$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: /soNS36CBvfJsPwwz07YnSbzxcHNL4VVZM2oUFZrYTs= Subject key identifier: 2F:C3:AB:DB:B6:96:E0:ED:86:EB:16:66:2C:78:59:44:72:80:7A:44 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 3089A3BEEE1E7D2A3D0376AB43F7DFAF9687FA53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 01FD Signing time: Wed 23 Jul 2025 08:10:46 +0000 Manifest this update: Wed 23 Jul 2025 08:05:46 +0000 Manifest next update: Sat 26 Jul 2025 11:46:46 +0000 Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: k/di4KwPZluvOXvyC9Q+S0BDXIxIph7JKpNBhY082IE=) 3: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) 4: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) 5: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 11:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:89:a3:be:ee:1e:7d:2a:3d:03:76:ab:43:f7:df:af:96:87:fa:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Jul 23 08:05:46 2025 GMT Not After : Jul 26 11:46:46 2025 GMT Subject: CN=2FC3ABDBB696E0ED86EB16662C78594472807A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:7d:b8:f3:9d:79:c2:fc:60:a6:61:f1:9d: 08:cf:eb:2a:6e:34:88:1c:8b:d0:e1:86:3c:b8:e9: b5:53:1d:2a:a2:8d:da:42:97:2d:3d:f7:cb:3d:eb: 28:a5:6d:5e:84:cf:aa:64:f8:c6:dd:49:d4:26:a5: b7:37:55:17:bf:07:33:79:e8:66:43:40:5d:46:9b: 28:88:09:37:60:fc:f4:6a:bc:c4:1c:aa:39:b3:72: 88:dd:a0:08:86:e3:af:18:e1:81:a4:c9:34:5b:b1: 2f:62:18:40:18:43:42:cf:88:62:54:a9:35:c0:5a: e3:54:ef:bf:e0:11:9e:e6:b6:1c:be:ab:12:e4:bb: ed:79:31:ad:72:69:10:b7:66:93:cf:fe:cd:cc:3b: 2a:9c:22:83:ba:08:c4:26:50:54:8d:be:5c:c8:f2: d0:cf:80:1f:05:fe:ef:94:26:c7:65:59:a7:04:17: 67:70:89:d0:8e:ca:18:76:c1:3c:2f:94:c9:59:65: 0b:56:03:3c:94:2d:71:72:ec:83:7e:4a:30:57:b2: 26:ab:4e:cc:36:95:ac:f0:3d:56:9b:d3:73:49:90: 21:6c:82:ac:1f:2d:7b:7a:77:4c:41:4a:79:77:f2: 81:9d:62:b1:2c:db:f3:83:d7:75:77:37:70:6c:cb: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C3:AB:DB:B6:96:E0:ED:86:EB:16:66:2C:78:59:44:72:80:7A:44 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7d:e1:96:b7:ea:a5:07:22:af:5d:e8:f5:c5:c7:d0:be:f3: d3:28:f0:b4:34:04:00:69:22:ad:f9:77:3b:f5:7c:3b:a8:3c: 13:96:dc:20:82:99:61:41:30:f2:92:7b:00:30:d6:36:93:d3: ac:c7:4c:d1:3b:84:15:c7:d5:ca:9c:19:33:d4:c7:97:a0:db: 7a:81:97:26:ba:15:6a:28:63:06:73:3b:5b:27:91:b2:14:5f: 42:de:fb:2e:2d:2b:01:21:08:ac:5e:f6:70:93:d9:6c:15:2f: 49:1e:58:c6:e5:76:82:ca:0d:c1:d0:c6:e7:9a:57:89:dc:d2: 61:dd:6f:f0:59:fc:36:dc:17:34:e2:96:a6:79:91:e2:ab:a7: 12:b5:a2:45:44:46:ba:5a:18:04:34:84:f9:2c:b8:f8:a3:93: 96:b1:e0:08:aa:6e:f4:bf:36:9b:ed:f1:94:85:eb:5c:47:aa: 1a:f2:3f:05:1d:ee:52:2b:93:08:4c:91:60:ee:2a:18:7a:25: 9b:b4:4d:04:c0:37:12:10:43:34:ab:66:de:66:e2:0b:97:b6: 00:cc:7d:91:24:68:2c:af:aa:95:78:9d:59:cc:43:05:fa:3b: 04:64:f7:52:50:6b:e1:c9:8d:8c:c1:b8:e5:0b:9b:e2:12:9e: 91:ad:08:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMImjvu4efSo9A3arQ/ffr5aH+lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA3MjMwODA1NDZaFw0yNTA3MjYxMTQ2NDZaMDMxMTAvBgNV BAMTKDJGQzNBQkRCQjY5NkUwRUQ4NkVCMTY2NjJDNzg1OTQ0NzI4MDdBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlH248515wvxgpmHxnQjP6ypu NIgci9Dhhjy46bVTHSqijdpCly0998s96yilbV6Ez6pk+MbdSdQmpbc3VRe/BzN5 6GZDQF1GmyiICTdg/PRqvMQcqjmzcojdoAiG468Y4YGkyTRbsS9iGEAYQ0LPiGJU qTXAWuNU77/gEZ7mthy+qxLku+15Ma1yaRC3ZpPP/s3MOyqcIoO6CMQmUFSNvlzI 8tDPgB8F/u+UJsdlWacEF2dwidCOyhh2wTwvlMlZZQtWAzyULXFy7IN+SjBXsiar Tsw2lazwPVab03NJkCFsgqwfLXt6d0xBSnl38oGdYrEs2/OD13V3N3Bsy+HbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL8Or27aW4O2G6xZmLHhZRHKAekQwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB94Za36qUHIq9d6PXFx9C+89Mo8LQ0BABp Iq35dzv1fDuoPBOW3CCCmWFBMPKSewAw1jaT06zHTNE7hBXH1cqcGTPUx5eg23qB lya6FWooYwZzO1snkbIUX0Le+y4tKwEhCKxe9nCT2WwVL0keWMbldoLKDcHQxuea V4nc0mHdb/BZ/DbcFzTilqZ5keKrpxK1okVERrpaGAQ0hPksuPijk5ax4AiqbvS/ Npvt8ZSF61xHqhryPwUd7lIrkwhMkWDuKhh6JZu0TQTANxIQQzSrZt5m4guXtgDM fZEkaCyvqpV4nVnMQwX6OwRk91JQa+HJjYzBuOULm+ISnpGtCAY= -----END CERTIFICATE-----Generated at Fri Jul 25 01:05:23 2025 by rpki-client