$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: CcaBosMlFiMaBalZEOvcBB5MgcAQGIRwpbY+hkdQ3q8= Subject key identifier: 1C:F5:79:BD:39:30:85:21:0E:A3:46:3B:6E:2B:81:8F:24:3E:65:16 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 3C7E807B0F0889DC138E996DB40718C13C595135 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: C2 Signing time: Fri 22 Aug 2025 02:20:39 +0000 Manifest this update: Fri 22 Aug 2025 02:15:39 +0000 Manifest next update: Mon 25 Aug 2025 12:13:39 +0000 Files and hashes: 1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) 2: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: NCT2j7/q8Agjp1j/sIkeFvNSObhba6E/V/ZgNFX+3zU=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7e:80:7b:0f:08:89:dc:13:8e:99:6d:b4:07:18:c1:3c:59:51:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Aug 22 02:15:39 2025 GMT Not After : Aug 25 12:13:39 2025 GMT Subject: CN=1CF579BD393085210EA3463B6E2B818F243E6516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:c2:14:7a:60:06:0b:3c:16:df:20:7d:39: 26:48:b6:c2:f0:3b:c7:54:33:12:33:46:16:77:4e: 58:25:7e:26:45:77:f8:32:13:a4:3d:cb:88:bc:db: 29:90:28:bd:a8:eb:e0:9d:c8:27:8b:46:b0:66:5c: cf:05:62:41:eb:c7:d4:e0:04:59:c7:54:75:64:8e: 11:23:3d:6a:b9:90:48:85:ed:30:2b:56:19:f4:45: f8:a4:bc:99:14:10:60:5e:0a:23:82:f1:63:c2:a1: 31:0a:7f:b7:53:17:fb:f2:a2:90:d0:30:da:a9:b5: 6c:43:89:24:85:d2:51:6c:36:5a:62:7a:19:5b:9c: 9e:70:81:bc:38:bc:f6:8f:62:6c:9a:58:53:48:5e: 48:ff:e8:fb:5d:3f:f6:31:c5:7f:40:43:3d:9c:79: 01:b3:6a:2c:cb:fc:53:6d:b2:88:6c:06:28:b7:42: 8a:f4:4e:d5:50:03:94:bd:22:68:e7:9c:32:a0:ab: 31:d6:d8:24:e5:06:5b:2c:f5:c7:d0:cd:f7:37:25: a8:20:ac:d4:1b:7b:84:2b:36:db:33:39:f7:b9:a3: e6:a8:94:1a:02:ae:fa:2c:9d:af:ec:5c:6f:36:e8: 21:d5:b1:68:5f:1f:6d:6c:45:f6:dd:15:70:a7:10: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F5:79:BD:39:30:85:21:0E:A3:46:3B:6E:2B:81:8F:24:3E:65:16 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:86:7e:36:2f:bc:0e:92:e6:5c:a6:48:65:c4:0a:98:30:f2: cc:46:97:dd:90:a4:f8:d7:9d:25:e7:f6:9f:73:d7:b3:7c:18: 4a:1c:41:e4:c4:b6:3e:aa:fb:da:f1:1a:1d:4c:8c:0f:8f:d6: ae:bb:c7:14:0e:d0:45:33:17:50:4c:f6:b9:0c:8c:70:4d:6a: 49:92:44:be:36:8b:72:e6:9f:49:af:c2:30:06:41:c9:d7:f8: ed:64:b1:1b:de:2e:66:77:b3:f8:54:c6:f5:f9:7e:55:66:29: 96:a2:ff:5f:26:b7:85:a3:74:74:fe:28:76:cb:c6:2d:93:0b: 20:4d:88:7f:aa:bd:6e:ee:34:31:4d:6d:a8:d9:d5:dd:62:16: 10:61:4f:69:fd:68:75:00:ec:56:a8:d5:fe:84:a7:1d:56:b0: b1:de:b6:3b:13:43:59:42:9f:d9:37:1e:0b:69:1d:a5:fc:25: 59:5d:fc:35:cc:50:a8:fa:ee:97:4e:1a:3c:31:99:46:0e:7a: ad:46:38:6a:48:8c:43:db:e1:0e:3e:df:0e:74:9e:03:71:fe: 35:ea:8d:d1:a1:29:3b:25:ee:6c:3e:4f:4e:ae:1e:8c:cd:53: 8d:d4:b5:94:bc:18:e1:a4:9f:35:b0:69:e1:17:af:91:40:2f: 6a:4c:5c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPH6Aew8IidwTjplttAcYwTxZUTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA4MjIwMjE1MzlaFw0yNTA4MjUxMjEzMzlaMDMxMTAvBgNV BAMTKDFDRjU3OUJEMzkzMDg1MjEwRUEzNDYzQjZFMkI4MThGMjQzRTY1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PcIUemAGCzwW3yB9OSZItsLw O8dUMxIzRhZ3TlglfiZFd/gyE6Q9y4i82ymQKL2o6+CdyCeLRrBmXM8FYkHrx9Tg BFnHVHVkjhEjPWq5kEiF7TArVhn0RfikvJkUEGBeCiOC8WPCoTEKf7dTF/vyopDQ MNqptWxDiSSF0lFsNlpiehlbnJ5wgbw4vPaPYmyaWFNIXkj/6PtdP/YxxX9AQz2c eQGzaizL/FNtsohsBii3Qor0TtVQA5S9ImjnnDKgqzHW2CTlBlss9cfQzfc3Jagg rNQbe4QrNtszOfe5o+aolBoCrvosna/sXG826CHVsWhfH21sRfbdFXCnEGuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHPV5vTkwhSEOo0Y7biuBjyQ+ZRYwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2GfjYvvA6S5lymSGXECpgw8sxGl92QpPjX nSXn9p9z17N8GEocQeTEtj6q+9rxGh1MjA+P1q67xxQO0EUzF1BM9rkMjHBNakmS RL42i3Lmn0mvwjAGQcnX+O1ksRveLmZ3s/hUxvX5flVmKZai/18mt4WjdHT+KHbL xi2TCyBNiH+qvW7uNDFNbajZ1d1iFhBhT2n9aHUA7Fao1f6Epx1WsLHetjsTQ1lC n9k3HgtpHaX8JVld/DXMUKj67pdOGjwxmUYOeq1GOGpIjEPb4Q4+3w50ngNx/jXq jdGhKTsl7mw+T06uHozNU43UtZS8GOGknzWwaeEXr5FAL2pMXAY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:47:01 2025 by rpki-client