$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: zrlBIV+EkixFYyM/MJk5LyLFD7WhY9vri07NHiS45YI= Subject key identifier: 47:4D:F6:ED:C8:16:0C:16:A7:D8:10:D2:25:C1:B6:49:06:41:E4:1A Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 651AD63B58A8C1DD8E053692255DAB1843592C4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 09:11:17 +0000 Manifest this update: Sat 23 Aug 2025 09:06:17 +0000 Manifest next update: Tue 26 Aug 2025 11:10:17 +0000 Files and hashes: 1: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=) 2: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=) 3: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: u4ZwuXUMd2v+I3eSLiYA1qgCtjRtJNs5/yjfVxbF3ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1a:d6:3b:58:a8:c1:dd:8e:05:36:92:25:5d:ab:18:43:59:2c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Aug 23 09:06:17 2025 GMT Not After : Aug 26 11:10:17 2025 GMT Subject: CN=474DF6EDC8160C16A7D810D225C1B6490641E41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:4a:a9:03:20:e4:24:75:eb:fd:f3:fc:19: c9:28:14:45:c2:29:89:f8:4c:18:58:2d:51:ca:2b: ef:c7:80:15:c4:07:7d:f0:40:d9:a6:05:34:d1:0c: c9:12:3f:15:51:9d:f8:3c:60:fd:80:05:b4:0c:75: 9d:91:d3:0d:e1:66:d7:04:f3:90:eb:5a:74:16:38: d9:2b:25:ca:93:b6:36:eb:22:33:57:2c:de:dc:5e: a4:3d:00:24:21:d8:48:79:be:6d:42:89:b5:37:ef: e5:f3:81:ec:34:81:56:1f:28:be:1c:85:17:e4:ff: 41:45:ac:e8:f3:73:38:3e:c1:8d:e2:c2:21:f8:75: c5:8d:3d:f4:ab:d5:92:d7:8e:64:a7:e9:bc:68:5f: 55:e2:3a:ed:75:2e:d5:c4:80:7a:ba:ee:20:a9:ca: ae:d2:b0:b8:aa:4d:1d:c3:22:9f:28:71:31:ca:ec: 61:68:88:fd:a1:15:48:67:25:59:10:4f:c8:32:ad: 89:7f:8c:22:aa:97:48:23:be:3d:a7:06:ba:b2:02: 41:05:54:8a:3d:8a:ca:09:4a:1d:a0:4e:0d:93:c5: 9b:b9:be:3f:12:6a:4c:f0:f8:9f:9b:a1:3e:e7:09: fc:6e:1a:38:ad:88:ae:22:12:21:22:ba:2d:73:16: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4D:F6:ED:C8:16:0C:16:A7:D8:10:D2:25:C1:B6:49:06:41:E4:1A X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5f:fe:fb:60:5d:ac:66:cb:67:10:68:ef:c0:a7:03:40:ba: 49:ba:64:64:2b:e1:52:12:1b:38:15:2f:21:55:9e:a8:c8:bf: 8a:3b:01:05:ae:8b:95:24:49:54:9d:09:df:d0:8c:48:a8:08: 37:34:45:c1:22:e3:f1:64:44:f3:fe:b6:05:aa:f9:1f:22:b3: e0:2b:17:07:50:02:71:a6:74:b9:57:a6:21:19:a4:53:e5:9c: 57:f1:5a:b4:b9:61:9e:c8:d7:26:70:94:99:8d:77:2c:27:7e: 45:0e:f5:40:18:2c:d0:f5:3b:45:e0:ce:98:72:44:df:3e:3e: e7:cb:29:79:a5:bd:03:45:f3:c0:4d:c6:49:06:42:db:55:d0: 0c:f4:67:7a:d7:e0:58:d4:32:43:4c:51:dd:2f:3f:01:de:9c: df:43:76:92:be:11:3e:40:48:34:15:dd:0f:9e:3d:95:6d:97: d2:17:5e:48:82:d2:20:2b:cc:d8:fc:37:c3:b6:cc:36:a3:5e: 06:02:85:37:5f:b6:98:95:9b:d8:84:c9:8a:8c:ed:c6:d9:d8: a3:18:ef:93:78:52:81:e9:2a:78:9c:6c:a0:8e:d3:ca:39:14: 28:f5:fa:57:7d:12:f7:dc:14:53:11:2a:7e:04:5b:f7:2b:a0: 66:f9:68:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRrWO1iowd2OBTaSJV2rGENZLEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNTA4MjMwOTA2MTdaFw0yNTA4MjYxMTEwMTdaMDMxMTAvBgNV BAMTKDQ3NERGNkVEQzgxNjBDMTZBN0Q4MTBEMjI1QzFCNjQ5MDY0MUU0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGUqpAyDkJHXr/fP8GckoFEXC KYn4TBhYLVHKK+/HgBXEB33wQNmmBTTRDMkSPxVRnfg8YP2ABbQMdZ2R0w3hZtcE 85DrWnQWONkrJcqTtjbrIjNXLN7cXqQ9ACQh2Eh5vm1CibU37+Xzgew0gVYfKL4c hRfk/0FFrOjzczg+wY3iwiH4dcWNPfSr1ZLXjmSn6bxoX1XiOu11LtXEgHq67iCp yq7SsLiqTR3DIp8ocTHK7GFoiP2hFUhnJVkQT8gyrYl/jCKql0gjvj2nBrqyAkEF VIo9isoJSh2gTg2TxZu5vj8Sakzw+J+boT7nCfxuGjitiK4iEiEiui1zFifbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR0327cgWDBan2BDSJcG2SQZB5BowHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpf/vtgXaxmy2cQaO/ApwNAukm6ZGQr4VIS GzgVLyFVnqjIv4o7AQWui5UkSVSdCd/QjEioCDc0RcEi4/FkRPP+tgWq+R8is+Ar FwdQAnGmdLlXpiEZpFPlnFfxWrS5YZ7I1yZwlJmNdywnfkUO9UAYLND1O0Xgzphy RN8+PufLKXmlvQNF88BNxkkGQttV0Az0Z3rX4FjUMkNMUd0vPwHenN9DdpK+ET5A SDQV3Q+ePZVtl9IXXkiC0iArzNj8N8O2zDajXgYChTdftpiVm9iEyYqM7cbZ2KMY 75N4UoHpKnicbKCO08o5FCj1+ld9EvfcFFMRKn4EW/croGb5aPU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:48 2025 by rpki-client