$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: rJYiVcgrZCSyUldR9ndqFMH9VLVhzfyCidycnjfJrKw= Subject key identifier: 3B:22:94:14:D2:5E:D4:7F:2E:4C:88:63:7C:2A:06:D8:38:B8:C1:A8 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 1B6DFAC9DA49BDC67CDECA1A69FC15148107D754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 0111 Signing time: Fri 22 Aug 2025 06:40:00 +0000 Manifest this update: Fri 22 Aug 2025 06:35:00 +0000 Manifest next update: Mon 25 Aug 2025 08:30:00 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: bMY9fQ1UEd6CoJhS4rg3RTYglGB0Fjx+H+2TszNiH8g=) 3: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6d:fa:c9:da:49:bd:c6:7c:de:ca:1a:69:fc:15:14:81:07:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Aug 22 06:35:00 2025 GMT Not After : Aug 25 08:30:00 2025 GMT Subject: CN=3B229414D25ED47F2E4C88637C2A06D838B8C1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:15:be:00:20:7f:ce:d3:66:98:b8:67:33:2e: ec:38:1f:81:97:2e:92:58:4c:80:55:9a:4f:ab:f7: 11:a2:c0:ab:b6:09:3b:54:bb:9e:4a:50:59:f7:8f: a9:86:49:72:cc:88:39:4c:ae:33:18:2d:53:10:c2: a0:c9:53:35:f9:89:2c:4e:45:13:84:3c:6d:ab:b0: 76:81:8f:b7:bc:a2:40:44:dc:ac:1a:28:5e:31:e6: 55:63:8f:69:4a:a4:c7:64:db:2b:ba:0c:68:33:8e: 1a:b8:65:8a:b3:3b:93:64:84:c4:64:62:12:7d:d3: 8c:ac:07:89:7f:34:26:66:87:92:30:19:aa:dc:28: ba:fc:b9:a4:9e:da:6f:c7:bf:5c:47:47:54:ca:32: 83:6e:b6:14:77:76:da:9a:18:b0:e9:43:d4:f1:6d: 3e:3c:94:2e:52:d2:c8:04:c0:d3:77:5c:42:98:90: af:11:4b:49:8b:47:30:b5:2c:ee:74:e7:b5:67:50: c9:6f:fc:c1:5d:6e:03:82:c4:4b:07:62:0c:43:57: a5:f5:8a:1b:0d:27:e5:5a:86:66:67:88:e7:23:a8: 48:bd:67:47:bc:8d:a6:26:25:ef:d0:6b:60:d5:42: 4d:b0:70:bf:b2:85:f5:fd:00:e6:af:2f:2d:be:37: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:22:94:14:D2:5E:D4:7F:2E:4C:88:63:7C:2A:06:D8:38:B8:C1:A8 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6b:1a:fb:1a:18:e3:f4:a0:82:47:fb:99:6f:21:59:93:05: f9:4e:e1:92:e3:6d:15:19:a5:c2:2e:54:ea:85:1e:9c:04:71: 10:6d:8b:59:22:ca:2e:19:1c:e7:27:b5:b5:2e:31:67:aa:a9: f9:e2:53:69:26:45:73:7c:57:f9:69:82:e9:af:20:5b:b4:94: 11:82:aa:6d:1c:a2:4a:f1:ae:70:6f:fc:39:6e:4d:d4:51:89: 8a:f5:d6:dc:36:1e:99:93:d5:61:47:93:1f:1f:92:3f:b2:68: e0:72:e0:ed:3c:8d:8c:59:7d:64:b4:7d:49:29:85:35:f8:87: f1:cc:3f:97:a7:d9:94:ec:06:35:23:9d:3c:0a:ab:60:9a:67: 9f:3c:fa:4e:e8:47:76:c9:28:cf:5b:3a:74:96:a2:06:5f:70: 34:4d:53:7c:33:56:a8:d2:91:a2:f3:0f:16:8c:98:39:19:e8: cd:14:b2:50:8a:d6:43:07:e4:3a:66:41:17:40:9b:17:6d:cf: 20:3b:f0:6a:a4:cb:31:d1:1f:24:2c:83:bf:37:ec:df:30:4f: 52:24:69:07:0b:59:40:0a:d7:30:7d:7c:1a:9c:54:ae:1b:50: fb:df:ca:80:51:be:91:5b:de:d8:19:60:12:fb:10:f7:84:73: 84:e7:92:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG236ydpJvcZ83soaafwVFIEH11QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTA4MjIwNjM1MDBaFw0yNTA4MjUwODMwMDBaMDMxMTAvBgNV BAMTKDNCMjI5NDE0RDI1RUQ0N0YyRTRDODg2MzdDMkEwNkQ4MzhCOEMxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxFb4AIH/O02aYuGczLuw4H4GX LpJYTIBVmk+r9xGiwKu2CTtUu55KUFn3j6mGSXLMiDlMrjMYLVMQwqDJUzX5iSxO RROEPG2rsHaBj7e8okBE3KwaKF4x5lVjj2lKpMdk2yu6DGgzjhq4ZYqzO5NkhMRk YhJ904ysB4l/NCZmh5IwGarcKLr8uaSe2m/Hv1xHR1TKMoNuthR3dtqaGLDpQ9Tx bT48lC5S0sgEwNN3XEKYkK8RS0mLRzC1LO5057VnUMlv/MFdbgOCxEsHYgxDV6X1 ihsNJ+VahmZniOcjqEi9Z0e8jaYmJe/Qa2DVQk2wcL+yhfX9AOavLy2+N1L9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyKUFNJe1H8uTIhjfCoG2Di4wagwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdrGvsaGOP0oIJH+5lvIVmTBflO4ZLjbRUZ pcIuVOqFHpwEcRBti1kiyi4ZHOcntbUuMWeqqfniU2kmRXN8V/lpgumvIFu0lBGC qm0cokrxrnBv/DluTdRRiYr11tw2HpmT1WFHkx8fkj+yaOBy4O08jYxZfWS0fUkp hTX4h/HMP5en2ZTsBjUjnTwKq2CaZ588+k7oR3bJKM9bOnSWogZfcDRNU3wzVqjS kaLzDxaMmDkZ6M0UslCK1kMH5DpmQRdAmxdtzyA78GqkyzHRHyQsg7837N8wT1Ik aQcLWUAK1zB9fBqcVK4bUPvfyoBRvpFb3tgZYBL7EPeEc4Tnkso= -----END CERTIFICATE-----Generated at Sat Aug 23 21:21:58 2025 by rpki-client