$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: sawQz8rV+KmFohF9uXIzketbfQRSzAXmLcPQRH531Vo= Subject key identifier: 30:3B:40:FC:A1:55:1C:67:AD:BD:69:90:97:42:9F:C2:79:2B:68:B2 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 3829DD08C4111332340E21874ED90883F3487AFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0237 Signing time: Sat 23 Aug 2025 03:51:41 +0000 Manifest this update: Sat 23 Aug 2025 03:46:41 +0000 Manifest next update: Tue 26 Aug 2025 11:55:41 +0000 Files and hashes: 1: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 2: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) 3: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 4: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) 5: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: G2i3sVsr/2tY5U9Vr2r0CCm0U5LK1Nky3m1I4Q4keQk=) 6: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:29:dd:08:c4:11:13:32:34:0e:21:87:4e:d9:08:83:f3:48:7a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Aug 23 03:46:41 2025 GMT Not After : Aug 26 11:55:41 2025 GMT Subject: CN=303B40FCA1551C67ADBD699097429FC2792B68B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c7:de:f7:86:32:bb:f1:e2:05:5e:90:67:6b: 78:4d:f6:19:fc:df:db:7d:48:f2:dd:9b:5e:54:2f: 77:9b:d6:36:dc:f2:d5:54:e5:07:08:f9:ff:04:74: 63:fc:d8:1e:53:f1:13:7f:e6:31:c9:1d:8a:db:c7: 1e:de:15:a5:8d:45:aa:85:29:00:e1:89:a7:d4:65: c1:a7:f4:05:1b:2e:74:0f:4b:3e:e3:28:cf:56:27: 2d:af:eb:ab:20:da:cf:1a:1d:f4:de:cc:a3:fa:de: 2b:2f:b4:7d:0e:95:c7:8f:09:53:13:2f:3f:b6:d3: f6:20:5a:32:d7:12:e3:70:a0:74:83:67:22:2d:52: cb:d7:d7:59:95:c1:49:b5:31:de:e5:6a:c0:73:4c: 35:05:d0:8d:28:fd:dc:4f:45:04:ec:a0:d2:8d:03: 4e:89:1c:f2:7c:91:94:db:fb:d8:56:5c:54:6c:f2: f1:c0:5b:70:9a:d4:d4:a7:0a:fb:f9:e6:c2:56:f4: 70:e8:62:d3:38:47:da:4d:31:d8:46:1e:e3:4f:98: 9c:3f:c6:23:04:23:2d:42:cd:eb:2b:67:fe:4b:69: e5:d6:7f:6f:56:99:ba:01:40:1d:8b:e6:b9:d2:2d: 8b:a5:f2:67:86:3a:88:7e:df:ed:ae:ae:59:0b:97: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3B:40:FC:A1:55:1C:67:AD:BD:69:90:97:42:9F:C2:79:2B:68:B2 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:62:20:72:1e:11:26:4c:ac:e3:a9:17:31:a5:a8:73:85: 47:4c:d1:ea:7a:47:5e:99:ff:61:bf:55:8b:f4:5f:0e:50:b1: af:98:bd:28:89:a6:1f:62:be:4f:d5:88:65:81:ea:92:59:bb: 23:f3:be:0a:4a:1e:39:30:9e:6f:b8:da:07:21:c5:a9:71:85: 70:80:62:c6:04:79:4a:e7:34:92:98:e5:f0:1a:82:e3:dd:ec: ca:29:1a:b7:fb:5a:81:ed:31:ba:d4:ca:b1:99:ae:87:f9:4f: 5f:ba:a7:ab:65:e7:42:f5:6e:03:ff:06:25:85:89:c6:c2:78: 31:41:c6:0c:d4:5b:36:ff:f5:67:17:3e:a0:c0:27:f2:98:b5: 2b:26:dd:b7:05:41:77:94:9b:ea:3d:7d:25:11:42:e1:c0:b2: f8:aa:1c:9a:51:2a:8c:cc:5f:86:aa:a7:d9:f8:43:94:b1:f7: c1:bf:71:03:1a:3e:90:75:c4:10:b7:87:ba:37:11:f0:48:68: e2:6b:9e:79:1f:72:34:a5:b3:70:ed:5f:45:9b:d7:33:f0:70: 02:9b:84:d0:f1:5b:9b:8b:2f:1b:0b:9a:d8:05:6a:a5:39:a4: 41:7a:32:90:cb:67:7e:60:bd:16:00:ff:9d:09:99:2f:22:36: b6:4f:b3:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCndCMQREzI0DiGHTtkIg/NIevowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTA4MjMwMzQ2NDFaFw0yNTA4MjYxMTU1NDFaMDMxMTAvBgNV BAMTKDMwM0I0MEZDQTE1NTFDNjdBREJENjk5MDk3NDI5RkMyNzkyQjY4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpx973hjK78eIFXpBna3hN9hn8 39t9SPLdm15UL3eb1jbc8tVU5QcI+f8EdGP82B5T8RN/5jHJHYrbxx7eFaWNRaqF KQDhiafUZcGn9AUbLnQPSz7jKM9WJy2v66sg2s8aHfTezKP63isvtH0OlcePCVMT Lz+20/YgWjLXEuNwoHSDZyItUsvX11mVwUm1Md7lasBzTDUF0I0o/dxPRQTsoNKN A06JHPJ8kZTb+9hWXFRs8vHAW3Ca1NSnCvv55sJW9HDoYtM4R9pNMdhGHuNPmJw/ xiMEIy1CzesrZ/5LaeXWf29WmboBQB2L5rnSLYul8meGOoh+3+2urlkLl8kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDtA/KFVHGetvWmQl0KfwnkraLIwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD10YiByHhEmTKzjqRcxpahzhUdM0ep6R16Z /2G/VYv0Xw5Qsa+YvSiJph9ivk/ViGWB6pJZuyPzvgpKHjkwnm+42gchxalxhXCA YsYEeUrnNJKY5fAaguPd7MopGrf7WoHtMbrUyrGZrof5T1+6p6tl50L1bgP/BiWF icbCeDFBxgzUWzb/9WcXPqDAJ/KYtSsm3bcFQXeUm+o9fSURQuHAsviqHJpRKozM X4aqp9n4Q5Sx98G/cQMaPpB1xBC3h7o3EfBIaOJrnnkfcjSls3DtX0Wb1zPwcAKb hNDxW5uLLxsLmtgFaqU5pEF6MpDLZ35gvRYA/50JmS8iNrZPs8I= -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:08 2025 by rpki-client