$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: dmxiPJQVRKLMZwY3TRbepZiqnBnbrZjy30Uw/lLK+qA= Subject key identifier: 55:84:A8:05:54:1B:98:46:BA:11:3A:0A:02:9C:F6:34:29:EC:2E:86 Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 7390360A66E806A389490423B3555E475267B414 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: A3 Signing time: Thu 21 Aug 2025 07:41:08 +0000 Manifest this update: Thu 21 Aug 2025 07:36:08 +0000 Manifest next update: Sun 24 Aug 2025 10:56:08 +0000 Files and hashes: 1: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: nOGzAdPSHKSzftoDq8eKQCtxrvgOkaIJa01T/CH8Z2U=) 2: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:90:36:0a:66:e8:06:a3:89:49:04:23:b3:55:5e:47:52:67:b4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Aug 21 07:36:08 2025 GMT Not After : Aug 24 10:56:08 2025 GMT Subject: CN=5584A805541B9846BA113A0A029CF63429EC2E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:8c:e2:92:59:1e:8c:70:52:ad:c8:3a:a0: 37:c9:da:fa:50:2a:d1:52:25:f0:39:31:4f:6a:b6: c2:b8:ea:99:43:22:88:4a:4b:ef:a2:c7:58:49:63: 9b:9f:60:56:47:34:9e:44:1f:72:ef:55:50:f2:8d: 14:de:75:b7:14:3c:bb:13:80:f6:a0:57:56:a9:b0: dd:7f:c9:79:e7:b2:ce:43:14:f1:cf:ab:53:21:cd: 35:a5:9d:e9:a1:ab:b4:7b:60:e4:36:a8:ee:a1:f6: a5:d7:41:ce:88:b9:8d:d8:48:62:c3:eb:df:06:81: 06:6b:fb:13:70:80:26:4f:b2:7a:42:ca:6b:f5:54: 69:21:37:aa:91:aa:e9:12:e3:0f:e4:33:d4:02:fa: 81:a7:0a:1b:3f:3d:0b:bf:86:78:64:9b:87:6e:8c: 79:f4:1f:92:e0:48:4a:36:f1:71:ba:b8:d3:8d:9a: d6:e3:c2:6c:ad:e8:7d:4d:a1:82:d4:c7:eb:c1:d1: 0f:43:9c:bf:c4:b2:8f:bb:99:53:96:1a:6d:41:09: 23:53:22:78:6d:2f:7a:3a:f9:db:d1:5e:c4:48:58: 83:15:70:fe:17:ef:9d:e1:93:08:e4:52:2c:fc:d8: 77:94:63:f5:52:14:10:d6:68:4b:e2:a4:6b:1b:9c: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:84:A8:05:54:1B:98:46:BA:11:3A:0A:02:9C:F6:34:29:EC:2E:86 X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:52:bc:9e:a4:6c:ab:4a:27:c6:ec:f5:aa:dd:e0:b9:d9:88: bc:22:35:3e:ea:86:98:34:0d:20:96:6a:04:3e:95:c5:70:08: 7d:56:df:14:9e:45:ff:f6:fb:67:59:52:bb:b4:8b:52:8c:f2: 2e:ca:15:6b:a3:6e:15:96:4b:73:99:a6:ee:12:3d:cf:3c:c6: 5b:cf:4c:e1:43:5a:b5:fb:3a:0f:b2:b9:35:6c:30:4c:ef:66: 94:ca:7e:05:87:c9:6e:92:2b:dd:4b:2c:e9:db:b4:b2:e9:47: 1a:5e:48:79:d2:c5:42:f2:3c:70:74:e6:8d:40:c5:d7:b3:b0: 0d:35:0d:7a:42:12:a7:5d:16:fb:5f:fe:39:0b:8d:0d:ca:62: 65:61:fa:12:f4:50:d6:4f:5f:be:32:de:bd:0c:aa:f0:1d:4f: fa:af:49:26:0e:e8:cd:0d:c7:77:b9:c2:96:83:39:c0:9e:85: e3:1b:04:1c:05:bf:61:5d:b5:d8:b1:c7:87:3e:f4:ad:70:17: 32:79:ec:3a:91:d5:d5:46:84:6c:99:99:a6:ac:e8:00:6d:cf: 76:68:71:d8:71:85:36:2f:1b:8c:a6:03:48:1b:68:b1:0e:16: c7:e0:d0:a9:13:e3:d3:22:01:1c:2b:3e:a0:6b:bf:bf:b2:5c: 7b:be:d9:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5A2CmboBqOJSQQjs1VeR1JntBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA4MjEwNzM2MDhaFw0yNTA4MjQxMDU2MDhaMDMxMTAvBgNV BAMTKDU1ODRBODA1NTQxQjk4NDZCQTExM0EwQTAyOUNGNjM0MjlFQzJFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/oziklkejHBSrcg6oDfJ2vpQ KtFSJfA5MU9qtsK46plDIohKS++ix1hJY5ufYFZHNJ5EH3LvVVDyjRTedbcUPLsT gPagV1apsN1/yXnnss5DFPHPq1MhzTWlnemhq7R7YOQ2qO6h9qXXQc6IuY3YSGLD 698GgQZr+xNwgCZPsnpCymv1VGkhN6qRqukS4w/kM9QC+oGnChs/PQu/hnhkm4du jHn0H5LgSEo28XG6uNONmtbjwmyt6H1NoYLUx+vB0Q9DnL/Eso+7mVOWGm1BCSNT InhtL3o6+dvRXsRIWIMVcP4X753hkwjkUiz82HeUY/VSFBDWaEvipGsbnLanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYSoBVQbmEa6EToKApz2NCnsLoYwHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5SvJ6kbKtKJ8bs9ard4LnZiLwiNT7qhpg0 DSCWagQ+lcVwCH1W3xSeRf/2+2dZUru0i1KM8i7KFWujbhWWS3OZpu4SPc88xlvP TOFDWrX7Og+yuTVsMEzvZpTKfgWHyW6SK91LLOnbtLLpRxpeSHnSxULyPHB05o1A xdezsA01DXpCEqddFvtf/jkLjQ3KYmVh+hL0UNZPX74y3r0MqvAdT/qvSSYO6M0N x3e5wpaDOcCeheMbBBwFv2Fdtdixx4c+9K1wFzJ57DqR1dVGhGyZmaas6ABtz3Zo cdhxhTYvG4ymA0gbaLEOFsfg0KkT49MiARwrPqBrv7+yXHu+2Zo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:49 2025 by rpki-client