$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json) Hash identifier: I8EJqYnPCXKHWGHBbesxrpISYyks24oq2qtF/hmpqXk= Subject key identifier: 27:D6:57:52:06:70:46:07:24:83:4E:48:DF:9C:5A:25:6F:92:2B:35 Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Certificate serial: 3DF91781E098E822CEFC167B82752543593B2578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft Manifest number: 01A3 Signing time: Sat 23 Aug 2025 02:22:08 +0000 Manifest this update: Sat 23 Aug 2025 02:17:08 +0000 Manifest next update: Tue 26 Aug 2025 13:45:08 +0000 Files and hashes: 1: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: f0SGYOuYC9wlhNvu18Rx/15roii5H8mAD5EFZkRY12E=) 2: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: wxIdV1vYBsdHIx/wjkM74SJ0dxhJ8bGfPFQMI6ZQdRg=) 3: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: znoG+tzolSoK4k4/3nWegkyYPSmCV03zZXbpGFh3j3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f9:17:81:e0:98:e8:22:ce:fc:16:7b:82:75:25:43:59:3b:25:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Validity Not Before: Aug 23 02:17:08 2025 GMT Not After : Aug 26 13:45:08 2025 GMT Subject: CN=27D657520670460724834E48DF9C5A256F922B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:45:13:41:cd:ca:89:8b:77:7f:f0:76:c0: 62:02:bc:4a:0d:5f:17:66:89:3d:76:96:75:82:7e: e6:4a:2b:36:bb:09:83:39:38:86:6f:78:a7:bc:04: 9d:15:8f:09:5b:cb:e1:02:0f:bf:20:e7:a7:fb:cb: 9c:2b:90:e1:01:6c:47:61:75:0c:36:c8:fe:ff:4f: 7e:c1:3f:68:2f:67:6f:08:cf:2e:b4:07:07:da:0d: 9a:ca:ed:93:10:19:67:12:cc:d5:7e:20:00:0d:77: a3:04:e5:12:30:6d:ed:82:7a:7a:ed:2a:68:3b:07: 73:19:9e:0d:f7:2f:8e:2a:82:86:6a:98:14:03:71: e7:f4:4c:01:9d:d0:4b:a8:05:21:aa:38:80:a4:0c: 80:57:43:b7:3c:60:64:ad:51:37:e6:27:5d:6a:bb: e4:f4:f7:f0:2c:08:fd:fc:85:df:5b:ad:e8:d7:27: a2:0d:27:b0:ce:44:b6:d6:03:37:ac:92:5f:d5:da: 1c:56:ed:b1:24:61:eb:92:7d:0b:b8:83:ca:26:02: 80:4e:21:bd:75:4e:29:e3:38:43:5e:13:77:c2:b2: 0a:ea:a1:f1:32:09:69:7d:f6:c7:56:fc:ee:42:28: 2d:4e:7b:7a:aa:67:af:f0:28:89:67:07:e0:9c:30: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:57:52:06:70:46:07:24:83:4E:48:DF:9C:5A:25:6F:92:2B:35 X509v3 Authority Key Identifier: keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7e:93:63:ab:5e:34:9d:ae:a9:f6:32:57:8d:4e:b1:f3:a7: cd:c6:2c:de:9a:60:92:f3:9b:62:17:d1:c5:25:95:2b:d8:2b: 2b:20:93:4e:7f:94:1e:ef:e3:0b:cd:ed:04:7c:cf:cf:ec:af: 60:c6:b3:d0:67:51:cb:ad:1a:4e:4e:ac:79:03:b0:bf:ed:42: 86:bd:62:37:5e:ec:f8:df:32:c6:e6:2e:8b:92:70:44:b7:43: 4e:19:b5:5e:60:35:82:ed:6e:b1:5e:0b:53:d0:1d:21:35:c0: 4c:8b:f0:36:c3:09:78:ea:bc:db:d3:0b:8a:58:2f:f5:a2:55: 8c:f3:ec:47:9b:e1:4a:06:fe:4a:03:9d:01:9e:ab:16:76:d9: 82:6f:cc:df:ad:07:94:da:34:a3:66:20:70:40:7c:83:b0:90: db:3c:50:11:55:a9:38:a0:43:b5:3c:ce:79:8d:19:8e:1d:58: ff:7c:41:2b:a1:77:71:fa:70:2c:47:0f:8b:6c:ec:37:8c:f8: d4:3d:84:36:8e:38:86:3d:0f:92:ff:2f:63:46:dd:be:69:f2: 55:c3:93:72:09:b3:94:cc:4b:70:0a:a1:df:03:7f:99:b8:ba: 09:6d:92:0d:90:d5:8a:b4:57:33:76:4a:d4:d1:ec:51:a5:6c: b1:63:43:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfkXgeCY6CLO/BZ7gnUlQ1k7JXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3 MDUwN0ZDMzAeFw0yNTA4MjMwMjE3MDhaFw0yNTA4MjYxMzQ1MDhaMDMxMTAvBgNV BAMTKDI3RDY1NzUyMDY3MDQ2MDcyNDgzNEU0OERGOUM1QTI1NkY5MjJCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcUUTQc3KiYt3f/B2wGICvEoN XxdmiT12lnWCfuZKKza7CYM5OIZveKe8BJ0Vjwlby+ECD78g56f7y5wrkOEBbEdh dQw2yP7/T37BP2gvZ28Izy60BwfaDZrK7ZMQGWcSzNV+IAANd6ME5RIwbe2Cenrt Kmg7B3MZng33L44qgoZqmBQDcef0TAGd0EuoBSGqOICkDIBXQ7c8YGStUTfmJ11q u+T09/AsCP38hd9brejXJ6INJ7DORLbWAzeskl/V2hxW7bEkYeuSfQu4g8omAoBO Ib11TinjOENeE3fCsgrqofEyCWl99sdW/O5CKC1Oe3qqZ6/wKIlnB+CcMGTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9ZXUgZwRgckg05I35xaJW+SKzUwHwYDVR0j BBgwFoAUgZrQQ6ei+EJKvJ5s/ZxRhnBQf8MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzhkNGVlMi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC84MTlBRDA0M0E3 QTJGODQyNEFCQzlFNkNGRDlDNTE4NjcwNTA3RkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3MDUw N0ZDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUx ODY3MDUwN0ZDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV+k2OrXjSdrqn2MleNTrHzp83GLN6aYJLz m2IX0cUllSvYKysgk05/lB7v4wvN7QR8z8/sr2DGs9BnUcutGk5OrHkDsL/tQoa9 Yjde7PjfMsbmLouScES3Q04ZtV5gNYLtbrFeC1PQHSE1wEyL8DbDCXjqvNvTC4pY L/WiVYzz7Eeb4UoG/koDnQGeqxZ22YJvzN+tB5TaNKNmIHBAfIOwkNs8UBFVqTig Q7U8znmNGY4dWP98QSuhd3H6cCxHD4ts7DeM+NQ9hDaOOIY9D5L/L2NG3b5p8lXD k3IJs5TMS3AKod8Df5m4ugltkg2Q1Yq0VzN2StTR7FGlbLFjQwQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:20 2025 by rpki-client