$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: 2ydfE1pso0i8WfdsWJ2E6q6CXSHgbV4VUclBe0FVIfs= Subject key identifier: 16:2B:85:36:EC:CE:63:87:17:27:D4:10:72:07:E7:B2:B0:86:1A:F2 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 55F878CE95572D6D2777CC43D679E1FA1612A7BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 023A Signing time: Sun 07 Sep 2025 06:42:21 +0000 Manifest this update: Sun 07 Sep 2025 06:37:21 +0000 Manifest next update: Wed 10 Sep 2025 09:35:21 +0000 Files and hashes: 1: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: DbGCEJek849Og1/5qPNuDHrcsD72SbzXmCThvVM3tho=) 2: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f8:78:ce:95:57:2d:6d:27:77:cc:43:d6:79:e1:fa:16:12:a7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Sep 7 06:37:21 2025 GMT Not After : Sep 10 09:35:21 2025 GMT Subject: CN=162B8536ECCE63871727D4107207E7B2B0861AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:db:d2:1f:e8:e2:54:a6:25:87:29:08:3e: 33:23:f6:5e:6b:29:5b:ad:56:42:87:63:19:f4:de: b6:8e:20:11:23:4f:23:4a:f8:13:01:44:1a:ef:4b: 44:aa:1c:d6:84:27:e6:4f:b5:8b:3d:aa:f7:0a:ae: a4:33:76:04:04:9c:cf:88:34:e1:dd:e8:b3:39:bc: 3e:15:cb:ac:a3:64:e4:ef:67:ef:be:66:12:80:bd: c8:04:41:49:e8:c5:aa:cb:26:9f:2c:9d:b9:ee:e1: b1:0c:be:13:2f:4c:69:51:71:55:d1:88:6f:a4:3a: e8:ac:f9:b4:f2:0f:16:fc:ca:7e:89:6c:f4:49:92: 38:38:42:4a:7e:04:52:dd:b1:0f:2e:c4:42:da:a7: 09:1a:1d:46:f7:29:61:91:b6:03:c4:15:b6:e0:23: a9:cb:28:be:95:b8:b8:0e:77:ca:4a:d5:51:7d:d6: 20:5e:30:f3:3d:30:58:7d:20:66:80:cc:ef:2d:87: 55:9f:bb:11:de:eb:66:f3:d3:7c:52:aa:d6:82:3b: 72:ca:d9:b1:d3:70:29:0c:7e:e4:9b:4a:f2:63:95: 0d:91:92:0d:df:67:ea:84:45:f7:2b:fd:26:09:f1: a3:84:3a:29:88:24:11:b2:e1:06:e1:ac:a5:e0:4e: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:85:36:EC:CE:63:87:17:27:D4:10:72:07:E7:B2:B0:86:1A:F2 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4d:f4:fe:ec:d4:c1:5e:23:bf:ee:fd:9a:95:7d:a1:4c:35: d4:8f:c6:8d:e4:b0:91:e9:bd:28:03:6d:e1:3a:8e:90:17:5f: 8f:7c:85:0e:e1:d3:9d:cb:8c:ee:b8:c6:4a:95:5f:55:00:3c: d6:d3:ed:ff:b4:02:c5:ed:95:7c:af:be:29:ea:56:9b:9b:20: 94:5c:c2:6e:3d:08:8f:b7:23:a9:c8:86:70:aa:fd:bf:9c:4f: 27:72:1f:a2:5d:e3:16:f7:a1:7a:9b:b1:cb:43:e6:84:e8:b7: bd:fd:d8:b8:d4:84:5b:4a:13:72:91:e7:08:31:21:13:4f:f5: 0d:de:ec:8a:d4:76:28:28:6e:a5:7c:0a:11:a4:6b:a0:8c:ac: 36:5f:e1:1f:4c:84:2c:e4:a1:0c:0a:d5:32:33:61:7a:19:2b: e5:ac:a4:92:3a:a4:ad:ef:51:11:4e:77:11:6e:5b:0b:61:c7: f0:35:75:20:5e:55:bb:f7:f4:e6:99:30:9f:e9:35:90:2e:a6: 49:92:25:f4:91:15:5b:09:87:e1:08:1b:b8:79:16:98:e3:f3: e1:10:32:77:3b:4c:7a:46:3b:c7:3a:23:7a:64:a8:b8:e2:a7: 56:a5:70:c4:92:77:97:6e:b8:2e:f2:69:2e:fd:1a:13:d4:5a: 89:6a:74:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfh4zpVXLW0nd8xD1nnh+hYSp7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTA5MDcwNjM3MjFaFw0yNTA5MTAwOTM1MjFaMDMxMTAvBgNV BAMTKDE2MkI4NTM2RUNDRTYzODcxNzI3RDQxMDcyMDdFN0IyQjA4NjFBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gtvSH+jiVKYlhykIPjMj9l5r KVutVkKHYxn03raOIBEjTyNK+BMBRBrvS0SqHNaEJ+ZPtYs9qvcKrqQzdgQEnM+I NOHd6LM5vD4Vy6yjZOTvZ+++ZhKAvcgEQUnoxarLJp8snbnu4bEMvhMvTGlRcVXR iG+kOuis+bTyDxb8yn6JbPRJkjg4Qkp+BFLdsQ8uxELapwkaHUb3KWGRtgPEFbbg I6nLKL6VuLgOd8pK1VF91iBeMPM9MFh9IGaAzO8th1WfuxHe62bz03xSqtaCO3LK 2bHTcCkMfuSbSvJjlQ2Rkg3fZ+qERfcr/SYJ8aOEOimIJBGy4QbhrKXgTiPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFiuFNuzOY4cXJ9QQcgfnsrCGGvIwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpN9P7s1MFeI7/u/ZqVfaFMNdSPxo3ksJHp vSgDbeE6jpAXX498hQ7h053LjO64xkqVX1UAPNbT7f+0AsXtlXyvvinqVpubIJRc wm49CI+3I6nIhnCq/b+cTydyH6Jd4xb3oXqbsctD5oTot7392LjUhFtKE3KR5wgx IRNP9Q3e7IrUdigobqV8ChGka6CMrDZf4R9MhCzkoQwK1TIzYXoZK+WspJI6pK3v URFOdxFuWwthx/A1dSBeVbv39OaZMJ/pNZAupkmSJfSRFVsJh+EIG7h5Fpjj8+EQ Mnc7THpGO8c6I3pkqLjip1alcMSSd5duuC7yaS79GhPUWolqdCI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:47 2025 by rpki-client