$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: JkMEoNdR3IAatWofMBMZ/bWMjXgMHedSK0PbjPlCTkw= Subject key identifier: 0F:2A:75:B3:9B:44:71:BA:29:03:09:0F:DC:97:F5:2E:6F:2E:61:0B Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 26005C1B75781008EAD1B9E4E8A3A97A799C5544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 0194 Signing time: Sat 23 Aug 2025 02:02:14 +0000 Manifest this update: Sat 23 Aug 2025 01:57:14 +0000 Manifest next update: Tue 26 Aug 2025 12:03:14 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: 1ScfHSCe5zs8ZHupAWq9SRdRLFk6W3T4AN8q5vdrYcI=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:00:5c:1b:75:78:10:08:ea:d1:b9:e4:e8:a3:a9:7a:79:9c:55:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Aug 23 01:57:14 2025 GMT Not After : Aug 26 12:03:14 2025 GMT Subject: CN=0F2A75B39B4471BA2903090FDC97F52E6F2E610B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:68:e7:f8:d4:7c:e3:49:60:47:92:6d:9c: 3d:9b:aa:33:4f:a1:80:ed:ae:31:c3:11:d3:d9:ba: 11:6a:7e:c8:8b:1b:40:e1:5e:27:49:94:11:65:c4: a1:ae:7d:c5:3d:74:8f:3f:cd:a8:fd:c3:79:33:bd: 7f:cc:cb:8e:7e:23:e5:e9:6c:7c:8d:92:07:74:b6: b0:63:be:e6:3e:c4:91:da:e7:a5:f0:33:e2:59:9b: e1:c8:e5:dc:9b:a2:fb:dc:18:2d:f8:5c:dd:97:4c: 09:9c:8e:88:78:98:07:82:cb:a8:8f:15:dd:4e:14: cd:5e:ba:f2:5f:2b:57:c7:5f:19:0a:5f:7a:e0:00: be:5d:78:36:5a:ae:19:36:cb:61:b6:0b:b8:37:b8: be:68:ea:f9:f3:9a:21:67:49:2c:0e:6f:e3:d8:b3: 31:27:7f:60:0d:f6:61:bc:d2:14:04:fd:b6:33:73: 41:70:b2:ef:81:53:1d:c9:3d:c5:c9:b8:48:84:64: d9:7e:07:a6:c4:5c:40:26:49:a1:17:ce:04:b2:db: 58:ec:ac:5a:00:f1:38:71:79:72:e2:63:dc:d7:ae: 41:cf:ee:f3:7e:4b:03:9e:bd:63:5f:5c:4d:0d:9e: 26:76:c9:90:53:cb:00:d0:a5:e0:56:7e:4a:35:84: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:75:B3:9B:44:71:BA:29:03:09:0F:DC:97:F5:2E:6F:2E:61:0B X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d9:31:05:6e:65:cc:1e:e5:d1:31:5b:11:d6:96:b9:d1:21: af:33:90:ac:98:3b:b4:aa:91:10:7e:69:44:bc:3c:7b:bb:a5: fc:71:25:0d:07:86:75:61:39:b5:76:98:8f:3d:34:8d:40:7b: db:0b:97:47:27:77:be:ef:a6:76:a5:c5:46:12:ce:8a:7b:2b: ba:22:03:12:c1:bc:a1:f6:95:6f:f3:f8:8b:2a:e8:f8:fd:79: 25:75:d0:ab:fc:27:d8:59:cb:c7:84:fd:fe:1d:42:91:43:80: e4:e4:7b:f5:e9:04:19:9d:de:52:32:01:ef:f2:fd:36:ef:a2: ba:78:04:33:89:f4:67:86:c0:25:d1:9f:9a:ce:25:65:97:cf: 98:2e:89:ca:57:a3:22:17:91:31:f0:8b:09:78:57:28:f0:5b: 07:09:4b:9b:cb:d0:89:f1:f8:0a:e3:c2:15:f5:d8:bb:3d:f6: ac:71:83:88:92:14:cf:42:cf:c8:14:b2:32:77:f0:fd:ae:36: 1e:87:aa:cb:32:1a:e2:6b:02:d6:03:90:2c:6a:83:60:bf:15: 79:cd:42:46:2b:18:b7:2d:51:a6:d1:55:04:7d:a2:e7:54:80: f6:0a:2d:22:9f:67:35:01:90:b4:b1:17:cc:eb:0e:9b:94:d2: 0a:fc:7e:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgBcG3V4EAjq0bnk6KOpenmcVUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA4MjMwMTU3MTRaFw0yNTA4MjYxMjAzMTRaMDMxMTAvBgNV BAMTKDBGMkE3NUIzOUI0NDcxQkEyOTAzMDkwRkRDOTdGNTJFNkYyRTYxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavGjn+NR840lgR5JtnD2bqjNP oYDtrjHDEdPZuhFqfsiLG0DhXidJlBFlxKGufcU9dI8/zaj9w3kzvX/My45+I+Xp bHyNkgd0trBjvuY+xJHa56XwM+JZm+HI5dybovvcGC34XN2XTAmcjoh4mAeCy6iP Fd1OFM1euvJfK1fHXxkKX3rgAL5deDZarhk2y2G2C7g3uL5o6vnzmiFnSSwOb+PY szEnf2AN9mG80hQE/bYzc0Fwsu+BUx3JPcXJuEiEZNl+B6bEXEAmSaEXzgSy21js rFoA8ThxeXLiY9zXrkHP7vN+SwOevWNfXE0NniZ2yZBTywDQpeBWfko1hJWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyp1s5tEcbopAwkP3Jf1Lm8uYQswHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfZMQVuZcwe5dExWxHWlrnRIa8zkKyYO7Sq kRB+aUS8PHu7pfxxJQ0HhnVhObV2mI89NI1Ae9sLl0cnd77vpnalxUYSzop7K7oi AxLBvKH2lW/z+Isq6Pj9eSV10Kv8J9hZy8eE/f4dQpFDgOTke/XpBBmd3lIyAe/y /Tbvorp4BDOJ9GeGwCXRn5rOJWWXz5guicpXoyIXkTHwiwl4VyjwWwcJS5vL0Inx +ArjwhX12Ls99qxxg4iSFM9Cz8gUsjJ38P2uNh6HqssyGuJrAtYDkCxqg2C/FXnN QkYrGLctUabRVQR9oudUgPYKLSKfZzUBkLSxF8zrDpuU0gr8fr0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:12 2025 by rpki-client