$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: r0GEBBFgvsaPx7LMsTwBhSK+p8hhk/W1Zo6yCT+tBmM= Subject key identifier: 3D:99:E5:61:70:D7:B9:64:B9:FC:4B:10:EB:05:01:9C:2F:2B:C5:06 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 30F3A3E106E6C3E0FD2537AB090AF21F4F84BA46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 01E2 Signing time: Fri 22 Aug 2025 03:10:45 +0000 Manifest this update: Fri 22 Aug 2025 03:05:45 +0000 Manifest next update: Mon 25 Aug 2025 06:58:45 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 2: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: xjQdhDQ+dTRmQmxsBq54MXKjJ9MtrL46bnOnvxEsXx8=) 3: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 4: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: /2YOGO2hNhfeQ1c8zIWjiPXqHpVN+S17yuvkesHqL/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f3:a3:e1:06:e6:c3:e0:fd:25:37:ab:09:0a:f2:1f:4f:84:ba:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Aug 22 03:05:45 2025 GMT Not After : Aug 25 06:58:45 2025 GMT Subject: CN=3D99E56170D7B964B9FC4B10EB05019C2F2BC506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:13:90:b9:44:be:9a:45:ee:a7:41:32:7a:0e: 16:a7:2b:86:48:d2:89:bb:58:3d:c3:58:e3:3d:63: 73:b8:13:4d:64:5e:bf:06:29:a2:ba:63:a2:c1:95: 27:56:89:ed:47:87:ed:ab:88:98:56:fc:df:4c:f3: ed:57:d5:72:b8:e3:b8:f3:9f:bd:89:94:37:53:c2: 96:6e:78:2c:d2:3c:f4:9b:d0:32:25:31:55:ea:03: 5d:09:dd:ca:eb:bf:5a:ef:e6:67:75:4a:9c:38:96: b7:21:21:ff:88:53:37:2e:fe:ea:17:48:33:83:2f: d5:46:aa:7a:e4:3f:ad:36:26:72:f6:d9:dd:4c:d3: ff:03:e1:ce:9c:e6:63:93:ab:f6:0e:48:bb:a2:50: 54:2a:19:4c:0b:c5:1a:ba:43:f1:0b:5d:f1:36:b8: 47:55:2c:bb:89:50:b0:ff:9e:a0:b2:23:d8:37:b7: 4e:20:10:a3:61:44:59:85:a4:29:47:12:1d:4c:30: 08:63:68:7a:10:30:97:9f:14:bf:5b:f0:4b:4e:9a: a6:4b:02:06:69:41:6c:ae:bd:29:1e:76:08:77:ec: b5:e6:01:1f:a8:af:61:70:e5:21:1a:1d:45:23:72: d2:8a:37:6c:40:f5:22:7e:1c:d8:aa:41:ef:de:bf: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:E5:61:70:D7:B9:64:B9:FC:4B:10:EB:05:01:9C:2F:2B:C5:06 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0b:47:76:80:1d:16:95:59:19:b6:51:4d:b9:57:10:06:11: 81:5b:b2:d0:63:16:e2:2d:59:80:78:f6:76:a4:b8:e1:5d:72: e4:27:7f:07:5c:6b:4f:df:76:33:0f:f0:70:43:a4:cc:37:4a: 96:b1:8f:5d:fc:f4:76:f2:61:85:3b:8f:fa:35:1d:7c:01:ad: 20:36:36:f6:63:11:b5:fd:9e:2a:9d:99:33:e7:09:10:1c:f8: 67:cd:4b:94:ae:90:54:12:cb:90:58:0f:fd:47:cd:cf:47:f7: 38:f7:11:a0:9e:01:1b:50:eb:57:78:cd:c4:47:7d:88:36:1e: 94:53:25:eb:3a:11:8b:1c:3c:53:bd:26:9c:8c:8e:65:7d:89: 6e:3b:78:69:2a:59:e3:7c:6c:71:46:5f:a3:7a:f8:bf:a6:57: 07:93:16:0d:4e:38:b7:73:75:be:30:1f:dc:b3:e7:06:ed:d8: b4:85:6a:76:9d:16:e7:e2:c9:24:c6:d5:55:0d:21:54:14:e5: e8:03:76:37:9a:06:cc:51:b7:aa:6e:4f:70:01:c7:4a:ea:cc: 35:5b:9b:e5:93:4d:42:2c:43:3e:85:38:0f:47:95:cd:b0:69: 36:9d:41:28:ac:41:7b:33:a8:2c:88:5b:74:47:60:2f:f8:15: 45:a0:88:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPOj4Qbmw+D9JTerCQryH0+EukYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTA4MjIwMzA1NDVaFw0yNTA4MjUwNjU4NDVaMDMxMTAvBgNV BAMTKDNEOTlFNTYxNzBEN0I5NjRCOUZDNEIxMEVCMDUwMTlDMkYyQkM1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXE5C5RL6aRe6nQTJ6DhanK4ZI 0om7WD3DWOM9Y3O4E01kXr8GKaK6Y6LBlSdWie1Hh+2riJhW/N9M8+1X1XK447jz n72JlDdTwpZueCzSPPSb0DIlMVXqA10J3crrv1rv5md1Spw4lrchIf+IUzcu/uoX SDODL9VGqnrkP602JnL22d1M0/8D4c6c5mOTq/YOSLuiUFQqGUwLxRq6Q/ELXfE2 uEdVLLuJULD/nqCyI9g3t04gEKNhRFmFpClHEh1MMAhjaHoQMJefFL9b8EtOmqZL AgZpQWyuvSkedgh37LXmAR+or2Fw5SEaHUUjctKKN2xA9SJ+HNiqQe/ev8ZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZnlYXDXuWS5/EsQ6wUBnC8rxQYwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKULR3aAHRaVWRm2UU25VxAGEYFbstBjFuIt WYB49nakuOFdcuQnfwdca0/fdjMP8HBDpMw3Spaxj1389HbyYYU7j/o1HXwBrSA2 NvZjEbX9niqdmTPnCRAc+GfNS5SukFQSy5BYD/1Hzc9H9zj3EaCeARtQ61d4zcRH fYg2HpRTJes6EYscPFO9JpyMjmV9iW47eGkqWeN8bHFGX6N6+L+mVweTFg1OOLdz db4wH9yz5wbt2LSFanadFufiySTG1VUNIVQU5egDdjeaBsxRt6puT3ABx0rqzDVb m+WTTUIsQz6FOA9Hlc2waTadQSisQXszqCyIW3RHYC/4FUWgiMY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:40 2025 by rpki-client