$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: bBery0KjRbnB056dh/2sUFesQP8UzGvU53QH3X7hIxM= Subject key identifier: E8:FD:AC:1F:45:E5:B9:BB:B3:03:03:5D:0F:93:09:7C:26:ED:97:27 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 66CCA17EA96F617252EEDC87D79862EC50E420FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 0311 Signing time: Thu 21 Aug 2025 22:00:36 +0000 Manifest this update: Thu 21 Aug 2025 21:55:36 +0000 Manifest next update: Mon 25 Aug 2025 04:32:36 +0000 Files and hashes: 1: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: 8pVdONx+0B7HzvlmWjfUUOE8jWcjWCCvoVvW/VBNAgQ=) 2: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: oJRVfxr8VtV0eJv88WZpjTQEcp6m434TYyNA2WbwIfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cc:a1:7e:a9:6f:61:72:52:ee:dc:87:d7:98:62:ec:50:e4:20:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Aug 21 21:55:36 2025 GMT Not After : Aug 25 04:32:36 2025 GMT Subject: CN=E8FDAC1F45E5B9BBB303035D0F93097C26ED9727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:ed:24:88:72:63:1d:39:ad:2a:e2:ad:9d: a7:2b:7c:ca:e3:54:2d:93:77:1d:46:bf:39:a7:da: b6:ea:d0:a5:1b:8c:ae:96:e0:6b:56:bd:94:0b:ae: 73:27:63:c3:1b:f4:b3:2c:c0:38:6d:0a:53:ca:70: 2d:7e:96:10:eb:f8:ec:2e:cb:b0:83:6b:55:c9:ee: b2:81:a4:8c:65:50:d5:57:dd:b9:e7:42:51:37:39: 3f:60:23:91:0f:a0:8c:52:3d:c2:40:bb:e3:18:df: 8f:1e:ff:a1:62:1a:cb:02:16:1e:cf:ee:43:c2:12: e3:41:6b:9f:a1:28:c1:c4:79:6c:d9:db:05:8f:00: 18:39:88:b7:be:da:db:11:37:80:0e:fd:81:2d:bf: 66:d0:e1:90:27:f0:40:e9:45:e2:0b:8a:7e:40:e9: 2f:42:64:d1:36:15:2e:26:fb:2a:c2:35:22:fa:95: 37:d2:b9:7d:9a:48:00:75:bd:34:29:d8:56:92:2f: 5c:dd:2c:63:61:1b:91:68:a4:a5:92:b7:d5:14:83: b0:39:b3:6f:ff:5c:37:4b:fc:94:72:ed:fb:cc:d2: 46:f2:7d:fc:d2:30:b9:bb:07:f2:35:34:08:52:d6: a8:de:b9:76:39:db:9f:40:21:ea:63:4a:00:4e:cf: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:AC:1F:45:E5:B9:BB:B3:03:03:5D:0F:93:09:7C:26:ED:97:27 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:60:15:97:16:5b:e4:14:15:70:0a:81:3d:c7:da:e5:97:a0: b9:51:76:46:67:a0:58:72:62:6b:4c:9d:b6:ac:47:b2:ed:fc: b7:95:d9:60:b0:e7:ef:f2:39:ca:b3:b3:c2:60:92:e8:fa:c0: ca:84:55:83:d5:66:04:f0:35:77:31:bf:a2:28:e9:f3:d0:2b: 03:ff:78:3d:0c:c3:f0:6e:cd:35:7d:d0:43:5e:1b:89:39:f2: 68:8c:90:16:4c:ef:94:ff:11:44:18:6f:0e:06:b8:ac:4d:fb: e9:00:67:bf:95:d2:ab:47:2b:61:83:11:d4:9e:3d:a5:b2:b9: 8f:90:5c:af:3e:a9:78:09:21:5d:1c:a7:aa:cb:ca:58:0f:3a: 65:15:26:3f:66:2e:7a:51:94:b8:b1:66:f8:a4:18:d9:c5:d6: cd:55:23:93:b0:d1:d6:07:08:9f:f7:c5:27:1c:10:d3:a4:76: b7:eb:d9:fd:51:9e:87:6f:f9:da:fb:19:b6:db:b0:8a:74:f5: e5:dd:99:a3:35:e0:31:73:4d:6e:72:a8:d3:53:21:f5:d0:3e: a9:63:50:52:0a:62:46:40:ac:7d:be:63:2b:27:96:0d:b8:8d: 86:94:67:72:e6:00:8a:43:33:90:a5:fd:e1:f0:03:de:14:fa: 42:33:32:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsyhfqlvYXJS7tyH15hi7FDkIPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTA4MjEyMTU1MzZaFw0yNTA4MjUwNDMyMzZaMDMxMTAvBgNV BAMTKEU4RkRBQzFGNDVFNUI5QkJCMzAzMDM1RDBGOTMwOTdDMjZFRDk3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqu0kiHJjHTmtKuKtnacrfMrj VC2Tdx1Gvzmn2rbq0KUbjK6W4GtWvZQLrnMnY8Mb9LMswDhtClPKcC1+lhDr+Owu y7CDa1XJ7rKBpIxlUNVX3bnnQlE3OT9gI5EPoIxSPcJAu+MY348e/6FiGssCFh7P 7kPCEuNBa5+hKMHEeWzZ2wWPABg5iLe+2tsRN4AO/YEtv2bQ4ZAn8EDpReILin5A 6S9CZNE2FS4m+yrCNSL6lTfSuX2aSAB1vTQp2FaSL1zdLGNhG5FopKWSt9UUg7A5 s2//XDdL/JRy7fvM0kbyffzSMLm7B/I1NAhS1qjeuXY5259AIepjSgBOz5ofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6P2sH0XlubuzAwNdD5MJfCbtlycwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNgFZcWW+QUFXAKgT3H2uWXoLlRdkZnoFhy YmtMnbasR7Lt/LeV2WCw5+/yOcqzs8Jgkuj6wMqEVYPVZgTwNXcxv6Io6fPQKwP/ eD0Mw/BuzTV90ENeG4k58miMkBZM75T/EUQYbw4GuKxN++kAZ7+V0qtHK2GDEdSe PaWyuY+QXK8+qXgJIV0cp6rLylgPOmUVJj9mLnpRlLixZvikGNnF1s1VI5Ow0dYH CJ/3xSccENOkdrfr2f1Rnodv+dr7GbbbsIp09eXdmaM14DFzTW5yqNNTIfXQPqlj UFIKYkZArH2+Yysnlg24jYaUZ3LmAIpDM5Cl/eHwA94U+kIzMoQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:39:54 2025 by rpki-client