$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: S5jbaEDAV+ij8CV6AFneY46H6tR2fiR8c3TT7sXRywY= Subject key identifier: B8:62:96:02:C8:22:0F:17:5C:1D:AC:6F:D0:A4:CF:36:FB:E2:CD:C6 Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 675BD07D02DDEDAD2C0B3D92A192DD1BF995572B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: C4 Signing time: Thu 21 Aug 2025 21:51:57 +0000 Manifest this update: Thu 21 Aug 2025 21:46:57 +0000 Manifest next update: Mon 25 Aug 2025 08:01:57 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: pe7x7KN1vqHZSxRO85R23iK7yyO16P4yE7l3icfkO1Y=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5b:d0:7d:02:dd:ed:ad:2c:0b:3d:92:a1:92:dd:1b:f9:95:57:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Aug 21 21:46:57 2025 GMT Not After : Aug 25 08:01:57 2025 GMT Subject: CN=B8629602C8220F175C1DAC6FD0A4CF36FBE2CDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:2d:ce:c6:52:23:f3:2e:59:ae:e6:89:4e: 33:63:50:4e:42:89:f2:a0:4c:b8:6c:7b:84:11:56: a8:4e:60:21:a0:4d:71:c5:39:e8:2a:3c:09:6f:ab: 91:17:21:bc:18:e4:0d:60:7b:1a:c1:52:e8:53:1a: b2:b0:bb:50:d8:66:20:a6:56:88:7a:35:f6:7f:ed: 79:af:09:30:07:93:2e:7a:de:89:50:59:e0:1b:93: 76:57:92:2e:6e:57:02:1c:af:0e:14:42:fc:93:95: 5c:5b:0e:dc:62:6b:40:63:bd:66:97:a9:ed:23:14: 29:15:9c:10:ff:24:f2:ed:5a:78:a4:69:57:6b:bc: da:c2:1b:a2:24:20:cf:4d:fa:a7:da:23:cc:c9:c7: 33:c8:3f:34:5e:04:cd:d1:9a:08:41:fd:9d:b4:11: 03:75:bf:3c:2b:64:cb:42:ab:34:a7:11:a9:78:02: ac:fe:65:98:d4:41:3b:41:50:0b:a7:5d:33:1b:59: e9:e5:84:39:47:4a:5c:1b:fd:bf:44:57:89:ec:c0: 63:4d:11:1a:25:b7:03:4e:44:e9:b0:28:1f:06:8a: 88:e3:bb:5b:59:e5:28:03:f9:d5:5d:1f:08:f3:f1: 44:0c:e4:72:dc:15:b2:ca:db:ca:b3:03:15:39:b1: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:96:02:C8:22:0F:17:5C:1D:AC:6F:D0:A4:CF:36:FB:E2:CD:C6 X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3e:7e:36:e3:45:c4:14:6f:44:41:62:dc:84:f5:4a:53:25: 89:9a:05:9d:d0:ce:27:9e:bc:96:1c:70:b6:0a:14:9c:36:61: 38:1c:d3:9d:71:9d:25:b7:1e:37:09:f1:22:6d:a8:f3:45:6b: 8a:e6:d9:63:49:08:8f:16:fc:c2:6c:ce:40:e9:84:9c:dd:8f: 61:39:a6:1e:08:a6:fd:9c:b2:e9:7d:a5:d5:1e:bc:e7:55:6d: 74:28:17:1f:6a:42:e4:6c:ab:ab:69:73:20:f4:64:ac:df:02: fc:4d:a6:c7:1c:b3:f9:19:8b:95:db:00:10:63:8c:b7:b8:c3: a6:e4:1b:02:d0:11:ee:77:0e:c9:18:60:fe:ad:86:91:2b:e9: e0:e5:ac:43:b8:ce:42:47:3d:da:8a:e0:92:03:94:da:d7:ee: f1:ac:7d:e8:51:0b:7a:c0:49:bb:3c:99:06:68:4f:6c:29:1f: dd:f3:f4:ab:10:bb:0d:2d:6d:45:f5:ad:d9:a1:20:ec:10:2a: f9:3c:d1:23:66:0a:88:c7:9a:5f:be:38:02:84:e8:c4:6b:0c: 81:d2:c4:3b:4f:92:f4:08:1a:9a:52:8d:51:cb:c7:77:d7:68: 4e:89:32:47:c2:49:a9:c2:2d:66:81:db:06:54:9a:ab:62:42: 1d:08:6a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1vQfQLd7a0sCz2SoZLdG/mVVyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTA4MjEyMTQ2NTdaFw0yNTA4MjUwODAxNTdaMDMxMTAvBgNV BAMTKEI4NjI5NjAyQzgyMjBGMTc1QzFEQUM2RkQwQTRDRjM2RkJFMkNEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuC3OxlIj8y5ZruaJTjNjUE5C ifKgTLhse4QRVqhOYCGgTXHFOegqPAlvq5EXIbwY5A1gexrBUuhTGrKwu1DYZiCm Voh6NfZ/7XmvCTAHky563olQWeAbk3ZXki5uVwIcrw4UQvyTlVxbDtxia0BjvWaX qe0jFCkVnBD/JPLtWnikaVdrvNrCG6IkIM9N+qfaI8zJxzPIPzReBM3RmghB/Z20 EQN1vzwrZMtCqzSnEal4Aqz+ZZjUQTtBUAunXTMbWenlhDlHSlwb/b9EV4nswGNN ERoltwNOROmwKB8Giojju1tZ5SgD+dVdHwjz8UQM5HLcFbLK28qzAxU5sRFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGKWAsgiDxdcHaxv0KTPNvvizcYwHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJc+fjbjRcQUb0RBYtyE9UpTJYmaBZ3Qziee vJYccLYKFJw2YTgc051xnSW3HjcJ8SJtqPNFa4rm2WNJCI8W/MJszkDphJzdj2E5 ph4Ipv2csul9pdUevOdVbXQoFx9qQuRsq6tpcyD0ZKzfAvxNpsccs/kZi5XbABBj jLe4w6bkGwLQEe53DskYYP6thpEr6eDlrEO4zkJHPdqK4JIDlNrX7vGsfehRC3rA Sbs8mQZoT2wpH93z9KsQuw0tbUX1rdmhIOwQKvk80SNmCojHml++OAKE6MRrDIHS xDtPkvQIGppSjVHLx3fXaE6JMkfCSanCLWaB2wZUmqtiQh0IaiY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:26:48 2025 by rpki-client