$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: FXLurNQRc9rXpZhObU9vGdnqG6Nsg2yh5xFpi2KNgDQ= Subject key identifier: C3:D4:EC:64:02:EC:96:67:E5:C8:A0:F7:5A:B4:03:E7:5D:70:26:F3 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 1C1750AB4C5080D6CEAA71CDD207851C7977F8D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: D1 Signing time: Thu 21 Aug 2025 03:52:17 +0000 Manifest this update: Thu 21 Aug 2025 03:47:17 +0000 Manifest next update: Sun 24 Aug 2025 15:32:17 +0000 Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: PFcpF2b8jhc6PHnoVo5Ov0V2w3KF15jLa9LQ8UmNkxk=) 2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:17:50:ab:4c:50:80:d6:ce:aa:71:cd:d2:07:85:1c:79:77:f8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Aug 21 03:47:17 2025 GMT Not After : Aug 24 15:32:17 2025 GMT Subject: CN=C3D4EC6402EC9667E5C8A0F75AB403E75D7026F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:ec:42:6c:96:d9:5c:dd:06:95:a5:a1:e2: 00:43:45:13:5b:c9:d5:13:3c:91:d0:89:7c:53:ec: 13:1c:ae:14:95:95:e8:4f:22:21:df:ee:99:a9:76: 76:1a:dd:14:6d:ab:7b:d6:97:c2:80:a8:7e:42:c9: 60:82:13:ef:72:dc:3c:22:68:ee:d7:31:d4:95:e8: 78:25:c6:0e:bd:43:db:0f:a1:48:53:76:a1:10:7d: e9:df:45:d2:cc:c3:ea:10:d6:45:d4:bb:ad:6f:d9: 42:1d:ea:a8:5b:a2:85:26:c5:d0:9e:6e:99:a9:5c: a8:88:37:a8:2c:51:2c:a2:35:76:62:28:f2:5e:a1: 09:25:a2:ee:9d:48:41:c9:e7:df:05:42:5f:6b:f9: 2d:ec:1a:86:96:5c:3a:75:e2:b9:14:50:ef:02:ed: 1d:08:2b:0a:81:af:b7:21:17:c2:1a:d9:d4:a6:60: c7:45:ae:ef:64:b5:18:6b:2b:04:b0:b1:02:29:59: a1:2d:c4:ef:4d:f1:15:70:b9:3a:e6:45:f2:40:fb: 32:3d:a6:3a:80:ba:7d:dd:e7:74:9f:d3:0e:b0:5c: 95:3e:96:4e:2e:46:00:b9:9e:c7:4b:43:f2:41:9c: d4:c9:99:83:f4:d8:83:2b:2e:3d:0f:20:ee:ea:1f: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D4:EC:64:02:EC:96:67:E5:C8:A0:F7:5A:B4:03:E7:5D:70:26:F3 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:01:5a:3c:06:ad:12:63:37:97:2f:a5:db:7a:7a:6b:0e:84: d9:a0:7a:53:bc:ec:98:d4:3d:1a:8c:c5:ff:73:f1:f1:ac:89: 54:40:61:9c:53:66:1e:18:7a:6f:a6:c8:8d:26:92:31:01:a1: 4e:70:84:b3:8b:47:c6:e3:64:76:58:5e:5e:9f:52:ca:7f:18: 14:98:53:ca:f9:08:08:2f:bf:58:c0:3f:0c:e0:0a:ee:d4:be: 96:ba:f5:7e:3a:cf:4e:3d:2f:84:ec:e2:d7:88:7c:13:1d:e7: 3e:43:c4:37:3b:3f:99:cb:77:02:56:7d:86:e4:b0:18:ff:43: 5e:46:3f:5d:f1:97:71:55:a2:c7:cf:a6:db:ee:e1:5a:48:65: 5b:04:12:05:59:6e:bc:45:d3:d9:ea:c0:76:46:84:47:1f:b9: 28:b4:9c:ce:12:2a:75:af:34:1c:16:4b:59:1a:08:4c:c5:aa: 35:e0:95:e5:29:08:a4:05:ad:c5:d5:c9:17:00:16:93:aa:b9: a5:a7:46:2a:6d:b4:b2:2c:4d:56:29:87:45:b4:98:98:bc:85: 62:20:d3:4f:8d:90:43:df:54:e0:2d:92:e6:51:52:d1:bb:f3: b8:3e:13:26:14:97:4a:17:75:ca:83:40:d4:4a:8a:b3:c7:46: 7d:b8:05:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBdQq0xQgNbOqnHN0geFHHl3+NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA4MjEwMzQ3MTdaFw0yNTA4MjQxNTMyMTdaMDMxMTAvBgNV BAMTKEMzRDRFQzY0MDJFQzk2NjdFNUM4QTBGNzVBQjQwM0U3NUQ3MDI2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ++xCbJbZXN0GlaWh4gBDRRNb ydUTPJHQiXxT7BMcrhSVlehPIiHf7pmpdnYa3RRtq3vWl8KAqH5CyWCCE+9y3Dwi aO7XMdSV6Hglxg69Q9sPoUhTdqEQfenfRdLMw+oQ1kXUu61v2UId6qhbooUmxdCe bpmpXKiIN6gsUSyiNXZiKPJeoQklou6dSEHJ598FQl9r+S3sGoaWXDp14rkUUO8C 7R0IKwqBr7chF8Ia2dSmYMdFru9ktRhrKwSwsQIpWaEtxO9N8RVwuTrmRfJA+zI9 pjqAun3d53Sf0w6wXJU+lk4uRgC5nsdLQ/JBnNTJmYP02IMrLj0PIO7qH2fZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9TsZALslmflyKD3WrQD511wJvMwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8BWjwGrRJjN5cvpdt6emsOhNmgelO87JjU PRqMxf9z8fGsiVRAYZxTZh4Yem+myI0mkjEBoU5whLOLR8bjZHZYXl6fUsp/GBSY U8r5CAgvv1jAPwzgCu7Uvpa69X46z049L4Ts4teIfBMd5z5DxDc7P5nLdwJWfYbk sBj/Q15GP13xl3FVosfPptvu4VpIZVsEEgVZbrxF09nqwHZGhEcfuSi0nM4SKnWv NBwWS1kaCEzFqjXgleUpCKQFrcXVyRcAFpOquaWnRipttLIsTVYph0W0mJi8hWIg 00+NkEPfVOAtkuZRUtG787g+EyYUl0oXdcqDQNRKirPHRn24BUU= -----END CERTIFICATE-----Generated at Sat Aug 23 11:58:49 2025 by rpki-client