$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: scUQGQMDMnL3f95Lep9ezihvl08Me0DtGaQ08ztsek8= Subject key identifier: E5:7A:60:C6:D0:29:A1:A6:DE:A3:E7:58:39:72:95:00:2F:F8:FB:FC Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 4EBB8E7A226F1B8FD7422DC41479B0D830FE03B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 6F Signing time: Fri 05 Sep 2025 07:50:45 +0000 Manifest this update: Fri 05 Sep 2025 07:45:45 +0000 Manifest next update: Mon 08 Sep 2025 15:56:45 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: 58rJ5n8Doxbxz88WllYGdP+KANpGgTk+wcmu6TWrM/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bb:8e:7a:22:6f:1b:8f:d7:42:2d:c4:14:79:b0:d8:30:fe:03:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Sep 5 07:45:45 2025 GMT Not After : Sep 8 15:56:45 2025 GMT Subject: CN=E57A60C6D029A1A6DEA3E758397295002FF8FBFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:a2:73:21:2e:31:ba:44:f9:32:c4:da:85: 6f:9c:61:85:ea:91:99:bd:53:e8:86:c0:89:73:0f: d0:d6:77:74:07:a5:b5:0d:13:f4:6a:ba:cd:f4:c9: bd:3c:da:c2:99:79:b6:ed:b8:db:7b:1c:ec:33:26: 83:72:18:d4:37:c1:f4:ba:d8:a0:9a:ce:1d:66:98: ab:fb:70:81:e5:12:5b:72:ce:74:39:cf:bc:3b:39: d8:99:c1:8a:3f:72:a5:c5:8c:5e:d2:f0:57:18:a9: 7a:6f:73:b4:27:62:31:71:1f:c0:8a:5d:2f:84:a4: 41:8b:93:62:23:ae:ed:c3:e2:d6:a5:0a:68:fe:87: ea:92:bc:6a:d7:0b:31:2d:4a:8a:fc:65:7e:5d:54: 3f:91:2a:3b:25:29:b7:8f:a8:05:99:28:5d:34:44: 51:0a:c0:a5:2c:fe:90:32:25:91:4d:22:86:37:3a: b7:d0:79:82:e8:40:05:67:98:e3:1f:6d:20:7e:a4: 04:0a:09:96:29:c7:fe:4d:dd:da:09:60:cc:89:09: 1b:18:30:20:81:5b:bb:a5:99:b4:b2:fb:85:3b:b3: ed:fa:eb:5f:fa:46:75:f2:9e:3e:93:e9:fb:2b:4f: e4:a6:9a:ee:22:cd:91:c1:e3:70:16:9c:93:e8:e1: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7A:60:C6:D0:29:A1:A6:DE:A3:E7:58:39:72:95:00:2F:F8:FB:FC X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:a1:98:5b:7b:2e:54:cc:bc:aa:d1:c7:14:1b:44:29:dc: 31:56:3e:24:8d:32:df:51:80:67:66:56:ee:a6:53:8f:95:19: a1:65:bb:e7:d4:26:cb:25:99:eb:ca:d5:68:af:22:3f:34:e6: 44:f4:e2:ee:25:5c:69:e3:a8:72:c5:cd:57:29:44:6e:e2:09: 41:e3:e1:57:5d:f9:9d:da:bc:65:7c:37:9f:cd:d7:a1:e5:17: 75:f0:60:45:2d:75:da:8d:43:e3:2b:29:be:6c:c4:59:22:e7: f0:84:4b:1e:44:19:37:ea:fb:0a:d4:7f:13:4c:da:65:c5:2e: 34:b6:20:b2:4e:24:cb:84:9f:4d:6d:b5:f4:32:7d:5b:55:89: c0:d3:f8:31:46:43:e4:b1:91:7b:9e:d8:55:52:ee:1d:e5:a1: b4:75:8c:51:21:b9:34:56:53:21:5d:36:f8:fd:d4:78:12:71: 83:be:90:72:ca:5e:8d:53:3d:91:9b:e4:aa:e3:a7:55:fd:e3: 1e:e0:fe:af:cb:0d:4f:d8:70:39:2d:fb:b0:76:bf:f9:44:24: a9:43:c4:55:92:d7:64:b9:9b:c0:3b:5e:aa:1c:1c:5d:3f:8a: 11:89:0e:68:6f:47:c8:ea:5a:a4:cb:7e:67:32:e8:66:bc:74: e1:1c:ed:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTruOeiJvG4/XQi3EFHmw2DD+A7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTA5MDUwNzQ1NDVaFw0yNTA5MDgxNTU2NDVaMDMxMTAvBgNV BAMTKEU1N0E2MEM2RDAyOUExQTZERUEzRTc1ODM5NzI5NTAwMkZGOEZCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/6JzIS4xukT5MsTahW+cYYXq kZm9U+iGwIlzD9DWd3QHpbUNE/Rqus30yb082sKZebbtuNt7HOwzJoNyGNQ3wfS6 2KCazh1mmKv7cIHlEltyznQ5z7w7OdiZwYo/cqXFjF7S8FcYqXpvc7QnYjFxH8CK XS+EpEGLk2Ijru3D4talCmj+h+qSvGrXCzEtSor8ZX5dVD+RKjslKbePqAWZKF00 RFEKwKUs/pAyJZFNIoY3OrfQeYLoQAVnmOMfbSB+pAQKCZYpx/5N3doJYMyJCRsY MCCBW7ulmbSy+4U7s+3661/6RnXynj6T6fsrT+Smmu4izZHB43AWnJPo4XOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5XpgxtApoabeo+dYOXKVAC/4+/wwHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACryoZhbey5UzLyq0ccUG0Qp3DFWPiSNMt9R gGdmVu6mU4+VGaFlu+fUJsslmevK1WivIj805kT04u4lXGnjqHLFzVcpRG7iCUHj 4Vdd+Z3avGV8N5/N16HlF3XwYEUtddqNQ+MrKb5sxFki5/CESx5EGTfq+wrUfxNM 2mXFLjS2ILJOJMuEn01ttfQyfVtVicDT+DFGQ+SxkXue2FVS7h3lobR1jFEhuTRW UyFdNvj91HgScYO+kHLKXo1TPZGb5Krjp1X94x7g/q/LDU/YcDkt+7B2v/lEJKlD xFWS12S5m8A7XqocHF0/ihGJDmhvR8jqWqTLfmcy6Ga8dOEc7ao= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client