$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: AsSg+R0sZv/F7TLXWrU8D2apa0W1ftZsY6lV/TGOMoU= Subject key identifier: A4:EF:5D:C3:41:A0:4B:42:50:8F:D0:F7:CA:BE:3B:9A:07:95:6E:CD Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 173EF7FCAC71208730977374408814AD97818AED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 0264 Signing time: Tue 16 Sep 2025 05:20:45 +0000 Manifest this update: Tue 16 Sep 2025 05:15:45 +0000 Manifest next update: Fri 19 Sep 2025 05:37:45 +0000 Files and hashes: 1: D1E28E396E82778793018513BD084854BE663886.crl (hash: YGsTCFHUAgNJUaxspijq31JZy8kWhum0zF2sjHI2zj0=) 2: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 05:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3e:f7:fc:ac:71:20:87:30:97:73:74:40:88:14:ad:97:81:8a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Sep 16 05:15:45 2025 GMT Not After : Sep 19 05:37:45 2025 GMT Subject: CN=A4EF5DC341A04B42508FD0F7CABE3B9A07956ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:f9:6a:0a:e7:6a:b6:c5:2d:ce:93:48:5e: 90:8d:3f:a1:81:ef:b1:cd:bc:38:3c:c5:4c:7f:7d: 0b:27:eb:4c:a5:aa:a7:5a:58:03:05:1c:e3:ed:96: 00:22:36:9d:51:91:a3:6a:13:0b:5e:5c:59:9a:bf: ec:f2:98:b6:09:c0:58:6a:72:5b:4f:7a:73:06:58: 5d:72:74:3a:c5:a4:2c:9e:61:99:ed:8b:9f:7f:88: 5e:99:11:fe:4a:ab:30:0d:a2:fc:1b:7f:4e:0a:6e: fe:51:ff:8f:c5:d5:7b:dc:85:18:b3:a9:af:ec:5a: d9:c8:73:fd:8a:25:04:ff:f4:e9:7c:45:d4:bc:a9: 4f:fc:46:d9:07:9a:6c:60:ef:1c:66:28:0f:e8:c8: bb:04:d3:8c:3c:3f:1d:06:dc:03:c8:18:3b:e1:55: e4:0b:52:00:07:43:9b:45:1d:de:15:e0:62:39:cc: 45:64:c0:50:fc:a2:bb:cd:3c:77:2a:74:c9:ec:af: ae:91:85:c8:5d:bd:c6:49:f7:c4:73:c6:b6:3c:d3: 5d:5b:ce:e8:79:08:76:e1:f0:eb:88:49:a1:29:94: c6:4c:49:58:57:1b:5a:28:4f:92:20:fb:2e:07:27: 4b:65:c3:e2:cf:22:2c:dc:11:f7:09:25:92:d0:9f: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EF:5D:C3:41:A0:4B:42:50:8F:D0:F7:CA:BE:3B:9A:07:95:6E:CD X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:66:dd:72:a1:1c:0d:0e:2b:fd:f3:03:62:f5:f7:6e:35:96: 42:8f:bf:43:7c:70:ec:f3:41:87:4a:3f:3b:b6:b5:b5:48:39: 2a:eb:55:a9:6f:11:99:5d:bb:48:4e:0a:a1:51:05:ba:2d:34: d4:70:b9:94:25:9b:c0:df:af:81:93:e8:9b:ba:75:64:ea:fe: e5:50:68:ca:61:2a:8f:6a:35:ac:9f:55:27:1b:51:f7:c0:09: bb:69:3c:8f:45:8e:5f:2e:02:b6:80:d9:a7:a3:47:82:43:19: f5:c0:32:6b:c0:3a:6f:90:71:dc:00:15:b5:04:07:58:b6:51: 7a:5c:45:92:fc:4e:83:5b:75:2f:1c:4b:ce:db:bb:34:e2:26: 54:be:3b:0e:dc:aa:e8:8b:2c:50:d7:c5:f5:78:58:ab:10:c9: da:1e:7e:85:bf:88:a7:b6:d6:c6:87:41:41:21:2c:17:be:32: 38:98:23:76:54:2a:34:f9:6b:75:ea:74:81:aa:cb:12:d5:4b: 57:8f:6e:9d:17:d2:75:9a:ce:60:cf:76:67:56:c6:e0:d4:75: b2:58:2a:92:64:4d:90:91:43:5e:e9:2b:5e:8f:9e:ab:67:0d: 16:7d:0b:b2:8e:10:62:75:67:64:41:9b:d4:ad:98:88:c3:77: 7a:33:14:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFz73/KxxIIcwl3N0QIgUrZeBiu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTA5MTYwNTE1NDVaFw0yNTA5MTkwNTM3NDVaMDMxMTAvBgNV BAMTKEE0RUY1REMzNDFBMDRCNDI1MDhGRDBGN0NBQkUzQjlBMDc5NTZFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClM/lqCudqtsUtzpNIXpCNP6GB 77HNvDg8xUx/fQsn60ylqqdaWAMFHOPtlgAiNp1RkaNqEwteXFmav+zymLYJwFhq cltPenMGWF1ydDrFpCyeYZnti59/iF6ZEf5KqzANovwbf04Kbv5R/4/F1XvchRiz qa/sWtnIc/2KJQT/9Ol8RdS8qU/8RtkHmmxg7xxmKA/oyLsE04w8Px0G3APIGDvh VeQLUgAHQ5tFHd4V4GI5zEVkwFD8orvNPHcqdMnsr66RhchdvcZJ98RzxrY8011b zuh5CHbh8OuISaEplMZMSVhXG1ooT5Ig+y4HJ0tlw+LPIizcEfcJJZLQn/4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpO9dw0GgS0JQj9D3yr47mgeVbs0wHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRm3XKhHA0OK/3zA2L19241lkKPv0N8cOzz QYdKPzu2tbVIOSrrValvEZldu0hOCqFRBbotNNRwuZQlm8Dfr4GT6Ju6dWTq/uVQ aMphKo9qNayfVScbUffACbtpPI9Fjl8uAraA2aejR4JDGfXAMmvAOm+QcdwAFbUE B1i2UXpcRZL8ToNbdS8cS87buzTiJlS+Ow7cquiLLFDXxfV4WKsQydoefoW/iKe2 1saHQUEhLBe+MjiYI3ZUKjT5a3XqdIGqyxLVS1ePbp0X0nWazmDPdmdWxuDUdbJY KpJkTZCRQ17pK16PnqtnDRZ9C7KOEGJ1Z2RBm9StmIjDd3ozFLA= -----END CERTIFICATE-----Generated at Tue Sep 16 10:04:11 2025 by rpki-client