$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json) Hash identifier: 6Yst709nj23yupBpizgmaGqF3y4gq+/w2gLzyZU8zPQ= Subject key identifier: BE:40:C0:0E:36:44:6C:29:D2:C9:B0:BA:2A:49:3F:8C:7D:67:4D:34 Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 2251103F471B47079314AA2508EBC2B4D4D02B21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft Manifest number: 0213 Signing time: Thu 04 Sep 2025 22:40:57 +0000 Manifest this update: Thu 04 Sep 2025 22:35:57 +0000 Manifest next update: Mon 08 Sep 2025 05:53:57 +0000 Files and hashes: 1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: eKlNvroVUS2qLGhSZPYRQP9HUutIKAuCgBt+gZDkfKs=) 2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: uC/qnArDdSiiufGjxuhvh3127pXhWNHzqVlIjcIb2ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:51:10:3f:47:1b:47:07:93:14:aa:25:08:eb:c2:b4:d4:d0:2b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Sep 4 22:35:57 2025 GMT Not After : Sep 8 05:53:57 2025 GMT Subject: CN=BE40C00E36446C29D2C9B0BA2A493F8C7D674D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:79:db:34:f1:bf:df:d1:e5:81:4f:68:68: 20:ad:dd:1b:54:b6:00:b5:e3:bb:13:f8:7f:bf:e3: 3d:a2:13:6a:62:3b:09:e2:a0:4b:a6:b8:98:39:d2: b9:f5:55:9e:99:be:5c:a6:e9:45:3b:ed:18:90:eb: 48:91:3f:57:f6:37:a5:a2:45:b6:7c:09:3f:76:b9: 93:31:14:da:ef:ee:09:fe:c2:45:d5:ea:ac:8d:be: 06:78:10:61:d0:b2:05:30:71:4e:c3:a3:a3:4c:90: c8:5c:01:0d:1e:5c:5d:11:6b:ad:da:78:35:bb:25: c9:53:08:de:a8:dc:4e:7e:eb:2f:5c:79:2a:9b:dc: 6c:ab:1d:2c:45:51:70:19:a7:9b:ac:f2:83:d5:50: 29:01:f3:f6:90:19:17:cb:33:d1:fe:6e:0d:f6:64: 82:07:96:66:e0:87:3f:8c:fd:a1:60:51:82:84:32: 75:a1:11:9c:e1:a0:57:9c:59:d2:91:d7:0e:e4:2c: 7c:a2:c7:71:0d:e2:74:bc:d0:58:5a:da:1b:32:d8: e3:ca:f8:e7:ea:4e:29:6a:c3:53:56:f4:78:b4:de: fa:b9:17:0e:5b:fe:5a:c9:3e:dc:a1:a1:f8:af:81: 29:ff:8b:5e:9f:8c:1d:44:69:68:ff:5f:1e:1d:70: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:C0:0E:36:44:6C:29:D2:C9:B0:BA:2A:49:3F:8C:7D:67:4D:34 X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:10:83:cc:e9:75:d1:7e:12:d9:ed:fc:0b:06:d3:4e:7b:64: 4e:a7:1f:fe:08:00:5f:a8:84:ad:f5:64:ab:3b:cf:06:e9:d5: 06:d3:1f:d9:48:38:79:23:ea:69:c8:9a:e7:1b:21:a7:ee:45: 82:71:31:b5:6c:00:7d:1c:f5:0f:35:69:3f:9c:64:4a:9a:1e: 50:a9:d8:0c:5a:f0:1f:b2:ac:ac:3f:e2:bf:3b:85:b0:36:42: 9b:14:c2:a4:90:d9:83:f2:54:ab:cd:6f:df:a8:e9:69:5b:bf: c8:a4:fa:4f:6f:fb:ac:cc:4d:e4:ab:5c:85:48:da:17:ac:47: 10:65:01:43:e7:a9:d1:7e:5e:5b:b9:a2:7c:72:c8:30:40:e5: 53:11:ee:4d:25:24:64:06:76:cd:b0:29:2b:ad:96:4e:45:a4: 3c:90:78:ce:c6:ae:c3:c8:72:da:53:8a:16:e6:98:6b:ad:d1: e2:97:4b:4d:5a:82:93:cc:99:72:98:d5:63:e3:5e:93:d9:45: 13:14:94:0d:c0:da:3f:d1:4d:b6:8e:72:7b:1e:b5:76:bb:44: e3:f7:b6:34:d9:87:00:a6:63:92:61:78:47:c5:93:c9:b9:32: da:f8:2f:a0:3a:e5:7d:cb:b6:49:24:f1:9b:9c:d1:17:ee:7b: ed:8a:64:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlEQP0cbRweTFKolCOvCtNTQKyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNTA5MDQyMjM1NTdaFw0yNTA5MDgwNTUzNTdaMDMxMTAvBgNV BAMTKEJFNDBDMDBFMzY0NDZDMjlEMkM5QjBCQTJBNDkzRjhDN0Q2NzREMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZ3nbNPG/39HlgU9oaCCt3RtU tgC147sT+H+/4z2iE2piOwnioEumuJg50rn1VZ6Zvlym6UU77RiQ60iRP1f2N6Wi RbZ8CT92uZMxFNrv7gn+wkXV6qyNvgZ4EGHQsgUwcU7Do6NMkMhcAQ0eXF0Ra63a eDW7JclTCN6o3E5+6y9ceSqb3GyrHSxFUXAZp5us8oPVUCkB8/aQGRfLM9H+bg32 ZIIHlmbghz+M/aFgUYKEMnWhEZzhoFecWdKR1w7kLHyix3EN4nS80Fha2hsy2OPK +OfqTilqw1NW9Hi03vq5Fw5b/lrJPtyhofivgSn/i16fjB1EaWj/Xx4dcM0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkDADjZEbCnSybC6Kkk/jH1nTTQwHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFkM2NjOGEtOTczOC00NTFiLWE3 OTgtN2I3NmIwOTQwYjRiLzAvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0 MDExM0Y2RkUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUQg8zpddF+Etnt/AsG0057ZE6nH/4IAF+o hK31ZKs7zwbp1QbTH9lIOHkj6mnImucbIafuRYJxMbVsAH0c9Q81aT+cZEqaHlCp 2Axa8B+yrKw/4r87hbA2QpsUwqSQ2YPyVKvNb9+o6Wlbv8ik+k9v+6zMTeSrXIVI 2hesRxBlAUPnqdF+Xlu5onxyyDBA5VMR7k0lJGQGds2wKSutlk5FpDyQeM7GrsPI ctpTihbmmGut0eKXS01agpPMmXKY1WPjXpPZRRMUlA3A2j/RTbaOcnsetXa7ROP3 tjTZhwCmY5JheEfFk8m5Mtr4L6A65X3Ltkkk8Zuc0Rfue+2KZMU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:46 2025 by rpki-client