$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: lGjM8rvEsdF/47l4u/bRcrf7kpcxUwtYJhjK3xaWQBE= Subject key identifier: 47:B9:67:3D:92:71:1B:7E:0A:0D:23:43:60:4B:BF:4C:67:5D:69:BE Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 03354682C347D97328D447B4416EC7E62473BE7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01E4 Signing time: Thu 21 Aug 2025 18:51:49 +0000 Manifest this update: Thu 21 Aug 2025 18:46:49 +0000 Manifest next update: Sun 24 Aug 2025 22:08:49 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 2: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: dRUoWqIUmUhzT2KRgrpID6sP4m7xDR3JrhD5aXltc3c=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:35:46:82:c3:47:d9:73:28:d4:47:b4:41:6e:c7:e6:24:73:be:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Aug 21 18:46:49 2025 GMT Not After : Aug 24 22:08:49 2025 GMT Subject: CN=47B9673D92711B7E0A0D2343604BBF4C675D69BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:f5:ba:4e:c9:d9:5e:fe:df:1f:86:c9:d3: 99:bb:17:7e:27:88:db:df:47:02:ce:e1:5c:6c:db: f8:98:35:dc:ba:69:78:f4:8a:ac:01:59:a8:07:a3: b8:22:62:0b:23:e6:04:c2:bd:ec:e1:78:43:17:84: b0:8c:ea:ee:f1:31:e8:ff:70:d3:ca:89:4d:c6:9b: 7c:8d:30:7c:66:1f:8f:63:1d:3c:46:29:9b:89:a8: 1f:23:86:a3:db:ce:34:01:72:c1:56:29:dd:d1:15: 25:e1:59:47:aa:36:2e:5b:81:80:ce:f0:6a:84:5f: 50:38:c5:94:e5:a1:85:d3:33:18:79:af:57:11:10: c7:46:49:a0:8a:49:c1:bf:cc:04:01:2e:54:25:6e: 4d:c9:89:8a:0e:99:1d:df:2b:37:92:f7:69:cd:6b: 5e:80:9d:9e:69:1e:06:9c:d7:8c:d6:a7:fd:3b:b2: 77:ed:d0:5a:ce:08:1c:23:9f:01:85:01:eb:48:84: 68:38:f6:97:76:64:23:4a:e8:fe:f1:83:4c:31:f9: 86:29:eb:85:0c:ad:6c:3b:ee:f9:61:cc:61:69:9c: 32:f9:47:8c:c2:b9:f9:b3:ef:3e:65:de:03:80:55: 55:16:a0:0b:df:15:7f:29:6c:58:df:53:03:5b:37: 4f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:67:3D:92:71:1B:7E:0A:0D:23:43:60:4B:BF:4C:67:5D:69:BE X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a6:cd:ed:09:d1:0a:17:74:00:83:2f:52:2d:0d:6f:68:c9: 4d:d5:7f:34:d0:09:c7:2e:5e:31:20:51:39:6e:0d:4f:4c:1f: 31:57:af:f5:7c:fd:9e:2b:b2:41:70:14:be:4c:96:fb:c3:9b: 5e:92:00:f8:17:8b:9e:97:13:dd:4b:c5:f0:b7:2a:ae:af:44: 4d:09:b1:6f:91:91:03:2c:fc:a5:3b:e5:e2:ed:7f:35:20:82: 4b:ec:7e:e2:be:7f:b1:5c:79:bc:7a:98:3f:cc:56:95:82:0f: fa:4f:2a:8b:05:7e:bb:77:bd:7b:35:a9:49:1c:c4:53:17:d7: 37:8c:63:89:cb:a8:93:72:2d:c5:a3:36:c3:2a:d9:d4:94:a4: 76:56:69:d1:77:26:9a:6d:c6:9f:c6:72:70:f0:32:93:0d:d9: ee:24:f8:7e:31:c8:06:cd:7a:35:11:db:32:12:a6:ef:07:00: c4:62:e3:24:a2:f8:e0:97:05:62:2d:68:1e:e5:bc:cc:38:39: 9a:dd:f4:71:76:53:19:8c:8a:68:03:5c:bb:98:e6:ea:12:94: c7:d1:51:bc:01:3d:f8:e2:ac:bd:36:f5:c2:40:e3:d8:90:a0: c2:91:3f:95:89:0c:34:6d:5d:c6:61:25:3a:22:c4:2a:50:df: 42:82:fb:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzVGgsNH2XMo1Ee0QW7H5iRzvn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA4MjExODQ2NDlaFw0yNTA4MjQyMjA4NDlaMDMxMTAvBgNV BAMTKDQ3Qjk2NzNEOTI3MTFCN0UwQTBEMjM0MzYwNEJCRjRDNjc1RDY5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq/W6TsnZXv7fH4bJ05m7F34n iNvfRwLO4Vxs2/iYNdy6aXj0iqwBWagHo7giYgsj5gTCvezheEMXhLCM6u7xMej/ cNPKiU3Gm3yNMHxmH49jHTxGKZuJqB8jhqPbzjQBcsFWKd3RFSXhWUeqNi5bgYDO 8GqEX1A4xZTloYXTMxh5r1cREMdGSaCKScG/zAQBLlQlbk3JiYoOmR3fKzeS92nN a16AnZ5pHgac14zWp/07snft0FrOCBwjnwGFAetIhGg49pd2ZCNK6P7xg0wx+YYp 64UMrWw77vlhzGFpnDL5R4zCufmz7z5l3gOAVVUWoAvfFX8pbFjfUwNbN09LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR7lnPZJxG34KDSNDYEu/TGddab4wHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmmze0J0QoXdACDL1ItDW9oyU3VfzTQCccu XjEgUTluDU9MHzFXr/V8/Z4rskFwFL5MlvvDm16SAPgXi56XE91LxfC3Kq6vRE0J sW+RkQMs/KU75eLtfzUggkvsfuK+f7Fcebx6mD/MVpWCD/pPKosFfrt3vXs1qUkc xFMX1zeMY4nLqJNyLcWjNsMq2dSUpHZWadF3Jpptxp/GcnDwMpMN2e4k+H4xyAbN ejUR2zISpu8HAMRi4ySi+OCXBWItaB7lvMw4OZrd9HF2UxmMimgDXLuY5uoSlMfR UbwBPfjirL029cJA49iQoMKRP5WJDDRtXcZhJToixCpQ30KC+zM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:40 2025 by rpki-client