$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: mIeGz9d0qpxNGng3h0h/ozMTSfDqcH/lfODJZVPD5SM= Subject key identifier: 1D:AB:8E:CE:B4:F6:41:5B:7F:6F:67:EF:CF:20:31:59:2F:47:30:A2 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 11DBCB8A609C5A5DC20625915E94E553E8E76171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: AA Signing time: Sun 20 Jul 2025 15:01:34 +0000 Manifest this update: Sun 20 Jul 2025 14:56:34 +0000 Manifest next update: Wed 23 Jul 2025 23:58:34 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: C20CO+PCdT6AUV7p5VE5iNXWJXjSB75po1kbeujHhaY=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:db:cb:8a:60:9c:5a:5d:c2:06:25:91:5e:94:e5:53:e8:e7:61:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Jul 20 14:56:34 2025 GMT Not After : Jul 23 23:58:34 2025 GMT Subject: CN=1DAB8ECEB4F6415B7F6F67EFCF2031592F4730A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:1c:d3:9b:b9:fb:90:95:f6:bd:53:ae:2b: 08:eb:e3:93:98:7b:24:25:10:e3:54:54:d6:bb:da: 27:a0:79:88:f3:56:aa:9d:15:d2:31:09:42:2c:5d: c0:93:23:c6:a6:5c:6b:9a:ed:2b:81:04:f6:ff:b4: 39:f0:ac:af:17:39:64:a8:f9:fb:ba:e4:b7:23:30: 37:86:43:1a:65:72:52:71:33:c3:87:73:15:54:93: 22:43:07:70:90:e0:d1:d4:f6:e4:ea:92:60:a4:7d: 9a:dd:ed:fd:64:db:d8:04:0b:89:c0:e6:83:22:68: ed:da:a2:a5:63:d4:48:de:59:90:f5:27:15:20:1f: 9b:ea:ea:60:81:c4:91:42:bf:85:16:02:81:89:e7: 1f:a0:76:6f:14:0f:0f:63:04:36:58:3a:a2:b2:86: 18:5c:cb:d7:ec:02:e9:ad:3f:8a:e0:47:70:be:6c: 84:2b:d5:6f:bf:5a:ed:e9:6a:6e:80:68:3d:4b:da: 7d:86:b3:68:62:cb:e4:a2:b2:4e:83:f0:af:8f:95: 3d:f1:be:04:87:c0:02:2c:f5:a9:51:91:55:ba:a7: ff:00:a1:d6:e8:2f:eb:87:16:51:3b:8c:ec:f4:41: f5:64:5a:7c:03:c5:7e:7a:18:db:ca:3b:df:c8:b8: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AB:8E:CE:B4:F6:41:5B:7F:6F:67:EF:CF:20:31:59:2F:47:30:A2 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d6:52:f6:1b:ba:c3:f2:c9:ed:54:d3:e5:a4:e9:3a:c9:4f: 33:0a:95:7b:e0:1b:f5:35:15:12:5c:3d:8e:9e:62:07:1b:5d: 5c:a7:b5:73:00:3b:16:13:56:29:4b:20:28:d4:62:6d:27:49: a1:fa:48:b6:13:2e:fb:ee:98:b7:cf:c0:68:2d:bb:c3:20:63: 58:22:45:5e:e6:44:6c:11:c4:c8:8f:66:39:60:42:cf:c2:e3: 7b:a7:4d:8a:d0:47:9a:bc:55:38:14:b7:21:ef:fa:7f:7a:12: f8:92:81:58:cf:68:1c:de:cf:ad:a4:3f:00:b6:41:3b:56:62: ca:b0:ae:e4:2f:22:a6:90:28:de:40:49:17:e6:72:a3:19:d3: 81:38:9e:23:64:c8:7a:b9:09:c9:43:cf:de:a8:fd:e3:07:0c: 91:ea:5f:4b:f4:5f:7a:8f:9e:32:15:35:d0:f2:21:1b:36:9f: 4e:55:67:2e:92:2d:f2:9f:7b:cd:6c:ae:56:8e:8d:18:d8:55: 99:60:71:f5:3a:80:45:07:d2:2a:f0:cc:9e:87:28:d4:c4:2d: 0a:e8:e0:4e:93:2e:e2:1e:80:32:7a:62:f9:be:d9:1a:69:95: 04:6b:73:9e:25:76:4e:1a:b0:4e:7b:80:08:90:a8:3c:c8:08: 95:66:25:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdvLimCcWl3CBiWRXpTlU+jnYXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA3MjAxNDU2MzRaFw0yNTA3MjMyMzU4MzRaMDMxMTAvBgNV BAMTKDFEQUI4RUNFQjRGNjQxNUI3RjZGNjdFRkNGMjAzMTU5MkY0NzMwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGBzTm7n7kJX2vVOuKwjr45OY eyQlEONUVNa72iegeYjzVqqdFdIxCUIsXcCTI8amXGua7SuBBPb/tDnwrK8XOWSo +fu65LcjMDeGQxplclJxM8OHcxVUkyJDB3CQ4NHU9uTqkmCkfZrd7f1k29gEC4nA 5oMiaO3aoqVj1EjeWZD1JxUgH5vq6mCBxJFCv4UWAoGJ5x+gdm8UDw9jBDZYOqKy hhhcy9fsAumtP4rgR3C+bIQr1W+/Wu3pam6AaD1L2n2Gs2hiy+Sisk6D8K+PlT3x vgSHwAIs9alRkVW6p/8AodboL+uHFlE7jOz0QfVkWnwDxX56GNvKO9/IuPRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHauOzrT2QVt/b2fvzyAxWS9HMKIwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjWUvYbusPyye1U0+Wk6TrJTzMKlXvgG/U1 FRJcPY6eYgcbXVyntXMAOxYTVilLICjUYm0nSaH6SLYTLvvumLfPwGgtu8MgY1gi RV7mRGwRxMiPZjlgQs/C43unTYrQR5q8VTgUtyHv+n96EviSgVjPaBzez62kPwC2 QTtWYsqwruQvIqaQKN5ASRfmcqMZ04E4niNkyHq5CclDz96o/eMHDJHqX0v0X3qP njIVNdDyIRs2n05VZy6SLfKfe81srlaOjRjYVZlgcfU6gEUH0irwzJ6HKNTELQro 4E6TLuIegDJ6Yvm+2RpplQRrc54ldk4asE57gAiQqDzICJVmJQs= -----END CERTIFICATE-----Generated at Tue Jul 22 05:50:17 2025 by rpki-client