$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: YDx01uUh4MIEL9G3r/tnW0n46fAOkRAMr1GDkjFkctc= Subject key identifier: 99:6D:2D:93:1C:11:56:CF:DD:84:89:44:43:11:1F:A0:4D:7C:27:3A Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 1FE27BB9302BE5D54FAB9B5C5C132B7BCF28C835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: D4 Signing time: Sun 07 Sep 2025 12:41:48 +0000 Manifest this update: Sun 07 Sep 2025 12:36:48 +0000 Manifest next update: Wed 10 Sep 2025 14:21:48 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: QWsa+tnsUTYJJVz89+U1dxbfeqp1MUT+8R+5VUMj7Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e2:7b:b9:30:2b:e5:d5:4f:ab:9b:5c:5c:13:2b:7b:cf:28:c8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Sep 7 12:36:48 2025 GMT Not After : Sep 10 14:21:48 2025 GMT Subject: CN=996D2D931C1156CFDD84894443111FA04D7C273A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:02:8e:f9:1e:84:da:20:fd:69:0b:5d:8e: 80:f6:ec:d9:25:ba:76:75:ca:3d:7c:51:73:25:a8: ad:0d:0f:eb:b9:03:81:a0:ee:fa:07:68:d1:29:a8: 48:09:e6:53:16:44:94:e2:79:e4:8b:3e:12:f1:93: bf:13:ff:b7:b2:40:ee:07:6c:18:04:f4:f9:0f:b9: 6f:7e:79:16:85:9f:56:09:4a:7e:99:2d:90:55:a7: 61:e2:3c:a8:55:35:80:34:af:af:e7:eb:89:53:84: 07:fe:1d:bc:51:a5:3f:ea:16:ea:0f:25:ed:95:bc: 8f:e5:8c:6b:44:ad:94:0b:29:ff:db:60:64:35:b0: 24:e1:06:5f:28:d2:73:be:a2:ad:09:08:45:8a:d0: 72:92:b2:3a:f7:02:a3:65:4c:7a:3b:a8:eb:75:a5: 94:01:7c:ba:25:e5:c8:7f:c0:bd:c4:8c:e2:22:0e: 8d:06:56:14:84:10:75:21:6e:32:8d:7d:2e:67:67: 57:73:72:c7:a1:97:fd:8e:67:56:c4:94:76:e7:e2: 2c:f9:41:ec:72:4f:e7:7c:66:f9:45:9c:7f:97:8a: 27:32:71:7a:eb:7a:03:b4:4a:38:60:ca:94:b1:76: de:ca:e0:c5:df:4c:39:28:ad:9f:82:1e:57:4b:6f: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6D:2D:93:1C:11:56:CF:DD:84:89:44:43:11:1F:A0:4D:7C:27:3A X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:34:69:ad:00:73:d2:2f:42:b1:86:d3:24:dd:a6:43:00:90: b8:15:a0:b0:f2:1a:49:e3:f1:0f:4a:61:76:6c:5d:9a:32:06: 1c:88:86:7c:b3:45:c7:63:7a:f5:8d:d6:7a:f5:e2:59:1a:78: 61:d6:2b:47:c2:5b:4a:b0:99:08:76:aa:b8:0b:af:04:02:4d: b3:72:68:fd:40:7f:32:a8:7a:9c:b3:18:13:ff:3f:f2:fa:75: 1c:24:17:a3:ae:c8:13:d6:bd:b6:1b:03:26:ec:90:ed:5f:b7: 25:d3:1e:78:a9:c5:bb:45:e7:9b:8d:1e:0e:4d:e5:50:80:ae: 63:fb:84:6e:1f:37:c6:5a:d5:f0:7f:bf:b3:6b:f9:fb:c5:2f: 17:b5:79:d7:b9:5d:a0:cc:85:de:be:0b:55:4e:07:f7:97:6b: af:ba:ed:df:bb:61:8f:ff:45:67:d6:56:b3:44:76:06:b3:99: 3d:b7:36:c9:e5:82:2d:ca:fc:1a:50:94:9b:03:4c:f7:45:d3: a0:6f:f5:de:e7:26:7f:f2:74:79:06:94:ab:67:37:a7:47:10: be:c8:8b:6a:25:16:ba:6b:7c:2d:28:db:94:ce:33:5c:f6:af: 46:7b:05:be:a5:70:cd:30:64:64:46:38:aa:87:77:4c:1e:3f: fb:fd:31:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+J7uTAr5dVPq5tcXBMre88oyDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTA5MDcxMjM2NDhaFw0yNTA5MTAxNDIxNDhaMDMxMTAvBgNV BAMTKDk5NkQyRDkzMUMxMTU2Q0ZERDg0ODk0NDQzMTExRkEwNEQ3QzI3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HwKO+R6E2iD9aQtdjoD27Nkl unZ1yj18UXMlqK0ND+u5A4Gg7voHaNEpqEgJ5lMWRJTieeSLPhLxk78T/7eyQO4H bBgE9PkPuW9+eRaFn1YJSn6ZLZBVp2HiPKhVNYA0r6/n64lThAf+HbxRpT/qFuoP Je2VvI/ljGtErZQLKf/bYGQ1sCThBl8o0nO+oq0JCEWK0HKSsjr3AqNlTHo7qOt1 pZQBfLol5ch/wL3EjOIiDo0GVhSEEHUhbjKNfS5nZ1dzcsehl/2OZ1bElHbn4iz5 QexyT+d8ZvlFnH+XiicycXrregO0SjhgypSxdt7K4MXfTDkorZ+CHldLb4z9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmW0tkxwRVs/dhIlEQxEfoE18JzowHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ0aa0Ac9IvQrGG0yTdpkMAkLgVoLDyGknj 8Q9KYXZsXZoyBhyIhnyzRcdjevWN1nr14lkaeGHWK0fCW0qwmQh2qrgLrwQCTbNy aP1AfzKoepyzGBP/P/L6dRwkF6OuyBPWvbYbAybskO1ftyXTHnipxbtF55uNHg5N 5VCArmP7hG4fN8Za1fB/v7Nr+fvFLxe1ede5XaDMhd6+C1VOB/eXa6+67d+7YY// RWfWVrNEdgazmT23Nsnlgi3K/BpQlJsDTPdF06Bv9d7nJn/ydHkGlKtnN6dHEL7I i2olFrprfC0o25TOM1z2r0Z7Bb6lcM0wZGRGOKqHd0weP/v9MQY= -----END CERTIFICATE-----Generated at Mon Sep 8 08:35:12 2025 by rpki-client