$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: oAye7KqK+gk3TVZbSR8r+6iBvBJfTdRnq5aWjJQlkHQ= Subject key identifier: 83:F6:14:A6:C2:40:00:2B:9E:48:05:74:87:74:B2:D1:39:A0:3E:DB Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 67DE1BB283186F0CF003EC4CE9B71001826E3811 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 0474 Signing time: Fri 22 Aug 2025 05:20:47 +0000 Manifest this update: Fri 22 Aug 2025 05:15:47 +0000 Manifest next update: Mon 25 Aug 2025 06:02:47 +0000 Files and hashes: 1: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: jCsgPMaJ7cmhKdyps6sFFU7qeLY4uj9unkXSydHzPgk=) 2: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) 3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) 4: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) 5: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:de:1b:b2:83:18:6f:0c:f0:03:ec:4c:e9:b7:10:01:82:6e:38:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Aug 22 05:15:47 2025 GMT Not After : Aug 25 06:02:47 2025 GMT Subject: CN=83F614A6C240002B9E4805748774B2D139A03EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:01:01:ff:7d:73:f5:e4:2b:0b:b2:f0:6d: 17:4c:c0:a2:4a:57:ec:56:3f:87:ba:44:e9:c1:2d: 64:ab:4c:2f:c9:af:02:6d:d0:2e:61:f0:76:f7:2a: 54:b5:60:88:1c:df:72:37:87:cd:d7:09:1c:ef:8d: 31:c9:80:3c:8a:71:8a:ab:f2:7d:a9:4b:72:60:a4: c3:bd:96:5c:2f:03:16:3b:1f:79:b7:b4:70:6d:a6: 91:db:df:a2:50:88:62:f7:8e:8e:e3:40:0e:b0:c3: c2:7d:04:ba:ed:02:f7:32:cd:0a:09:75:54:f9:b0: 50:81:c6:84:5c:51:e2:59:36:7f:ee:53:70:7f:fa: f6:37:fc:65:ae:9a:0a:20:6b:26:39:32:de:1d:42: f1:69:0b:e2:58:e9:e7:f0:bf:99:ae:67:f8:41:c1: 66:e3:0b:dc:b8:8d:f5:d1:8b:94:92:7c:22:04:44: 10:33:42:47:ff:d8:07:5d:02:94:bc:b4:7c:61:65: ca:06:d2:31:97:80:76:ed:a8:f6:72:f0:86:39:ff: 8e:73:22:85:96:20:af:d0:63:fa:55:77:df:10:be: f9:dc:64:71:cc:b2:46:c7:3f:48:57:8d:36:a3:6c: 6e:26:97:33:da:f4:c7:7a:07:c8:af:c6:4d:80:0d: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:14:A6:C2:40:00:2B:9E:48:05:74:87:74:B2:D1:39:A0:3E:DB X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:dc:a8:ea:9f:c5:e8:37:f2:f7:34:9e:d6:3f:de:03:04:4d: a2:ca:b1:bc:d2:a5:99:d6:f7:bf:91:2f:d9:21:26:0f:da:b0: ba:a8:90:ed:08:a0:7b:4d:6e:9e:8e:db:49:a5:26:34:67:db: 6f:0a:da:bb:f5:e5:8c:1a:ea:da:6d:4f:51:94:21:79:68:d3: 61:be:4d:3e:65:5c:a3:d6:be:2b:1f:f3:e2:56:cd:1b:3e:5f: 6a:98:95:21:99:ab:59:be:65:5e:ff:fb:7a:f1:41:58:ac:33: 49:86:72:16:3b:c3:58:7f:01:bd:41:a7:3b:81:6d:2e:19:c1: 50:e2:46:f4:4f:fa:cd:f3:a9:3e:c2:bd:44:75:1a:55:a4:fd: 6e:8e:94:e7:b8:47:ef:ef:5b:1c:88:fc:c5:e8:f3:99:51:32: e0:53:a0:70:4c:c6:aa:d5:62:c4:21:2e:33:d5:59:79:e4:e1: c2:09:a1:3f:fd:79:22:66:a2:90:48:16:aa:10:78:ce:e5:cc: e1:8f:e8:3d:14:6d:db:6c:7c:f3:46:53:7e:a9:89:f7:89:9c: ff:63:76:52:92:6a:4d:6c:e4:58:1a:ca:96:60:01:5b:09:79: 87:f6:b3:d5:08:aa:69:76:37:12:74:c9:15:30:0f:c8:24:19: 0e:26:b6:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ94bsoMYbwzwA+xM6bcQAYJuOBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTA4MjIwNTE1NDdaFw0yNTA4MjUwNjAyNDdaMDMxMTAvBgNV BAMTKDgzRjYxNEE2QzI0MDAwMkI5RTQ4MDU3NDg3NzRCMkQxMzlBMDNFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3wEB/31z9eQrC7LwbRdMwKJK V+xWP4e6ROnBLWSrTC/JrwJt0C5h8Hb3KlS1YIgc33I3h83XCRzvjTHJgDyKcYqr 8n2pS3JgpMO9llwvAxY7H3m3tHBtppHb36JQiGL3jo7jQA6ww8J9BLrtAvcyzQoJ dVT5sFCBxoRcUeJZNn/uU3B/+vY3/GWumgogayY5Mt4dQvFpC+JY6efwv5muZ/hB wWbjC9y4jfXRi5SSfCIERBAzQkf/2AddApS8tHxhZcoG0jGXgHbtqPZy8IY5/45z IoWWIK/QY/pVd98QvvncZHHMskbHP0hXjTajbG4mlzPa9Md6B8ivxk2ADTDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/YUpsJAACueSAV0h3Sy0TmgPtswHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHncqOqfxeg38vc0ntY/3gMETaLKsbzSpZnW 97+RL9khJg/asLqokO0IoHtNbp6O20mlJjRn228K2rv15Ywa6tptT1GUIXlo02G+ TT5lXKPWvisf8+JWzRs+X2qYlSGZq1m+ZV7/+3rxQVisM0mGchY7w1h/Ab1BpzuB bS4ZwVDiRvRP+s3zqT7CvUR1GlWk/W6OlOe4R+/vWxyI/MXo85lRMuBToHBMxqrV YsQhLjPVWXnk4cIJoT/9eSJmopBIFqoQeM7lzOGP6D0UbdtsfPNGU36pifeJnP9j dlKSak1s5FgaypZgAVsJeYf2s9UIqml2NxJ0yRUwD8gkGQ4mtj0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:12:29 2025 by rpki-client