$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: AiJRNnC4Wn+gn0xeMzlpHlwIxAXifFgksz4juSdh/u0= Subject key identifier: 4C:B7:8F:2D:1E:9F:CE:E2:31:AA:46:E0:CA:CF:87:9E:78:A5:0A:C7 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 5E748B2FCB52DC08E842C6AC871B8043532EC593 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 77 Signing time: Fri 22 Aug 2025 01:01:23 +0000 Manifest this update: Fri 22 Aug 2025 00:56:23 +0000 Manifest next update: Mon 25 Aug 2025 03:58:23 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) 2: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: jsJZcVUqSJreM5SdDjjsVU8eGB6AVtXQpSzlDOJP2KM=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 4: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:74:8b:2f:cb:52:dc:08:e8:42:c6:ac:87:1b:80:43:53:2e:c5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Aug 22 00:56:23 2025 GMT Not After : Aug 25 03:58:23 2025 GMT Subject: CN=4CB78F2D1E9FCEE231AA46E0CACF879E78A50AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:30:f8:42:23:b9:b5:0a:2e:3a:50:0e:79: b1:cb:ea:ca:63:72:6c:4c:cd:2e:9d:d7:93:5e:1f: f2:a3:d5:1a:77:77:01:83:7e:db:5c:9d:3e:44:fb: 11:2f:6d:6e:03:6a:89:1f:48:87:40:89:46:11:75: 88:9e:1f:cc:e5:fb:34:31:c5:1c:0e:ef:1c:38:bf: 09:f0:a4:5a:26:a9:28:25:5d:5b:6d:9d:8e:b0:df: 5f:39:86:fc:78:28:8f:87:e9:fb:eb:20:dc:d7:a3: 0a:3e:92:6c:db:d4:95:08:e9:fd:bc:40:e3:5f:bf: f6:a8:04:dd:02:51:6a:1b:b4:d0:c4:c1:73:92:0d: 34:8d:9e:b3:28:3f:28:24:4b:7c:ad:6d:2a:d6:ef: ab:ea:c3:e7:73:e7:31:ab:ea:ca:59:d0:92:23:bf: b8:7e:85:03:47:e6:34:8a:20:14:9d:bb:7c:4a:b0: a6:a6:34:9f:1a:24:da:55:c4:53:40:2d:dc:46:fd: ea:1e:0c:7a:cb:fc:b1:f5:51:cd:40:36:a7:16:5b: ae:a4:58:1e:24:d4:65:9c:ca:c3:9a:b5:3c:a3:d3: b7:f5:9b:8b:ba:b8:bc:12:5f:94:f1:fc:3f:02:7f: 68:57:ca:94:8f:60:0b:f1:a4:09:39:c0:be:b9:11: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B7:8F:2D:1E:9F:CE:E2:31:AA:46:E0:CA:CF:87:9E:78:A5:0A:C7 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:de:3c:c4:10:dc:13:43:b3:2c:83:80:fa:cd:e0:42:ce:58: 40:5e:71:e2:19:dd:1d:04:04:3b:c1:d5:87:3e:17:2a:ad:56: 73:0a:c3:68:ec:44:a9:03:ae:c0:15:58:25:1c:74:8a:71:5f: 11:ff:94:71:f6:ba:39:17:0d:60:7d:71:c3:51:44:e6:93:34: e9:4a:65:6b:5b:8d:ea:ab:52:bb:69:36:fe:a3:21:79:ea:a6: 4b:9e:6e:de:02:57:7c:06:32:42:cf:7f:cb:15:74:17:4d:bf: 1f:0f:1c:c9:85:09:4e:09:87:4f:e6:75:4a:b9:7b:2f:68:ac: 12:dd:cb:97:3e:ce:a2:72:6c:61:a8:af:b4:90:17:0e:bf:62: 3b:67:8a:b9:80:2a:93:7c:62:c9:ec:d0:d0:ed:e8:ae:21:78: 7b:7e:b7:ad:37:7e:0a:2e:7f:f4:2f:ce:f7:e2:20:c7:d7:96: ef:82:26:94:1a:aa:b6:6a:40:65:83:c7:7c:2e:82:57:d5:d4: c5:3c:0c:0d:fe:c2:2c:a2:a4:84:af:21:b4:58:c0:b6:12:be: dd:32:7c:c7:aa:ef:94:0f:91:85:12:49:07:86:64:db:d9:03: 2b:6b:a0:69:87:27:93:8d:c3:3b:3b:3b:ac:ca:de:3d:6d:a6: a6:78:58:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnSLL8tS3AjoQsashxuAQ1MuxZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA4MjIwMDU2MjNaFw0yNTA4MjUwMzU4MjNaMDMxMTAvBgNV BAMTKDRDQjc4RjJEMUU5RkNFRTIzMUFBNDZFMENBQ0Y4NzlFNzhBNTBBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tzD4QiO5tQouOlAOebHL6spj cmxMzS6d15NeH/Kj1Rp3dwGDfttcnT5E+xEvbW4DaokfSIdAiUYRdYieH8zl+zQx xRwO7xw4vwnwpFomqSglXVttnY6w3185hvx4KI+H6fvrINzXowo+kmzb1JUI6f28 QONfv/aoBN0CUWobtNDEwXOSDTSNnrMoPygkS3ytbSrW76vqw+dz5zGr6spZ0JIj v7h+hQNH5jSKIBSdu3xKsKamNJ8aJNpVxFNALdxG/eoeDHrL/LH1Uc1ANqcWW66k WB4k1GWcysOatTyj07f1m4u6uLwSX5Tx/D8Cf2hXypSPYAvxpAk5wL65Ee/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLePLR6fzuIxqkbgys+HnnilCscwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOLePMQQ3BNDsyyDgPrN4ELOWEBeceIZ3R0E BDvB1Yc+FyqtVnMKw2jsRKkDrsAVWCUcdIpxXxH/lHH2ujkXDWB9ccNRROaTNOlK ZWtbjeqrUrtpNv6jIXnqpkuebt4CV3wGMkLPf8sVdBdNvx8PHMmFCU4Jh0/mdUq5 ey9orBLdy5c+zqJybGGor7SQFw6/YjtnirmAKpN8Ysns0NDt6K4heHt+t603fgou f/QvzvfiIMfXlu+CJpQaqrZqQGWDx3wuglfV1MU8DA3+wiyipISvIbRYwLYSvt0y fMeq75QPkYUSSQeGZNvZAytroGmHJ5ONwzs7O6zK3j1tpqZ4WKQ= -----END CERTIFICATE-----Generated at Sun Aug 24 01:30:18 2025 by rpki-client