$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: snlawjo9A+/urAI+iNPhZ2rCRKYeMjUj0qZe2mSFJCg= Subject key identifier: 33:E4:8C:27:22:BD:43:40:BA:46:96:5F:1A:2A:FC:E0:18:A1:BA:5E Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 2C4E1A84282C58E10806DF9A4CD87F99CA798565 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: B9 Signing time: Thu 21 Aug 2025 19:20:03 +0000 Manifest this update: Thu 21 Aug 2025 19:15:03 +0000 Manifest next update: Sun 24 Aug 2025 20:03:03 +0000 Files and hashes: 1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) 3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: gzm/Beo6jKDj63WR55noibI37oYiJHGA0U718DoOmXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4e:1a:84:28:2c:58:e1:08:06:df:9a:4c:d8:7f:99:ca:79:85:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Aug 21 19:15:03 2025 GMT Not After : Aug 24 20:03:03 2025 GMT Subject: CN=33E48C2722BD4340BA46965F1A2AFCE018A1BA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:e1:d6:45:dc:81:79:af:05:27:f9:63:37: 9b:40:4f:43:35:78:0f:41:83:54:bf:eb:f6:83:56: ab:33:8e:aa:59:43:c4:9d:37:60:d6:a7:59:cc:c7: 13:b4:d5:a8:1e:d8:b6:8d:63:52:35:1e:d7:ca:d0: 8c:76:cd:10:fe:2c:07:d2:26:bd:5b:3b:3e:f2:36: d9:8c:e7:61:4c:14:11:66:29:e6:ee:f8:74:b0:f8: 02:56:98:8b:74:0f:c9:21:48:8f:b7:ca:ce:0d:ef: e8:1e:ed:80:e8:96:82:d2:fa:8f:6d:ca:b4:4a:f5: a6:9f:b9:38:b2:7a:1f:d4:c7:5a:86:b2:43:03:67: 55:59:ea:86:dc:be:ca:47:7c:5b:d2:6f:ca:c5:7a: 8d:c7:4d:cc:7d:7e:1e:9e:0d:0a:b2:73:ca:0f:04: d4:71:67:79:a8:d8:ab:da:09:b7:5e:65:e9:44:a6: 32:e1:79:ed:94:1e:82:a6:45:27:fe:10:43:df:ff: 65:93:5e:93:0d:ba:a2:27:50:cc:e3:2b:ee:c9:3b: bb:59:8b:4d:64:2d:2e:8c:14:7b:17:4c:8b:54:31: 06:c9:f2:c1:19:33:d1:52:91:68:bc:93:50:f8:8f: 40:a7:50:05:1a:8e:3a:49:4a:6b:8b:a6:7b:3f:1b: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E4:8C:27:22:BD:43:40:BA:46:96:5F:1A:2A:FC:E0:18:A1:BA:5E X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3d:e1:66:b5:6b:2d:0b:22:56:73:29:59:02:2b:90:10:d8: 54:f0:0f:ca:59:02:3e:23:3c:07:93:e1:74:de:a5:db:0e:a3: 1f:a7:56:27:c5:06:24:ff:c0:46:df:99:e5:93:f0:18:a2:d0: e3:89:dd:6b:86:70:a0:2c:e2:c5:5e:0d:a3:92:c9:a1:af:de: 5f:11:75:57:34:65:e9:69:41:82:e0:21:f0:17:72:9f:b9:1d: 32:82:e3:4f:91:8f:a9:fa:a1:c0:dd:b8:c7:a0:52:e4:09:ed: a2:1d:db:cd:c0:bb:bd:71:f0:f4:22:d1:5c:14:af:74:19:65: ba:c9:ae:a8:b1:0f:7b:86:d5:8c:81:9a:05:2a:df:32:79:25: be:3d:ac:c2:a6:d6:48:cd:97:aa:3d:c4:2b:b5:01:99:dd:06: d2:6c:1f:55:24:90:3d:d3:bc:65:b2:55:bf:b2:a2:ff:ec:2c: db:e4:50:09:41:aa:a7:08:3d:b7:e2:68:f2:f1:1f:d0:1f:59: 93:57:ee:4b:b5:36:56:53:74:22:6b:23:9e:04:e7:a2:ae:d3: 20:8e:17:b9:26:f2:1b:b2:66:24:1a:be:e7:00:c0:c7:74:4b: f4:d5:63:5f:85:1a:40:40:b2:d1:d6:24:18:14:f1:19:cc:76: 72:98:ae:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULE4ahCgsWOEIBt+aTNh/mcp5hWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTA4MjExOTE1MDNaFw0yNTA4MjQyMDAzMDNaMDMxMTAvBgNV BAMTKDMzRTQ4QzI3MjJCRDQzNDBCQTQ2OTY1RjFBMkFGQ0UwMThBMUJBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNOHWRdyBea8FJ/ljN5tAT0M1 eA9Bg1S/6/aDVqszjqpZQ8SdN2DWp1nMxxO01age2LaNY1I1HtfK0Ix2zRD+LAfS Jr1bOz7yNtmM52FMFBFmKebu+HSw+AJWmIt0D8khSI+3ys4N7+ge7YDoloLS+o9t yrRK9aafuTiyeh/Ux1qGskMDZ1VZ6obcvspHfFvSb8rFeo3HTcx9fh6eDQqyc8oP BNRxZ3mo2KvaCbdeZelEpjLhee2UHoKmRSf+EEPf/2WTXpMNuqInUMzjK+7JO7tZ i01kLS6MFHsXTItUMQbJ8sEZM9FSkWi8k1D4j0CnUAUajjpJSmuLpns/Gz6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+SMJyK9Q0C6RpZfGir84Bihul4wHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKk94Wa1ay0LIlZzKVkCK5AQ2FTwD8pZAj4j PAeT4XTepdsOox+nVifFBiT/wEbfmeWT8Bii0OOJ3WuGcKAs4sVeDaOSyaGv3l8R dVc0ZelpQYLgIfAXcp+5HTKC40+Rj6n6ocDduMegUuQJ7aId283Au71x8PQi0VwU r3QZZbrJrqixD3uG1YyBmgUq3zJ5Jb49rMKm1kjNl6o9xCu1AZndBtJsH1UkkD3T vGWyVb+yov/sLNvkUAlBqqcIPbfiaPLxH9AfWZNX7ku1NlZTdCJrI54E56Ku0yCO F7km8huyZiQavucAwMd0S/TVY1+FGkBAstHWJBgU8RnMdnKYrpk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:20 2025 by rpki-client