$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: AXTdZrvfLaTpJjJrfShocmMWpGU01ogOpPnSiLuYgWY= Subject key identifier: 9B:74:EF:85:00:24:1E:6B:25:E0:1C:65:87:66:C8:12:06:0E:CA:AB Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 7DAE99AFB5E72DE25113C756C06A8AFFEE2F62F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: AD Signing time: Sun 20 Jul 2025 05:41:34 +0000 Manifest this update: Sun 20 Jul 2025 05:36:34 +0000 Manifest next update: Wed 23 Jul 2025 14:43:34 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: CtHFXJVR8slXRqZ8bstwCP5MHj0yZGuEOgCTqTV5Tv8=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ae:99:af:b5:e7:2d:e2:51:13:c7:56:c0:6a:8a:ff:ee:2f:62:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Jul 20 05:36:34 2025 GMT Not After : Jul 23 14:43:34 2025 GMT Subject: CN=9B74EF8500241E6B25E01C658766C812060ECAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:88:8d:7e:58:1b:75:f6:5e:ae:89:88:05: c7:78:55:77:79:55:37:d6:aa:e2:69:ef:2a:a5:28: 54:c3:57:8a:5a:34:dd:bf:8b:39:25:7e:73:1a:bb: da:c1:96:e9:9c:6f:9b:11:89:94:a0:bd:73:7c:24: 8c:19:de:84:0e:15:fb:5b:30:0f:57:a7:bd:1e:a1: 8a:43:16:97:62:5a:0e:e3:83:27:9f:4f:75:28:74: 57:67:8c:c3:27:e3:30:ac:92:b1:70:75:ef:29:63: 8a:58:b5:0a:4e:a9:b7:bb:0a:9a:54:46:44:3c:4e: 81:57:5e:aa:54:46:4f:c8:96:6a:97:8f:32:14:1c: db:55:ed:49:36:84:27:78:83:16:ef:ad:00:c5:81: f1:21:aa:fe:86:54:2e:b6:37:e6:da:1c:0b:b6:1d: cd:25:36:9d:1c:f5:18:e2:30:5a:2e:46:e2:d5:16: 15:e6:eb:42:75:5e:16:b9:2d:19:2f:b9:7c:45:73: 54:bd:31:ab:71:59:93:f3:3b:19:73:df:c9:84:ce: 67:62:97:f6:4c:81:c4:62:34:4f:c8:d4:98:cd:b2: c8:80:e3:bf:35:09:99:a2:51:b5:af:c3:df:7f:7a: 01:1e:3a:24:f0:23:62:a4:21:07:70:85:04:db:0f: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:EF:85:00:24:1E:6B:25:E0:1C:65:87:66:C8:12:06:0E:CA:AB X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3a:c5:dc:9b:50:c3:f2:6a:bf:2a:36:0e:15:9e:1c:90:a0: 38:79:4f:7c:1c:82:36:e4:ce:22:1a:c1:59:f4:56:2b:ca:69: 6c:a3:c4:6e:48:4f:30:c1:58:4e:da:9c:40:f1:6a:28:ea:61: 3b:32:94:0a:c6:39:5c:c6:09:2f:2e:50:d1:ce:1c:80:34:9c: 4f:72:d6:86:87:5c:d3:49:e9:49:08:05:95:f4:cc:c5:d2:75: 2f:96:64:2c:28:0d:4d:34:9f:2d:5b:2b:5e:c0:c2:f4:a6:e0: 37:6d:ae:33:53:3d:e6:31:eb:9a:38:1c:6d:45:db:70:ea:a8: af:6f:27:e4:97:00:27:d9:1b:03:92:fe:8d:0b:10:ee:74:27: 64:19:e5:38:1d:66:cd:69:45:20:aa:d8:66:9d:35:36:bd:ee: 6c:bd:b4:18:17:15:01:fa:95:5f:c0:51:2b:6d:85:b5:c4:67: d7:da:66:90:49:6b:63:f5:f4:2d:2f:dc:1c:78:a2:d5:98:8a: 54:11:3a:3f:81:14:75:c4:b7:cb:80:c1:0c:e0:d4:72:ad:bc: 63:a0:51:06:11:01:2c:c4:93:b1:5c:f9:68:03:77:48:58:73: 16:ae:e2:94:67:49:f1:b8:f4:34:c2:46:88:9c:2b:9d:bf:e7: 95:1c:1e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa6Zr7XnLeJRE8dWwGqK/+4vYvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTA3MjAwNTM2MzRaFw0yNTA3MjMxNDQzMzRaMDMxMTAvBgNV BAMTKDlCNzRFRjg1MDAyNDFFNkIyNUUwMUM2NTg3NjZDODEyMDYwRUNBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPIiNflgbdfZeromIBcd4VXd5 VTfWquJp7yqlKFTDV4paNN2/izklfnMau9rBlumcb5sRiZSgvXN8JIwZ3oQOFftb MA9Xp70eoYpDFpdiWg7jgyefT3UodFdnjMMn4zCskrFwde8pY4pYtQpOqbe7CppU RkQ8ToFXXqpURk/IlmqXjzIUHNtV7Uk2hCd4gxbvrQDFgfEhqv6GVC62N+baHAu2 Hc0lNp0c9RjiMFouRuLVFhXm60J1Xha5LRkvuXxFc1S9MatxWZPzOxlz38mEzmdi l/ZMgcRiNE/I1JjNssiA4781CZmiUbWvw99/egEeOiTwI2KkIQdwhQTbD1v3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3TvhQAkHmsl4Bxlh2bIEgYOyqswHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKU6xdybUMPyar8qNg4VnhyQoDh5T3wcgjbk ziIawVn0VivKaWyjxG5ITzDBWE7anEDxaijqYTsylArGOVzGCS8uUNHOHIA0nE9y 1oaHXNNJ6UkIBZX0zMXSdS+WZCwoDU00ny1bK17AwvSm4DdtrjNTPeYx65o4HG1F 23DqqK9vJ+SXACfZGwOS/o0LEO50J2QZ5TgdZs1pRSCq2GadNTa97my9tBgXFQH6 lV/AUStthbXEZ9faZpBJa2P19C0v3Bx4otWYilQROj+BFHXEt8uAwQzg1HKtvGOg UQYRASzEk7Fc+WgDd0hYcxau4pRnSfG49DTCRoicK52/55UcHqU= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:27 2025 by rpki-client