$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: +mNxS+cxCfgH8oEmxj9KqOeq76r18d5pp6TBl8FADJM= Subject key identifier: 90:20:53:7F:22:51:64:41:6B:0A:4A:EC:BA:18:A5:87:5F:7C:F2:5E Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 77DB4CED65D27D688B23CDE098213B0B3B102B22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: E9 Signing time: Sun 20 Jul 2025 12:32:12 +0000 Manifest this update: Sun 20 Jul 2025 12:27:12 +0000 Manifest next update: Wed 23 Jul 2025 13:48:12 +0000 Files and hashes: 1: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: bZtCXaxnCo0kXFhv+UgtkdHVo3axHOoHwsSEN85b1Nc=) 2: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: 6mfUaKy9fjuDWbwGDzuO/7D5mnEMJPmqqvuB9AomZ+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:db:4c:ed:65:d2:7d:68:8b:23:cd:e0:98:21:3b:0b:3b:10:2b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Jul 20 12:27:12 2025 GMT Not After : Jul 23 13:48:12 2025 GMT Subject: CN=9020537F225164416B0A4AECBA18A5875F7CF25E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:1f:82:8f:1f:f9:6e:11:79:a5:26:33:3d: 33:c8:dd:81:5f:7b:1e:ec:47:d0:7b:c4:b3:af:95: eb:b0:c8:d5:a9:55:c7:5b:f0:40:05:42:21:50:57: 57:ac:5b:16:ba:80:e0:f9:f4:91:3b:bb:d9:11:c8: c9:04:dc:88:9c:c2:fe:5d:81:fb:cb:db:f7:f5:fe: e1:5b:83:43:31:3b:1c:b6:cd:00:88:ab:95:25:8b: 6f:7d:2c:a2:15:81:bd:85:18:21:df:27:34:4e:f4: 21:f8:0f:eb:9b:28:fc:7a:07:eb:f8:ec:e8:32:9b: 34:0f:a2:c4:73:b7:a6:0e:99:08:2e:62:22:ba:22: 28:38:f4:c3:2c:86:e9:cd:11:89:32:70:04:85:28: eb:88:7d:db:c5:3c:fe:f5:8a:20:e3:ee:8a:f6:7a: e1:3b:8a:ba:c7:6f:13:72:90:43:0f:34:44:33:fe: c5:33:03:3f:5d:a1:06:ec:f1:c1:83:0b:df:d4:e9: 43:22:47:c9:ba:e6:14:ce:db:3a:fc:69:b2:88:5f: 6e:8a:d8:36:fe:d3:8b:dd:a6:af:ff:bc:51:21:57: ff:58:63:97:81:eb:72:a8:33:b3:c5:9e:81:38:17: a1:3b:ec:cc:6c:15:0a:e6:6e:6b:d5:85:dc:56:c1: 52:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:53:7F:22:51:64:41:6B:0A:4A:EC:BA:18:A5:87:5F:7C:F2:5E X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ef:e1:28:65:5f:64:46:f5:af:a1:44:3f:1e:03:4d:3d:17: 04:8a:07:bb:e2:93:4a:35:ef:e7:41:d1:de:05:94:79:41:6c: f4:e4:02:b8:fe:09:17:01:ff:e6:2e:69:06:0b:e2:ba:01:33: 32:51:48:2b:7e:90:2a:f9:7d:7d:64:22:80:0b:4c:2b:2c:90: 48:21:72:39:17:65:95:51:f4:6c:a8:54:2c:6d:02:82:dd:20: d9:7b:fe:f7:70:4e:9a:ab:60:e7:a2:6e:49:ce:c8:0a:37:9a: 30:05:0d:4c:6f:0d:3b:12:52:ca:dd:63:f7:79:96:46:29:71: 4a:c9:20:d3:56:05:00:d1:1c:4c:8d:a2:92:d0:11:50:a3:2f: 1c:13:b6:83:f6:62:79:9d:98:db:a5:22:cc:6e:65:c4:72:8f: 69:51:46:e0:bc:98:ab:ce:a1:c3:42:fa:50:29:5d:3b:43:d0: 4e:3c:62:bf:20:4c:55:bb:9f:00:51:86:eb:86:51:95:79:89: ff:cd:a1:5a:99:d9:23:d8:5c:78:ed:a7:a6:85:7b:6b:96:df: ab:98:f9:70:87:4f:41:45:45:a3:fe:16:6b:de:13:f7:b1:55: 9f:f3:44:43:3d:ec:fa:4d:d9:ad:b2:46:63:26:bc:9e:11:ac: 0f:df:a1:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9tM7WXSfWiLI83gmCE7CzsQKyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNTA3MjAxMjI3MTJaFw0yNTA3MjMxMzQ4MTJaMDMxMTAvBgNV BAMTKDkwMjA1MzdGMjI1MTY0NDE2QjBBNEFFQ0JBMThBNTg3NUY3Q0YyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDB+Cjx/5bhF5pSYzPTPI3YFf ex7sR9B7xLOvleuwyNWpVcdb8EAFQiFQV1esWxa6gOD59JE7u9kRyMkE3Iicwv5d gfvL2/f1/uFbg0MxOxy2zQCIq5Uli299LKIVgb2FGCHfJzRO9CH4D+ubKPx6B+v4 7OgymzQPosRzt6YOmQguYiK6Iig49MMshunNEYkycASFKOuIfdvFPP71iiDj7or2 euE7irrHbxNykEMPNEQz/sUzAz9doQbs8cGDC9/U6UMiR8m65hTO2zr8abKIX26K 2Db+04vdpq//vFEhV/9YY5eB63KoM7PFnoE4F6E77MxsFQrmbmvVhdxWwVJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCBTfyJRZEFrCkrsuhilh1988l4wHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3v4ShlX2RG9a+hRD8eA009FwSKB7vik0o1 7+dB0d4FlHlBbPTkArj+CRcB/+YuaQYL4roBMzJRSCt+kCr5fX1kIoALTCsskEgh cjkXZZVR9GyoVCxtAoLdINl7/vdwTpqrYOeibknOyAo3mjAFDUxvDTsSUsrdY/d5 lkYpcUrJINNWBQDRHEyNopLQEVCjLxwTtoP2YnmdmNulIsxuZcRyj2lRRuC8mKvO ocNC+lApXTtD0E48Yr8gTFW7nwBRhuuGUZV5if/NoVqZ2SPYXHjtp6aFe2uW36uY +XCHT0FFRaP+FmveE/exVZ/zREM97PpN2a2yRmMmvJ4RrA/foao= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:18 2025 by rpki-client