$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: 7oS4TTMzWExnlC0wDuKOXLHchOXbS3u3ruq80lTJWFU= Subject key identifier: F6:EE:5A:CC:38:28:AD:36:83:44:0E:47:CD:7E:65:E6:BA:3B:4D:85 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 66578B9A44331E47B9A31C1172F1E72F41F5A918 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: B8 Signing time: Thu 21 Aug 2025 15:11:36 +0000 Manifest this update: Thu 21 Aug 2025 15:06:36 +0000 Manifest next update: Sun 24 Aug 2025 19:30:36 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: JbFeGGEfcLOm7uILlVdY99oVX1p154vsV0DjgLFXheI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:57:8b:9a:44:33:1e:47:b9:a3:1c:11:72:f1:e7:2f:41:f5:a9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Aug 21 15:06:36 2025 GMT Not After : Aug 24 19:30:36 2025 GMT Subject: CN=F6EE5ACC3828AD3683440E47CD7E65E6BA3B4D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:59:97:fc:5b:e9:06:8e:67:4d:54:b7:70: 5d:39:d8:9e:3f:32:35:3c:5b:fd:eb:91:fb:a6:fb: 68:65:78:e8:7d:da:8c:a1:10:e5:4c:e0:1b:fe:d4: 8f:7e:b2:77:16:b4:00:90:5c:2f:f0:9e:f8:99:ca: d6:fa:06:78:b1:12:81:9e:b5:46:2e:e7:c8:86:61: 67:96:0e:a9:26:53:6a:a0:44:02:d0:60:61:56:c9: af:e5:f7:a3:76:f7:f3:73:3e:e7:ea:ac:3d:9d:f6: f3:e9:56:80:b3:f7:46:28:ac:da:4e:35:ab:11:8c: fb:02:74:35:40:96:39:30:6a:41:fe:2f:4b:21:3e: d0:e7:fb:62:bf:ac:21:43:a5:29:19:e6:9d:b5:ac: 97:3e:e8:24:3d:34:93:92:ed:ff:fb:37:98:18:29: 0a:97:64:22:9c:6f:4e:05:0a:62:73:7a:40:a9:29: 59:03:1f:f8:54:58:0e:25:74:91:9d:13:51:03:cf: e9:17:e0:37:f8:ad:3b:fe:d9:e6:14:ca:fe:10:14: 28:de:10:e5:ff:9e:ed:95:bd:d8:e2:61:05:f9:72: 9a:25:71:8d:4e:9f:d4:61:9f:28:f2:6e:62:9f:14: 78:51:e9:4a:9c:cc:1e:cc:a9:2a:5f:e9:5b:34:e3: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:5A:CC:38:28:AD:36:83:44:0E:47:CD:7E:65:E6:BA:3B:4D:85 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b5:19:de:d9:a9:bd:82:7d:5c:fe:3e:d4:74:84:fc:af:3c: 4f:a4:00:a1:11:29:db:a3:8c:eb:2c:7d:2c:11:45:7b:a7:54: 4a:0e:aa:5e:dd:64:49:15:58:e5:23:5e:4c:78:df:10:84:aa: a7:5c:26:a6:4f:52:9e:50:97:a8:93:ba:c2:4a:c5:a6:8c:2e: 0b:5b:7e:e1:63:0d:7b:62:62:b1:bf:57:ad:81:31:19:af:c7: eb:37:72:47:0f:a4:5b:c5:c5:12:fd:20:79:07:68:85:35:73: f1:ba:4d:c4:45:7e:7f:14:55:cb:51:03:7f:7e:9d:a8:fb:6d: 7f:01:ff:da:09:ab:a1:d2:92:40:67:d0:92:fb:35:d5:51:5a: 86:46:1f:47:9e:60:a2:b4:fd:41:19:37:14:e7:d9:bb:4a:97: 13:75:6e:e1:af:1d:57:5d:53:64:b6:d6:25:86:7f:c2:a6:eb: f2:e0:c4:a7:ce:b5:55:a0:52:0f:19:32:39:a8:20:21:1c:d3: 55:43:07:d7:5b:03:a6:f6:c7:00:68:42:26:28:a5:54:f4:e5: d8:f9:c4:aa:48:9f:b1:29:39:5c:a5:94:1b:a2:65:51:25:2d: c5:34:bd:d9:13:86:95:43:41:b4:a8:4d:b3:fd:e8:bc:f7:ce: 54:38:13:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZleLmkQzHke5oxwRcvHnL0H1qRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA4MjExNTA2MzZaFw0yNTA4MjQxOTMwMzZaMDMxMTAvBgNV BAMTKEY2RUU1QUNDMzgyOEFEMzY4MzQ0MEU0N0NEN0U2NUU2QkEzQjREODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4VmX/FvpBo5nTVS3cF052J4/ MjU8W/3rkfum+2hleOh92oyhEOVM4Bv+1I9+sncWtACQXC/wnviZytb6BnixEoGe tUYu58iGYWeWDqkmU2qgRALQYGFWya/l96N29/NzPufqrD2d9vPpVoCz90YorNpO NasRjPsCdDVAljkwakH+L0shPtDn+2K/rCFDpSkZ5p21rJc+6CQ9NJOS7f/7N5gY KQqXZCKcb04FCmJzekCpKVkDH/hUWA4ldJGdE1EDz+kX4Df4rTv+2eYUyv4QFCje EOX/nu2VvdjiYQX5cpolcY1On9RhnyjybmKfFHhR6UqczB7MqSpf6Vs04505AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9u5azDgorTaDRA5HzX5l5ro7TYUwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC1Gd7Zqb2CfVz+PtR0hPyvPE+kAKERKduj jOssfSwRRXunVEoOql7dZEkVWOUjXkx43xCEqqdcJqZPUp5Ql6iTusJKxaaMLgtb fuFjDXtiYrG/V62BMRmvx+s3ckcPpFvFxRL9IHkHaIU1c/G6TcRFfn8UVctRA39+ naj7bX8B/9oJq6HSkkBn0JL7NdVRWoZGH0eeYKK0/UEZNxTn2btKlxN1buGvHVdd U2S21iWGf8Km6/LgxKfOtVWgUg8ZMjmoICEc01VDB9dbA6b2xwBoQiYopVT05dj5 xKpIn7EpOVyllBuiZVElLcU0vdkThpVDQbSoTbP96Lz3zlQ4Ewo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:56 2025 by rpki-client