$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: VrZ/1I1dAyw0n7HnR2uC7ZuQMR3rKBj2/ZfTvKXbaOY= Subject key identifier: 91:9A:70:27:DC:36:85:22:65:61:1D:A9:49:32:0E:72:05:F9:9E:98 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 6CEC341189D4E60D8BD818EEBB282D9A06B1E3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0207 Signing time: Thu 21 Aug 2025 18:20:39 +0000 Manifest this update: Thu 21 Aug 2025 18:15:39 +0000 Manifest next update: Mon 25 Aug 2025 05:44:39 +0000 Files and hashes: 1: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: pduzhB3YWGe9fETB6zodNzVBlzF8fUSduoRma7B5Zrk=) 2: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: UeRCOjo57wOeUyYDJJ1YZ67dLYbNF8SefWTH/DR2yv8=) 3: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=) 4: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: nbEpopwiojWgYGehW+g9TqMlbT1/tFwqFVAFzwn9bm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ec:34:11:89:d4:e6:0d:8b:d8:18:ee:bb:28:2d:9a:06:b1:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Aug 21 18:15:39 2025 GMT Not After : Aug 25 05:44:39 2025 GMT Subject: CN=919A7027DC36852265611DA949320E7205F99E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:df:1c:2a:ce:fa:7c:36:45:5c:ef:50:27: bf:d6:1b:13:8f:9e:3f:a0:da:b9:39:51:fb:46:e2: 7f:5f:a2:ea:1d:75:90:57:c5:f5:f8:aa:1b:83:b8: 46:30:f3:b6:60:74:a4:3e:02:86:7c:17:f2:8d:06: 93:4c:dd:47:66:1c:36:f5:35:80:4e:7b:26:f9:ea: 63:6e:ec:79:be:77:0c:06:b6:dc:81:6e:38:e6:9b: 70:be:97:6c:1d:b3:59:0c:c3:c8:6e:4e:cd:26:04: f5:90:03:01:69:a9:48:29:fb:a5:23:d3:88:84:32: 7e:58:4c:1e:19:3d:4e:ae:f7:be:6c:6c:98:be:c2: 05:cd:e4:98:39:ea:58:9e:36:15:ce:b9:5e:86:a3: d8:62:71:03:41:c6:2d:11:ae:03:bb:d4:d1:8a:a6: c4:55:b7:90:a6:6e:50:27:29:31:0d:85:c5:f6:a2: f5:57:2a:9e:4c:c6:e3:30:c8:46:90:9f:05:f4:1b: 2a:47:19:0b:0b:d1:a4:97:73:89:21:ac:90:6b:7f: 53:5b:5e:f9:01:5b:24:e3:1f:47:d2:ce:ca:17:9d: 4f:7d:f8:7f:52:36:9e:70:ab:4e:75:61:84:ec:c3: 9f:df:73:6d:21:d6:ab:46:aa:b0:fe:de:83:67:78: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:70:27:DC:36:85:22:65:61:1D:A9:49:32:0E:72:05:F9:9E:98 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4c:47:18:2f:c9:db:14:4b:98:a3:e3:d6:48:4c:d4:79:fc: d4:2e:9f:c9:66:41:13:fa:e7:52:e8:1e:b5:92:a4:2a:d5:1f: 61:9b:e9:e9:04:2f:47:5a:48:4f:92:d3:ed:01:07:8e:06:ef: c8:20:75:28:2f:99:23:0c:fa:07:a2:ab:bc:a3:5d:d1:5e:fa: 2e:7f:29:48:ff:5a:f5:e7:a8:c1:59:09:13:0c:53:ca:51:9d: 82:53:4c:73:2c:ae:cc:6f:74:c3:e7:41:3d:1d:26:9d:6e:bc: 2f:f7:cc:b7:91:db:45:1d:eb:49:f1:b9:7d:e6:f5:35:7c:a4: 57:29:b0:53:df:fa:61:73:3c:21:c3:89:a9:e5:32:7d:0f:43: fd:c6:33:7f:70:0e:11:e2:19:fe:9c:3a:89:65:19:4c:fe:eb: 69:44:01:f9:c4:20:f9:96:46:64:4c:26:6f:e8:79:de:ac:74: ff:65:a4:ed:50:29:1c:8d:55:ab:51:08:19:78:27:53:88:07: d2:39:f7:61:90:be:d7:32:d1:c7:e2:b8:17:8f:35:65:a2:29: a5:12:12:67:a8:3d:ce:9b:e6:0a:20:ee:7b:77:87:d1:5e:f4: c3:f0:69:18:f4:5c:37:e7:30:3a:9d:f5:44:91:ba:8a:90:68: 49:84:a9:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOw0EYnU5g2L2Bjuuygtmgax4+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTA4MjExODE1MzlaFw0yNTA4MjUwNTQ0MzlaMDMxMTAvBgNV BAMTKDkxOUE3MDI3REMzNjg1MjI2NTYxMURBOTQ5MzIwRTcyMDVGOTlFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIt8cKs76fDZFXO9QJ7/WGxOP nj+g2rk5UftG4n9fouoddZBXxfX4qhuDuEYw87ZgdKQ+AoZ8F/KNBpNM3UdmHDb1 NYBOeyb56mNu7Hm+dwwGttyBbjjmm3C+l2wds1kMw8huTs0mBPWQAwFpqUgp+6Uj 04iEMn5YTB4ZPU6u975sbJi+wgXN5Jg56lieNhXOuV6Go9hicQNBxi0RrgO71NGK psRVt5CmblAnKTENhcX2ovVXKp5MxuMwyEaQnwX0GypHGQsL0aSXc4khrJBrf1Nb XvkBWyTjH0fSzsoXnU99+H9SNp5wq051YYTsw5/fc20h1qtGqrD+3oNneCirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZpwJ9w2hSJlYR2pSTIOcgX5npgwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9MRxgvydsUS5ij49ZITNR5/NQun8lmQRP6 51LoHrWSpCrVH2Gb6ekEL0daSE+S0+0BB44G78ggdSgvmSMM+geiq7yjXdFe+i5/ KUj/WvXnqMFZCRMMU8pRnYJTTHMsrsxvdMPnQT0dJp1uvC/3zLeR20Ud60nxuX3m 9TV8pFcpsFPf+mFzPCHDianlMn0PQ/3GM39wDhHiGf6cOollGUz+62lEAfnEIPmW RmRMJm/oed6sdP9lpO1QKRyNVatRCBl4J1OIB9I592GQvtcy0cfiuBePNWWiKaUS EmeoPc6b5gog7nt3h9Fe9MPwaRj0XDfnMDqd9USRuoqQaEmEqac= -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:33 2025 by rpki-client