$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: OkYpaS2tcheGmt9X2kaxHhYXLZ2xPtvsofQUSqtsTeg= Subject key identifier: 8C:50:81:FD:A2:21:91:D0:7C:B1:A5:ED:C4:05:E2:60:0D:7A:90:94 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 4616476C82A6D887804220236D319801EFD421E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 0182 Signing time: Fri 22 Aug 2025 02:30:35 +0000 Manifest this update: Fri 22 Aug 2025 02:25:35 +0000 Manifest next update: Mon 25 Aug 2025 12:16:35 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) 2: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: R7dywo/LY+KeqaIlmVfYBNI955b8KuUxBgR8rnpHQ5I=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 4: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:16:47:6c:82:a6:d8:87:80:42:20:23:6d:31:98:01:ef:d4:21:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Aug 22 02:25:35 2025 GMT Not After : Aug 25 12:16:35 2025 GMT Subject: CN=8C5081FDA22191D07CB1A5EDC405E2600D7A9094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e7:ba:ed:85:0b:eb:f8:e2:c0:1c:7b:d2:61: 78:d7:d4:f4:d0:2c:63:ad:35:0e:a8:f8:5c:aa:f2: 8d:25:6d:3d:13:50:c7:21:0f:3f:59:a3:e9:a4:de: 0b:4a:96:11:de:0c:8a:f4:f7:4e:c7:4a:05:86:26: 5f:cf:78:d5:b8:6c:bf:bc:4f:d7:a7:8f:83:f5:c9: a9:2d:22:80:46:f4:64:3d:b7:a4:ed:78:9d:47:17: e2:22:77:78:b7:8e:f8:4c:e3:d5:79:c2:65:87:67: 54:c2:09:18:0d:3e:42:ab:6d:70:8d:1f:a2:48:70: ff:18:63:ea:ea:97:a6:b4:87:1d:58:4d:af:81:e8: 3f:d4:f8:12:9b:7b:a1:76:3b:47:da:53:96:d5:82: e0:73:28:10:2a:0b:df:96:aa:e3:eb:67:30:dc:d7: 95:ff:75:05:15:d4:12:08:86:6d:07:35:80:df:aa: 54:fc:2a:62:9f:5d:e0:8b:b3:72:55:fb:c7:c5:cd: 49:7b:74:46:51:29:fa:1c:8a:72:6a:c2:ab:d9:c5: 96:10:e7:f7:9e:28:75:00:73:9b:ab:4d:e7:f7:8f: 94:d9:0f:03:33:ca:4e:39:5a:c5:86:ec:ad:fa:72: cf:77:80:7c:14:bf:8e:00:71:3f:19:84:57:88:42: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:50:81:FD:A2:21:91:D0:7C:B1:A5:ED:C4:05:E2:60:0D:7A:90:94 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:cb:fa:b7:bd:78:65:16:60:95:35:b6:46:39:21:b0:2c: f3:0d:1b:c1:8b:ba:ed:7a:5d:be:e0:ac:6e:e6:48:f4:27:af: 76:e0:cf:94:8e:f1:a8:4b:d6:33:19:41:3a:42:01:45:20:21: 69:e8:a1:30:23:21:64:e7:82:f3:7b:44:e8:cd:5f:6e:d6:09: a4:11:e4:04:20:e2:db:55:49:b5:56:90:9f:bf:22:d7:96:ca: f0:a9:d5:de:c6:b1:af:c4:bc:47:8c:bd:8d:4f:f5:93:e7:09: 06:b2:63:57:4d:b6:84:5a:65:29:08:85:25:36:08:41:9a:a4: 7e:92:b5:86:bb:cb:97:8b:28:e1:c2:90:dc:42:60:95:64:13: d9:34:93:9a:9d:da:8f:e7:27:1e:6f:86:23:0a:ea:7c:1e:9a: 52:95:99:d9:e0:e9:e9:63:75:d3:f1:df:4c:b6:26:46:de:e4: e5:64:4c:bb:23:59:47:7b:8b:9e:cc:65:23:fc:3f:91:6e:95: 59:b8:72:30:82:6a:75:9e:de:39:88:94:ec:bf:77:11:c1:a9: dc:b9:a5:9d:03:f0:c3:78:79:6c:f9:e8:1b:22:ea:1a:92:c1: 8f:43:ca:3b:55:6d:cf:05:7f:ae:dc:7b:de:20:3b:a9:8f:7a: 8b:53:ce:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhZHbIKm2IeAQiAjbTGYAe/UIeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA4MjIwMjI1MzVaFw0yNTA4MjUxMjE2MzVaMDMxMTAvBgNV BAMTKDhDNTA4MUZEQTIyMTkxRDA3Q0IxQTVFREM0MDVFMjYwMEQ3QTkwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG57rthQvr+OLAHHvSYXjX1PTQ LGOtNQ6o+Fyq8o0lbT0TUMchDz9Zo+mk3gtKlhHeDIr0907HSgWGJl/PeNW4bL+8 T9enj4P1yaktIoBG9GQ9t6TteJ1HF+Iid3i3jvhM49V5wmWHZ1TCCRgNPkKrbXCN H6JIcP8YY+rql6a0hx1YTa+B6D/U+BKbe6F2O0faU5bVguBzKBAqC9+WquPrZzDc 15X/dQUV1BIIhm0HNYDfqlT8KmKfXeCLs3JV+8fFzUl7dEZRKfocinJqwqvZxZYQ 5/eeKHUAc5urTef3j5TZDwMzyk45WsWG7K36cs93gHwUv44AcT8ZhFeIQjs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjFCB/aIhkdB8saXtxAXiYA16kJQwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQAy/q3vXhlFmCVNbZGOSGwLPMNG8GLuu16 Xb7grG7mSPQnr3bgz5SO8ahL1jMZQTpCAUUgIWnooTAjIWTngvN7ROjNX27WCaQR 5AQg4ttVSbVWkJ+/IteWyvCp1d7Gsa/EvEeMvY1P9ZPnCQayY1dNtoRaZSkIhSU2 CEGapH6StYa7y5eLKOHCkNxCYJVkE9k0k5qd2o/nJx5vhiMK6nwemlKVmdng6elj ddPx30y2Jkbe5OVkTLsjWUd7i57MZSP8P5FulVm4cjCCanWe3jmIlOy/dxHBqdy5 pZ0D8MN4eWz56Bsi6hqSwY9DyjtVbc8Ff67ce94gO6mPeotTzj8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:52 2025 by rpki-client