$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: wUHcckFgygcXsnHsqmQiYGugoDQhmYLgMZaMC1baVyg= Subject key identifier: 23:7A:08:B7:D6:B9:51:B4:5A:72:9B:1F:02:A7:B6:96:94:74:F0:36 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 544AF8A1D73AEAF5BCD3E0358BE614EFD3CC1478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 036E Signing time: Thu 21 Aug 2025 19:21:48 +0000 Manifest this update: Thu 21 Aug 2025 19:16:48 +0000 Manifest next update: Mon 25 Aug 2025 06:36:48 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: 9KeQtRtCL+mCRrCOSFvGwdQOJjb4dJAduUIBobpaZyQ=) 2: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4a:f8:a1:d7:3a:ea:f5:bc:d3:e0:35:8b:e6:14:ef:d3:cc:14:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Aug 21 19:16:48 2025 GMT Not After : Aug 25 06:36:48 2025 GMT Subject: CN=237A08B7D6B951B45A729B1F02A7B6969474F036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:3d:8d:fb:9b:88:9f:9b:14:28:b0:ad:a9: 89:bd:7d:57:6c:8e:72:ba:54:46:58:b6:cd:22:0c: 73:90:ce:a4:39:5e:25:a1:aa:55:8f:7d:cf:c1:c8: 38:86:ba:5d:0d:81:8d:4e:9c:e8:ea:4c:41:ff:1d: 11:f2:7b:79:c4:b9:16:33:04:1d:72:81:af:3b:f0: 9f:82:b3:9b:2b:4a:53:1d:4d:ed:eb:7b:e8:df:22: bc:59:6d:a1:ab:98:ca:c7:79:9f:d7:bf:0e:3e:cf: 9d:37:39:49:9a:35:c2:00:af:27:10:12:24:81:f3: 52:1a:f4:46:6b:c4:3f:ba:ac:a4:49:33:9e:0f:dc: c5:f4:ed:dd:88:5b:4e:e2:fd:a4:d4:70:1c:84:4b: c8:5c:e1:b3:44:63:28:13:4d:6b:7d:7a:20:6c:d5: 83:b6:e9:40:e1:c4:da:81:e4:ac:d4:04:7f:7a:a6: f3:bf:92:1c:0a:10:37:40:f4:77:a0:95:25:88:18: 02:f8:84:89:28:17:ae:58:91:d3:61:91:4a:7d:2f: 55:88:44:5f:6d:dd:66:16:f0:54:1b:a7:a9:f6:42: 21:ed:32:ae:b4:86:e6:1d:27:5d:ba:10:53:18:6e: 1d:45:1a:4f:16:b0:88:0a:04:80:3d:27:b2:91:a8: dd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7A:08:B7:D6:B9:51:B4:5A:72:9B:1F:02:A7:B6:96:94:74:F0:36 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:61:ea:c0:12:bc:38:4c:64:99:d2:01:62:a9:f8:c2:b3:3b: 29:9e:2b:26:1f:2f:04:d8:ed:5c:e4:42:d3:00:c7:80:b9:30: 3a:36:df:3e:68:a9:b6:4d:03:72:a3:24:84:cd:55:62:92:c1: 4a:f6:33:45:a6:79:98:db:44:69:f7:02:c4:d9:ca:5e:42:76: 9f:8e:d1:f4:e5:81:03:3b:50:bf:d4:c9:d4:77:88:33:7a:91: 33:e9:52:13:65:cb:54:46:0f:d0:d5:73:a8:2a:98:da:f7:02: a6:3c:10:42:1b:48:2c:56:37:c1:f6:c9:1a:2d:ab:6c:3d:f2: 9a:7e:21:7b:7d:f0:79:71:ec:f2:71:d8:55:cb:e8:1f:af:02: 8f:09:32:c6:cd:72:a8:bf:f2:23:7e:41:92:57:ca:93:a6:03: 42:69:9b:7c:00:63:57:81:4a:d8:4a:23:83:b0:cf:f9:67:27: 41:6e:fa:5b:d9:28:6d:b4:e5:ed:36:f3:d4:14:81:99:30:96: 1e:d7:f5:0a:14:d9:c4:c4:b2:58:f0:bf:0e:f1:ff:6a:c5:b2: 6f:04:70:9e:f3:aa:46:be:5d:7b:22:ff:f8:b5:b1:30:23:59: c2:db:c7:08:c2:dc:cb:2c:08:19:19:96:0e:12:24:20:8e:46: 61:59:60:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEr4odc66vW80+A1i+YU79PMFHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTA4MjExOTE2NDhaFw0yNTA4MjUwNjM2NDhaMDMxMTAvBgNV BAMTKDIzN0EwOEI3RDZCOTUxQjQ1QTcyOUIxRjAyQTdCNjk2OTQ3NEYwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWT2N+5uIn5sUKLCtqYm9fVds jnK6VEZYts0iDHOQzqQ5XiWhqlWPfc/ByDiGul0NgY1OnOjqTEH/HRHye3nEuRYz BB1yga878J+Cs5srSlMdTe3re+jfIrxZbaGrmMrHeZ/Xvw4+z503OUmaNcIArycQ EiSB81Ia9EZrxD+6rKRJM54P3MX07d2IW07i/aTUcByES8hc4bNEYygTTWt9eiBs 1YO26UDhxNqB5KzUBH96pvO/khwKEDdA9HeglSWIGAL4hIkoF65YkdNhkUp9L1WI RF9t3WYW8FQbp6n2QiHtMq60huYdJ126EFMYbh1FGk8WsIgKBIA9J7KRqN3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3oIt9a5UbRacpsfAqe2lpR08DYwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9h6sASvDhMZJnSAWKp+MKzOymeKyYfLwTY 7VzkQtMAx4C5MDo23z5oqbZNA3KjJITNVWKSwUr2M0WmeZjbRGn3AsTZyl5Cdp+O 0fTlgQM7UL/UydR3iDN6kTPpUhNly1RGD9DVc6gqmNr3AqY8EEIbSCxWN8H2yRot q2w98pp+IXt98Hlx7PJx2FXL6B+vAo8JMsbNcqi/8iN+QZJXypOmA0Jpm3wAY1eB SthKI4Owz/lnJ0Fu+lvZKG205e0289QUgZkwlh7X9QoU2cTEsljwvw7x/2rFsm8E cJ7zqka+XXsi//i1sTAjWcLbxwjC3MssCBkZlg4SJCCORmFZYDA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:03:20 2025 by rpki-client