$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: zUmbS5sJo+LDD9wVycqfp0C16LAMpLe2MvFDHcj7P9c= Subject key identifier: D7:E6:FD:D4:20:B9:61:5E:74:F1:33:D3:72:37:7D:27:F9:D1:63:24 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 2CF1640E655FC454EF96D221C02BF5ADBBF2C22A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 037D Signing time: Thu 21 Aug 2025 15:41:57 +0000 Manifest this update: Thu 21 Aug 2025 15:36:57 +0000 Manifest next update: Sun 24 Aug 2025 20:21:57 +0000 Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) 2: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: lSsd3gj6l4GQkQ5BGJYKtE+/vwh6ChhMF1ltGidEZg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f1:64:0e:65:5f:c4:54:ef:96:d2:21:c0:2b:f5:ad:bb:f2:c2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Aug 21 15:36:57 2025 GMT Not After : Aug 24 20:21:57 2025 GMT Subject: CN=D7E6FDD420B9615E74F133D372377D27F9D16324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:6a:b8:7c:6a:cf:78:c3:bf:d5:1a:cd:9f: 8a:49:43:ee:c7:6d:fd:1a:20:61:ff:bc:7b:a7:4b: dd:ab:3a:dd:20:c2:17:94:70:f8:e8:9d:db:fc:c1: 92:07:50:df:26:31:71:e0:83:88:42:33:3c:b8:8c: b0:80:08:51:e4:d1:65:07:d5:4e:69:6e:99:ef:fa: e1:ad:e1:dc:b8:00:14:c3:48:1f:08:6e:bc:b8:1f: e7:8b:13:ed:5f:0b:b3:7b:31:a7:81:58:af:02:66: f6:6f:6b:78:47:2c:a5:07:80:6b:0f:e7:a1:51:8d: c6:31:b2:dc:c6:e8:f9:6e:0e:2e:b4:2f:fc:0c:36: f0:66:a0:96:2a:cf:a6:72:1c:d5:a2:e8:c3:85:10: 2a:02:93:b1:9b:4d:e5:37:68:80:b6:09:ce:1c:d0: 36:5c:3d:31:f1:8b:ae:2e:e7:d2:d2:3c:27:66:ec: 64:06:a4:f5:e9:ff:74:83:cd:e2:67:46:f7:1d:cb: a7:5c:3e:09:1a:43:c7:99:56:89:6b:e4:84:ed:13: 2f:6b:f5:3c:6e:83:73:e0:db:d1:67:74:5d:ec:cf: 0e:6a:1d:2c:5a:41:31:a1:80:7a:96:77:ff:b4:0c: 26:e9:91:27:08:68:1e:24:60:bd:ad:9a:01:36:56: ea:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E6:FD:D4:20:B9:61:5E:74:F1:33:D3:72:37:7D:27:F9:D1:63:24 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6c:bd:a2:34:d7:a9:af:9f:a1:f8:7d:d4:29:c7:dd:32:14: 72:c9:13:61:21:f1:26:70:86:fb:de:97:f0:86:e4:cf:da:f8: 1c:e8:ee:ab:92:df:88:1f:59:3e:f7:74:95:48:2d:d4:82:79: e4:71:22:89:b8:32:09:bc:81:26:bf:74:d4:2c:64:97:94:7f: e2:f3:e5:ea:76:7a:6f:af:a3:d6:f0:9d:4a:47:44:6d:d3:f1: 19:bf:61:ab:d6:c9:b8:25:be:2e:51:9f:bd:90:5c:b6:38:1f: b4:1a:19:98:a3:4c:e0:3e:dc:f6:1f:35:57:4e:be:ec:45:f8: e7:b1:56:cc:9d:0b:f1:e0:f7:71:ea:bd:01:3f:c6:97:ef:a1: a6:22:d3:e4:38:bf:b4:40:c3:9a:18:1a:9c:62:ab:36:67:b9: 4d:24:21:6a:94:d7:6a:6a:b6:e3:c5:b0:da:7b:6b:3c:2f:b7: fc:ea:71:e3:f9:f3:89:75:9d:94:19:0f:07:f7:83:73:f8:90: e0:39:94:75:2f:e3:56:38:90:dd:b1:e9:45:f5:8e:78:68:d6: f2:7c:cd:02:f1:43:a5:63:36:37:e1:09:75:56:62:e7:e9:40: ba:99:f7:44:a5:be:7e:5c:e8:08:90:23:7d:e4:16:ab:73:8c: 44:30:16:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPFkDmVfxFTvltIhwCv1rbvywiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTA4MjExNTM2NTdaFw0yNTA4MjQyMDIxNTdaMDMxMTAvBgNV BAMTKEQ3RTZGREQ0MjBCOTYxNUU3NEYxMzNEMzcyMzc3RDI3RjlEMTYzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzGq4fGrPeMO/1RrNn4pJQ+7H bf0aIGH/vHunS92rOt0gwheUcPjondv8wZIHUN8mMXHgg4hCMzy4jLCACFHk0WUH 1U5pbpnv+uGt4dy4ABTDSB8Ibry4H+eLE+1fC7N7MaeBWK8CZvZva3hHLKUHgGsP 56FRjcYxstzG6PluDi60L/wMNvBmoJYqz6ZyHNWi6MOFECoCk7GbTeU3aIC2Cc4c 0DZcPTHxi64u59LSPCdm7GQGpPXp/3SDzeJnRvcdy6dcPgkaQ8eZVolr5ITtEy9r 9Txug3Pg29FndF3szw5qHSxaQTGhgHqWd/+0DCbpkScIaB4kYL2tmgE2Vuq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+b91CC5YV508TPTcjd9J/nRYyQwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1svaI016mvn6H4fdQpx90yFHLJE2Eh8SZw hvvel/CG5M/a+Bzo7quS34gfWT73dJVILdSCeeRxIom4Mgm8gSa/dNQsZJeUf+Lz 5ep2em+vo9bwnUpHRG3T8Rm/YavWybglvi5Rn72QXLY4H7QaGZijTOA+3PYfNVdO vuxF+OexVsydC/Hg93HqvQE/xpfvoaYi0+Q4v7RAw5oYGpxiqzZnuU0kIWqU12pq tuPFsNp7azwvt/zqceP584l1nZQZDwf3g3P4kOA5lHUv41Y4kN2x6UX1jnho1vJ8 zQLxQ6VjNjfhCXVWYufpQLqZ90Slvn5c6AiQI33kFqtzjEQwFhk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:07 2025 by rpki-client