$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: LrfrPuN4nEE8bGrI5caJ+67pyiP+lLzMWqe1ZpZKklw= Subject key identifier: E8:3B:23:D3:F3:9E:C9:EC:8F:73:6C:48:8D:31:FB:C9:DE:9D:86:42 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 773DAD516CFE4D32554E12BEAE0D863F91C1F12A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: D8 Signing time: Sat 23 Aug 2025 06:10:56 +0000 Manifest this update: Sat 23 Aug 2025 06:05:56 +0000 Manifest next update: Tue 26 Aug 2025 07:06:56 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=) 2: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: 6vuMIKGrcJE9f4V8O2zkIRUylpL7c5GOE8HDtNLjJI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3d:ad:51:6c:fe:4d:32:55:4e:12:be:ae:0d:86:3f:91:c1:f1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Aug 23 06:05:56 2025 GMT Not After : Aug 26 07:06:56 2025 GMT Subject: CN=E83B23D3F39EC9EC8F736C488D31FBC9DE9D8642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:4c:dd:f4:63:ef:c5:03:43:6d:62:46:8b: 68:16:84:53:22:70:e4:ca:e8:e5:5a:16:ba:be:ad: 9b:79:bf:c4:d5:88:04:56:b9:e9:1f:3a:79:05:4e: eb:63:76:6e:59:05:ac:00:ca:be:9b:59:dd:4d:e9: 42:d0:1e:8b:af:fa:78:ac:2b:60:6d:e3:19:da:26: ba:91:1b:ae:5b:06:d5:10:04:24:f4:b0:f4:64:29: b9:a2:e8:88:a4:d7:77:b6:ff:d8:3d:c5:c8:66:de: 30:13:5d:1d:09:52:96:70:f4:e4:43:c3:42:3a:64: bd:d4:31:48:d5:d9:e2:5f:f5:48:12:e6:f0:13:8f: e7:13:cf:01:91:d9:7f:b9:82:07:38:c7:8a:0e:5d: b3:65:5f:5b:18:74:49:09:6d:98:bd:0a:15:18:67: 70:b4:67:f4:cd:1a:41:b5:57:2e:6a:1e:4c:d3:f7: b5:8a:72:77:86:53:d8:7b:15:1c:1b:0f:8f:c7:82: 11:09:b1:93:cd:50:3b:c4:8b:f2:c8:ee:43:00:b1: 57:14:0c:a1:e9:22:b6:f5:a9:9a:f9:c7:b5:05:1f: 2e:cb:a2:81:d4:18:e8:91:ec:99:ea:ba:e0:93:35: 3a:ef:3f:fe:b0:91:0e:8f:2d:cb:8a:3e:72:10:f1: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:23:D3:F3:9E:C9:EC:8F:73:6C:48:8D:31:FB:C9:DE:9D:86:42 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:62:bc:e6:f9:48:62:57:b6:e8:69:da:fb:b9:81:ed:a4:14: 97:6c:64:a5:f5:8b:a2:01:8d:9e:6e:de:41:c4:df:99:eb:c0: ef:e5:26:9d:6e:40:dd:96:21:88:31:91:af:af:e0:ff:55:86: 00:06:e6:bb:ff:5b:de:e7:82:d6:6e:4d:9d:d9:4f:19:a2:de: 48:b6:34:7f:a6:7a:33:68:ad:91:c2:62:38:15:b3:76:57:dc: e0:eb:cd:b0:ec:f2:6f:11:14:ca:8b:56:e2:33:84:05:9d:e8: 8c:94:1c:86:37:56:ea:d0:34:39:4e:43:8d:5a:b6:1d:f2:42: 26:88:7e:78:8f:c8:ec:9b:0e:f6:a3:06:02:fa:c2:63:cd:66: 3e:33:f1:8a:d0:20:bc:72:b1:16:ad:6d:d4:21:00:9e:9f:bf: 44:56:1a:31:32:5f:cc:50:a1:3a:87:80:43:6a:6c:7e:8b:76: 2f:52:74:da:43:79:66:37:a6:1a:a4:7e:df:35:cc:b5:24:5f: f9:fb:29:3d:d9:1a:1f:0e:61:e0:7f:f7:6b:bf:51:a7:26:48: 90:8a:9b:df:20:05:23:e4:c0:6e:73:24:c4:fc:cf:22:19:9d: 9e:d5:e6:08:d0:68:cc:0d:11:66:49:cf:e1:e8:00:e9:75:71: 7a:31:79:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdz2tUWz+TTJVThK+rg2GP5HB8SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNTA4MjMwNjA1NTZaFw0yNTA4MjYwNzA2NTZaMDMxMTAvBgNV BAMTKEU4M0IyM0QzRjM5RUM5RUM4RjczNkM0ODhEMzFGQkM5REU5RDg2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpUzd9GPvxQNDbWJGi2gWhFMi cOTK6OVaFrq+rZt5v8TViARWuekfOnkFTutjdm5ZBawAyr6bWd1N6ULQHouv+nis K2Bt4xnaJrqRG65bBtUQBCT0sPRkKbmi6Iik13e2/9g9xchm3jATXR0JUpZw9ORD w0I6ZL3UMUjV2eJf9UgS5vATj+cTzwGR2X+5ggc4x4oOXbNlX1sYdEkJbZi9ChUY Z3C0Z/TNGkG1Vy5qHkzT97WKcneGU9h7FRwbD4/HghEJsZPNUDvEi/LI7kMAsVcU DKHpIrb1qZr5x7UFHy7LooHUGOiR7JnquuCTNTrvP/6wkQ6PLcuKPnIQ8e9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Dsj0/OeyeyPc2xIjTH7yd6dhkIwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdivOb5SGJXtuhp2vu5ge2kFJdsZKX1i6IB jZ5u3kHE35nrwO/lJp1uQN2WIYgxka+v4P9VhgAG5rv/W97ngtZuTZ3ZTxmi3ki2 NH+mejNorZHCYjgVs3ZX3ODrzbDs8m8RFMqLVuIzhAWd6IyUHIY3VurQNDlOQ41a th3yQiaIfniPyOybDvajBgL6wmPNZj4z8YrQILxysRatbdQhAJ6fv0RWGjEyX8xQ oTqHgENqbH6Ldi9SdNpDeWY3phqkft81zLUkX/n7KT3ZGh8OYeB/92u/UacmSJCK m98gBSPkwG5zJMT8zyIZnZ7V5gjQaMwNEWZJz+HoAOl1cXoxef0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:38 2025 by rpki-client