$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: a3l11AN58ihwPLqhQFq0JHGetzqx1LD9KBYVSTD8eQI= Subject key identifier: 0F:7D:85:BF:1B:3F:08:2C:08:15:87:70:CA:B6:C2:41:FC:89:B9:1B Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 3EBD189D8DA840FA4479775346BF3B9990A17208 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 017C Signing time: Fri 22 Aug 2025 15:50:58 +0000 Manifest this update: Fri 22 Aug 2025 15:45:58 +0000 Manifest next update: Tue 26 Aug 2025 01:11:58 +0000 Files and hashes: 1: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: kZggsxRCTGayUV5+XVOjcD2/2mq65E6YxTIYusu+XfQ=) 2: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 3: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 5: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:bd:18:9d:8d:a8:40:fa:44:79:77:53:46:bf:3b:99:90:a1:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Aug 22 15:45:58 2025 GMT Not After : Aug 26 01:11:58 2025 GMT Subject: CN=0F7D85BF1B3F082C08158770CAB6C241FC89B91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:46:6c:5d:99:c5:b1:bb:f0:81:17:26:8f: 66:28:e6:d4:1f:47:2f:50:9e:34:3a:dd:ae:a9:d7: b4:7d:e7:40:d0:1c:90:a2:93:b8:9a:32:e1:1c:87: 67:00:f8:27:8b:82:82:6c:32:05:1b:25:7a:85:22: a2:46:44:a8:4b:9c:c8:a1:54:48:a1:ba:ef:ff:2e: 98:1b:56:a0:83:03:26:20:5b:6a:69:c4:b0:cb:3d: 74:58:d3:4c:7b:b3:fd:d5:8c:32:4e:7c:16:12:33: 83:2a:b1:03:8d:4e:7b:0e:f7:c7:f7:e9:58:a3:46: f7:c1:a6:0f:ef:83:a7:3d:57:ac:12:f7:7d:fe:7d: 84:ad:39:b9:d8:5e:b6:c5:8d:82:93:65:03:5b:77: 7a:98:93:c5:45:e8:81:a7:65:4b:69:fc:c1:0a:87: c9:34:77:8e:22:8d:55:ef:6f:6e:03:2b:78:d2:22: 6f:0c:e0:3d:1c:85:ff:78:b4:05:c2:5e:de:a9:f7: 07:61:e9:19:6d:db:cd:87:a1:0d:7d:38:83:51:81: 74:9c:44:fd:9b:db:49:44:05:a5:8a:d3:5a:8a:5e: f0:49:6a:c5:93:fd:83:12:c9:f7:f0:4c:9c:6a:d4: eb:28:30:55:b8:2f:29:c1:4a:9a:23:4e:53:73:51: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7D:85:BF:1B:3F:08:2C:08:15:87:70:CA:B6:C2:41:FC:89:B9:1B X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ec:f4:13:b4:29:44:6c:a9:ff:e1:eb:06:a6:a1:4b:d5:f6: b8:91:73:e5:5b:44:b2:38:6d:3e:e8:c0:0a:bc:5b:7b:4c:c0: 81:ca:ee:01:a0:30:46:a5:6f:fc:16:75:3f:9c:01:2d:7d:d4: 39:b2:84:c9:4c:94:dc:ed:99:65:df:84:3e:a0:26:52:55:98: 93:e5:0b:4f:5c:d2:3a:e2:fe:df:cc:3b:c2:22:f4:f6:18:79: e4:41:97:8b:c3:10:c4:e7:dc:86:89:e8:3e:de:cb:86:b0:f9: 33:df:5b:3e:0b:fc:5b:36:60:3a:db:0a:e9:27:78:17:bc:be: fe:0f:6d:0a:58:f0:1c:d5:20:f5:ea:27:38:9d:f6:68:da:95: 98:ea:20:bc:c7:d5:c5:dd:dc:92:58:7b:7b:cb:5d:7c:dc:ea: ac:de:a7:d7:ce:50:54:6b:32:cd:96:35:ea:e8:e6:e2:3a:e1: f9:d3:3c:ed:85:80:ec:77:65:61:9d:a7:13:cd:ab:5c:be:a1: f7:3e:4d:57:7a:87:46:90:43:dc:14:27:5b:63:b3:ff:43:5c: d9:7d:37:3f:ce:3a:cc:e5:6a:88:20:46:f1:07:2e:55:4f:c6: b5:0a:f2:b7:0c:32:18:cb:b2:28:16:ac:d0:3c:06:b2:90:99: d0:37:d4:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPr0YnY2oQPpEeXdTRr87mZChcggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTA4MjIxNTQ1NThaFw0yNTA4MjYwMTExNThaMDMxMTAvBgNV BAMTKDBGN0Q4NUJGMUIzRjA4MkMwODE1ODc3MENBQjZDMjQxRkM4OUI5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDEZsXZnFsbvwgRcmj2Yo5tQf Ry9QnjQ63a6p17R950DQHJCik7iaMuEch2cA+CeLgoJsMgUbJXqFIqJGRKhLnMih VEihuu//LpgbVqCDAyYgW2ppxLDLPXRY00x7s/3VjDJOfBYSM4MqsQONTnsO98f3 6VijRvfBpg/vg6c9V6wS933+fYStObnYXrbFjYKTZQNbd3qYk8VF6IGnZUtp/MEK h8k0d44ijVXvb24DK3jSIm8M4D0chf94tAXCXt6p9wdh6Rlt282HoQ19OINRgXSc RP2b20lEBaWK01qKXvBJasWT/YMSyffwTJxq1OsoMFW4LynBSpojTlNzUQ9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD32Fvxs/CCwIFYdwyrbCQfyJuRswHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELs9BO0KURsqf/h6wamoUvV9riRc+VbRLI4 bT7owAq8W3tMwIHK7gGgMEalb/wWdT+cAS191DmyhMlMlNztmWXfhD6gJlJVmJPl C09c0jri/t/MO8Ii9PYYeeRBl4vDEMTn3IaJ6D7ey4aw+TPfWz4L/Fs2YDrbCukn eBe8vv4PbQpY8BzVIPXqJzid9mjalZjqILzH1cXd3JJYe3vLXXzc6qzep9fOUFRr Ms2WNero5uI64fnTPO2FgOx3ZWGdpxPNq1y+ofc+TVd6h0aQQ9wUJ1tjs/9DXNl9 Nz/OOszlaoggRvEHLlVPxrUK8rcMMhjLsigWrNA8BrKQmdA31Dk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:35 2025 by rpki-client