$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: 9ysL4Z2TBb4rIeQVPLgYx39QpScsJd3vReBYjsMg0rw= Subject key identifier: 22:49:61:E4:68:EE:A3:26:66:05:2B:F7:75:62:09:9A:44:4E:63:C9 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 1C2CF7A8AE354A77A95F4C3389FC09A47054B22E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: BA Signing time: Sat 23 Aug 2025 03:40:55 +0000 Manifest this update: Sat 23 Aug 2025 03:35:55 +0000 Manifest next update: Tue 26 Aug 2025 10:57:55 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 2: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) 3: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 4: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: XOqd0o5PtZN3JbyitWJb2xKuqDkERKRcYqNpbCa7nPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:f7:a8:ae:35:4a:77:a9:5f:4c:33:89:fc:09:a4:70:54:b2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Aug 23 03:35:55 2025 GMT Not After : Aug 26 10:57:55 2025 GMT Subject: CN=224961E468EEA32666052BF77562099A444E63C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6e:4e:ef:da:47:9f:47:ba:b2:5d:26:c7:0e: 51:5b:e1:08:40:ed:d1:71:82:fb:a3:9c:b6:0d:50: dc:5e:9f:d4:86:b9:9c:44:ca:e2:e3:ff:c8:e9:5c: ea:ee:64:35:49:c0:ec:23:32:4d:c6:bb:57:26:1b: 62:d0:9e:39:58:62:15:b4:ff:6a:16:48:00:95:62: 26:02:bf:07:9f:41:c6:99:7d:f1:7b:62:2b:72:3c: f7:e5:f3:9c:84:6f:00:02:20:98:15:a6:a0:65:7e: c3:0e:62:c7:13:3d:a3:57:90:3c:51:b2:d7:9e:97: 8b:f1:e1:9b:86:90:65:da:68:0f:fc:2a:74:99:22: 2a:7d:10:56:a3:1c:ff:da:d1:1c:e8:2b:d9:c6:b2: c2:19:a3:dd:ed:22:48:a2:84:e1:96:7d:d8:9c:a7: 79:4a:02:f5:e3:f6:5e:ec:4c:e5:cd:bc:4c:e5:80: 5a:49:88:57:36:41:40:de:56:35:d7:a9:1d:a7:18: 30:47:04:90:b2:4e:d0:2e:fe:74:f4:26:ec:29:9b: ed:a2:0f:b5:3a:17:94:97:e2:98:83:fb:13:a4:33: b8:a8:fe:58:3a:36:71:a6:d6:bd:c1:fa:0c:39:c1: 17:06:10:29:8c:93:2c:d3:a3:ca:af:8f:1c:84:8c: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:49:61:E4:68:EE:A3:26:66:05:2B:F7:75:62:09:9A:44:4E:63:C9 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:63:88:fe:3b:53:71:8d:ee:f4:00:72:df:14:9c:c2:c9: bf:1c:c3:b8:95:95:1e:3f:28:c2:fa:5d:bb:dc:39:07:88:e2: e0:c8:81:40:0c:1d:b4:8e:55:c9:b9:db:7a:b4:91:15:a5:f6: de:40:4b:98:fd:f8:57:a6:34:ea:2e:5e:31:59:c0:06:65:11: aa:a3:5e:4c:e4:77:15:72:ed:b8:c0:a2:ff:a4:1a:7d:79:fc: 0b:90:d3:6a:45:d4:a0:e6:8c:81:fe:1c:41:ff:5a:b5:56:49: 4e:3e:15:77:a2:66:60:7d:9f:ba:37:59:0c:ba:db:bc:d6:80: 30:00:d1:89:93:bf:d6:e2:31:77:94:72:de:cf:6c:bc:1a:8c: ad:b7:92:e3:6e:97:60:1a:80:eb:46:4b:0b:80:c4:f3:dd:8c: df:73:c0:f0:24:cd:82:54:eb:d4:9a:fa:6d:81:9b:be:56:66: b5:86:22:9a:46:12:8e:94:b2:9b:93:be:43:ea:3c:b2:75:6f: a4:32:ca:78:ab:94:46:80:57:38:03:10:e8:ee:99:a9:ab:f3: a9:f8:13:17:9f:97:8d:18:78:e3:4e:2d:37:e2:ef:ec:22:9b: 47:44:a3:b1:01:c3:98:ca:10:ff:49:9a:ba:12:11:92:ef:f4: 53:01:cc:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCz3qK41SnepX0wzifwJpHBUsi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA4MjMwMzM1NTVaFw0yNTA4MjYxMDU3NTVaMDMxMTAvBgNV BAMTKDIyNDk2MUU0NjhFRUEzMjY2NjA1MkJGNzc1NjIwOTlBNDQ0RTYzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmbk7v2kefR7qyXSbHDlFb4QhA 7dFxgvujnLYNUNxen9SGuZxEyuLj/8jpXOruZDVJwOwjMk3Gu1cmG2LQnjlYYhW0 /2oWSACVYiYCvwefQcaZffF7YityPPfl85yEbwACIJgVpqBlfsMOYscTPaNXkDxR steel4vx4ZuGkGXaaA/8KnSZIip9EFajHP/a0RzoK9nGssIZo93tIkiihOGWfdic p3lKAvXj9l7sTOXNvEzlgFpJiFc2QUDeVjXXqR2nGDBHBJCyTtAu/nT0Juwpm+2i D7U6F5SX4piD+xOkM7io/lg6NnGm1r3B+gw5wRcGECmMkyzTo8qvjxyEjAPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIklh5GjuoyZmBSv3dWIJmkROY8kwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaSY4j+O1Nxje70AHLfFJzCyb8cw7iVlR4/ KML6XbvcOQeI4uDIgUAMHbSOVcm523q0kRWl9t5AS5j9+FemNOouXjFZwAZlEaqj XkzkdxVy7bjAov+kGn15/AuQ02pF1KDmjIH+HEH/WrVWSU4+FXeiZmB9n7o3WQy6 27zWgDAA0YmTv9biMXeUct7PbLwajK23kuNul2AagOtGSwuAxPPdjN9zwPAkzYJU 69Sa+m2Bm75WZrWGIppGEo6UspuTvkPqPLJ1b6QyynirlEaAVzgDEOjumamr86n4 Exefl40YeONOLTfi7+wim0dEo7EBw5jKEP9JmroSEZLv9FMBzN0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:59:11 2025 by rpki-client