$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: bxR7BR0+pyNPPd30/Q2UDCOwGMQRjMZ471WUeDt64R0= Subject key identifier: 9B:B8:2C:D2:2D:C2:F5:21:AD:07:AE:05:BE:09:37:93:13:FB:67:03 Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 7C5ECA07A017731E7F513BFECCF71A32D8420A81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 020F Signing time: Sat 06 Sep 2025 03:10:53 +0000 Manifest this update: Sat 06 Sep 2025 03:05:53 +0000 Manifest next update: Tue 09 Sep 2025 12:07:53 +0000 Files and hashes: 1: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: H///ZEunm57WdoJmnQv8TalmvWHvLF08UW9kJAn2Djc=) 2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: /98DMXkzU+QDHjIDKoOYU1wcZedvwYZgWNBABDhsRv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5e:ca:07:a0:17:73:1e:7f:51:3b:fe:cc:f7:1a:32:d8:42:0a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Sep 6 03:05:53 2025 GMT Not After : Sep 9 12:07:53 2025 GMT Subject: CN=9BB82CD22DC2F521AD07AE05BE09379313FB6703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:77:e5:68:9b:56:4f:75:9d:aa:6d:f1:31: f2:9b:29:a7:fc:90:6d:23:da:0b:c5:09:f2:d9:f3: 80:ff:b0:82:26:3a:ae:c4:51:cf:8a:a9:b2:be:68: af:c8:24:f5:1a:b3:16:db:7f:f7:89:6d:50:e9:24: bd:d9:e9:37:cf:90:87:dc:51:da:b0:0f:c4:1a:38: 08:2b:8a:b6:f4:e6:e3:77:ed:b1:77:97:3a:ad:0c: f4:4c:24:43:3e:6f:78:6e:64:72:28:33:f4:aa:0a: 89:32:65:84:4f:e0:a0:1a:5f:25:15:72:a8:4d:b1: db:2a:77:87:6d:ce:74:6e:18:bd:8e:ec:34:a1:0e: 2c:2c:d7:3a:d5:70:05:82:54:f8:70:2d:76:d4:d7: fe:f9:7d:cb:44:82:2e:7f:1d:f1:fd:6b:ac:50:40: c3:58:81:f9:83:09:6e:90:ae:04:40:7c:49:7f:e5: e5:1c:da:62:74:9a:db:b0:e9:1a:60:fd:d0:57:94: c2:ef:16:97:93:4e:f3:b4:ed:57:53:8a:33:0d:35: 5c:52:59:71:5b:6c:97:c3:80:c7:d1:12:9a:0d:2c: 5f:a2:bf:a5:df:74:18:bb:e7:de:5c:91:0e:fa:5d: 81:ad:dc:fe:d5:60:96:59:59:e5:ea:8c:d4:1a:e0: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:2C:D2:2D:C2:F5:21:AD:07:AE:05:BE:09:37:93:13:FB:67:03 X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e3:bf:40:c8:b8:c7:8d:32:c6:17:68:cb:48:56:7a:c2:6d: 21:d3:ab:a3:1a:eb:5e:da:ed:4d:db:48:3b:3b:2b:fd:74:7c: 9c:cd:fd:09:ad:d2:eb:f6:f6:b5:f7:95:50:e0:c8:69:af:53: 71:69:23:29:01:76:2d:91:c1:88:48:e8:ec:0a:5f:b9:73:16: 61:9d:73:03:10:3b:c9:b0:2f:ae:6d:82:49:19:de:dd:f6:f3: e5:ae:7d:60:61:1d:bd:da:a1:e4:96:14:d7:28:72:7b:d3:f2: 21:46:e1:5f:e0:38:f4:8c:a2:1c:87:8c:0b:3e:97:fd:33:4c: 04:ea:de:2c:92:bd:8e:a8:1a:b7:3f:2b:9e:70:20:1c:01:e6: e9:d4:e4:2f:06:18:5e:22:f5:44:40:6e:2f:d1:5a:af:52:8b: 3d:df:6f:98:c8:ea:21:e0:ef:c7:e1:5b:39:c9:a0:7f:b5:cb: b8:6f:86:38:3e:88:e0:c1:d6:18:88:46:3c:82:f4:9a:62:77: 9e:bf:f5:4a:ca:00:d6:2c:ab:cc:01:fa:8b:aa:db:89:93:a4: dc:c0:1b:c2:cd:85:16:c7:25:40:48:3d:3f:b2:57:c1:75:e1: d9:b9:9e:ad:87:4d:61:b7:e6:38:22:87:a8:64:2c:f8:86:9f: 01:14:11:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfF7KB6AXcx5/UTv+zPcaMthCCoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTA5MDYwMzA1NTNaFw0yNTA5MDkxMjA3NTNaMDMxMTAvBgNV BAMTKDlCQjgyQ0QyMkRDMkY1MjFBRDA3QUUwNUJFMDkzNzkzMTNGQjY3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKHflaJtWT3Wdqm3xMfKbKaf8 kG0j2gvFCfLZ84D/sIImOq7EUc+KqbK+aK/IJPUasxbbf/eJbVDpJL3Z6TfPkIfc UdqwD8QaOAgrirb05uN37bF3lzqtDPRMJEM+b3huZHIoM/SqCokyZYRP4KAaXyUV cqhNsdsqd4dtznRuGL2O7DShDiws1zrVcAWCVPhwLXbU1/75fctEgi5/HfH9a6xQ QMNYgfmDCW6QrgRAfEl/5eUc2mJ0mtuw6Rpg/dBXlMLvFpeTTvO07VdTijMNNVxS WXFbbJfDgMfREpoNLF+iv6XfdBi7595ckQ76XYGt3P7VYJZZWeXqjNQa4BjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7gs0i3C9SGtB64Fvgk3kxP7ZwMwHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/jv0DIuMeNMsYXaMtIVnrCbSHTq6Ma617a 7U3bSDs7K/10fJzN/Qmt0uv29rX3lVDgyGmvU3FpIykBdi2RwYhI6OwKX7lzFmGd cwMQO8mwL65tgkkZ3t328+WufWBhHb3aoeSWFNcocnvT8iFG4V/gOPSMohyHjAs+ l/0zTATq3iySvY6oGrc/K55wIBwB5unU5C8GGF4i9URAbi/RWq9Siz3fb5jI6iHg 78fhWznJoH+1y7hvhjg+iODB1hiIRjyC9Jpid56/9UrKANYsq8wB+ouq24mTpNzA G8LNhRbHJUBIPT+yV8F14dm5nq2HTWG35jgih6hkLPiGnwEUEWc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:40 2025 by rpki-client