$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: JYR8LV9yhKy2/Ux8JiFqT2h5JPNhRv/V98PfU8GGIsU= Subject key identifier: 4E:5A:FE:6B:A0:01:0C:CC:43:9C:51:CB:ED:46:9B:B7:71:E5:CF:C4 Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 6EA67CE891A2F47F3992B2AF1C278B477FD093F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: 0111 Signing time: Sat 23 Aug 2025 09:31:46 +0000 Manifest this update: Sat 23 Aug 2025 09:26:46 +0000 Manifest next update: Tue 26 Aug 2025 12:00:46 +0000 Files and hashes: 1: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: nlk9kDpk/BSuBGjIxDCCHEnpVQe5Pmyq5qHbN5r7XAU=) 2: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: 2+f63OFUgDBJhDYTvRZtXYOB/fbimzLH4ZQcZ0TuEDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a6:7c:e8:91:a2:f4:7f:39:92:b2:af:1c:27:8b:47:7f:d0:93:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Aug 23 09:26:46 2025 GMT Not After : Aug 26 12:00:46 2025 GMT Subject: CN=4E5AFE6BA0010CCC439C51CBED469BB771E5CFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:bc:e1:24:cb:63:8d:fe:28:ac:cd:8a:f9: b3:98:f4:cf:10:69:f3:23:9a:c9:ff:80:4c:5a:e7: 3c:af:e8:44:76:30:ce:f6:7f:dd:b2:17:16:3c:13: d2:c4:cf:0d:78:89:68:ff:8b:a8:dd:4d:9a:67:c3: 61:2e:b9:63:6c:95:9e:bc:03:11:6c:59:f1:e5:48: 2b:cb:e9:bf:4a:2f:01:cc:a3:f2:73:50:08:01:5c: 73:56:8f:b2:b0:bf:08:86:e1:bd:f2:41:5b:cf:b7: 56:58:47:15:ec:18:b0:2a:6f:4c:27:c0:e9:14:f8: d4:f2:e9:0a:1a:46:59:b0:6b:9f:b6:17:3c:35:61: 77:a9:61:90:5e:e7:0e:20:0e:b9:d4:f4:3b:77:e8: b6:6e:49:5c:ad:96:f2:f3:2c:00:06:35:ba:87:4a: 0e:46:45:20:0e:76:0b:f8:0f:06:53:b8:8e:09:e1: 01:fb:b3:8e:e4:b3:64:ac:a1:dc:ec:93:ff:95:6f: 3d:70:6e:41:a1:b2:b5:bf:31:d8:34:eb:ee:24:f8: 73:69:01:87:5e:41:6d:40:07:d9:74:3e:3b:f8:32: 7b:e9:15:54:77:72:83:e3:f9:64:77:02:ec:c1:30: 85:49:03:72:7c:78:24:b4:16:4a:89:e4:65:d6:a7: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5A:FE:6B:A0:01:0C:CC:43:9C:51:CB:ED:46:9B:B7:71:E5:CF:C4 X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f8:71:b9:c7:eb:b9:dd:59:eb:d2:16:a0:02:00:20:a8:b5: df:c1:58:54:76:c2:60:9b:0a:5e:c2:3c:3f:e7:1d:c5:1d:a0: 14:1a:98:d8:60:b0:2c:f8:d0:a5:d6:cd:3f:4f:eb:c7:75:b1: a0:7f:60:81:10:8f:1c:2d:b7:66:6f:37:44:ac:cc:ea:7f:42: ea:6b:56:96:b6:06:f6:be:0b:e1:20:6b:02:13:9e:33:50:6c: 83:3b:9b:4a:d1:e7:9d:20:d5:b1:95:49:c0:f2:10:c5:82:d3: 85:5b:0f:d8:f1:de:7e:d4:4d:0c:bc:dc:a8:bb:77:1f:dd:4f: e8:cd:cd:88:bb:7b:c5:ed:14:a3:ab:9d:2d:e2:f5:fc:6b:f6: aa:80:30:41:e5:60:a3:df:a0:0e:3e:52:35:44:c1:0e:06:20: f2:8e:e7:b7:8c:f5:4c:53:c3:94:c8:ca:3f:38:3e:46:42:8a: 95:32:b5:5d:63:a9:3a:12:9c:9f:74:b6:5c:ce:01:e9:6c:b2: 18:11:16:ff:62:d5:f6:b5:a9:94:fd:89:f9:37:ea:a0:ed:87: e5:47:a1:ff:84:54:0c:85:e3:86:14:b9:d2:8b:71:a6:4c:b5: 80:98:fd:3f:80:f8:cc:d5:ca:35:68:e2:fa:63:63:8a:f1:67: 12:c1:df:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqZ86JGi9H85krKvHCeLR3/Qk/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTA4MjMwOTI2NDZaFw0yNTA4MjYxMjAwNDZaMDMxMTAvBgNV BAMTKDRFNUFGRTZCQTAwMTBDQ0M0MzlDNTFDQkVENDY5QkI3NzFFNUNGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYLzhJMtjjf4orM2K+bOY9M8Q afMjmsn/gExa5zyv6ER2MM72f92yFxY8E9LEzw14iWj/i6jdTZpnw2EuuWNslZ68 AxFsWfHlSCvL6b9KLwHMo/JzUAgBXHNWj7KwvwiG4b3yQVvPt1ZYRxXsGLAqb0wn wOkU+NTy6QoaRlmwa5+2Fzw1YXepYZBe5w4gDrnU9Dt36LZuSVytlvLzLAAGNbqH Sg5GRSAOdgv4DwZTuI4J4QH7s47ks2Ssodzsk/+Vbz1wbkGhsrW/Mdg06+4k+HNp AYdeQW1AB9l0Pjv4MnvpFVR3coPj+WR3AuzBMIVJA3J8eCS0FkqJ5GXWpxd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTlr+a6ABDMxDnFHL7Uabt3Hlz8QwHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH4cbnH67ndWevSFqACACCotd/BWFR2wmCb Cl7CPD/nHcUdoBQamNhgsCz40KXWzT9P68d1saB/YIEQjxwtt2ZvN0SszOp/Qupr Vpa2Bva+C+EgawITnjNQbIM7m0rR550g1bGVScDyEMWC04VbD9jx3n7UTQy83Ki7 dx/dT+jNzYi7e8XtFKOrnS3i9fxr9qqAMEHlYKPfoA4+UjVEwQ4GIPKO57eM9UxT w5TIyj84PkZCipUytV1jqToSnJ90tlzOAelsshgRFv9i1fa1qZT9ifk36qDth+VH of+EVAyF44YUudKLcaZMtYCY/T+A+MzVyjVo4vpjY4rxZxLB36M= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:23 2025 by rpki-client