$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: lK8HRDPomqFMKgfH0jmgbKhp+KX2vZGUs5xkPYxBgNs= Subject key identifier: D4:97:E7:80:B8:97:F0:47:E5:B6:20:9A:7A:86:E5:15:05:26:23:86 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 27F706D78B7D297E6AB7CF1B82BA04329A81FA0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: C2 Signing time: Thu 24 Jul 2025 13:12:14 +0000 Manifest this update: Thu 24 Jul 2025 13:07:14 +0000 Manifest next update: Mon 28 Jul 2025 00:27:14 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 2: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: vRaXr27ce/0G39qFNPil2WUDM7XSVF64DOoZS8GMPdA=) 3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f7:06:d7:8b:7d:29:7e:6a:b7:cf:1b:82:ba:04:32:9a:81:fa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jul 24 13:07:14 2025 GMT Not After : Jul 28 00:27:14 2025 GMT Subject: CN=D497E780B897F047E5B6209A7A86E51505262386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:4e:e1:3c:e9:7e:b0:6a:35:4b:01:05:7e: af:01:79:e6:1a:45:eb:82:18:92:be:02:24:2e:de: 51:a7:2b:2a:0c:46:24:d5:48:54:9f:b9:ea:b2:47: f5:62:84:5e:f8:05:e5:f3:22:3c:a0:f1:0b:94:19: 93:a3:01:4d:e4:9d:cc:7f:b6:96:76:36:f1:55:2b: df:06:0a:63:2b:6d:ea:4c:69:e9:9c:e1:a5:0a:e8: 0b:45:c9:61:45:f2:9c:99:e2:94:52:07:13:fd:89: 1c:0f:01:25:c1:90:79:e6:81:5b:a8:3c:3c:5f:d2: 36:7f:cb:a1:6b:b2:31:63:98:5e:b6:0a:2f:f7:79: cb:d6:bd:a1:26:5c:95:66:a5:00:03:14:e8:25:cc: 33:c8:0f:99:a6:14:de:39:02:ca:2d:39:23:fe:bf: d7:ee:99:cc:b8:9f:a5:eb:11:19:ee:c1:2e:97:73: 1c:78:dc:9b:c3:76:bc:d0:b5:32:2c:ab:86:2f:03: 83:59:9f:41:86:bb:96:48:32:7a:22:f1:00:6c:92: 51:5e:74:24:b8:59:a1:41:d6:ab:e5:12:96:c3:72: e2:76:22:ae:10:4a:d2:b8:e8:49:f4:4d:44:10:87: af:e3:3f:82:73:25:5d:a1:cc:d6:a1:3a:06:54:cd: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:E7:80:B8:97:F0:47:E5:B6:20:9A:7A:86:E5:15:05:26:23:86 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e8:34:a7:65:e3:a0:89:bd:15:ca:87:01:01:3c:2b:19:78: 73:89:4a:11:25:ea:fd:24:25:54:f5:d4:34:10:2a:3e:ce:9d: 6a:ad:a7:34:8d:8e:1f:13:ad:35:b0:7d:2c:a3:86:66:a1:a6: 25:28:08:ac:38:af:a6:c2:d6:b0:15:6a:68:4e:83:23:8b:6d: 9c:98:2f:6f:af:43:fe:70:29:cf:d8:49:eb:c7:a8:e4:a9:12: 8a:59:02:73:86:7f:70:f8:bb:6e:1e:e6:22:87:c3:5f:d3:57: 3e:bb:33:8f:17:4d:86:a4:ff:68:d6:56:49:9c:ae:1e:d5:b1: c3:04:97:e6:f1:39:ea:cf:37:68:29:a9:e4:eb:4e:5c:2a:ab: 7e:b4:08:1a:9b:e2:3e:85:f3:99:e3:ca:57:00:09:4b:e4:80: ac:f1:41:ad:7b:4d:3a:f4:ef:a9:d9:cf:bf:d3:ee:3f:f4:8d: 00:5b:92:2f:46:3a:ff:7c:d4:4b:02:78:5c:1a:21:1d:2c:88: 97:c6:2e:42:30:81:78:ca:c5:4e:e0:f2:4a:45:bd:78:ee:a5: a5:0b:9f:6d:e7:aa:73:27:cf:5a:48:ca:db:84:8f:91:c5:56: 06:da:0b:ec:1a:4f:c0:31:24:7b:c6:15:ed:82:94:dd:6b:b8: 58:85:40:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/cG14t9KX5qt88bgroEMpqB+gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA3MjQxMzA3MTRaFw0yNTA3MjgwMDI3MTRaMDMxMTAvBgNV BAMTKEQ0OTdFNzgwQjg5N0YwNDdFNUI2MjA5QTdBODZFNTE1MDUyNjIzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YU7hPOl+sGo1SwEFfq8BeeYa ReuCGJK+AiQu3lGnKyoMRiTVSFSfueqyR/VihF74BeXzIjyg8QuUGZOjAU3kncx/ tpZ2NvFVK98GCmMrbepMaemc4aUK6AtFyWFF8pyZ4pRSBxP9iRwPASXBkHnmgVuo PDxf0jZ/y6FrsjFjmF62Ci/3ecvWvaEmXJVmpQADFOglzDPID5mmFN45AsotOSP+ v9fumcy4n6XrERnuwS6Xcxx43JvDdrzQtTIsq4YvA4NZn0GGu5ZIMnoi8QBsklFe dCS4WaFB1qvlEpbDcuJ2Iq4QStK46En0TUQQh6/jP4JzJV2hzNahOgZUzb3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1JfngLiX8EfltiCaeoblFQUmI4YwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnoNKdl46CJvRXKhwEBPCsZeHOJShEl6v0k JVT11DQQKj7OnWqtpzSNjh8TrTWwfSyjhmahpiUoCKw4r6bC1rAVamhOgyOLbZyY L2+vQ/5wKc/YSevHqOSpEopZAnOGf3D4u24e5iKHw1/TVz67M48XTYak/2jWVkmc rh7VscMEl+bxOerPN2gpqeTrTlwqq360CBqb4j6F85njylcACUvkgKzxQa17TTr0 76nZz7/T7j/0jQBbki9GOv981EsCeFwaIR0siJfGLkIwgXjKxU7g8kpFvXjupaUL n23nqnMnz1pIytuEj5HFVgbaC+waT8AxJHvGFe2ClN1ruFiFQNA= -----END CERTIFICATE-----Generated at Sat Jul 26 07:58:13 2025 by rpki-client