$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: GPxO5eyu2tqb2bfk/plaaJi4K+m1kU9ZHAe1tk12kto= Subject key identifier: 1A:57:28:BD:9C:48:AD:8D:DC:FC:EB:A1:D9:C5:DE:E5:E1:4A:1E:37 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 62E44FDAC8E7F36835746B772C158ACE94FDCF09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 044B Signing time: Sat 23 Aug 2025 03:20:01 +0000 Manifest this update: Sat 23 Aug 2025 03:15:01 +0000 Manifest next update: Tue 26 Aug 2025 09:15:01 +0000 Files and hashes: 1: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) 2: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: utZG1LDBJltn5aKogzl45/+/k5BDhiOWOphn4H7pgSc=) 3: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e4:4f:da:c8:e7:f3:68:35:74:6b:77:2c:15:8a:ce:94:fd:cf:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Aug 23 03:15:01 2025 GMT Not After : Aug 26 09:15:01 2025 GMT Subject: CN=1A5728BD9C48AD8DDCFCEBA1D9C5DEE5E14A1E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:20:58:97:e0:3c:c3:92:8f:a9:12:01:b0: 16:34:90:0b:3a:da:7a:af:bb:59:f1:75:dd:2f:fd: 09:60:70:f8:7e:ea:34:d6:65:ad:35:be:58:f7:cf: 32:78:1e:9b:7b:6d:65:83:15:5c:37:b2:75:5f:3e: d7:8a:f9:7d:13:3e:62:fe:d7:3b:85:c7:60:fc:6b: 6e:71:6e:53:be:49:12:7e:26:20:2b:e1:d8:2f:46: e4:5d:cc:d1:9d:54:2c:76:e3:01:58:8a:65:fd:19: 54:73:aa:6b:99:d0:cd:33:33:db:52:ae:e7:48:85: cb:6c:5b:7f:b0:d9:53:ba:5e:72:71:5d:3e:2f:20: 8d:43:63:14:44:a5:3a:db:4c:8e:4e:3c:4b:27:74: 26:3e:94:a7:fd:98:bb:60:d4:ef:24:a8:f9:9e:cd: 4a:66:b3:d2:9a:af:30:d2:8d:32:97:be:fe:ba:6b: f9:54:bd:8e:3f:79:79:19:28:bb:f6:d9:be:63:6b: b9:dc:0b:67:1a:1e:7a:d4:e1:47:63:ea:9d:f0:98: aa:d3:a7:b2:70:d1:a4:73:32:a1:01:4a:6e:69:ba: b2:e0:4d:c1:9e:be:13:7d:2c:e3:21:7f:33:6b:fa: 6c:96:57:a9:93:7a:5b:20:ed:0a:79:12:78:87:a5: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:57:28:BD:9C:48:AD:8D:DC:FC:EB:A1:D9:C5:DE:E5:E1:4A:1E:37 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:30:df:35:94:0d:92:25:52:09:65:44:7e:a4:5d:0e:ca:27: 37:f4:02:9b:ee:98:b5:c0:a1:65:5e:29:d2:a9:5b:24:6f:82: 84:a2:9c:e5:a6:e2:e2:30:0a:a0:c3:3d:14:56:79:78:02:63: 1e:31:70:49:6f:27:70:d6:d8:41:f0:60:59:a3:e0:cd:10:c6: 1d:5e:b7:e6:aa:e2:b2:c1:ec:90:86:81:9e:b5:be:c2:87:67: 56:f4:8b:7d:09:0b:56:08:7d:91:61:70:7d:48:e0:8b:86:71: eb:4c:04:53:8a:49:a8:4d:c8:9f:46:fb:30:06:27:a6:a4:4e: fe:21:d6:a7:4f:31:62:22:f3:b5:6e:59:ed:a7:d7:64:7c:11: 1d:3d:41:a7:55:ba:e6:24:6c:2d:42:d7:b6:13:9e:a6:6f:58: 76:ab:f1:6c:6b:78:49:f5:bd:5d:ad:26:c5:5b:18:35:97:a4: 22:33:31:a2:b7:87:7a:34:23:8b:65:bc:08:e8:71:74:43:12: 19:49:a2:4b:ae:8c:39:f1:b9:35:29:d3:25:0d:4b:08:f2:03: 65:f2:f9:62:9a:3a:1a:a9:fa:eb:41:1e:d3:8b:fa:ee:0c:d6: 74:ba:0e:67:2f:47:7c:c5:6d:21:41:b1:a4:bc:12:3f:18:e0: 4c:d0:75:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuRP2sjn82g1dGt3LBWKzpT9zwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTA4MjMwMzE1MDFaFw0yNTA4MjYwOTE1MDFaMDMxMTAvBgNV BAMTKDFBNTcyOEJEOUM0OEFEOEREQ0ZDRUJBMUQ5QzVERUU1RTE0QTFFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GyBYl+A8w5KPqRIBsBY0kAs6 2nqvu1nxdd0v/QlgcPh+6jTWZa01vlj3zzJ4Hpt7bWWDFVw3snVfPteK+X0TPmL+ 1zuFx2D8a25xblO+SRJ+JiAr4dgvRuRdzNGdVCx24wFYimX9GVRzqmuZ0M0zM9tS rudIhctsW3+w2VO6XnJxXT4vII1DYxREpTrbTI5OPEsndCY+lKf9mLtg1O8kqPme zUpms9KarzDSjTKXvv66a/lUvY4/eXkZKLv22b5ja7ncC2caHnrU4Udj6p3wmKrT p7Jw0aRzMqEBSm5purLgTcGevhN9LOMhfzNr+myWV6mTelsg7Qp5EniHpZW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlcovZxIrY3c/Ouh2cXe5eFKHjcwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcw3zWUDZIlUgllRH6kXQ7KJzf0ApvumLXA oWVeKdKpWyRvgoSinOWm4uIwCqDDPRRWeXgCYx4xcElvJ3DW2EHwYFmj4M0Qxh1e t+aq4rLB7JCGgZ61vsKHZ1b0i30JC1YIfZFhcH1I4IuGcetMBFOKSahNyJ9G+zAG J6akTv4h1qdPMWIi87VuWe2n12R8ER09QadVuuYkbC1C17YTnqZvWHar8WxreEn1 vV2tJsVbGDWXpCIzMaK3h3o0I4tlvAjocXRDEhlJokuujDnxuTUp0yUNSwjyA2Xy +WKaOhqp+utBHtOL+u4M1nS6DmcvR3zFbSFBsaS8Ej8Y4EzQdYQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:14 2025 by rpki-client