$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: X1Qqqm2cpug4I0bAl25oz3/WPn8R18DDvWD+Opgsi94= Subject key identifier: 06:86:99:41:93:52:81:F4:DB:7A:29:A2:A3:41:04:F4:65:34:61:D4 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 2F088195513A9544E3F700792DA3496559CE888E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: F2 Signing time: Sat 23 Aug 2025 09:32:18 +0000 Manifest this update: Sat 23 Aug 2025 09:27:18 +0000 Manifest next update: Tue 26 Aug 2025 17:47:18 +0000 Files and hashes: 1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: Utit0+VR6FlWSCPXKIPEgt/r8ZiUIVGTjwMz6Z0yMdw=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:08:81:95:51:3a:95:44:e3:f7:00:79:2d:a3:49:65:59:ce:88:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Aug 23 09:27:18 2025 GMT Not After : Aug 26 17:47:18 2025 GMT Subject: CN=06869941935281F4DB7A29A2A34104F4653461D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:b3:3e:53:45:48:9c:b9:ff:c3:95:b6:6a: c3:3e:20:db:c2:3d:ae:64:30:62:5f:47:bd:5f:ae: 14:51:5d:ff:c6:b3:a1:a9:60:cf:a1:4d:2f:91:5e: 3d:d7:1a:fb:b7:9d:4c:46:6d:bf:98:85:e2:c1:44: d6:36:d4:95:c8:93:6d:eb:32:e2:a3:63:d0:7f:6c: b9:5a:2d:7a:ad:ec:60:b5:71:7c:07:50:a4:84:59: 03:42:af:b8:58:4b:a2:5d:80:5b:48:03:1c:01:61: 74:68:b8:2a:65:a8:f2:6f:a5:b8:85:31:26:c9:d2: 43:31:df:ed:ef:d1:b4:ec:d4:c2:26:62:5d:01:c1: c9:a1:45:c2:1c:6b:c2:78:67:e3:75:60:18:b8:3c: e6:ad:68:3f:b7:1f:41:d4:4b:d0:69:90:f4:ed:d6: 02:e0:5e:d1:61:5b:6c:cf:4a:be:d1:32:f2:85:94: 5a:e6:41:4e:9e:95:be:e7:fe:9b:8d:75:f7:53:9c: 91:b4:0c:42:58:d6:4d:70:b2:e9:84:f1:0f:ae:74: 8d:14:89:c8:89:89:4c:d7:98:99:90:97:bd:e3:86: 4d:1d:a3:ef:32:49:f9:9e:19:9e:2a:93:58:99:9f: b2:ed:8d:7b:62:7e:aa:bb:77:51:9c:12:5d:d3:80: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:86:99:41:93:52:81:F4:DB:7A:29:A2:A3:41:04:F4:65:34:61:D4 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:90:d3:c3:94:55:8e:0f:de:ce:0f:a5:fa:f8:20:b1:41:a8: e9:fc:a0:10:a4:71:21:67:84:15:0c:97:0e:63:b2:6f:6a:c9: b3:ce:a1:5c:af:e8:77:a3:35:1a:03:07:cb:eb:84:8a:26:41: ad:6c:81:5d:8a:78:03:25:7a:bf:92:9a:f6:d3:ef:e9:1d:7b: ec:ad:af:1a:16:1f:fe:3e:e2:92:40:ef:64:00:60:26:e7:40: b3:0f:bb:e5:aa:fd:f7:c9:8d:34:63:cb:6d:8e:88:90:4c:b5: 3a:cb:05:bb:6f:7c:96:2f:f2:d5:ff:7b:1c:34:b8:8a:0a:10: ec:15:bc:62:38:06:9f:fd:88:67:a7:06:06:92:0c:53:37:f9: ae:73:6d:dd:57:01:f6:a5:c2:ed:80:b2:3b:c8:b2:ae:29:50: 6e:91:25:b5:51:85:f9:7b:c6:45:7c:3b:43:a7:85:25:a9:0d: 85:fa:16:6f:ec:56:42:0d:dc:97:cb:0f:df:4d:c9:33:c9:11: bf:53:b0:37:13:2a:f0:27:c1:8d:c6:49:ce:b2:3c:94:72:a7: 7d:ee:d8:ee:12:4b:d8:15:24:d1:8f:82:d2:45:df:c4:31:ae: 73:45:a7:47:05:af:29:a8:9a:c5:00:ac:be:b6:7c:63:39:06: cc:97:ad:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwiBlVE6lUTj9wB5LaNJZVnOiI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTA4MjMwOTI3MThaFw0yNTA4MjYxNzQ3MThaMDMxMTAvBgNV BAMTKDA2ODY5OTQxOTM1MjgxRjREQjdBMjlBMkEzNDEwNEY0NjUzNDYxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsLM+U0VInLn/w5W2asM+INvC Pa5kMGJfR71frhRRXf/Gs6GpYM+hTS+RXj3XGvu3nUxGbb+YheLBRNY21JXIk23r MuKjY9B/bLlaLXqt7GC1cXwHUKSEWQNCr7hYS6JdgFtIAxwBYXRouCplqPJvpbiF MSbJ0kMx3+3v0bTs1MImYl0BwcmhRcIca8J4Z+N1YBi4POataD+3H0HUS9BpkPTt 1gLgXtFhW2zPSr7RMvKFlFrmQU6elb7n/puNdfdTnJG0DEJY1k1wsumE8Q+udI0U iciJiUzXmJmQl73jhk0do+8ySfmeGZ4qk1iZn7LtjXtifqq7d1GcEl3TgFn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBoaZQZNSgfTbeimio0EE9GU0YdQwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuQ08OUVY4P3s4Ppfr4ILFBqOn8oBCkcSFn hBUMlw5jsm9qybPOoVyv6HejNRoDB8vrhIomQa1sgV2KeAMler+SmvbT7+kde+yt rxoWH/4+4pJA72QAYCbnQLMPu+Wq/ffJjTRjy22OiJBMtTrLBbtvfJYv8tX/exw0 uIoKEOwVvGI4Bp/9iGenBgaSDFM3+a5zbd1XAfalwu2AsjvIsq4pUG6RJbVRhfl7 xkV8O0OnhSWpDYX6Fm/sVkIN3JfLD99NyTPJEb9TsDcTKvAnwY3GSc6yPJRyp33u 2O4SS9gVJNGPgtJF38QxrnNFp0cFrymomsUArL62fGM5BsyXrb0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:53 2025 by rpki-client