$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: FmUZ+bPlJ/uRzSBILj1iWboL6SiiGQj8CnwNetlLhvo= Subject key identifier: 34:DB:BF:B5:37:8C:1F:A0:EE:99:88:72:BD:2D:B6:0D:DB:23:D5:59 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 3F50973437E511864321FD8094BA13F2FEE4D3AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 0182 Signing time: Fri 22 Aug 2025 16:21:43 +0000 Manifest this update: Fri 22 Aug 2025 16:16:43 +0000 Manifest next update: Mon 25 Aug 2025 21:51:43 +0000 Files and hashes: 1: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: BbyJ4wQs63hRGLt33dqKVZX2nZJV5Ih0xVzFu0kDrlc=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 3: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:50:97:34:37:e5:11:86:43:21:fd:80:94:ba:13:f2:fe:e4:d3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Aug 22 16:16:43 2025 GMT Not After : Aug 25 21:51:43 2025 GMT Subject: CN=34DBBFB5378C1FA0EE998872BD2DB60DDB23D559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:96:4a:43:73:85:57:27:56:f6:93:fc:5a: bb:5d:06:59:8e:21:5f:9d:3d:7d:e1:20:39:b5:0f: 8d:46:71:1f:3c:75:6f:a8:99:81:94:1b:50:5f:80: a5:b3:c0:93:e9:3e:fd:ff:e2:56:9a:30:df:52:5f: 12:89:95:0c:76:a6:00:8c:d6:15:0b:28:b0:40:8e: 27:e0:dd:68:73:d8:ba:0a:17:3a:92:b7:01:f6:3f: 89:f7:60:56:71:bb:2e:fe:90:6c:85:6e:81:ec:2f: 77:34:09:64:f5:13:c1:6e:da:d9:c4:5a:9b:53:81: ec:87:4c:14:e2:53:77:6d:e3:a4:9c:f0:08:16:a3: ca:61:53:95:e0:e2:57:62:c7:85:82:80:fd:76:b4: d8:3d:a6:47:7e:53:71:87:e9:46:1c:58:31:c3:3b: e9:0a:a9:93:46:f4:d4:a3:97:62:2d:34:71:2c:8b: 98:a7:d3:a1:02:43:46:0d:0c:31:14:fa:a0:da:1c: 78:72:aa:e2:0e:c2:c1:ae:34:e3:55:3f:b9:9d:39: 0c:f4:7b:1f:1e:0c:14:bc:58:6b:90:05:86:a8:02: 64:9c:9e:9e:d5:18:4b:ad:64:98:d9:0e:a3:a5:1a: be:f4:96:e6:5b:0d:fc:fb:8c:70:a1:47:14:22:a9: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:BF:B5:37:8C:1F:A0:EE:99:88:72:BD:2D:B6:0D:DB:23:D5:59 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1a:8b:20:c1:10:0b:6f:d0:2d:14:85:96:8c:7e:0f:80:2e: 86:1f:09:13:75:e2:8c:41:03:99:05:2c:18:2d:e3:0a:0e:8b: 0c:3f:f1:f7:18:91:54:32:2b:9a:20:7c:c1:37:00:86:42:28: 54:a2:4b:96:bb:fa:24:69:cc:98:c0:60:32:ea:f7:f8:10:94: 41:f0:71:bc:b6:c7:a4:75:5d:43:75:4c:1b:16:19:cd:2c:06: 37:3c:9e:f6:c4:13:8e:46:0b:71:60:9b:82:b5:50:72:34:53: 8b:38:bf:dd:57:15:2c:4f:4a:20:ac:2e:28:96:12:5c:0a:65: 2b:11:d6:29:50:7c:b4:8d:ce:63:68:83:7e:b7:90:e7:a3:70: ce:f7:2c:79:8c:b7:fd:4e:3c:3b:11:6c:98:08:0e:24:d7:67: ed:af:99:d3:ba:04:23:2c:fc:89:a7:9e:e4:72:d5:1e:03:a4: 05:93:33:86:13:3c:56:2d:3d:88:bc:d2:de:55:d0:40:c5:d3: b2:22:0f:1d:58:d8:18:c4:2a:27:ba:c4:6a:ec:cf:3e:3b:f9: 30:6e:74:61:73:85:45:40:d8:84:d6:2a:5a:9f:13:d6:9e:ae: 26:1b:78:a6:46:54:7f:ee:32:44:00:c8:e5:6f:93:b8:f6:ce: b6:d1:e9:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1CXNDflEYZDIf2AlLoT8v7k06wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTA4MjIxNjE2NDNaFw0yNTA4MjUyMTUxNDNaMDMxMTAvBgNV BAMTKDM0REJCRkI1Mzc4QzFGQTBFRTk5ODg3MkJEMkRCNjBEREIyM0Q1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC715ZKQ3OFVydW9pP8WrtdBlmO IV+dPX3hIDm1D41GcR88dW+omYGUG1BfgKWzwJPpPv3/4laaMN9SXxKJlQx2pgCM 1hULKLBAjifg3Whz2LoKFzqStwH2P4n3YFZxuy7+kGyFboHsL3c0CWT1E8Fu2tnE WptTgeyHTBTiU3dt46Sc8AgWo8phU5Xg4ldix4WCgP12tNg9pkd+U3GH6UYcWDHD O+kKqZNG9NSjl2ItNHEsi5in06ECQ0YNDDEU+qDaHHhyquIOwsGuNONVP7mdOQz0 ex8eDBS8WGuQBYaoAmScnp7VGEutZJjZDqOlGr70luZbDfz7jHChRxQiqUPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNu/tTeMH6DumYhyvS22Ddsj1VkwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgaiyDBEAtv0C0UhZaMfg+ALoYfCRN14oxB A5kFLBgt4woOiww/8fcYkVQyK5ogfME3AIZCKFSiS5a7+iRpzJjAYDLq9/gQlEHw cby2x6R1XUN1TBsWGc0sBjc8nvbEE45GC3Fgm4K1UHI0U4s4v91XFSxPSiCsLiiW ElwKZSsR1ilQfLSNzmNog363kOejcM73LHmMt/1OPDsRbJgIDiTXZ+2vmdO6BCMs /ImnnuRy1R4DpAWTM4YTPFYtPYi80t5V0EDF07IiDx1Y2BjEKie6xGrszz47+TBu dGFzhUVA2ITWKlqfE9aeriYbeKZGVH/uMkQAyOVvk7j2zrbR6d4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:26 2025 by rpki-client