$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: /gWOddp7SwSsmt+rPXMel2Xs/p4dpvGFthtBdcTV/oA= Subject key identifier: 99:17:BC:C9:3D:0B:D5:E1:21:69:6F:17:85:3C:F0:34:30:73:41:1F Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 45E541129A2FB2D884857AD801688E59D301619E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0210 Signing time: Fri 22 Aug 2025 20:52:05 +0000 Manifest this update: Fri 22 Aug 2025 20:47:05 +0000 Manifest next update: Mon 25 Aug 2025 22:19:05 +0000 Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) 2: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: T7kQlO1RzZp+luseu/0SE/8OmkGDjkhZu20VJh1+wVo=) 3: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e5:41:12:9a:2f:b2:d8:84:85:7a:d8:01:68:8e:59:d3:01:61:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Aug 22 20:47:05 2025 GMT Not After : Aug 25 22:19:05 2025 GMT Subject: CN=9917BCC93D0BD5E121696F17853CF0343073411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:f6:44:ac:e9:9d:93:39:02:67:12:2c:c2: e9:73:65:94:55:9d:5b:3e:99:eb:0d:fe:a2:18:0d: 8b:67:c5:c8:a5:6d:ac:d7:60:fc:c5:18:2d:b0:0e: ae:78:20:eb:fb:a9:3a:e1:1f:18:23:2c:32:1a:08: 38:dc:c2:a5:4a:bf:d5:fb:c1:59:3d:02:f7:9e:17: a8:3e:c8:be:5a:2d:eb:bf:e1:31:8d:2e:1f:36:c1: 21:e4:be:01:e9:8f:95:8d:9d:d3:b1:65:e2:f8:ec: 35:66:1c:d4:06:57:ad:63:c4:e0:4d:db:45:7c:02: 77:f1:52:17:9d:98:1f:7d:80:aa:c2:74:6a:9e:6a: 22:f3:ba:8c:36:3a:f3:9b:e7:9c:61:2c:57:f5:66: ea:89:6f:fe:34:38:d7:c0:75:1b:8b:b3:aa:3b:83: 58:fc:38:eb:ef:ae:13:07:b4:1d:9c:f9:61:c6:97: 3a:43:91:03:e3:0c:5d:cb:2e:c2:fd:a0:76:d6:48: f7:62:2b:aa:50:ec:aa:57:e3:0e:27:1b:c4:b1:8a: 17:46:28:c6:5f:1f:19:1a:e6:88:c9:85:fb:55:22: 28:e9:aa:2c:59:9f:b5:ee:ce:58:74:ae:f3:fa:f8: b8:12:16:4a:c1:ec:c8:59:ba:20:78:32:70:5a:12: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:17:BC:C9:3D:0B:D5:E1:21:69:6F:17:85:3C:F0:34:30:73:41:1F X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:69:b6:6e:c7:6c:3a:96:a9:30:4c:1e:7f:82:67:f7:a0:2c: dc:67:cb:03:78:4a:09:8f:43:fc:a4:b3:6e:14:90:2b:af:51: bb:38:75:1b:56:7d:71:2f:f6:a3:a3:62:e2:02:62:8d:e7:2f: ae:f5:19:cc:07:ac:c4:f0:f8:85:eb:d7:9e:15:43:65:8c:7d: b5:c7:d1:35:78:76:27:ef:29:ed:b9:b6:90:c2:16:26:36:1c: 45:a7:af:a8:b1:e3:67:24:d8:a4:f2:ec:11:19:6a:6a:87:7d: f4:eb:d3:d3:3e:36:6a:12:1f:3b:f9:e4:da:8a:8d:bf:3d:2d: ce:62:93:5a:a4:1d:09:5d:22:87:07:7c:ce:e7:1d:d1:17:48: 74:12:c6:56:68:57:41:ab:f1:58:84:f3:8c:57:83:b4:a8:1a: da:85:6b:bf:6a:d9:ff:70:b8:0d:4c:6e:3a:91:0d:96:5d:0e: 82:79:e9:42:46:54:ac:6a:b9:28:03:85:56:f3:dd:5a:4a:5b: 36:0c:75:f6:c7:bc:de:e1:0c:44:0c:75:fe:0d:9f:e8:cb:46: 96:88:cf:8a:8d:a5:a0:33:92:92:93:d0:0c:9d:28:f6:a5:70: 5e:2f:04:d4:4e:22:48:1c:54:39:1b:72:7f:c8:b9:34:ca:f1: 62:56:f4:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReVBEpovstiEhXrYAWiOWdMBYZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA4MjIyMDQ3MDVaFw0yNTA4MjUyMjE5MDVaMDMxMTAvBgNV BAMTKDk5MTdCQ0M5M0QwQkQ1RTEyMTY5NkYxNzg1M0NGMDM0MzA3MzQxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3PZErOmdkzkCZxIswulzZZRV nVs+mesN/qIYDYtnxcilbazXYPzFGC2wDq54IOv7qTrhHxgjLDIaCDjcwqVKv9X7 wVk9AveeF6g+yL5aLeu/4TGNLh82wSHkvgHpj5WNndOxZeL47DVmHNQGV61jxOBN 20V8AnfxUhedmB99gKrCdGqeaiLzuow2OvOb55xhLFf1ZuqJb/40ONfAdRuLs6o7 g1j8OOvvrhMHtB2c+WHGlzpDkQPjDF3LLsL9oHbWSPdiK6pQ7KpX4w4nG8SxihdG KMZfHxka5ojJhftVIijpqixZn7Xuzlh0rvP6+LgSFkrB7MhZuiB4MnBaEg7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRe8yT0L1eEhaW8XhTzwNDBzQR8wHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9ptm7HbDqWqTBMHn+CZ/egLNxnywN4SgmP Q/yks24UkCuvUbs4dRtWfXEv9qOjYuICYo3nL671GcwHrMTw+IXr154VQ2WMfbXH 0TV4difvKe25tpDCFiY2HEWnr6ix42ck2KTy7BEZamqHffTr09M+NmoSHzv55NqK jb89Lc5ik1qkHQldIocHfM7nHdEXSHQSxlZoV0Gr8ViE84xXg7SoGtqFa79q2f9w uA1MbjqRDZZdDoJ56UJGVKxquSgDhVbz3VpKWzYMdfbHvN7hDEQMdf4Nn+jLRpaI z4qNpaAzkpKT0AydKPalcF4vBNROIkgcVDkbcn/IuTTK8WJW9LU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:41 2025 by rpki-client