$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: cbIV7dJUBQac3GrW3APipZiHo3pCckHZBmO9a5x64Pg= Subject key identifier: 4A:4B:C0:2C:EB:EE:68:5B:36:02:45:06:67:1B:A0:D7:42:8B:E3:28 Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 0992B67342EFFBBDCD4EC6C829AF57F320B3698D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 0D Signing time: Sat 23 Aug 2025 09:01:22 +0000 Manifest this update: Sat 23 Aug 2025 08:56:22 +0000 Manifest next update: Tue 26 Aug 2025 09:55:22 +0000 Files and hashes: 1: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) 2: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: XIZz28rs7Z13aBxbjd6d83vJluFFQP/4L1N0nHnwmXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:92:b6:73:42:ef:fb:bd:cd:4e:c6:c8:29:af:57:f3:20:b3:69:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Aug 23 08:56:22 2025 GMT Not After : Aug 26 09:55:22 2025 GMT Subject: CN=4A4BC02CEBEE685B36024506671BA0D7428BE328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:74:03:3c:df:84:5a:01:7f:1e:c3:b5:94: 8a:aa:c9:96:e0:54:e8:7d:f6:01:58:49:32:11:c1: ae:0b:b8:11:d5:a6:7c:12:55:aa:65:8c:98:52:46: 6a:06:e0:a8:39:90:a2:8f:ba:a7:54:48:c3:e7:1b: 2e:f8:cc:12:7f:54:b2:82:c3:47:41:e8:90:90:96: 1c:64:84:b1:35:ed:c9:eb:41:f7:3d:3f:e4:99:da: 51:14:a5:e3:18:83:86:15:c7:d5:99:78:2a:cf:8b: c0:e8:c3:49:70:f2:0c:2f:5f:b6:92:77:87:dc:a0: 35:7a:53:74:71:1b:5a:21:39:6c:1f:1a:0f:4e:9f: ca:f7:fc:ab:41:5c:56:33:4c:90:56:4d:a8:a7:a0: a5:7c:83:17:d1:53:5a:de:38:74:bb:2d:ef:9d:79: 01:17:d7:f4:57:b8:5b:73:86:a0:cd:3a:4f:4c:bc: f4:e2:f1:ed:07:51:5a:ca:95:a8:f9:56:eb:5a:8b: 87:ad:6b:5e:ab:12:c8:ed:4c:ac:0c:33:db:a6:27: 01:c8:29:0f:bd:14:51:73:b9:b3:47:60:96:fa:3b: b0:8a:43:45:d3:a8:80:cd:a5:d6:05:82:07:07:d2: c5:28:88:6e:07:45:cc:e9:e3:23:03:f7:fd:19:fd: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4B:C0:2C:EB:EE:68:5B:36:02:45:06:67:1B:A0:D7:42:8B:E3:28 X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:48:57:51:6e:89:81:32:b6:c3:9c:a1:f7:10:b2:a1:36:f1: ca:10:25:e8:a1:5c:2a:a0:67:67:4c:8a:a2:4d:70:5c:ed:4f: 03:6b:a4:9e:d8:a5:8d:79:14:ea:75:e0:83:9b:10:85:f5:73: 79:0a:ac:88:cb:a2:7f:ea:c8:38:f8:30:33:44:20:bc:06:a3: 55:d4:61:42:3b:76:e6:cd:d7:bc:d6:6f:58:f7:34:8c:cb:e0: 55:69:0a:a4:a9:da:86:2e:e8:75:2c:a5:d8:44:51:57:d2:1d: 64:8b:1c:cd:1f:8e:d7:12:18:ae:90:fd:5f:30:81:b1:6a:81: 1a:93:da:16:2a:c4:f1:86:8e:3a:da:8a:e5:42:01:cc:0f:e3: 32:3d:e7:6c:a8:c2:eb:5e:63:d8:2d:21:67:c0:c7:b1:8d:a5: 9c:92:e9:2b:a3:32:45:f7:4a:da:23:03:19:8b:4e:de:66:27: 02:6a:48:c2:f1:f4:a8:de:51:68:01:cf:32:73:4c:9e:dd:ff: 4f:94:4d:97:e3:1c:14:31:a4:da:6d:dc:d6:e3:42:6f:b9:60: 9f:b6:8c:ae:51:8d:bb:f5:7f:ab:20:1a:2c:91:d5:21:d9:b6: 00:cb:35:05:4c:5a:40:ca:0c:78:dc:3e:4b:87:10:40:14:33: 92:5e:f0:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZK2c0Lv+73NTsbIKa9X8yCzaY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNTA4MjMwODU2MjJaFw0yNTA4MjYwOTU1MjJaMDMxMTAvBgNV BAMTKDRBNEJDMDJDRUJFRTY4NUIzNjAyNDUwNjY3MUJBMEQ3NDI4QkUzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyXQDPN+EWgF/HsO1lIqqyZbg VOh99gFYSTIRwa4LuBHVpnwSVapljJhSRmoG4Kg5kKKPuqdUSMPnGy74zBJ/VLKC w0dB6JCQlhxkhLE17cnrQfc9P+SZ2lEUpeMYg4YVx9WZeCrPi8Dow0lw8gwvX7aS d4fcoDV6U3RxG1ohOWwfGg9On8r3/KtBXFYzTJBWTainoKV8gxfRU1reOHS7Le+d eQEX1/RXuFtzhqDNOk9MvPTi8e0HUVrKlaj5Vutai4eta16rEsjtTKwMM9umJwHI KQ+9FFFzubNHYJb6O7CKQ0XTqIDNpdYFggcH0sUoiG4HRczp4yMD9/0Z/U9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkvALOvuaFs2AkUGZxug10KL4ygwHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9IV1FuiYEytsOcofcQsqE28coQJeihXCqg Z2dMiqJNcFztTwNrpJ7YpY15FOp14IObEIX1c3kKrIjLon/qyDj4MDNEILwGo1XU YUI7dubN17zWb1j3NIzL4FVpCqSp2oYu6HUspdhEUVfSHWSLHM0fjtcSGK6Q/V8w gbFqgRqT2hYqxPGGjjraiuVCAcwP4zI952yowuteY9gtIWfAx7GNpZyS6SujMkX3 StojAxmLTt5mJwJqSMLx9KjeUWgBzzJzTJ7d/0+UTZfjHBQxpNpt3NbjQm+5YJ+2 jK5Rjbv1f6sgGiyR1SHZtgDLNQVMWkDKDHjcPkuHEEAUM5Je8DE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:56:57 2025 by rpki-client