$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: g3jKPQ/JtO7DU5wdJmaXd0ZSpWBrvqxy+Izh1lE74b4= Subject key identifier: 4E:C3:CD:87:75:79:B7:04:8A:5C:B1:AA:15:20:3F:4C:69:45:62:CB Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 40C9786F03D992AC02EA0C142E63C7C0864D221F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 04F6 Signing time: Sat 26 Jul 2025 09:40:34 +0000 Manifest this update: Sat 26 Jul 2025 09:35:34 +0000 Manifest next update: Tue 29 Jul 2025 19:56:34 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: iwaKRkgNjhszAQ7RPY+qnSTv3WnKlaKAzZNA4QcZGxI=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c9:78:6f:03:d9:92:ac:02:ea:0c:14:2e:63:c7:c0:86:4d:22:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Jul 26 09:35:34 2025 GMT Not After : Jul 29 19:56:34 2025 GMT Subject: CN=4EC3CD877579B7048A5CB1AA15203F4C694562CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:62:4e:44:0f:28:ba:54:4f:77:cc:c9:17: 75:45:a2:00:e1:30:55:2f:1f:dc:63:3f:46:90:5d: a3:8f:b3:4d:0b:df:75:f3:e9:eb:73:1f:90:61:20: d0:6f:42:17:31:de:43:7b:d4:4e:90:c6:9b:23:31: 54:70:ab:40:b3:15:8a:91:6b:c3:a2:0c:74:96:98: d5:72:6b:91:da:04:7a:b8:e1:5c:a0:bc:17:46:bc: 57:f1:d9:42:7a:67:5f:1d:25:e3:f7:8a:62:14:80: e3:4c:57:25:29:b9:3d:b0:6c:f6:e8:90:44:68:de: 0c:29:36:3b:21:c8:a6:ee:7d:d2:22:74:a3:31:d3: e5:a1:96:e7:09:f9:a5:9d:3c:1f:21:5a:b3:8f:54: 11:d8:c0:78:69:e8:82:e9:1e:a7:0b:3d:c5:b7:26: 98:ad:f3:0c:10:23:46:a5:a6:6b:35:0b:d2:ec:ef: 19:d8:85:5d:11:df:55:0c:4f:6f:17:0a:d8:04:de: 67:19:4b:24:08:5e:a1:27:87:6d:43:f0:cd:8f:f5: 83:2b:0b:eb:fa:e3:b4:03:71:0a:77:6d:3c:f6:78: 97:a6:ff:83:66:93:be:87:21:f0:35:79:bd:0f:49: 3d:ab:ed:1b:fe:51:7e:26:20:16:84:2d:1c:9e:23: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:CD:87:75:79:B7:04:8A:5C:B1:AA:15:20:3F:4C:69:45:62:CB X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:93:57:9f:6d:23:57:e7:56:cd:36:91:af:f3:39:b9:62:ce: 85:40:db:88:15:4f:7e:4c:c3:7f:66:97:b1:1f:19:60:e6:ce: b6:a2:29:d3:76:bc:9c:2a:02:5a:4f:24:d9:f6:30:50:32:55: 1f:b3:d2:76:a1:34:48:d2:f8:64:5d:89:07:20:c9:63:50:fe: 4f:99:0d:8b:00:e8:4b:ff:b1:9d:71:0a:21:f6:1b:b5:34:8c: f9:d8:41:7b:5a:83:4f:44:96:ec:a3:5b:c8:5b:28:50:99:5b: f1:c2:77:03:87:18:04:43:78:32:76:e5:24:d0:d2:06:ff:c8: 53:b5:ef:fd:a9:1f:ae:4a:09:01:a6:2a:f6:06:7e:19:7c:ed: d5:14:b9:b1:cb:a5:33:b7:c1:bd:50:d6:b3:19:93:27:f4:01: b9:6c:fb:10:84:70:88:dc:15:04:9e:cf:8c:13:61:2c:60:4f: bb:7e:6f:31:7e:83:5d:e9:19:a5:fb:68:09:e5:1e:17:6d:7f: ae:f9:7a:90:46:0a:cd:05:31:ca:03:16:d8:3b:15:57:1b:e6: c8:bd:06:72:76:7d:fa:81:08:2a:2a:0e:a5:a2:e2:65:89:1d: c1:61:58:e9:59:17:49:2e:b8:cd:1e:7c:ca:43:85:d5:34:b6: f3:97:cf:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUQMl4bwPZkqwC6gwULmPHwIZNIh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI1MDcyNjA5MzUzNFoX DTI1MDcyOTE5NTYzNFowMzExMC8GA1UEAxMoNEVDM0NEODc3NTc5QjcwNDhBNUNC MUFBMTUyMDNGNEM2OTQ1NjJDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3QYk5EDyi6VE93zMkXdUWiAOEwVS8f3GM/RpBdo4+zTQvfdfPp63MfkGEg 0G9CFzHeQ3vUTpDGmyMxVHCrQLMVipFrw6IMdJaY1XJrkdoEerjhXKC8F0a8V/HZ QnpnXx0l4/eKYhSA40xXJSm5PbBs9uiQRGjeDCk2OyHIpu590iJ0ozHT5aGW5wn5 pZ08HyFas49UEdjAeGnogukepws9xbcmmK3zDBAjRqWmazUL0uzvGdiFXRHfVQxP bxcK2ATeZxlLJAheoSeHbUPwzY/1gysL6/rjtANxCndtPPZ4l6b/g2aTvoch8DV5 vQ9JPavtG/5RfiYgFoQtHJ4jNCcCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBROw82H dXm3BIpcsaoVID9MaUViyzAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5NXn20j V+dWzTaRr/M5uWLOhUDbiBVPfkzDf2aXsR8ZYObOtqIp03a8nCoCWk8k2fYwUDJV H7PSdqE0SNL4ZF2JByDJY1D+T5kNiwDoS/+xnXEKIfYbtTSM+dhBe1qDT0SW7KNb yFsoUJlb8cJ3A4cYBEN4MnblJNDSBv/IU7Xv/akfrkoJAaYq9gZ+GXzt1RS5scul M7fBvVDWsxmTJ/QBuWz7EIRwiNwVBJ7PjBNhLGBPu35vMX6DXekZpftoCeUeF21/ rvl6kEYKzQUxygMW2DsVVxvmyL0GcnZ9+oEIKioOpaLiZYkdwWFY6VkXSS64zR58 ykOF1TS285fP1A== -----END CERTIFICATE-----Generated at Sat Jul 26 14:58:29 2025 by rpki-client