$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: inqvQ+Nc83QMqK6wrB/50RC73X4Lp/de5kmZXoZdqPs= Subject key identifier: E8:AB:75:9A:F3:1E:E3:59:18:74:74:7C:8E:9B:95:03:8C:D5:83:2A Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 7DA99705F9E178ACD15128431C346E1C465E6016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0215 Signing time: Sat 13 Sep 2025 09:00:48 +0000 Manifest this update: Sat 13 Sep 2025 08:55:48 +0000 Manifest next update: Tue 16 Sep 2025 20:03:48 +0000 Files and hashes: 1: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: etM+2R2NRleOmiQdMGJETzTrm7LCsZURskcxucZMwVg=) 2: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) 3: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 4: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 20:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:97:05:f9:e1:78:ac:d1:51:28:43:1c:34:6e:1c:46:5e:60:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Sep 13 08:55:48 2025 GMT Not After : Sep 16 20:03:48 2025 GMT Subject: CN=E8AB759AF31EE3591874747C8E9B95038CD5832A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:50:ed:da:7b:59:ec:1c:15:72:bf:48:d4: 44:38:72:19:ef:d8:68:fc:4c:02:38:3b:41:32:a5: 7f:25:9f:7e:30:b5:74:d0:08:be:44:27:80:d7:0a: 29:2c:99:78:ca:5f:1a:f5:ec:f5:cd:9f:25:2a:b8: 4c:93:2c:5e:06:09:8d:6d:3a:c1:d0:18:10:1a:c6: 13:3f:87:dd:25:21:30:c0:da:22:f9:80:bf:15:67: d2:8e:44:d8:32:4e:3a:01:bd:30:2c:64:36:71:b2: 9e:99:a6:01:35:2f:c8:36:bd:b0:87:e9:20:b7:a7: d9:be:af:48:a2:b2:fd:72:5d:8f:02:55:3f:d7:6b: e6:41:90:8d:f8:de:a8:71:0f:c9:46:04:54:f8:4c: 68:fe:e7:46:2c:42:a9:c0:a5:e2:06:41:86:fc:63: 48:54:7b:e0:16:c6:ae:8a:2c:c2:fc:08:85:84:c0: a4:90:9d:0f:80:db:32:f4:7f:8e:cc:c5:3e:57:42: 6e:5c:0c:10:4a:d0:8b:16:3f:38:2f:45:74:c5:e6: 6a:43:63:b8:09:2b:a4:c4:f3:b2:c7:70:32:cf:ae: 50:62:d3:54:af:70:cd:9e:f4:47:3c:a1:66:f9:a6: 2a:d3:e6:aa:32:3b:ef:36:6f:1e:37:20:15:6d:95: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:75:9A:F3:1E:E3:59:18:74:74:7C:8E:9B:95:03:8C:D5:83:2A X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4e:80:1d:68:74:b1:e7:7d:e2:2a:a0:29:d2:1a:a7:54:80: d2:72:fd:8c:a3:73:ac:ae:00:54:e3:29:cc:ff:d7:87:02:0a: 99:48:8b:65:2f:a0:16:c0:64:74:df:9e:a6:6d:7c:eb:93:6d: d7:c5:37:f1:33:d2:ec:8d:7f:1b:66:c6:fb:b0:6d:40:4d:4d: 69:1d:aa:9f:36:d4:5b:3d:bc:36:2a:03:56:91:48:58:5f:16: 1a:76:6e:7c:3b:fc:3f:0e:1a:27:89:56:e5:0e:0c:c1:8f:89: 9c:c1:c3:80:5e:df:6f:c2:a6:f4:b5:82:72:c0:04:a5:89:92: c7:d5:5a:15:a0:a8:a2:53:81:cd:6b:3d:1a:b0:b6:71:d3:d3: 3f:3e:80:d7:b7:bc:a7:38:37:34:23:9b:49:37:22:93:a3:ff: 9e:72:61:94:22:f3:4f:5a:6d:94:c5:f4:c9:89:2f:e6:39:7a: ea:98:34:23:46:d6:69:51:ef:ad:75:2d:50:35:8f:95:d2:60: 35:92:42:e9:2c:15:23:8a:2a:a9:fc:fc:ef:8b:48:f0:30:65: 3a:61:d4:72:ed:2d:95:48:b2:93:4f:8a:d6:41:5d:e7:09:34: bf:8c:c4:a6:ad:08:68:93:b4:ae:71:d7:82:8c:d0:2b:4f:8e: 3c:66:37:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfamXBfnheKzRUShDHDRuHEZeYBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA5MTMwODU1NDhaFw0yNTA5MTYyMDAzNDhaMDMxMTAvBgNV BAMTKEU4QUI3NTlBRjMxRUUzNTkxODc0NzQ3QzhFOUI5NTAzOENENTgzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrVDt2ntZ7BwVcr9I1EQ4chnv 2Gj8TAI4O0EypX8ln34wtXTQCL5EJ4DXCiksmXjKXxr17PXNnyUquEyTLF4GCY1t OsHQGBAaxhM/h90lITDA2iL5gL8VZ9KORNgyTjoBvTAsZDZxsp6ZpgE1L8g2vbCH 6SC3p9m+r0iisv1yXY8CVT/Xa+ZBkI343qhxD8lGBFT4TGj+50YsQqnApeIGQYb8 Y0hUe+AWxq6KLML8CIWEwKSQnQ+A2zL0f47MxT5XQm5cDBBK0IsWPzgvRXTF5mpD Y7gJK6TE87LHcDLPrlBi01SvcM2e9Ec8oWb5pirT5qoyO+82bx43IBVtlQqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Kt1mvMe41kYdHR8jpuVA4zVgyowHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1OgB1odLHnfeIqoCnSGqdUgNJy/Yyjc6yu AFTjKcz/14cCCplIi2UvoBbAZHTfnqZtfOuTbdfFN/Ez0uyNfxtmxvuwbUBNTWkd qp821Fs9vDYqA1aRSFhfFhp2bnw7/D8OGieJVuUODMGPiZzBw4Be32/CpvS1gnLA BKWJksfVWhWgqKJTgc1rPRqwtnHT0z8+gNe3vKc4NzQjm0k3IpOj/55yYZQi809a bZTF9MmJL+Y5euqYNCNG1mlR7611LVA1j5XSYDWSQuksFSOKKqn8/O+LSPAwZTph 1HLtLZVIspNPitZBXecJNL+MxKatCGiTtK5x14KM0CtPjjxmN5E= -----END CERTIFICATE-----Generated at Mon Sep 15 06:58:46 2025 by rpki-client