$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: 7SEPji8zIEdLffOVPJIdSBAG01SiOxIo9iQW5a1zmFU= Subject key identifier: 8C:02:A3:FF:28:75:94:DE:32:0D:AA:65:AF:68:2F:F2:7E:E7:C8:D3 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 536DBD1019C3A8C73FD76EF34384B286B7A8C9BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 019A Signing time: Sat 06 Sep 2025 06:32:13 +0000 Manifest this update: Sat 06 Sep 2025 06:27:12 +0000 Manifest next update: Tue 09 Sep 2025 12:24:12 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: KhvOVJyd+Pmg00IHaQCb8EEAtMLr7yrrzo51nDqLrbI=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6d:bd:10:19:c3:a8:c7:3f:d7:6e:f3:43:84:b2:86:b7:a8:c9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Sep 6 06:27:12 2025 GMT Not After : Sep 9 12:24:12 2025 GMT Subject: CN=8C02A3FF287594DE320DAA65AF682FF27EE7C8D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:d0:84:83:44:98:80:81:0b:64:00:40:70: 27:39:ef:a4:81:76:73:13:f7:fc:a9:b3:34:8c:31: 9e:c4:ff:79:1f:d4:59:e4:da:63:65:29:a6:e7:53: cf:e1:76:94:5e:69:5f:c4:ac:e6:36:43:cd:61:65: f3:25:df:bc:23:9c:3e:b1:d5:d7:6c:95:90:3f:09: 19:cc:d4:1a:5c:74:fe:3e:5f:e8:72:f7:fc:7e:80: fa:e7:e3:94:12:e0:de:8d:4b:99:98:97:26:3d:5a: 13:0d:3c:44:2c:51:a9:06:4a:64:b6:bf:74:17:42: 76:69:d5:d4:f7:cd:c6:96:b4:61:53:4f:5e:fc:ae: 51:e2:3a:ca:9a:26:d4:05:d5:c9:a9:dd:61:b7:79: 0e:02:3f:07:c8:33:ad:0f:85:7a:4d:dd:7c:24:e5: a5:58:e2:c3:5d:8c:dd:38:bb:cd:e1:4b:b8:4c:a4: 99:17:46:04:0f:3e:8e:8e:17:9d:0b:a8:c9:c0:a1: 1d:cb:ed:01:13:81:63:76:27:ce:32:c9:df:59:89: 4d:2c:16:93:c5:ab:46:cd:2d:73:d3:26:cb:19:22: b4:53:24:7a:11:75:60:49:c9:93:27:4e:6a:ce:fc: 1a:62:b6:a8:83:ae:58:f7:ac:e1:32:0c:81:b6:10: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:02:A3:FF:28:75:94:DE:32:0D:AA:65:AF:68:2F:F2:7E:E7:C8:D3 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:51:49:e2:d5:41:a8:dd:f4:2e:18:f7:9f:47:2d:fd:0a:e1: 23:f0:98:6f:cb:b1:0b:59:35:53:94:c5:fb:47:85:f9:7a:ac: c4:a2:f2:8c:f0:7b:6e:57:9c:0a:0e:92:8d:7a:fe:67:0c:95: 9f:9f:2a:92:c6:ac:6e:94:d3:50:b7:c7:26:cd:69:43:2f:bd: 55:1f:b0:d5:18:45:c1:af:0d:d1:e4:ab:91:4a:e8:2f:79:e6: 0f:d8:1f:dd:78:b2:4b:e5:20:a4:20:b2:74:8c:e5:a1:fe:41: 0e:4c:ee:c0:6c:7a:8e:3c:8b:ad:17:4d:cd:84:e8:f0:7b:8c: cb:b4:b9:5a:21:4a:e6:11:d1:e3:25:3c:00:94:76:56:87:25: 4e:46:e6:4c:ee:64:f2:60:05:16:5b:d3:9c:0f:9d:b9:8a:15: 9e:7b:66:3f:00:d0:ae:c7:5b:b3:c2:6f:0d:4c:07:f0:0d:2d: fc:31:76:d8:9c:9c:cb:43:ba:2a:95:12:1c:2c:75:90:df:74: 62:3e:10:79:dc:d4:85:09:3e:2d:fa:d0:87:06:4f:45:95:77: 86:21:ef:29:5f:c3:30:48:21:77:56:b2:b9:a3:37:6f:fb:44: 8c:1e:8b:d8:f4:73:44:e0:50:66:7c:e3:80:8f:4b:61:60:59: e4:db:fd:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU229EBnDqMc/127zQ4SyhreoybswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA5MDYwNjI3MTJaFw0yNTA5MDkxMjI0MTJaMDMxMTAvBgNV BAMTKDhDMDJBM0ZGMjg3NTk0REUzMjBEQUE2NUFGNjgyRkYyN0VFN0M4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfNCEg0SYgIELZABAcCc576SB dnMT9/ypszSMMZ7E/3kf1Fnk2mNlKabnU8/hdpReaV/ErOY2Q81hZfMl37wjnD6x 1ddslZA/CRnM1BpcdP4+X+hy9/x+gPrn45QS4N6NS5mYlyY9WhMNPEQsUakGSmS2 v3QXQnZp1dT3zcaWtGFTT178rlHiOsqaJtQF1cmp3WG3eQ4CPwfIM60PhXpN3Xwk 5aVY4sNdjN04u83hS7hMpJkXRgQPPo6OF50LqMnAoR3L7QETgWN2J84yyd9ZiU0s FpPFq0bNLXPTJssZIrRTJHoRdWBJyZMnTmrO/BpitqiDrlj3rOEyDIG2ECLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjAKj/yh1lN4yDaplr2gv8n7nyNMwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZRSeLVQajd9C4Y959HLf0K4SPwmG/LsQtZ NVOUxftHhfl6rMSi8ozwe25XnAoOko16/mcMlZ+fKpLGrG6U01C3xybNaUMvvVUf sNUYRcGvDdHkq5FK6C955g/YH914skvlIKQgsnSM5aH+QQ5M7sBseo48i60XTc2E 6PB7jMu0uVohSuYR0eMlPACUdlaHJU5G5kzuZPJgBRZb05wPnbmKFZ57Zj8A0K7H W7PCbw1MB/ANLfwxdticnMtDuiqVEhwsdZDfdGI+EHnc1IUJPi360IcGT0WVd4Yh 7ylfwzBIIXdWsrmjN2/7RIwei9j0c0TgUGZ844CPS2FgWeTb/QQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:06 2025 by rpki-client