$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: WisidCzAVHyZfcxCESK3LE65gIYgxh5oVOTn3aBzPp8= Subject key identifier: 1C:48:FD:94:1C:3E:9D:E0:29:EC:22:95:E1:24:24:18:E0:8B:48:0E Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 346977F38AF24F627A3F447F8D6E8F78CD7FE9D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 027E Signing time: Sat 23 Aug 2025 07:10:41 +0000 Manifest this update: Sat 23 Aug 2025 07:05:41 +0000 Manifest next update: Tue 26 Aug 2025 09:48:41 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: 8kwCzUVoE1XljaNU45gVOP8kyI9Pk6K44oPGvFOC1SE=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:77:f3:8a:f2:4f:62:7a:3f:44:7f:8d:6e:8f:78:cd:7f:e9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Aug 23 07:05:41 2025 GMT Not After : Aug 26 09:48:41 2025 GMT Subject: CN=1C48FD941C3E9DE029EC2295E1242418E08B480E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:60:8b:49:c0:d5:b0:2a:a3:90:bc:20:5a: 93:93:d0:b2:d8:10:eb:11:6e:fe:d3:c5:bd:b0:89: 4f:96:85:5a:10:d3:af:44:ab:fb:bf:33:b7:b9:d8: 55:fc:ed:66:64:53:5b:0b:aa:cc:dd:96:1e:dd:44: 4d:a0:02:c0:d2:f2:d2:f2:41:03:11:33:25:10:c0: ec:b0:8f:08:df:9a:97:f3:c3:40:1e:0f:e7:95:bd: 48:de:35:71:b7:f4:34:06:46:da:62:3d:47:b6:73: 14:8f:9f:a5:71:ff:92:61:af:ff:4e:52:7d:06:0e: 22:a7:82:86:f0:75:0d:27:36:86:9c:eb:6d:c9:ad: b9:e6:e6:0a:6f:93:4b:ac:ea:4d:6f:8e:26:b7:0c: 13:54:44:ab:49:1d:bc:bb:9d:41:78:95:54:3d:7d: 75:73:97:7c:78:62:43:ee:55:44:bc:08:90:44:0d: 3d:0c:ae:2c:fd:59:c8:4a:a0:aa:2f:de:ff:9a:f6: 24:0f:13:02:e3:10:13:aa:9b:b0:78:1a:d5:a0:6d: 36:26:14:70:87:71:38:48:e0:63:95:15:1b:89:84: ec:c3:9e:d7:b8:dd:23:f3:2a:df:59:cf:4f:ea:10: 5a:50:ab:e1:35:a4:0b:7a:e6:74:0d:a4:19:4b:82: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:FD:94:1C:3E:9D:E0:29:EC:22:95:E1:24:24:18:E0:8B:48:0E X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2e:ea:30:4f:b7:a8:15:bd:ee:7b:93:c0:be:84:52:de:bb: 7d:ef:41:ec:9e:27:5a:a3:a0:bf:a3:f5:bd:ff:26:cb:6e:c2: 19:a3:96:9b:60:90:a3:5a:46:19:91:39:38:1e:d6:9d:30:c3: 3b:17:4f:55:e2:e6:3f:ff:ff:a3:e9:29:0c:d9:c9:a9:25:0c: b8:d5:cc:c1:13:6b:db:cd:6e:e6:db:a2:ea:98:b5:23:ba:f0: 9c:0f:f8:26:17:bc:ee:ed:d5:73:a1:4d:19:ba:5e:99:fd:89: a8:08:a6:98:71:57:1a:c1:17:bc:25:c8:c1:e5:74:e0:99:5d: e0:0f:40:3d:77:69:19:48:6c:48:58:86:9b:b6:fd:4b:4a:50: 32:28:6c:82:0e:0e:fe:d4:46:8e:ee:f2:f1:bf:e8:db:28:41: 4a:8c:69:a5:b5:76:03:0d:91:8a:db:ad:65:d3:2c:ea:3e:7f: f1:00:6b:ca:73:d3:39:9e:11:96:5a:f7:59:3e:47:54:64:66: c4:eb:a4:03:92:65:6f:bc:09:26:fb:3d:23:3c:a2:49:6f:ea: a9:1e:ed:6d:c1:cb:2d:b1:40:96:14:9c:74:6e:9e:df:bc:3c: 01:a0:09:ba:92:b7:db:02:a0:0a:7d:bf:30:32:c7:00:64:91: e6:5e:80:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGl384ryT2J6P0R/jW6PeM1/6dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA4MjMwNzA1NDFaFw0yNTA4MjYwOTQ4NDFaMDMxMTAvBgNV BAMTKDFDNDhGRDk0MUMzRTlERTAyOUVDMjI5NUUxMjQyNDE4RTA4QjQ4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtmCLScDVsCqjkLwgWpOT0LLY EOsRbv7Txb2wiU+WhVoQ069Eq/u/M7e52FX87WZkU1sLqszdlh7dRE2gAsDS8tLy QQMRMyUQwOywjwjfmpfzw0AeD+eVvUjeNXG39DQGRtpiPUe2cxSPn6Vx/5Jhr/9O Un0GDiKngobwdQ0nNoac623Jrbnm5gpvk0us6k1vjia3DBNURKtJHby7nUF4lVQ9 fXVzl3x4YkPuVUS8CJBEDT0Mriz9WchKoKov3v+a9iQPEwLjEBOqm7B4GtWgbTYm FHCHcThI4GOVFRuJhOzDnte43SPzKt9Zz0/qEFpQq+E1pAt65nQNpBlLgnT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEj9lBw+neAp7CKV4SQkGOCLSA4wHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAu6jBPt6gVve57k8C+hFLeu33vQeyeJ1qj oL+j9b3/JstuwhmjlptgkKNaRhmROTge1p0wwzsXT1Xi5j///6PpKQzZyaklDLjV zMETa9vNbubbouqYtSO68JwP+CYXvO7t1XOhTRm6Xpn9iagIpphxVxrBF7wlyMHl dOCZXeAPQD13aRlIbEhYhpu2/UtKUDIobIIODv7URo7u8vG/6NsoQUqMaaW1dgMN kYrbrWXTLOo+f/EAa8pz0zmeEZZa91k+R1RkZsTrpAOSZW+8CSb7PSM8oklv6qke 7W3Byy2xQJYUnHRunt+8PAGgCbqSt9sCoAp9vzAyxwBkkeZegMk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:53 2025 by rpki-client