$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: 1E60LS8Tm5VToDU+LrOovwIROfMtGq67wz3FCyru2ko= Subject key identifier: A4:F5:81:97:9E:08:9C:E6:8F:02:4B:20:CF:28:57:E9:D7:F7:D0:2D Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 173BD0A90AEC383C2E6A8F94BC1FA24124E9DE75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01E5 Signing time: Thu 21 Aug 2025 18:40:35 +0000 Manifest this update: Thu 21 Aug 2025 18:35:35 +0000 Manifest next update: Mon 25 Aug 2025 02:39:35 +0000 Files and hashes: 1: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 2: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 3: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 4: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: P1d2l1F4u+xxFgYIsXmIu9jurzw6FQ6S2D/s0xf38cg=) 5: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3b:d0:a9:0a:ec:38:3c:2e:6a:8f:94:bc:1f:a2:41:24:e9:de:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Aug 21 18:35:35 2025 GMT Not After : Aug 25 02:39:35 2025 GMT Subject: CN=A4F581979E089CE68F024B20CF2857E9D7F7D02D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:2f:e4:a3:e2:85:2e:33:4a:c6:30:7c:5e: f0:d1:50:f7:e6:5f:cf:58:c8:9e:4e:54:20:52:bb: 4d:ef:bc:2f:0d:e7:9e:79:dd:c9:f7:de:1e:9d:a7: f2:3c:dd:56:a1:f1:cb:8b:e6:b8:bd:57:df:80:96: ef:6b:0a:54:53:c2:db:c6:62:76:f7:81:84:25:80: a7:09:b2:4f:4a:1a:42:37:e7:59:1f:78:e9:8d:8f: 49:db:59:51:db:06:80:9a:6e:91:12:11:14:d2:39: 7a:da:14:a5:29:7e:7a:98:69:fa:30:76:dd:7e:e5: d8:74:94:c6:e9:3d:df:23:96:bb:46:3c:21:cf:50: a3:9b:41:b5:1d:54:8d:f3:ca:2f:51:d0:68:b4:9b: 1e:58:20:4a:c1:25:b4:15:7a:e9:e0:16:ad:44:a9: 51:15:d5:19:f9:e8:65:45:8e:e8:43:d2:26:e1:ae: dd:58:eb:3b:52:80:49:87:10:93:4a:f1:df:39:14: e8:bd:81:b1:4e:6a:4f:89:3a:5f:54:43:b5:3e:6a: 8b:58:d1:9f:b4:b1:dc:28:5d:33:6d:21:6b:f4:f4: 82:e3:6c:84:3f:df:52:96:7f:3d:a3:c3:e4:42:71: ab:39:e8:f6:e4:97:bf:45:28:2e:25:40:b4:53:3f: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F5:81:97:9E:08:9C:E6:8F:02:4B:20:CF:28:57:E9:D7:F7:D0:2D X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1b:b6:5d:e5:92:11:97:88:41:d5:05:43:84:09:b2:87:3b: 9d:7f:a2:b7:16:8d:35:4f:d2:0c:b7:03:fa:a2:83:b3:b6:04: e4:40:33:da:be:03:90:f3:8d:92:d4:45:2b:fe:33:a4:19:44: 28:50:7e:7c:01:05:b4:78:ef:9f:ea:28:5c:75:90:77:c5:0c: f9:9c:fa:b8:ba:7a:54:75:c6:77:62:7e:84:f1:5f:c6:12:bb: f5:5b:a9:ad:81:69:01:23:75:09:9f:7c:85:a2:e0:1b:a3:bc: 4a:b8:91:76:fb:3c:ef:e0:d6:6f:71:a5:bb:ce:c1:f0:52:81: 84:af:d6:d6:1a:33:5d:c9:f1:16:ad:c8:79:cd:2f:4f:77:d2: 5d:ca:52:8d:0b:a7:93:b5:8a:84:ee:60:82:71:71:2e:bc:93: 4b:fd:ff:12:25:17:3d:88:45:04:26:ff:ff:bd:5e:be:77:85: 3d:0b:7a:7e:ab:87:21:a3:0e:f2:3d:21:e9:23:54:e3:bf:d9: f8:9d:80:4d:51:fd:c9:7c:11:bb:92:5a:cf:75:3c:8d:26:e7: 24:34:a0:84:08:e1:ea:14:64:08:9a:9e:97:a1:22:27:4c:3a: fb:4d:25:5c:f4:11:07:ee:39:a5:87:f8:d7:18:b7:d8:14:f1: 72:b7:3a:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzvQqQrsODwuao+UvB+iQSTp3nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA4MjExODM1MzVaFw0yNTA4MjUwMjM5MzVaMDMxMTAvBgNV BAMTKEE0RjU4MTk3OUUwODlDRTY4RjAyNEIyMENGMjg1N0U5RDdGN0QwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpS/ko+KFLjNKxjB8XvDRUPfm X89YyJ5OVCBSu03vvC8N55553cn33h6dp/I83Vah8cuL5ri9V9+Alu9rClRTwtvG Ynb3gYQlgKcJsk9KGkI351kfeOmNj0nbWVHbBoCabpESERTSOXraFKUpfnqYafow dt1+5dh0lMbpPd8jlrtGPCHPUKObQbUdVI3zyi9R0Gi0mx5YIErBJbQVeungFq1E qVEV1Rn56GVFjuhD0ibhrt1Y6ztSgEmHEJNK8d85FOi9gbFOak+JOl9UQ7U+aotY 0Z+0sdwoXTNtIWv09ILjbIQ/31KWfz2jw+RCcas56Pbkl79FKC4lQLRTP6YtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpPWBl54InOaPAksgzyhX6df30C0wHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0btl3lkhGXiEHVBUOECbKHO51/orcWjTVP 0gy3A/qig7O2BORAM9q+A5DzjZLURSv+M6QZRChQfnwBBbR475/qKFx1kHfFDPmc +ri6elR1xndifoTxX8YSu/Vbqa2BaQEjdQmffIWi4BujvEq4kXb7PO/g1m9xpbvO wfBSgYSv1tYaM13J8RatyHnNL0930l3KUo0Lp5O1ioTuYIJxcS68k0v9/xIlFz2I RQQm//+9Xr53hT0Len6rhyGjDvI9IekjVOO/2fidgE1R/cl8EbuSWs91PI0m5yQ0 oIQI4eoUZAianpehIidMOvtNJVz0EQfuOaWH+NcYt9gU8XK3Orc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:44:03 2025 by rpki-client