$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: t9SmwcQxTJgX3hSi8wzpKtY/DvNcwPW6OrrLhObZxww= Subject key identifier: 9B:8B:67:CD:B5:5D:BA:F0:9E:0C:9E:12:36:18:45:63:F9:45:59:5F Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 48BFDF19D77B86C36B513F1E068DD0F606054308 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: BF Signing time: Fri 22 Aug 2025 18:21:07 +0000 Manifest this update: Fri 22 Aug 2025 18:16:07 +0000 Manifest next update: Mon 25 Aug 2025 21:36:07 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: 2TLS1/c6W0YT6e+cyvyP/twgj2sx2WtgQfSpd8P+6i0=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bf:df:19:d7:7b:86:c3:6b:51:3f:1e:06:8d:d0:f6:06:05:43:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Aug 22 18:16:07 2025 GMT Not After : Aug 25 21:36:07 2025 GMT Subject: CN=9B8B67CDB55DBAF09E0C9E1236184563F945595F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:3d:b4:fc:79:82:ef:97:11:39:52:cc:10: 63:92:06:66:fb:1a:da:f5:cb:b3:46:06:ae:e0:fb: cf:6d:9d:f5:dd:26:3e:79:c2:40:bc:7c:96:fe:96: bd:9d:af:a2:a4:1c:b0:e9:29:0e:6e:d1:b9:bd:28: 8b:e6:72:f0:fe:99:62:6c:63:76:61:4a:e5:85:ab: ab:f8:d5:59:6b:80:fb:61:1c:5b:04:54:6c:38:b5: 80:98:f3:cb:a0:61:cc:f2:2e:dc:1c:bc:41:0a:01: c5:98:48:4d:9d:9e:e8:68:a8:ce:0d:6c:63:67:f4: ec:e3:f5:1c:25:1c:8a:d2:86:cd:36:b0:bc:65:a9: 8c:bc:18:b3:b7:a0:98:1e:05:d9:e7:23:b3:6c:5a: 2c:bd:fe:5f:80:a1:65:d5:cb:20:53:ca:f4:38:99: a3:21:88:b8:f3:c3:c6:8c:b0:60:8e:57:4f:7d:5e: 9b:1f:fd:1e:12:22:db:f1:3e:f3:26:14:6e:d7:cf: dc:6c:9c:30:df:f2:76:3d:c6:87:b7:5c:63:85:ee: 2d:34:9c:87:33:a7:72:bf:bb:72:1e:e0:c9:40:8a: 94:0a:d0:e5:a5:c0:e7:be:0d:e5:4c:27:9f:b7:e4: 60:a4:0b:75:dd:29:98:79:c8:32:a0:3b:2d:73:e5: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:67:CD:B5:5D:BA:F0:9E:0C:9E:12:36:18:45:63:F9:45:59:5F X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:49:f5:9d:53:f7:7d:43:1d:5b:42:cb:e7:cd:49:70:4c:85: 55:47:c8:a4:ce:a3:58:9b:1c:64:dc:48:a9:96:2c:b8:75:46: 97:d9:73:0c:b0:06:76:23:cb:da:c7:aa:b6:36:66:88:6c:d5: ce:90:2f:ed:a2:8c:1a:7d:f1:43:be:97:6e:31:9a:55:ef:eb: de:21:d0:7f:49:d2:f0:0c:e6:60:94:b7:c8:3f:25:ee:08:1d: 4e:48:93:ba:6c:7f:c0:d0:99:d5:98:4e:05:39:27:f6:87:cc: 7e:5b:d7:fe:39:ae:be:a4:c5:9e:79:18:f3:5c:fa:eb:83:e7: a5:aa:eb:b4:80:5c:62:de:01:25:cc:8b:76:7a:77:d1:60:22: 7a:42:40:58:8c:34:c8:cd:5e:85:36:6e:e8:18:48:11:ac:1d: ad:21:04:9b:7f:dd:35:fb:b9:c5:22:1e:b4:ae:a0:2e:9b:e4: 96:69:7d:fd:fd:e2:82:ab:bf:a1:9a:7a:2c:40:fc:f9:b8:ed: 72:12:e1:41:a4:65:88:05:00:d3:49:64:e6:d5:67:f6:bb:29: 07:32:18:fe:01:fc:05:79:74:30:8b:ec:e6:c5:09:b0:b4:b7: 48:e6:26:fe:b4:a8:f0:f7:d5:ae:8b:1d:f2:7b:5a:15:1c:55: 1d:b0:4b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSL/fGdd7hsNrUT8eBo3Q9gYFQwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTA4MjIxODE2MDdaFw0yNTA4MjUyMTM2MDdaMDMxMTAvBgNV BAMTKDlCOEI2N0NEQjU1REJBRjA5RTBDOUUxMjM2MTg0NTYzRjk0NTU5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KD20/HmC75cROVLMEGOSBmb7 Gtr1y7NGBq7g+89tnfXdJj55wkC8fJb+lr2dr6KkHLDpKQ5u0bm9KIvmcvD+mWJs Y3ZhSuWFq6v41VlrgPthHFsEVGw4tYCY88ugYczyLtwcvEEKAcWYSE2dnuhoqM4N bGNn9Ozj9RwlHIrShs02sLxlqYy8GLO3oJgeBdnnI7NsWiy9/l+AoWXVyyBTyvQ4 maMhiLjzw8aMsGCOV099Xpsf/R4SItvxPvMmFG7Xz9xsnDDf8nY9xoe3XGOF7i00 nIczp3K/u3Ie4MlAipQK0OWlwOe+DeVMJ5+35GCkC3XdKZh5yDKgOy1z5cj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4tnzbVduvCeDJ4SNhhFY/lFWV8wHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVJ9Z1T931DHVtCy+fNSXBMhVVHyKTOo1ib HGTcSKmWLLh1RpfZcwywBnYjy9rHqrY2Zohs1c6QL+2ijBp98UO+l24xmlXv694h 0H9J0vAM5mCUt8g/Je4IHU5Ik7psf8DQmdWYTgU5J/aHzH5b1/45rr6kxZ55GPNc +uuD56Wq67SAXGLeASXMi3Z6d9FgInpCQFiMNMjNXoU2bugYSBGsHa0hBJt/3TX7 ucUiHrSuoC6b5JZpff394oKrv6GaeixA/Pm47XIS4UGkZYgFANNJZObVZ/a7KQcy GP4B/AV5dDCL7ObFCbC0t0jmJv60qPD31a6LHfJ7WhUcVR2wS8A= -----END CERTIFICATE-----Generated at Sat Aug 23 21:43:27 2025 by rpki-client