$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: US2NjVJuxRa/SYMfoulZNaq3gMJg7G5Q9AMzBZj8erI= Subject key identifier: 0E:96:4B:8D:23:B9:E5:B5:49:8D:00:8F:F8:B7:68:F4:73:BB:33:40 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 7B8FCBCB11AD4EFE388A813F77F9C6D9F75B0FCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0121 Signing time: Thu 21 Aug 2025 10:50:45 +0000 Manifest this update: Thu 21 Aug 2025 10:45:45 +0000 Manifest next update: Sun 24 Aug 2025 21:33:45 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: GdFQ16ys5THdsOt0JvI+f1x6ys8/DZCpLZHhWmZPVdg=) 2: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: tACltKJtkEprvjmK5voXFjlaTciCgEI63x7bR93swao=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 0vbyY37xfecmYZZ06+vwEcy+Hnbk4rhg/muBGmLCtEA=) 4: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: 8rRzKbXxM7JbqlliFf/wDyC7Rc9CVk2AoWCVylO5lhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8f:cb:cb:11:ad:4e:fe:38:8a:81:3f:77:f9:c6:d9:f7:5b:0f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Aug 21 10:45:45 2025 GMT Not After : Aug 24 21:33:45 2025 GMT Subject: CN=0E964B8D23B9E5B5498D008FF8B768F473BB3340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:3e:f8:a9:c1:dc:fc:77:ec:07:fc:3b:db: c4:a4:29:f2:af:ef:12:69:55:6f:25:29:e9:3d:9a: 9e:df:7c:eb:43:d5:8f:47:17:71:9b:3a:a9:41:8e: 61:2e:aa:77:ec:3c:21:ee:f0:df:a1:98:9d:08:6c: cb:a5:a0:d2:5e:c8:59:84:6d:20:37:f9:9c:d1:5e: 91:a2:27:62:b8:99:79:e1:d0:c9:c9:6d:4e:07:44: ad:80:89:1e:7d:a3:30:cf:a4:c3:d0:49:0f:36:09: 45:05:15:47:5a:75:22:d3:69:25:af:76:03:ed:1b: 83:1c:d1:48:81:98:08:1a:4e:e4:93:3e:56:dd:de: 1e:d6:8a:43:0f:fe:2e:7e:57:d1:03:bb:6e:47:5a: ba:ab:9b:ba:c2:10:59:e4:7b:1d:45:cb:8d:ca:26: e3:d0:77:e5:fe:30:2f:d4:0c:e3:55:b1:31:ea:34: 14:f5:d5:69:d1:e4:e8:ed:73:b3:ed:fe:12:37:58: 9e:87:aa:db:98:05:d7:77:b1:4e:2b:c6:78:dd:13: dc:db:ea:ed:f0:a5:36:96:f9:bf:5e:bb:29:ef:98: 13:f2:82:b4:18:d8:28:d4:04:21:f0:e9:c7:b5:d4: 17:57:14:15:a3:a7:65:4c:57:aa:55:36:c5:b1:c3: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:96:4B:8D:23:B9:E5:B5:49:8D:00:8F:F8:B7:68:F4:73:BB:33:40 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:11:8e:6c:8f:be:84:d0:83:69:0f:25:7f:45:fc:1a:97:b3: 70:8a:6b:ab:33:2b:fe:9c:27:14:c4:3f:7f:37:9b:b8:be:82: 67:4c:43:be:56:be:25:32:61:32:cb:68:b1:d0:d1:7d:8e:c5: e7:ea:18:af:74:97:3a:33:d0:47:0e:de:72:63:e6:0a:32:93: a6:d1:0f:f6:b1:93:34:d7:33:b5:ef:18:65:53:89:43:db:d1: b1:d2:30:f4:9b:5a:74:81:44:f6:78:39:1a:23:ff:d5:a7:e5: 42:a0:85:45:df:30:1f:ee:cd:46:fa:9b:55:50:eb:c8:2c:30: e0:62:3d:28:37:fc:00:99:5f:4e:d3:2f:c8:b1:60:61:3c:83: af:01:7a:26:15:c3:aa:2b:01:4e:52:86:95:88:06:9f:19:9e: ff:b5:9d:d8:03:41:f2:d8:c1:00:64:79:c2:df:89:b0:92:2b: 2e:d3:6c:92:7a:8f:0c:1c:4f:57:e5:14:5b:58:77:6f:1d:6a: 0c:4a:e5:d1:7e:f9:3c:e5:2a:ea:a0:0a:9f:b2:8c:0f:89:13: c1:19:a4:9a:89:f1:5b:79:6f:81:fc:94:87:d1:d4:1e:ab:ee: 0f:b0:ff:85:cc:7a:af:d4:c3:58:c4:b6:08:22:60:f1:eb:91: 68:d2:1f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4/LyxGtTv44ioE/d/nG2fdbD8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTA4MjExMDQ1NDVaFw0yNTA4MjQyMTMzNDVaMDMxMTAvBgNV BAMTKDBFOTY0QjhEMjNCOUU1QjU0OThEMDA4RkY4Qjc2OEY0NzNCQjMzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkID74qcHc/HfsB/w728SkKfKv 7xJpVW8lKek9mp7ffOtD1Y9HF3GbOqlBjmEuqnfsPCHu8N+hmJ0IbMuloNJeyFmE bSA3+ZzRXpGiJ2K4mXnh0MnJbU4HRK2AiR59ozDPpMPQSQ82CUUFFUdadSLTaSWv dgPtG4Mc0UiBmAgaTuSTPlbd3h7WikMP/i5+V9EDu25HWrqrm7rCEFnkex1Fy43K JuPQd+X+MC/UDONVsTHqNBT11WnR5Ojtc7Pt/hI3WJ6HqtuYBdd3sU4rxnjdE9zb 6u3wpTaW+b9euynvmBPygrQY2CjUBCHw6ce11BdXFBWjp2VMV6pVNsWxw75VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpZLjSO55bVJjQCP+Ldo9HO7M0AwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoRjmyPvoTQg2kPJX9F/BqXs3CKa6szK/6c JxTEP383m7i+gmdMQ75WviUyYTLLaLHQ0X2OxefqGK90lzoz0EcO3nJj5goyk6bR D/axkzTXM7XvGGVTiUPb0bHSMPSbWnSBRPZ4ORoj/9Wn5UKghUXfMB/uzUb6m1VQ 68gsMOBiPSg3/ACZX07TL8ixYGE8g68BeiYVw6orAU5ShpWIBp8Znv+1ndgDQfLY wQBkecLfibCSKy7TbJJ6jwwcT1flFFtYd28dagxK5dF++TzlKuqgCp+yjA+JE8EZ pJqJ8Vt5b4H8lIfR1B6r7g+w/4XMeq/Uw1jEtggiYPHrkWjSH4M= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:44 2025 by rpki-client