$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: aTYYjudK+efOa5BYEKCU76rpCOSLof5ovxzaABGhbU4= Subject key identifier: 36:33:F9:65:E1:93:75:E0:4C:67:67:F4:CF:56:E1:F1:FE:3C:C2:17 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 38C479FD46DABDAE969C5F45349B04CDC4D64A1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0509 Signing time: Sun 07 Sep 2025 05:31:52 +0000 Manifest this update: Sun 07 Sep 2025 05:26:52 +0000 Manifest next update: Wed 10 Sep 2025 15:41:52 +0000 Files and hashes: 1: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 2: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) 3: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: XSNHofTHG5FMOZFGvZvbW3ESdFkaywxhus37+HA7H1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 15:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c4:79:fd:46:da:bd:ae:96:9c:5f:45:34:9b:04:cd:c4:d6:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Sep 7 05:26:52 2025 GMT Not After : Sep 10 15:41:52 2025 GMT Subject: CN=3633F965E19375E04C6767F4CF56E1F1FE3CC217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:38:1e:88:ba:81:b8:3e:f8:ab:b1:cf:8c: bd:c8:6b:49:92:11:7e:02:c9:28:0d:52:c3:dc:1b: bb:18:6f:61:38:80:9a:c4:c7:8b:8a:4a:cd:8b:53: 70:9a:d6:87:3a:1c:1d:44:9e:de:36:d6:cc:65:70: 54:41:1f:d8:9b:49:dc:11:e1:e5:50:9b:45:12:f9: f4:3b:1b:78:cf:4a:d2:c5:02:b3:63:ef:c7:50:ab: e5:de:b1:95:1e:14:86:86:c7:ca:ae:d1:7b:ad:71: 49:d4:df:de:28:66:00:1c:b1:b7:a3:c3:82:95:a7: 94:da:09:5b:c3:1d:cb:d3:91:47:cb:7b:c2:ef:99: 55:fb:65:96:dc:82:ae:d5:9a:86:a3:99:30:04:93: a3:8c:98:08:e7:9a:c0:ca:5b:b3:76:54:15:c3:2c: 13:04:e1:1b:9e:84:65:a2:42:ba:ae:a5:e4:2c:65: f9:bb:b5:43:c6:c4:21:ae:b3:a9:37:72:5b:51:0b: e3:e5:6b:5a:80:51:09:b1:9c:79:22:da:f7:62:93: ff:4f:49:50:d1:ac:a2:50:67:7a:b7:6a:cf:fc:d0: 8f:e7:2a:c7:23:5e:f4:3c:18:d0:4f:6b:42:f3:a3: f8:51:3c:c5:9d:41:82:9a:fb:43:17:93:8e:3b:d4: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:33:F9:65:E1:93:75:E0:4C:67:67:F4:CF:56:E1:F1:FE:3C:C2:17 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:db:5c:54:92:a6:10:0f:7e:0b:61:a9:e7:b1:cc:8c:8b:9e: 13:c0:8e:7e:be:54:ab:bc:00:82:f8:9b:39:cc:59:e5:06:21: 09:5b:06:89:4a:c7:1b:90:56:50:3b:4d:7c:e0:d3:c5:a4:95: fb:c7:7e:68:13:e5:21:bf:4c:ca:17:ae:3e:ab:58:a1:c1:59: 7b:8a:25:d9:cd:6d:94:a6:6a:ca:fb:a4:3c:4e:95:b7:20:ef: 60:88:26:00:b2:1e:f7:fc:53:cf:6a:d6:35:11:8f:57:d5:e2: db:2f:ec:e6:5d:11:1f:5f:d7:1a:cd:01:1c:45:d2:ed:84:e0: 54:71:9b:83:a3:30:4b:7e:4d:59:be:2f:51:19:26:6d:bf:23: 4d:c0:f5:35:aa:98:9b:95:74:b1:af:06:0a:a4:5d:86:4c:5f: ab:9d:2b:00:8f:4a:4f:5f:db:9a:56:ca:fa:ce:99:11:88:34: 0e:09:4d:bf:8c:29:c4:c3:78:3d:39:48:85:2f:46:3a:fc:fa: 66:5c:43:ee:24:b7:4c:72:f4:76:62:cb:6a:92:58:e7:5e:f0: 39:5b:13:fd:5a:8d:93:f5:6b:7d:20:1d:b3:39:b3:09:a2:46: 74:60:25:01:47:9c:f2:77:b6:61:0c:4e:d1:21:85:68:33:a9: a4:00:c8:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMR5/Ubava6WnF9FNJsEzcTWShowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTA5MDcwNTI2NTJaFw0yNTA5MTAxNTQxNTJaMDMxMTAvBgNV BAMTKDM2MzNGOTY1RTE5Mzc1RTA0QzY3NjdGNENGNTZFMUYxRkUzQ0MyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmojgeiLqBuD74q7HPjL3Ia0mS EX4CySgNUsPcG7sYb2E4gJrEx4uKSs2LU3Ca1oc6HB1Ent421sxlcFRBH9ibSdwR 4eVQm0US+fQ7G3jPStLFArNj78dQq+XesZUeFIaGx8qu0XutcUnU394oZgAcsbej w4KVp5TaCVvDHcvTkUfLe8LvmVX7ZZbcgq7VmoajmTAEk6OMmAjnmsDKW7N2VBXD LBME4RuehGWiQrqupeQsZfm7tUPGxCGus6k3cltRC+Pla1qAUQmxnHki2vdik/9P SVDRrKJQZ3q3as/80I/nKscjXvQ8GNBPa0Lzo/hRPMWdQYKa+0MXk4471D/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjP5ZeGTdeBMZ2f0z1bh8f48whcwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3bXFSSphAPfgthqeexzIyLnhPAjn6+VKu8 AIL4mznMWeUGIQlbBolKxxuQVlA7TXzg08WklfvHfmgT5SG/TMoXrj6rWKHBWXuK JdnNbZSmasr7pDxOlbcg72CIJgCyHvf8U89q1jURj1fV4tsv7OZdER9f1xrNARxF 0u2E4FRxm4OjMEt+TVm+L1EZJm2/I03A9TWqmJuVdLGvBgqkXYZMX6udKwCPSk9f 25pWyvrOmRGINA4JTb+MKcTDeD05SIUvRjr8+mZcQ+4kt0xy9HZiy2qSWOde8Dlb E/1ajZP1a30gHbM5swmiRnRgJQFHnPJ3tmEMTtEhhWgzqaQAyKo= -----END CERTIFICATE-----Generated at Tue Sep 9 01:20:11 2025 by rpki-client