$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: 2R/KKeONQouxBnadB45L+LJTP7d2j+xN1uKDQxVK84o= Subject key identifier: 7E:D2:EA:93:85:BE:AA:10:26:50:DF:FF:15:D3:06:BB:01:D8:71:74 Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 65D812895856AC1F2708C08513EA8DA88BAE8288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 01A4 Signing time: Fri 22 Aug 2025 20:52:25 +0000 Manifest this update: Fri 22 Aug 2025 20:47:25 +0000 Manifest next update: Mon 25 Aug 2025 23:23:25 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: OgCwH5RYXhRZaUiCIhfN5NLNftza4VIxKHOiJn/Mbb4=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:12:89:58:56:ac:1f:27:08:c0:85:13:ea:8d:a8:8b:ae:82:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Aug 22 20:47:25 2025 GMT Not After : Aug 25 23:23:25 2025 GMT Subject: CN=7ED2EA9385BEAA102650DFFF15D306BB01D87174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:fb:e7:20:c4:30:bf:d1:7e:59:8c:91:b7: 9b:d7:2d:38:48:c1:02:94:d0:43:c3:ea:29:b6:9e: 78:4a:38:86:ba:df:b3:4b:43:26:c2:f4:7f:ee:83: b6:f4:b6:70:05:4e:b8:1a:e2:99:53:67:d0:b1:8c: 4c:4e:8d:47:cd:4b:92:cb:94:09:1f:7c:6d:f5:d2: 9f:b2:94:b3:7b:f8:1d:9a:0a:dd:a2:9f:87:16:6f: 1f:5f:83:ca:8b:67:0b:ee:57:e5:f3:e8:a6:ab:da: ab:a2:cd:d5:24:73:18:7d:1a:51:00:0e:d9:ae:a9: 4d:f0:33:f8:bb:b6:0d:2e:6d:bf:f0:64:7d:2d:5f: 6e:6a:e5:00:c2:b6:c8:5b:c7:f7:b0:bb:59:12:72: f3:bb:75:c8:1a:78:e7:b9:52:37:30:cd:9c:74:e0: 37:16:00:bc:40:21:e7:a8:dd:51:fb:ba:b0:1c:20: 1c:53:15:27:81:2b:2a:e0:0b:a4:a1:8d:82:5f:f0: 82:e5:58:ed:8d:3c:37:1d:ff:1f:37:cf:d1:bf:05: 28:66:a3:ae:f9:b6:bb:13:e3:6f:8d:12:7b:36:65: a8:ea:16:67:6d:35:c4:68:2c:47:48:44:5d:36:e1: 33:cf:a9:88:bb:d0:a5:25:73:d5:e1:7a:73:ee:19: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:EA:93:85:BE:AA:10:26:50:DF:FF:15:D3:06:BB:01:D8:71:74 X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c4:0b:17:94:ca:8d:77:9c:34:6e:9b:34:16:fe:04:dc:e9: b1:30:90:7c:94:9f:ea:42:f3:f6:a0:99:1c:75:4a:15:1c:3b: dd:83:f7:64:f9:ca:1e:df:0a:d5:71:bd:93:81:26:50:b4:ec: 32:f1:ea:26:4a:07:ca:eb:bc:20:84:9f:58:4a:d2:aa:dd:09: f9:21:b9:c4:7e:8c:7e:73:ea:e1:8c:4f:b3:dd:40:7d:5a:eb: d0:4f:aa:41:fe:bd:43:bf:48:b1:c0:0d:51:1b:21:8c:e3:4a: cb:16:e2:2c:59:b5:63:bf:49:27:85:2a:4f:02:f3:a3:bd:fe: b9:98:ed:7b:ee:7f:9b:8f:83:1f:bd:ad:21:b6:eb:bd:3f:59: 2f:a2:d5:44:aa:45:f6:43:78:23:63:59:94:64:8a:bf:c3:80: 1b:6e:d8:68:f2:a5:98:17:8d:15:1f:62:f2:f7:63:6c:88:ad: 31:50:69:87:1e:11:7f:62:06:d0:91:b6:a0:60:e6:8d:85:1d: 0a:42:57:ee:36:47:0b:76:1b:49:7a:6c:14:3a:5d:f8:70:85: 75:8b:cc:5a:71:93:dc:25:5b:0f:01:df:3a:0b:cc:1b:1f:b0: aa:43:7f:88:25:f2:d8:ed:85:7b:d4:3c:77:65:a7:22:81:82: c5:22:39:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdgSiVhWrB8nCMCFE+qNqIuugogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTA4MjIyMDQ3MjVaFw0yNTA4MjUyMzIzMjVaMDMxMTAvBgNV BAMTKDdFRDJFQTkzODVCRUFBMTAyNjUwREZGRjE1RDMwNkJCMDFEODcxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmHfvnIMQwv9F+WYyRt5vXLThI wQKU0EPD6im2nnhKOIa637NLQybC9H/ug7b0tnAFTrga4plTZ9CxjExOjUfNS5LL lAkffG310p+ylLN7+B2aCt2in4cWbx9fg8qLZwvuV+Xz6Kar2quizdUkcxh9GlEA DtmuqU3wM/i7tg0ubb/wZH0tX25q5QDCtshbx/ewu1kScvO7dcgaeOe5UjcwzZx0 4DcWALxAIeeo3VH7urAcIBxTFSeBKyrgC6ShjYJf8ILlWO2NPDcd/x83z9G/BShm o675trsT42+NEns2ZajqFmdtNcRoLEdIRF024TPPqYi70KUlc9XhenPuGU2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftLqk4W+qhAmUN//FdMGuwHYcXQwHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfECxeUyo13nDRumzQW/gTc6bEwkHyUn+pC 8/agmRx1ShUcO92D92T5yh7fCtVxvZOBJlC07DLx6iZKB8rrvCCEn1hK0qrdCfkh ucR+jH5z6uGMT7PdQH1a69BPqkH+vUO/SLHADVEbIYzjSssW4ixZtWO/SSeFKk8C 86O9/rmY7Xvuf5uPgx+9rSG2670/WS+i1USqRfZDeCNjWZRkir/DgBtu2GjypZgX jRUfYvL3Y2yIrTFQaYceEX9iBtCRtqBg5o2FHQpCV+42Rwt2G0l6bBQ6XfhwhXWL zFpxk9wlWw8B3zoLzBsfsKpDf4gl8tjthXvUPHdlpyKBgsUiOYY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:22 2025 by rpki-client