:4c:6e:99:46:a3:ef:c2:4f:73:aa:d9:7c:ce:8a:df:20:f6: 5c:70:d5:3f:9f:1f:56:b5:33:7b:b9:43:db:14:1a:db:8e:36: de:02:c7:09:9a:a3:c8:ed:cd:0e:ce:a7:e8:bd:c4:20:89:c0: 92:46:48:7d:6f:42:06:73:d7:57:76:25:d4:0b:e9:36:00:9c: f3:00:21:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSPoDOd5tZ4nUFMZxKz5Wsv/Z10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTA4MjEyMTA2NTNaFw0yNTA4MjUwNzU1NTNaMDMxMTAvBgNV BAMTKEI3MDI5MjU0MDZBRTcwMTczQTBFMjE0OTRFQUZCMkVFREE0RjNFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3kACwGUecurzwvZE92+Wb7by +Z/4Jg5aqdlChxbPr65pzntTp0EJvRw2LdpASkdakRiRx8s4cilkGz3eG6QWLjGT 7BVk5vt/taUob2YzK4/K4SzY6Ccqk+3TjfbgBBdZuHmOlJEce2M6ZFt1o71uICQP V8uIDz46J74lUbRB2B/M1Ofr1lHI5tYzDVhJ0mwtzCgi4L2CMKYkBY1JK8dFKn2d 2bIe2oTO2DLcSZrFmKyBP36za++nmrGN9XvLTKpBJGtVNqwc4WhTqNvKmzs0sJMm 7UbrG6aAbcrd1B1WEUeeEHtf8JfYC4LK/EKiwBFdhD6aFuWs8JmlJJ0Q2L2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwKSVAaucBc6DiFJTq+y7tpPPlMwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSw+nvmC+MV0C64PiuwzItO5GoHyfD72C6y bJy8F+35Fr6/ZfJhwjQnt282fh/8CcY+nm5BWyR0q1Cinnw449Yzhn6F3AkBZ5QX P8VWXNd0+CiJCQeVssE1AuNmNBU+jzTrzjri9E3cAY2oIHE94UFwXl9XrxfLUwGv yaXnEZYP7RNyC5pKgddcaoOwrOSeQ1RRlvDKmq3RL2Gc+wrQixebBYR9d9/EdCqY KEn256xmAlu4u2NMbplGo+/CT3Oq2XzOit8g9lxw1T+fH1a1M3u5Q9sUGtuONt4C xwmao8jtzQ7Op+i9xCCJwJJGSH1vQgZz11d2JdQL6TYAnPMAIXA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:27 2025 by rpki-client