$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: kAS6W3nLAYrbhDds6sXTUY/KDWkz4cLYNfIh8I5Gfko= Subject key identifier: B7:40:EF:07:B0:91:01:60:77:34:0E:C3:95:9B:15:D8:90:33:98:7F Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 36BC22BC6EFCC077F2B5F143858B57F9A1B881EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: CD Signing time: Fri 22 Aug 2025 23:01:48 +0000 Manifest this update: Fri 22 Aug 2025 22:56:48 +0000 Manifest next update: Tue 26 Aug 2025 05:04:48 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: N3GaJykYQ81bw96bHDw7mdX8SIRKbtTJ0LZscgDiTK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bc:22:bc:6e:fc:c0:77:f2:b5:f1:43:85:8b:57:f9:a1:b8:81:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Aug 22 22:56:48 2025 GMT Not After : Aug 26 05:04:48 2025 GMT Subject: CN=B740EF07B091016077340EC3959B15D89033987F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:f5:0e:07:fb:80:87:73:dc:ac:3b:92:ec: 6e:6b:4c:14:90:64:0a:02:47:58:36:b5:76:14:82: 1f:81:bd:8e:7c:54:24:d4:40:7f:58:77:f5:e5:c8: dd:c6:5e:f4:50:b8:19:3b:ed:df:33:bb:b6:d4:61: d9:30:bc:7c:56:2b:fd:0a:8c:51:2a:d2:e5:d0:24: b8:16:a6:78:1e:5b:8d:15:51:04:39:e1:bc:83:30: ce:3f:e8:e8:db:bc:1f:ad:86:12:34:47:fc:12:6b: 5f:e0:15:36:ef:44:ed:63:ec:55:8b:72:cb:b9:ab: 1e:88:e5:5f:d8:7d:40:a1:65:d9:93:3b:08:6a:47: a9:e7:ec:17:e1:58:a8:41:44:d0:a6:a2:37:73:e7: 7e:9b:61:6d:ad:39:79:3b:58:78:a1:06:5c:43:f5: 62:a1:37:dc:7e:7e:6f:66:fb:1a:38:5f:d5:f0:9b: e1:1c:81:bf:9e:57:b1:c5:61:e2:2e:81:d6:2f:c2: 08:84:f4:4e:7f:bb:23:08:b5:a4:69:d1:88:eb:a7: 95:44:26:93:ee:99:90:eb:98:8e:62:29:3f:f8:86: 3e:68:19:48:19:3d:67:9d:ef:d7:88:76:a0:ca:46: 24:1d:73:f7:58:2c:79:7b:75:7b:45:c0:35:dc:ee: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:EF:07:B0:91:01:60:77:34:0E:C3:95:9B:15:D8:90:33:98:7F X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:77:4c:2c:b6:8b:c5:d5:91:16:de:2b:9f:e2:85:d6:ef:8e: 78:b1:b3:23:64:df:7a:da:c1:17:5d:d5:1c:11:bd:1f:aa:2a: ce:d4:34:ff:ec:f6:49:de:58:bd:9b:3a:4a:0c:51:2d:c9:63: 99:1c:93:22:84:16:d8:2e:36:52:37:2e:a6:8d:a1:88:5d:3d: 5d:ae:7d:38:08:40:5e:a6:d9:2d:f7:62:b5:0e:df:af:60:e6: f6:11:4c:8f:ff:b8:58:1a:e6:f5:cf:b5:46:ce:72:c4:96:f0: 28:59:ea:11:8d:34:ee:3f:53:cb:83:6e:0b:00:23:b6:5c:65: ef:69:77:68:75:05:35:29:a4:23:09:5c:3b:29:bc:b5:5f:93: d3:4b:18:db:73:a9:af:3e:30:a7:d7:ff:02:9f:45:b3:6e:ce: 06:fe:db:c0:50:36:91:de:08:85:22:3b:bd:98:68:8a:9c:bc: 4d:8c:56:a1:b3:e6:1c:60:14:29:43:a4:24:46:26:30:8b:4c: 17:3c:64:2c:aa:9d:5d:bf:d4:91:36:4f:ae:5a:95:5a:db:1e: 1e:18:4f:a1:76:78:d9:eb:85:5e:c2:04:c6:eb:30:67:e2:05: fd:51:e9:b5:35:8b:b0:21:b7:c6:ac:6d:f3:a9:75:ec:a8:3f: e3:ba:3e:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrwivG78wHfytfFDhYtX+aG4geowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTA4MjIyMjU2NDhaFw0yNTA4MjYwNTA0NDhaMDMxMTAvBgNV BAMTKEI3NDBFRjA3QjA5MTAxNjA3NzM0MEVDMzk1OUIxNUQ4OTAzMzk4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgMvUOB/uAh3PcrDuS7G5rTBSQ ZAoCR1g2tXYUgh+BvY58VCTUQH9Yd/XlyN3GXvRQuBk77d8zu7bUYdkwvHxWK/0K jFEq0uXQJLgWpngeW40VUQQ54byDMM4/6OjbvB+thhI0R/wSa1/gFTbvRO1j7FWL csu5qx6I5V/YfUChZdmTOwhqR6nn7BfhWKhBRNCmojdz536bYW2tOXk7WHihBlxD 9WKhN9x+fm9m+xo4X9Xwm+Ecgb+eV7HFYeIugdYvwgiE9E5/uyMItaRp0Yjrp5VE JpPumZDrmI5iKT/4hj5oGUgZPWed79eIdqDKRiQdc/dYLHl7dXtFwDXc7npLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0DvB7CRAWB3NA7DlZsV2JAzmH8wHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR3TCy2i8XVkRbeK5/ihdbvjnixsyNk33ra wRdd1RwRvR+qKs7UNP/s9kneWL2bOkoMUS3JY5kckyKEFtguNlI3LqaNoYhdPV2u fTgIQF6m2S33YrUO369g5vYRTI//uFga5vXPtUbOcsSW8ChZ6hGNNO4/U8uDbgsA I7ZcZe9pd2h1BTUppCMJXDspvLVfk9NLGNtzqa8+MKfX/wKfRbNuzgb+28BQNpHe CIUiO72YaIqcvE2MVqGz5hxgFClDpCRGJjCLTBc8ZCyqnV2/1JE2T65alVrbHh4Y T6F2eNnrhV7CBMbrMGfiBf1R6bU1i7Aht8asbfOpdeyoP+O6Psc= -----END CERTIFICATE-----Generated at Sun Aug 24 02:52:19 2025 by rpki-client