$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: VFDyNlrkETwNrypGT89ZJLajix4owQmBt9EfkJS9qwU= Subject key identifier: F6:8C:8B:ED:C0:30:A3:80:77:31:E1:AF:CE:21:70:33:40:A3:35:ED Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 1AE59737372B1A8BDEBC86E3AEBA9A22A1B88F0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 048A Signing time: Thu 21 Aug 2025 15:21:02 +0000 Manifest this update: Thu 21 Aug 2025 15:16:02 +0000 Manifest next update: Sun 24 Aug 2025 16:08:02 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: hEi6EvU/XmWWN9wSOkRbDeJWQhokh1A+wgsEOl0/w7g=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e5:97:37:37:2b:1a:8b:de:bc:86:e3:ae:ba:9a:22:a1:b8:8f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Aug 21 15:16:02 2025 GMT Not After : Aug 24 16:08:02 2025 GMT Subject: CN=F68C8BEDC030A3807731E1AFCE21703340A335ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:a3:5a:6d:41:9f:9c:63:09:e7:6b:98:91: 6e:e2:8b:b5:ac:ce:6b:f1:ef:39:53:65:f2:40:e9: bb:f8:ad:e8:3d:0b:b6:36:87:7a:0c:01:3e:00:85: 51:62:35:42:b7:96:6f:fe:71:a1:b9:a4:9e:46:97: 3b:a9:16:e7:19:ff:98:fd:36:53:64:97:93:4c:b0: d4:ae:38:6e:c0:f2:bd:ce:ac:08:74:3c:1b:b1:18: a8:40:1c:51:fa:30:93:8c:fd:78:8e:77:14:e5:2f: 2e:1f:99:eb:bf:64:d7:fb:c1:ca:51:e8:77:7e:c6: 39:90:40:c5:1e:8d:c7:f5:59:63:9b:d9:fe:22:1d: 32:ce:b2:54:62:ed:44:35:e7:fb:41:a6:b9:67:7b: 84:53:6c:6f:b0:32:e6:07:f2:c2:61:06:77:bf:31: 4c:3d:b4:25:ef:5e:b7:e6:7d:f8:f9:5a:8d:07:c5: 77:17:7c:31:f3:99:a2:ac:d7:ce:57:55:04:03:07: c9:1f:9e:4e:72:23:a3:df:34:49:5f:eb:da:26:16: 83:98:55:01:31:a6:c9:d8:d9:8e:e7:f2:87:27:6f: de:25:26:da:17:ca:6e:2a:24:59:f4:40:80:1e:b7: c5:65:1f:4c:ba:a8:16:b4:c1:b7:de:e5:fe:72:51: e4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8C:8B:ED:C0:30:A3:80:77:31:E1:AF:CE:21:70:33:40:A3:35:ED X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:5d:f2:ff:70:8d:0e:2a:24:16:03:fb:4c:c9:b0:3c:56: a8:3d:8f:7a:c5:ef:97:f3:96:e1:b1:8e:5b:63:78:a4:16:21: 02:23:e4:42:8d:98:79:ca:f7:d5:4a:68:78:7e:c1:9c:be:c1: 34:bd:1e:10:8c:10:d9:0b:54:e2:23:e4:f7:98:d2:c8:60:41: 21:36:5d:6b:f3:60:8d:9f:21:68:45:02:6b:31:f4:2f:66:83: f1:28:5c:d9:87:bb:59:7a:16:b9:cd:3b:18:37:6c:86:1d:79: 68:ce:78:01:d1:68:79:1b:19:1f:f3:ba:6e:98:db:3f:a6:73: e1:0a:83:2f:1a:dd:00:7d:f9:11:b3:e4:10:0d:cd:40:6a:ea: 56:cb:39:00:14:aa:f6:02:1d:5b:ac:47:91:db:99:1f:b1:a0: 1b:cd:b0:51:b6:4a:21:15:c4:37:0f:fe:51:1f:d1:e3:26:f1: 88:6e:f3:27:a3:60:42:d7:5f:91:9a:92:0e:5a:b8:0c:2b:b3: 0b:5b:cf:42:6c:61:2a:73:fa:a9:95:2c:e9:52:0b:9f:70:ac: 8c:ea:e4:8e:a3:6d:b2:d6:8c:05:4f:f2:c3:7c:d0:d7:ef:c8: 3c:11:23:87:51:2f:0c:1d:2f:5c:dd:a3:2c:b8:09:ea:af:f9: 9f:c8:1e:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGuWXNzcrGovevIbjrrqaIqG4jwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTA4MjExNTE2MDJaFw0yNTA4MjQxNjA4MDJaMDMxMTAvBgNV BAMTKEY2OEM4QkVEQzAzMEEzODA3NzMxRTFBRkNFMjE3MDMzNDBBMzM1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZKNabUGfnGMJ52uYkW7ii7Ws zmvx7zlTZfJA6bv4reg9C7Y2h3oMAT4AhVFiNUK3lm/+caG5pJ5GlzupFucZ/5j9 NlNkl5NMsNSuOG7A8r3OrAh0PBuxGKhAHFH6MJOM/XiOdxTlLy4fmeu/ZNf7wcpR 6Hd+xjmQQMUejcf1WWOb2f4iHTLOslRi7UQ15/tBprlne4RTbG+wMuYH8sJhBne/ MUw9tCXvXrfmffj5Wo0HxXcXfDHzmaKs185XVQQDB8kfnk5yI6PfNElf69omFoOY VQExpsnY2Y7n8ocnb94lJtoXym4qJFn0QIAet8VlH0y6qBa0wbfe5f5yUeRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9oyL7cAwo4B3MeGvziFwM0CjNe0wHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsZXfL/cI0OKiQWA/tMybA8Vqg9j3rF75fz luGxjltjeKQWIQIj5EKNmHnK99VKaHh+wZy+wTS9HhCMENkLVOIj5PeY0shgQSE2 XWvzYI2fIWhFAmsx9C9mg/EoXNmHu1l6FrnNOxg3bIYdeWjOeAHRaHkbGR/zum6Y 2z+mc+EKgy8a3QB9+RGz5BANzUBq6lbLOQAUqvYCHVusR5HbmR+xoBvNsFG2SiEV xDcP/lEf0eMm8Yhu8yejYELXX5Gakg5auAwrswtbz0JsYSpz+qmVLOlSC59wrIzq 5I6jbbLWjAVP8sN80NfvyDwRI4dRLwwdL1zdoyy4Ceqv+Z/IHnU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:55 2025 by rpki-client