$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: Ewoiqwy2tNPWRJEDSqrH6G+0dx+XOoE16xZHMHep+o4= Subject key identifier: D3:B8:33:8B:13:17:65:8D:1D:11:BE:BD:D7:2E:28:49:B4:F1:F4:2F Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 04EBE0007A7CEF2E3B11AE932F7A4EC61F0E3BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 95 Signing time: Sat 23 Aug 2025 17:31:06 +0000 Manifest this update: Sat 23 Aug 2025 17:26:06 +0000 Manifest next update: Wed 27 Aug 2025 00:31:06 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 2: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 3: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) 4: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: Ocz8QmwyTyxmLKZuh/BpEcfyP7MFVXoyzKVIyaRx7kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:eb:e0:00:7a:7c:ef:2e:3b:11:ae:93:2f:7a:4e:c6:1f:0e:3b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Aug 23 17:26:06 2025 GMT Not After : Aug 27 00:31:06 2025 GMT Subject: CN=D3B8338B1317658D1D11BEBDD72E2849B4F1F42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:54:f2:74:91:35:ec:7f:4d:f9:5a:a0:12: 3a:e1:58:cb:b4:42:38:8e:04:52:76:40:a3:bc:67: c3:df:50:9b:f6:6d:bb:61:0b:8c:8a:9b:8c:74:4a: c8:c7:94:aa:c3:54:30:bd:24:30:d6:53:36:7e:8e: 55:11:50:49:5b:b4:82:cf:48:e3:6a:e7:b3:9e:63: ab:c3:66:ed:3d:00:13:b5:b0:54:9c:56:7a:b1:c6: 39:31:9f:da:43:c5:d0:c5:b6:66:c9:1d:13:b7:b1: d2:84:25:52:98:92:ed:d6:68:bb:73:32:56:8d:e5: 33:cb:74:c1:74:14:e6:21:95:8f:6b:1c:e9:f9:f2: 26:0a:4c:76:33:d6:cb:da:96:d8:a1:cb:b5:63:61: ff:cf:71:ea:d3:7c:90:56:7c:16:8d:55:62:f9:68: f5:a1:df:ce:b5:6d:70:e2:07:4c:05:5a:52:8e:b4: be:18:a9:2a:59:4f:d7:71:8b:56:62:af:80:98:bf: 5f:9a:bc:90:e6:9d:a7:c8:f9:dc:22:36:8c:da:10: 67:a1:fc:56:01:88:de:91:38:b6:50:f2:bd:b5:6c: d3:65:89:c2:8b:74:ca:9c:1e:64:8f:cb:82:e6:26: 90:8a:b4:a6:46:74:3c:ba:ed:8a:e5:2c:da:fb:51: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B8:33:8B:13:17:65:8D:1D:11:BE:BD:D7:2E:28:49:B4:F1:F4:2F X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:57:93:0c:b7:1a:62:18:10:16:74:79:e0:51:df:f8:eb:af: 0f:c5:7f:06:75:8d:1c:b1:1e:57:32:1c:91:e5:c5:c6:25:49: 04:99:9a:89:31:71:40:27:24:5f:ff:3b:5f:08:34:e9:04:d0: 21:94:0b:c9:ee:65:9e:da:f7:4a:7a:d0:e9:ec:e8:95:32:2a: a3:39:d2:c6:4a:08:98:92:b7:29:9a:ad:b9:53:66:1a:74:88: 3b:13:1b:3e:77:ab:2d:aa:e6:42:86:8e:c8:31:a6:75:db:f1: 2b:d8:31:f8:44:02:33:82:e2:f0:d0:07:6a:bc:97:30:b3:d6: 44:27:b3:84:96:0b:cc:0d:37:b4:5b:99:35:ed:00:a5:6f:88: 89:e3:32:66:65:da:40:46:b8:97:e7:b5:19:e0:05:7f:24:51: 74:6b:13:b7:61:b3:65:87:fc:cd:d2:73:56:9f:53:e6:c2:47: 6e:b6:32:14:8a:88:72:41:5d:fd:eb:bd:0d:a9:3d:ed:51:76: 77:31:7e:18:1a:1f:a1:74:46:02:03:9d:e8:72:42:06:08:e3: 50:b5:3b:f5:f9:19:2a:27:9d:a1:13:cf:d2:f7:e0:11:d4:49: 8d:f4:f2:66:fa:ba:da:da:37:5a:e4:9b:d4:56:b5:29:8d:3d: 93:b8:39:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOvgAHp87y47Ea6TL3pOxh8OO9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTA4MjMxNzI2MDZaFw0yNTA4MjcwMDMxMDZaMDMxMTAvBgNV BAMTKEQzQjgzMzhCMTMxNzY1OEQxRDExQkVCREQ3MkUyODQ5QjRGMUY0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPlTydJE17H9N+VqgEjrhWMu0 QjiOBFJ2QKO8Z8PfUJv2bbthC4yKm4x0SsjHlKrDVDC9JDDWUzZ+jlURUElbtILP SONq57OeY6vDZu09ABO1sFScVnqxxjkxn9pDxdDFtmbJHRO3sdKEJVKYku3WaLtz MlaN5TPLdMF0FOYhlY9rHOn58iYKTHYz1svaltihy7VjYf/PcerTfJBWfBaNVWL5 aPWh3861bXDiB0wFWlKOtL4YqSpZT9dxi1Zir4CYv1+avJDmnafI+dwiNozaEGeh /FYBiN6ROLZQ8r21bNNlicKLdMqcHmSPy4LmJpCKtKZGdDy67YrlLNr7USv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU07gzixMXZY0dEb691y4oSbTx9C8wHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhXkwy3GmIYEBZ0eeBR3/jrrw/FfwZ1jRyx HlcyHJHlxcYlSQSZmokxcUAnJF//O18INOkE0CGUC8nuZZ7a90p60Ons6JUyKqM5 0sZKCJiStymarblTZhp0iDsTGz53qy2q5kKGjsgxpnXb8SvYMfhEAjOC4vDQB2q8 lzCz1kQns4SWC8wNN7RbmTXtAKVviInjMmZl2kBGuJfntRngBX8kUXRrE7dhs2WH /M3Sc1afU+bCR262MhSKiHJBXf3rvQ2pPe1RdncxfhgaH6F0RgIDnehyQgYI41C1 O/X5GSonnaETz9L34BHUSY308mb6utraN1rkm9RWtSmNPZO4OQ4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:57 2025 by rpki-client