$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft File: 1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json) Hash identifier: nM234TpeOGhovF48qgdEVeSNnf5st7tSQS2+Yzo58xY= Subject key identifier: 8C:1F:B9:63:B8:DC:38:31:A7:E7:73:07:33:2A:E8:45:52:AC:3E:60 Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Certificate serial: 44A23AB4F31C9ED90E7F2E2CFF02F023E68FFD48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft Manifest number: 032A Signing time: Thu 21 Aug 2025 22:31:21 +0000 Manifest this update: Thu 21 Aug 2025 22:26:21 +0000 Manifest next update: Mon 25 Aug 2025 07:37:21 +0000 Files and hashes: 1: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: Mpzdd0OSlH1S23ORm3yiVnyYwnvGV5CTVY8dyT2JsZE=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: uumiLUQfphgqskF7mpd6oqfDDTxMSTqQ7X8YmHylWvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a2:3a:b4:f3:1c:9e:d9:0e:7f:2e:2c:ff:02:f0:23:e6:8f:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Validity Not Before: Aug 21 22:26:21 2025 GMT Not After : Aug 25 07:37:21 2025 GMT Subject: CN=8C1FB963B8DC3831A7E77307332AE84552AC3E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:9a:fe:7d:f4:c8:5e:c5:93:d3:06:a5:92: 6e:b5:aa:ba:e8:1a:62:c1:42:b7:50:9b:90:5f:e4: 71:42:3c:f3:44:6a:71:b5:7c:93:84:34:a9:6c:6d: 6f:18:2c:ee:d4:ea:0e:ee:86:d3:6d:36:4f:a9:c8: 4b:2b:25:45:6d:76:c7:29:28:af:4a:68:a8:14:22: 22:e9:09:c7:c3:2d:4f:c6:d8:ab:e4:db:e6:5c:bc: 7e:77:1b:3d:4e:9d:60:2d:f2:61:f7:83:c8:30:22: 74:5e:97:b4:6e:b3:6a:83:0d:67:41:5b:18:ee:56: 04:46:68:0f:a6:0e:fa:f1:83:09:9a:8a:ce:22:25: a5:e6:42:75:89:65:30:10:cd:ef:aa:09:c6:26:2f: 32:d8:e0:d7:1d:2e:74:03:fb:e5:bf:c8:59:ae:7f: a2:f5:15:9e:df:ba:09:b8:ec:62:d7:4e:a3:45:71: a4:a1:62:dd:03:d9:61:ee:d2:c7:40:1b:af:d0:6d: 1f:fc:db:2e:0a:d5:9f:5c:3f:51:63:6e:7e:c9:cb: fa:d5:a5:04:02:f5:53:76:4a:5f:e2:b6:4b:4d:d9: 98:9f:e0:10:f9:ec:b9:63:64:14:56:16:3f:55:03: 80:5a:0b:03:a1:9b:35:2d:64:1a:de:cc:b5:da:52: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1F:B9:63:B8:DC:38:31:A7:E7:73:07:33:2A:E8:45:52:AC:3E:60 X509v3 Authority Key Identifier: keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6b:1a:4f:57:c8:95:16:fe:0a:f1:78:24:ed:e0:fc:73:de: 61:7d:ec:24:fb:02:c0:ca:29:e4:01:10:d3:71:d6:45:76:c2: d6:38:5a:72:87:e8:c2:c0:89:f8:5f:bd:b1:65:00:cb:76:76: 9f:fa:6d:95:aa:b3:4a:32:63:03:77:95:c5:b1:fc:b3:28:b5: d8:7e:37:85:a4:29:e3:e0:c0:ab:52:6b:5f:05:37:61:ba:ee: 5d:cb:b3:15:09:18:0d:3b:74:e3:05:2b:14:f0:7b:9a:06:33: 03:46:05:ae:bc:94:ff:07:36:1d:b2:23:68:ad:21:cd:00:a1: eb:fe:5f:c5:5e:1b:d8:86:3b:65:db:2d:99:44:b4:05:76:2f: 15:9f:76:14:94:63:61:5f:f1:de:d4:9b:16:09:89:67:ec:a5: 07:b8:a1:37:b3:c7:ba:5c:56:10:d7:33:b7:87:25:1f:ba:72: e9:cb:c6:a0:73:aa:8e:4c:92:60:c8:21:b0:32:1a:6b:12:33: 39:7f:be:27:fb:c7:6f:78:0f:73:83:28:b8:2f:58:31:3f:a7: 4b:f7:00:0e:6e:16:87:35:87:af:b0:a2:2a:35:04:90:4c:d7: 12:f8:26:38:a0:28:0d:a5:0e:0f:3a:80:ab:17:c0:2d:c7:6d: 87:6a:40:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKI6tPMcntkOfy4s/wLwI+aP/UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw OENFNjAwMzAeFw0yNTA4MjEyMjI2MjFaFw0yNTA4MjUwNzM3MjFaMDMxMTAvBgNV BAMTKDhDMUZCOTYzQjhEQzM4MzFBN0U3NzMwNzMzMkFFODQ1NTJBQzNFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIZr+ffTIXsWT0walkm61qrro GmLBQrdQm5Bf5HFCPPNEanG1fJOENKlsbW8YLO7U6g7uhtNtNk+pyEsrJUVtdscp KK9KaKgUIiLpCcfDLU/G2Kvk2+ZcvH53Gz1OnWAt8mH3g8gwInRel7Rus2qDDWdB WxjuVgRGaA+mDvrxgwmais4iJaXmQnWJZTAQze+qCcYmLzLY4NcdLnQD++W/yFmu f6L1FZ7fugm47GLXTqNFcaShYt0D2WHu0sdAG6/QbR/82y4K1Z9cP1Fjbn7Jy/rV pQQC9VN2Sl/itktN2Zif4BD57LljZBRWFj9VA4BaCwOhmzUtZBrezLXaUmFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjB+5Y7jcODGn53MHMyroRVKsPmAwHwYDVR0j BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF NjAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlB OEMwOENFNjAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZrGk9XyJUW/grxeCTt4Pxz3mF97CT7AsDK KeQBENNx1kV2wtY4WnKH6MLAifhfvbFlAMt2dp/6bZWqs0oyYwN3lcWx/LMotdh+ N4WkKePgwKtSa18FN2G67l3LsxUJGA07dOMFKxTwe5oGMwNGBa68lP8HNh2yI2it Ic0Aoev+X8VeG9iGO2XbLZlEtAV2LxWfdhSUY2Ff8d7UmxYJiWfspQe4oTezx7pc VhDXM7eHJR+6cunLxqBzqo5MkmDIIbAyGmsSMzl/vif7x294D3ODKLgvWDE/p0v3 AA5uFoc1h6+woio1BJBM1xL4JjigKA2lDg86gKsXwC3HbYdqQE8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:33 2025 by rpki-client