$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: 9szNUzyT57CkdRTnwzn78XZA0+h43FwzZi2+rT/Qxfw= Subject key identifier: A1:D7:DE:57:27:45:DB:66:01:D5:F8:AE:00:56:AC:4E:88:40:2F:29 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 74B2B97241DD478A58101BB1125848A20321DC1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0502 Signing time: Thu 21 Aug 2025 15:41:35 +0000 Manifest this update: Thu 21 Aug 2025 15:36:35 +0000 Manifest next update: Mon 25 Aug 2025 00:02:35 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: QFQU1R5jJ+Wk2qpdPzthE5hrw/dSCUTK0+8NHpIOoQY=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 3: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b2:b9:72:41:dd:47:8a:58:10:1b:b1:12:58:48:a2:03:21:dc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Aug 21 15:36:35 2025 GMT Not After : Aug 25 00:02:35 2025 GMT Subject: CN=A1D7DE572745DB6601D5F8AE0056AC4E88402F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:e8:c8:54:80:d4:d3:3b:44:44:1b:47:79: f1:6a:0a:97:61:c8:fb:c3:fc:11:95:79:91:91:98: ae:f1:18:71:4f:5b:56:0e:68:5c:cd:bd:78:69:be: 6c:b3:27:45:7d:79:59:46:2c:96:cb:37:19:05:e5: 40:63:16:bf:08:be:e2:1c:37:4a:cf:5f:7f:7a:33: 4f:ca:7f:31:78:2b:4a:e8:e1:25:8b:bb:b1:76:9a: 85:8d:b2:04:61:d0:a5:6a:f5:92:28:d4:45:a4:9a: e9:3e:52:d9:46:39:77:9a:e6:61:22:b3:0d:26:ab: 28:89:73:6b:aa:4c:d8:de:39:ac:7e:9f:bf:91:7b: f6:5b:97:37:86:6c:23:d0:8e:cf:18:a2:45:85:77: ed:eb:7f:3f:f7:f1:0c:bd:eb:fc:cf:e0:7a:5a:ad: 89:1a:d3:37:5e:71:37:b7:5e:c8:b1:e1:26:29:b0: 4e:53:5d:79:45:48:00:8f:62:29:19:be:f4:7d:54: 45:76:2f:d6:32:16:42:17:a0:40:44:dd:a5:b9:6b: d5:91:b8:88:c1:66:4d:4d:51:4f:b8:ec:ee:67:07: 8f:7b:2a:2e:4d:e4:f0:a2:48:a9:91:06:57:7d:b1: 45:8a:49:42:94:d3:ce:f1:7a:9a:e7:54:57:c3:dc: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D7:DE:57:27:45:DB:66:01:D5:F8:AE:00:56:AC:4E:88:40:2F:29 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fb:1b:c6:72:4e:df:03:83:ee:c3:7e:fa:2f:0d:95:00:94: a6:b1:95:43:18:2b:3a:06:b6:f1:ed:d8:4b:1c:df:fd:17:ab: ae:35:bf:53:10:0d:44:d2:de:86:d6:ea:55:16:8d:f2:dd:4f: bf:8f:a8:66:7b:1e:26:bf:d3:6c:b5:73:a8:3f:5f:57:04:f0: 4c:54:53:98:41:5c:de:98:66:f4:bd:ac:b7:8b:84:a0:91:4c: da:31:fa:04:ac:7c:f9:e5:e1:a1:8f:08:3b:3e:d8:d5:0a:a5: 5d:c5:f5:85:9a:52:43:b4:59:02:68:df:2a:72:c5:cd:91:cc: f1:5b:82:a1:b5:2c:7e:8a:a1:85:87:33:b1:28:5b:9d:02:bb: fc:b6:5b:e7:99:40:19:68:eb:08:b7:16:10:47:c7:2b:b2:c5: d5:e0:bf:a1:dc:7e:16:a8:5b:00:ab:06:39:7c:06:32:d5:c1: af:95:e2:73:b4:0d:33:bc:fa:ee:7a:7e:35:c6:2a:88:59:3d: cb:ab:96:19:f4:af:29:63:f4:c3:b7:25:32:d4:ee:dc:62:ac: 7c:29:6a:a9:81:61:be:13:f4:c5:26:b2:00:a0:88:66:33:6d: c1:7a:25:36:d2:b4:9e:f5:2d:fa:87:6c:30:38:d4:e6:a3:78: 40:b9:15:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLK5ckHdR4pYEBuxElhIogMh3BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA4MjExNTM2MzVaFw0yNTA4MjUwMDAyMzVaMDMxMTAvBgNV BAMTKEExRDdERTU3Mjc0NURCNjYwMUQ1RjhBRTAwNTZBQzRFODg0MDJGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VujIVIDU0ztERBtHefFqCpdh yPvD/BGVeZGRmK7xGHFPW1YOaFzNvXhpvmyzJ0V9eVlGLJbLNxkF5UBjFr8IvuIc N0rPX396M0/KfzF4K0ro4SWLu7F2moWNsgRh0KVq9ZIo1EWkmuk+UtlGOXea5mEi sw0mqyiJc2uqTNjeOax+n7+Re/ZblzeGbCPQjs8YokWFd+3rfz/38Qy96/zP4Hpa rYka0zdecTe3Xsix4SYpsE5TXXlFSACPYikZvvR9VEV2L9YyFkIXoEBE3aW5a9WR uIjBZk1NUU+47O5nB497Ki5N5PCiSKmRBld9sUWKSUKU087xeprnVFfD3Lu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodfeVydF22YB1fiuAFasTohALykwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj7G8ZyTt8Dg+7DfvovDZUAlKaxlUMYKzoG tvHt2Esc3/0Xq641v1MQDUTS3obW6lUWjfLdT7+PqGZ7Hia/02y1c6g/X1cE8ExU U5hBXN6YZvS9rLeLhKCRTNox+gSsfPnl4aGPCDs+2NUKpV3F9YWaUkO0WQJo3ypy xc2RzPFbgqG1LH6KoYWHM7EoW50Cu/y2W+eZQBlo6wi3FhBHxyuyxdXgv6Hcfhao WwCrBjl8BjLVwa+V4nO0DTO8+u56fjXGKohZPcurlhn0rylj9MO3JTLU7txirHwp aqmBYb4T9MUmsgCgiGYzbcF6JTbStJ71LfqHbDA41OajeEC5FZ4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:46 2025 by rpki-client