$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: 6JYWoMZOvxccAq4SsTqgdi8Kfku7oGcuqOF6T9AO91o= Subject key identifier: 99:77:D3:59:10:4F:86:78:DE:B8:90:C4:7C:EC:62:9B:1A:74:F6:69 Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 2BBA37BFC38E8965A1FEA2D788574B109E63B424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 01EC Signing time: Fri 22 Aug 2025 05:20:38 +0000 Manifest this update: Fri 22 Aug 2025 05:15:38 +0000 Manifest next update: Mon 25 Aug 2025 16:37:38 +0000 Files and hashes: 1: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) 2: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) 3: 2985976A4B3081770748882703E16497964D05A6.crl (hash: jR1e7nBrvpLUmmKuiz4CMjjAShOAtoyqVMdVDOc4IWE=) 4: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) 5: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) 6: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ba:37:bf:c3:8e:89:65:a1:fe:a2:d7:88:57:4b:10:9e:63:b4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Aug 22 05:15:38 2025 GMT Not After : Aug 25 16:37:38 2025 GMT Subject: CN=9977D359104F8678DEB890C47CEC629B1A74F669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:ff:b6:37:44:f9:03:fe:4b:56:ff:db:df: 6c:8b:cc:6c:ec:0a:af:8f:5a:c9:ba:91:36:45:66: 47:32:c0:86:65:73:e4:2e:99:46:d2:07:6a:5d:87: 71:cd:34:a1:9b:15:f4:52:bd:7c:71:22:f3:54:82: 24:dc:81:88:98:e5:3f:b9:ef:6b:6e:a2:e1:a8:0c: 60:e0:7a:01:a9:9f:2d:56:47:ff:23:95:75:4f:81: 14:b3:7c:47:48:99:50:40:3c:84:74:79:f5:cc:99: 60:1a:d9:2f:9e:a2:b2:52:ed:50:c0:9d:e0:fc:c5: 22:57:c8:5e:40:1a:16:b9:73:1a:e0:fc:b9:20:29: 1a:5e:cc:31:71:4c:99:ca:5e:12:62:68:c1:ad:73: bd:45:24:29:cf:0b:1d:3b:00:85:e2:c9:f0:51:09: 0f:11:74:47:f1:4f:9d:20:c1:f0:86:cb:14:1e:5b: 64:89:e1:6d:1e:c3:a2:e4:f5:37:b5:90:6b:e7:e3: 5c:21:42:ac:90:86:6b:d4:e7:4f:ef:c5:a8:f0:c8: 84:f9:45:ee:22:b9:82:61:62:13:7c:4d:26:ff:91: 73:56:78:88:7a:60:d5:61:87:32:5e:13:fb:5f:fe: fa:99:3a:52:0b:b9:0b:bc:77:c5:73:36:d0:47:00: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:77:D3:59:10:4F:86:78:DE:B8:90:C4:7C:EC:62:9B:1A:74:F6:69 X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:09:fc:82:c6:95:76:91:50:fa:11:a3:2f:16:5a:17:6c:19: cc:06:3a:79:8a:22:7e:bd:61:b1:bb:78:cf:46:1d:3d:ec:ec: f7:fe:8b:8b:5a:09:12:46:54:c9:fd:37:cb:a9:19:b0:49:f5: 34:9c:0a:be:eb:12:92:47:8e:38:88:c3:a8:65:2f:37:56:5b: 81:74:05:88:d6:a9:5d:f5:ea:4e:c6:3c:1e:e4:e1:ff:28:31: 18:e7:15:b5:37:02:4b:ec:81:c3:4d:d2:d4:43:4a:3d:3e:b2: b2:78:9c:f4:41:0f:82:91:14:64:22:28:12:a1:1f:a8:b5:2b: 93:27:43:ba:57:aa:68:a7:13:bd:9d:e3:9a:34:82:b3:20:08: 67:36:9d:df:f6:e0:c8:0f:b0:42:83:4c:67:24:7f:e3:2e:70: 7a:1e:eb:55:33:bd:59:a8:64:1d:5b:3e:7b:b6:df:d9:e6:e8: d7:54:4b:c1:af:1c:e9:5e:2e:7f:01:c7:2e:ba:7d:4e:ef:42: bc:96:22:6c:97:36:dc:6e:10:fa:cc:07:00:7b:b4:6a:4e:e9: 5e:b4:d1:b3:d4:33:3c:5e:04:f8:1f:b8:df:e6:48:87:fc:4a: 08:1d:7f:e1:d7:b5:1e:1d:a8:a8:27:fc:24:66:b0:96:38:6d: a3:69:07:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7o3v8OOiWWh/qLXiFdLEJ5jtCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNTA4MjIwNTE1MzhaFw0yNTA4MjUxNjM3MzhaMDMxMTAvBgNV BAMTKDk5NzdEMzU5MTA0Rjg2NzhERUI4OTBDNDdDRUM2MjlCMUE3NEY2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAP+2N0T5A/5LVv/b32yLzGzs Cq+PWsm6kTZFZkcywIZlc+QumUbSB2pdh3HNNKGbFfRSvXxxIvNUgiTcgYiY5T+5 72tuouGoDGDgegGpny1WR/8jlXVPgRSzfEdImVBAPIR0efXMmWAa2S+eorJS7VDA neD8xSJXyF5AGha5cxrg/LkgKRpezDFxTJnKXhJiaMGtc71FJCnPCx07AIXiyfBR CQ8RdEfxT50gwfCGyxQeW2SJ4W0ew6Lk9Te1kGvn41whQqyQhmvU50/vxajwyIT5 Re4iuYJhYhN8TSb/kXNWeIh6YNVhhzJeE/tf/vqZOlILuQu8d8VzNtBHAGG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXfTWRBPhnjeuJDEfOximxp09mkwHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoJ/ILGlXaRUPoRoy8WWhdsGcwGOnmKIn69 YbG7eM9GHT3s7Pf+i4taCRJGVMn9N8upGbBJ9TScCr7rEpJHjjiIw6hlLzdWW4F0 BYjWqV316k7GPB7k4f8oMRjnFbU3AkvsgcNN0tRDSj0+srJ4nPRBD4KRFGQiKBKh H6i1K5MnQ7pXqminE72d45o0grMgCGc2nd/24MgPsEKDTGckf+MucHoe61UzvVmo ZB1bPnu239nm6NdUS8GvHOleLn8Bxy66fU7vQryWImyXNtxuEPrMBwB7tGpO6V60 0bPUMzxeBPgfuN/mSIf8Sggdf+HXtR4dqKgn/CRmsJY4baNpB00= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:25 2025 by rpki-client