$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: Vplg4cCd5Vm9/lX4qdu7g1cCogCbDxN+rFdJufuLamA= Subject key identifier: C1:70:3C:3E:5F:0C:1D:5A:9D:3B:00:E0:A3:83:C7:D0:4B:15:BB:F9 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 520C16F7CC0CC2FE172A0182BD75310D8D80E7CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0217 Signing time: Sat 06 Sep 2025 05:00:44 +0000 Manifest this update: Sat 06 Sep 2025 04:55:44 +0000 Manifest next update: Tue 09 Sep 2025 15:27:44 +0000 Files and hashes: 1: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 3: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: dhH+t58ui+bNhZ/NWeAptZTkDrEZ3pFIXqeZg2jx/kQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0c:16:f7:cc:0c:c2:fe:17:2a:01:82:bd:75:31:0d:8d:80:e7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Sep 6 04:55:44 2025 GMT Not After : Sep 9 15:27:44 2025 GMT Subject: CN=C1703C3E5F0C1D5A9D3B00E0A383C7D04B15BBF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:b2:6f:1d:57:d6:8e:17:93:f3:bd:14:a2: 71:8d:cc:1d:0d:92:6b:d2:28:97:c3:d2:b1:54:0b: 50:52:09:be:c0:3a:9c:11:fb:4e:8a:c9:ec:08:90: bc:c2:91:fa:4c:cb:ab:d8:0a:69:49:bb:5e:54:8b: 42:4e:56:ce:9c:a6:50:c4:5e:56:0c:02:bd:af:9c: 01:59:ca:6d:36:bd:41:80:50:ed:d5:05:fe:a7:34: 7e:d2:8e:38:a1:13:a6:3c:67:b8:82:44:b1:21:8f: 4a:9b:7b:23:5c:af:a4:e8:82:0d:f1:9c:08:55:93: 77:c0:83:7e:20:f7:25:b9:d0:d0:88:39:2f:fd:dd: 76:e5:bb:4c:ca:78:dd:5e:f8:16:18:bf:5d:3f:7d: c0:81:4c:ed:30:fa:14:13:ce:b0:a3:e4:43:1a:d5: 09:1e:bf:a7:fb:4d:d7:ab:51:fe:f7:1c:14:4e:de: 00:b8:ea:39:1f:8a:7c:4d:aa:14:5b:35:2f:76:89: 53:8c:de:92:09:87:5f:d3:ea:fe:c8:fc:4f:2f:02: 33:8b:99:b4:1a:7f:6b:87:72:e2:94:ee:5e:81:9f: 37:2a:30:20:5e:1b:27:43:80:a8:29:f9:18:7c:4c: 3c:e1:21:57:a3:f6:1c:03:2e:00:51:8c:e6:d7:a4: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:70:3C:3E:5F:0C:1D:5A:9D:3B:00:E0:A3:83:C7:D0:4B:15:BB:F9 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1d:9c:83:1c:2e:66:33:d8:d3:87:b5:df:05:72:44:00:d9: 7e:4d:a2:a4:2a:96:b6:cf:66:d6:d2:84:cb:76:c2:86:38:59: cd:7d:a5:30:e7:7d:92:22:01:d9:d1:6f:df:87:88:db:1b:15: 48:81:29:43:ba:56:41:38:df:43:15:33:e9:b3:4d:a5:36:ce: e0:cd:68:c2:a0:b6:a8:fc:94:0e:d9:3a:2c:73:79:f8:ff:d3: b9:06:9d:90:de:c2:13:35:af:fd:a7:89:8c:0f:e0:5c:d5:44: cd:57:90:80:17:6b:28:ce:cf:89:35:ad:f9:a0:2b:22:60:52: 3e:84:8a:f4:e0:f6:20:d1:38:9f:a5:26:70:f5:8d:f3:e6:52: 07:eb:81:57:85:af:cf:7d:81:9b:f8:58:28:7a:30:33:8b:b1: 1d:46:24:9d:5d:88:cd:59:6d:e7:fe:68:f7:bf:8a:d6:d2:5b: 66:e6:96:8c:45:ef:a2:af:79:f9:1c:62:92:e4:de:db:30:4c: e0:16:a7:b7:bc:80:1e:04:9b:b5:56:d1:cc:e4:cb:23:9c:88: e6:34:73:7d:bc:39:65:d3:e7:5f:1e:02:1b:14:0b:a0:2d:2e: 16:a1:d1:f3:c7:a6:b8:12:cd:31:c5:0b:84:9f:59:0b:3d:bb: ec:04:3e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgwW98wMwv4XKgGCvXUxDY2A58swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA5MDYwNDU1NDRaFw0yNTA5MDkxNTI3NDRaMDMxMTAvBgNV BAMTKEMxNzAzQzNFNUYwQzFENUE5RDNCMDBFMEEzODNDN0QwNEIxNUJCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqf7JvHVfWjheT870UonGNzB0N kmvSKJfD0rFUC1BSCb7AOpwR+06KyewIkLzCkfpMy6vYCmlJu15Ui0JOVs6cplDE XlYMAr2vnAFZym02vUGAUO3VBf6nNH7SjjihE6Y8Z7iCRLEhj0qbeyNcr6Togg3x nAhVk3fAg34g9yW50NCIOS/93Xblu0zKeN1e+BYYv10/fcCBTO0w+hQTzrCj5EMa 1Qkev6f7TderUf73HBRO3gC46jkfinxNqhRbNS92iVOM3pIJh1/T6v7I/E8vAjOL mbQaf2uHcuKU7l6BnzcqMCBeGydDgKgp+Rh8TDzhIVej9hwDLgBRjObXpPrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwXA8Pl8MHVqdOwDgo4PH0EsVu/kwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYdnIMcLmYz2NOHtd8FckQA2X5NoqQqlrbP ZtbShMt2woY4Wc19pTDnfZIiAdnRb9+HiNsbFUiBKUO6VkE430MVM+mzTaU2zuDN aMKgtqj8lA7ZOixzefj/07kGnZDewhM1r/2niYwP4FzVRM1XkIAXayjOz4k1rfmg KyJgUj6EivTg9iDROJ+lJnD1jfPmUgfrgVeFr899gZv4WCh6MDOLsR1GJJ1diM1Z bef+aPe/itbSW2bmloxF76KvefkcYpLk3tswTOAWp7e8gB4Em7VW0czkyyOciOY0 c328OWXT518eAhsUC6AtLhah0fPHprgSzTHFC4SfWQs9u+wEPi8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:05 2025 by rpki-client