$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: XmwuGEWZh2aTTLtsamP49pI/2ilFF335bo/ZjL6VPiA= Subject key identifier: B2:19:25:29:09:45:E6:97:87:32:9A:2E:BD:99:87:12:D3:20:ED:2F Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 0F2D53349E8B43BE6D149A02104E437853061A12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 019C Signing time: Fri 22 Aug 2025 01:41:00 +0000 Manifest this update: Fri 22 Aug 2025 01:36:00 +0000 Manifest next update: Mon 25 Aug 2025 10:35:00 +0000 Files and hashes: 1: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: /vxTy8uV1sUdBFW7LOOMhXnTwXmT0d+4r5obQtj8O98=) 2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2d:53:34:9e:8b:43:be:6d:14:9a:02:10:4e:43:78:53:06:1a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Aug 22 01:36:00 2025 GMT Not After : Aug 25 10:35:00 2025 GMT Subject: CN=B21925290945E69787329A2EBD998712D320ED2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:ae:a4:ad:fb:b0:0b:37:48:af:8d:f1:58: 37:9e:16:23:c2:51:4f:db:40:d4:97:f4:a7:ad:cc: 80:ed:03:43:ff:ed:78:7a:53:d6:9b:e0:c1:7d:e9: 5b:bb:3e:7d:a0:76:49:95:19:8a:c3:51:e1:90:82: 83:6b:d3:f3:12:dd:42:60:1c:f0:d3:be:4d:d3:5f: 84:af:62:75:13:03:89:d1:6c:b4:db:ed:97:58:1d: e3:02:c5:2e:03:cb:85:44:db:fa:51:32:32:07:a2: 10:75:2f:aa:89:0e:a7:03:09:e8:a4:98:0f:39:ae: 97:9a:92:3a:57:e1:d4:61:00:d8:48:f0:fa:2e:f4: a2:9e:d4:ce:71:18:6b:2e:14:21:4d:37:bd:48:33: 19:bb:ff:b0:95:ff:71:32:10:1b:1c:e7:17:02:ab: e4:8e:0e:53:b4:d2:7f:f3:8e:b4:c9:c5:77:a5:eb: a5:24:f2:63:17:5f:e9:26:1c:be:18:16:c9:78:e7: 30:68:4f:ec:e2:1c:cb:3a:70:06:6a:dd:b4:e5:10: 37:8e:0f:01:6d:63:17:ff:44:4a:fa:e2:60:21:b7: 3f:ac:45:26:b3:50:89:a5:67:3a:17:84:1e:9a:72: 24:cc:bb:99:f7:91:cd:aa:2f:11:4b:77:c5:e3:58: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:19:25:29:09:45:E6:97:87:32:9A:2E:BD:99:87:12:D3:20:ED:2F X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:44:05:28:ad:f9:a0:ba:8d:d8:da:3d:cf:c2:5d:e2:52:35: f3:f9:ca:f1:0c:69:3c:f2:c7:81:c4:f9:96:5c:f3:ec:40:ae: 98:7e:d4:f4:79:77:33:0f:6b:ab:97:0f:05:83:99:fa:67:3d: 1a:09:0e:62:b5:f5:b5:72:7d:8a:7e:93:41:ad:a7:12:be:cc: 51:e1:ca:44:ef:a7:a0:f9:85:59:32:3f:3e:43:3c:cd:6b:c0: 4c:59:69:27:2a:9e:13:26:30:fc:22:33:25:85:0d:ed:93:d6: 34:75:ef:d1:5e:e4:54:27:b9:fe:15:b0:96:84:8f:6c:e7:76: 78:58:91:70:7e:af:ee:16:d3:a4:30:10:cf:bd:e8:20:28:82: dd:7f:b4:45:d1:e3:59:ac:e7:f7:e0:32:ed:8f:90:98:d5:70: 82:35:e7:fa:2e:02:c2:46:88:bd:10:06:8b:be:c5:f9:80:dd: 74:89:2e:94:60:95:61:b0:ff:e0:4b:35:88:7e:61:c7:79:00: d3:34:bc:01:6b:39:e5:7a:b8:77:76:21:a9:e9:f4:87:6b:be: 33:22:b6:f2:72:29:36:f7:88:5e:44:35:0b:39:9c:dd:9a:2b: 9c:cf:05:38:83:bd:a5:e5:0a:d8:02:db:2b:fe:b0:ae:6e:19: 4f:cc:41:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDy1TNJ6LQ75tFJoCEE5DeFMGGhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTA4MjIwMTM2MDBaFw0yNTA4MjUxMDM1MDBaMDMxMTAvBgNV BAMTKEIyMTkyNTI5MDk0NUU2OTc4NzMyOUEyRUJEOTk4NzEyRDMyMEVEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJa6krfuwCzdIr43xWDeeFiPC UU/bQNSX9KetzIDtA0P/7Xh6U9ab4MF96Vu7Pn2gdkmVGYrDUeGQgoNr0/MS3UJg HPDTvk3TX4SvYnUTA4nRbLTb7ZdYHeMCxS4Dy4VE2/pRMjIHohB1L6qJDqcDCeik mA85rpeakjpX4dRhANhI8Pou9KKe1M5xGGsuFCFNN71IMxm7/7CV/3EyEBsc5xcC q+SODlO00n/zjrTJxXel66Uk8mMXX+kmHL4YFsl45zBoT+ziHMs6cAZq3bTlEDeO DwFtYxf/REr64mAhtz+sRSazUImlZzoXhB6aciTMu5n3kc2qLxFLd8XjWOfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUshklKQlF5peHMpouvZmHEtMg7S8wHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtEBSit+aC6jdjaPc/CXeJSNfP5yvEMaTzy x4HE+ZZc8+xArph+1PR5dzMPa6uXDwWDmfpnPRoJDmK19bVyfYp+k0GtpxK+zFHh ykTvp6D5hVkyPz5DPM1rwExZaScqnhMmMPwiMyWFDe2T1jR179Fe5FQnuf4VsJaE j2zndnhYkXB+r+4W06QwEM+96CAogt1/tEXR41ms5/fgMu2PkJjVcII15/ouAsJG iL0QBou+xfmA3XSJLpRglWGw/+BLNYh+Ycd5ANM0vAFrOeV6uHd2Ianp9IdrvjMi tvJyKTb3iF5ENQs5nN2aK5zPBTiDvaXlCtgC2yv+sK5uGU/MQSc= -----END CERTIFICATE-----Generated at Sat Aug 23 11:56:34 2025 by rpki-client