$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: N+NqPIhfJVMCbG5LCfdY9NWoVfWB26WG9QvF3vnHDqI= Subject key identifier: 44:E7:B5:53:23:B3:6D:25:03:59:E4:F2:8A:2A:4D:8B:9F:C1:B6:08 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 7343349E3188C37D4986B06DB76A816C0D944806 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 0189 Signing time: Sun 07 Sep 2025 10:00:35 +0000 Manifest this update: Sun 07 Sep 2025 09:55:35 +0000 Manifest next update: Wed 10 Sep 2025 17:37:35 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 4: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: NAqkhkhD7TcXU1ZgJfUZQDzsvF+SzLswuYML8Mr5VGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:43:34:9e:31:88:c3:7d:49:86:b0:6d:b7:6a:81:6c:0d:94:48:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Sep 7 09:55:35 2025 GMT Not After : Sep 10 17:37:35 2025 GMT Subject: CN=44E7B55323B36D250359E4F28A2A4D8B9FC1B608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:ca:1b:cd:96:c9:96:68:76:5a:ff:a3:54: 3c:cf:3d:f7:54:80:f6:87:67:a6:c9:25:37:c6:63: 60:d4:e6:6f:cc:61:89:1e:75:20:a2:48:bd:2f:3a: 10:cd:af:a6:f4:76:f1:d2:55:81:1c:e1:ce:3d:de: c1:61:18:37:2a:2a:b5:09:59:81:17:4d:97:ea:5f: 7c:6b:05:8e:89:4f:4f:10:74:3b:8a:52:94:2d:65: dd:4e:e0:8f:74:df:f4:ad:7a:36:24:39:b5:b3:82: bb:ad:4b:0e:91:37:da:5f:be:b5:a8:d7:f5:fc:cc: 47:85:78:30:7a:ec:f7:d1:b8:9e:8a:a6:dc:97:bf: 58:42:72:8a:3f:83:a4:c3:60:b0:a4:f5:e7:21:77: 35:69:28:24:70:ea:95:ce:2f:4e:af:1e:d8:cf:e6: 36:18:5d:84:bd:c0:9e:e4:00:c9:dc:ac:c8:25:8c: 27:57:12:0e:ca:d0:79:a1:90:3d:81:cc:e9:2d:f8: 76:bd:ed:12:94:ad:fb:35:3b:4c:de:0e:ee:e4:1d: 78:ee:4e:0e:2f:e2:2e:12:1a:52:9e:55:90:18:7f: cd:ca:06:38:ac:d2:4f:5c:9a:34:a0:0e:8e:ad:f6: ed:c6:e0:73:be:6f:59:51:3a:a8:f9:31:34:07:64: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:B5:53:23:B3:6D:25:03:59:E4:F2:8A:2A:4D:8B:9F:C1:B6:08 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:07:63:24:e1:a4:3b:31:ab:86:a0:5a:3a:cc:a0:44:ba:c2: e0:84:c0:a3:54:7c:70:d2:b5:86:9a:99:42:ab:5a:c6:10:5c: 53:ff:3c:5a:83:32:06:4b:22:d4:c8:34:fb:15:23:54:fb:d1: 9a:9e:dd:c9:66:3c:ac:67:2c:a3:ec:01:20:bc:29:63:a2:7b: 74:53:d8:b6:44:f7:cc:08:24:c0:4e:b4:54:dc:19:97:a0:4f: f2:31:e9:38:c2:ae:1a:8b:b8:73:96:28:64:ee:fe:aa:1d:48: df:7e:66:67:01:63:78:2a:de:28:a2:97:09:2a:62:9d:0a:2a: ae:5f:36:fc:0d:dc:fb:b9:3b:6a:ab:5a:a3:27:db:93:0f:9a: 58:9b:f7:7c:ba:7d:cb:ec:6e:17:91:f7:3e:bd:d1:74:e1:30: be:3e:14:32:9b:dc:b1:04:ba:82:72:4b:61:3e:49:8f:24:9d: 9c:53:9e:af:a7:78:cd:e2:02:24:86:4c:f5:80:bf:39:e9:ac: 76:ed:ed:81:75:e5:f3:97:b6:42:b3:da:32:b7:5f:a9:08:65: 72:42:fa:57:40:59:13:36:17:76:02:9e:da:85:f2:cf:d8:dd: 4f:20:e4:4f:62:6a:45:66:ba:a9:ad:a8:aa:e4:3c:56:da:b3: 1f:4a:cf:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0M0njGIw31JhrBtt2qBbA2USAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA5MDcwOTU1MzVaFw0yNTA5MTAxNzM3MzVaMDMxMTAvBgNV BAMTKDQ0RTdCNTUzMjNCMzZEMjUwMzU5RTRGMjhBMkE0RDhCOUZDMUI2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzsobzZbJlmh2Wv+jVDzPPfdU gPaHZ6bJJTfGY2DU5m/MYYkedSCiSL0vOhDNr6b0dvHSVYEc4c493sFhGDcqKrUJ WYEXTZfqX3xrBY6JT08QdDuKUpQtZd1O4I903/StejYkObWzgrutSw6RN9pfvrWo 1/X8zEeFeDB67PfRuJ6KptyXv1hCcoo/g6TDYLCk9echdzVpKCRw6pXOL06vHtjP 5jYYXYS9wJ7kAMncrMgljCdXEg7K0HmhkD2BzOkt+Ha97RKUrfs1O0zeDu7kHXju Tg4v4i4SGlKeVZAYf83KBjis0k9cmjSgDo6t9u3G4HO+b1lROqj5MTQHZLqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROe1UyOzbSUDWeTyiipNi5/BtggwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEHYyThpDsxq4agWjrMoES6wuCEwKNUfHDS tYaamUKrWsYQXFP/PFqDMgZLItTINPsVI1T70Zqe3clmPKxnLKPsASC8KWOie3RT 2LZE98wIJMBOtFTcGZegT/Ix6TjCrhqLuHOWKGTu/qodSN9+ZmcBY3gq3iiilwkq Yp0KKq5fNvwN3Pu5O2qrWqMn25MPmlib93y6fcvsbheR9z690XThML4+FDKb3LEE uoJyS2E+SY8knZxTnq+neM3iAiSGTPWAvznprHbt7YF15fOXtkKz2jK3X6kIZXJC +ldAWRM2F3YCntqF8s/Y3U8g5E9iakVmuqmtqKrkPFbasx9KzxQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:03 2025 by rpki-client