$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: dZmp8ByG8UjIAZgIGLBN49BZMNpD2xKyRLzyprqhjwk= Subject key identifier: 1C:ED:77:01:BF:4A:75:E3:19:FE:0C:B7:55:0B:E3:FD:D7:50:49:7D Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 198CCA0E8B8C9E0F90D9C2B5476F7344F62E0C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 0371 Signing time: Thu 21 Aug 2025 23:52:16 +0000 Manifest this update: Thu 21 Aug 2025 23:47:16 +0000 Manifest next update: Mon 25 Aug 2025 03:41:16 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: 5HesoSlCAqDjGSJ5I0M62edJh9o3qfcenHKFIKjUeT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8c:ca:0e:8b:8c:9e:0f:90:d9:c2:b5:47:6f:73:44:f6:2e:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Aug 21 23:47:16 2025 GMT Not After : Aug 25 03:41:16 2025 GMT Subject: CN=1CED7701BF4A75E319FE0CB7550BE3FDD750497D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:49:70:55:b3:77:bc:1f:a9:f9:5d:f2:0d: da:4c:63:5e:1a:72:ed:e6:12:37:33:2b:b3:92:13: 6c:d6:76:ba:d6:43:7e:e2:b0:fe:2f:cb:8a:c8:ef: d5:52:90:42:31:46:2a:73:9f:e9:79:45:af:92:ad: 52:4b:58:21:c1:9b:86:15:83:c3:35:1a:3b:7d:49: 64:68:18:65:19:b0:e1:19:98:f8:7a:6f:b9:db:36: d1:b3:57:fb:17:8c:93:ae:64:59:83:05:c8:90:dc: 63:2b:8e:61:5d:8d:d3:2e:af:f6:a6:5a:0d:56:d4: 1c:3c:88:bd:09:0e:c5:4e:93:fa:fc:d2:3c:10:ca: e6:01:67:2b:c7:a4:12:41:45:c2:4c:77:fc:43:60: 9b:52:f7:97:3b:22:95:cc:20:15:50:7c:b7:88:93: 05:a2:a6:a8:e2:60:de:b9:60:9b:a8:39:91:5c:37: b8:90:b3:60:f1:03:ee:b0:f4:09:2a:d0:09:9f:69: b7:01:b7:4a:bf:b0:e1:ae:cb:68:cd:8c:70:d0:f4: e8:b0:f5:ae:4e:e8:49:4d:df:d6:78:10:1d:4e:17: b2:a8:c5:46:bc:cc:a7:ee:aa:7d:09:9a:d3:50:06: d0:2e:8e:de:21:95:ef:56:d6:22:49:69:f1:bd:9d: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:ED:77:01:BF:4A:75:E3:19:FE:0C:B7:55:0B:E3:FD:D7:50:49:7D X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:07:69:4f:58:96:f0:3d:12:5e:8e:3f:4d:db:00:2a:21:84: 3b:da:3f:ae:bb:c9:9a:28:d3:59:d7:57:f7:2d:5f:94:80:78: c8:07:09:9d:f8:0a:52:6b:24:bf:00:26:89:cf:45:84:86:c5: 25:fc:14:45:89:4c:4a:6c:37:ae:66:a9:95:8a:0b:ae:0c:3e: 4f:09:c1:0f:94:e5:80:70:84:e8:21:a5:85:3b:49:00:f5:98: ef:b4:26:e1:d4:d0:e8:d7:40:07:24:af:c9:3c:99:e7:ec:26: be:c7:13:79:6a:53:f1:07:eb:d7:4b:23:06:fe:43:57:63:cb: de:6c:ef:ac:dc:d3:7f:0e:6a:a5:70:06:d1:5a:34:52:b4:fb: 1c:55:96:a3:7c:06:33:c9:86:a6:9c:c5:c6:ce:b7:ec:62:88: 8f:3b:1b:47:1b:e8:dd:2b:af:49:d8:10:65:88:66:82:ba:49: 3b:81:9c:5e:5f:54:75:83:f7:85:84:2e:d4:e8:ca:00:b8:ad: 24:66:8d:e2:39:5e:be:4c:c0:0f:59:04:da:f7:9a:2c:01:d1: 47:3f:41:79:c5:a3:cd:cd:c0:81:b3:02:df:0a:36:41:19:5d: 64:e1:f4:64:e7:95:fe:ee:06:21:f1:01:fe:74:da:c0:6c:f9: d4:84:c7:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYzKDouMng+Q2cK1R29zRPYuDIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTA4MjEyMzQ3MTZaFw0yNTA4MjUwMzQxMTZaMDMxMTAvBgNV BAMTKDFDRUQ3NzAxQkY0QTc1RTMxOUZFMENCNzU1MEJFM0ZERDc1MDQ5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJ0lwVbN3vB+p+V3yDdpMY14a cu3mEjczK7OSE2zWdrrWQ37isP4vy4rI79VSkEIxRipzn+l5Ra+SrVJLWCHBm4YV g8M1Gjt9SWRoGGUZsOEZmPh6b7nbNtGzV/sXjJOuZFmDBciQ3GMrjmFdjdMur/am Wg1W1Bw8iL0JDsVOk/r80jwQyuYBZyvHpBJBRcJMd/xDYJtS95c7IpXMIBVQfLeI kwWipqjiYN65YJuoOZFcN7iQs2DxA+6w9Akq0AmfabcBt0q/sOGuy2jNjHDQ9Oiw 9a5O6ElN39Z4EB1OF7KoxUa8zKfuqn0JmtNQBtAujt4hle9W1iJJafG9nRpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHO13Ab9KdeMZ/gy3VQvj/ddQSX0wHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEHaU9YlvA9El6OP03bACohhDvaP667yZoo 01nXV/ctX5SAeMgHCZ34ClJrJL8AJonPRYSGxSX8FEWJTEpsN65mqZWKC64MPk8J wQ+U5YBwhOghpYU7SQD1mO+0JuHU0OjXQAckr8k8mefsJr7HE3lqU/EH69dLIwb+ Q1djy95s76zc038OaqVwBtFaNFK0+xxVlqN8BjPJhqacxcbOt+xiiI87G0cb6N0r r0nYEGWIZoK6STuBnF5fVHWD94WELtToygC4rSRmjeI5Xr5MwA9ZBNr3miwB0Uc/ QXnFo83NwIGzAt8KNkEZXWTh9GTnlf7uBiHxAf502sBs+dSEx/s= -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:49 2025 by rpki-client