$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: klueE0Bzs/AvL/2C/UtH6WiYiOFmZkov/+e+W9MfLGQ= Subject key identifier: 39:EB:06:0C:79:0C:37:D9:31:B4:3B:98:4C:99:98:D7:C4:65:DB:C6 Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 143AD79008200BF3D254BDD7D52CA1FFBE8207FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 022A Signing time: Mon 08 Sep 2025 09:40:04 +0000 Manifest this update: Mon 08 Sep 2025 09:35:04 +0000 Manifest next update: Thu 11 Sep 2025 19:22:04 +0000 Files and hashes: 1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: MlPHhtFyqUSDm7tUyiQlQjTgD7y0NlxOpHWPNbRf/0c=) 2: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: 6gEpief7n0b1o5LDXUhCiEL/rkB2mrhMUs19uxqg/vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3a:d7:90:08:20:0b:f3:d2:54:bd:d7:d5:2c:a1:ff:be:82:07:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: Sep 8 09:35:04 2025 GMT Not After : Sep 11 19:22:04 2025 GMT Subject: CN=39EB060C790C37D931B43B984C9998D7C465DBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:80:18:39:57:95:32:e9:74:12:43:84:13: f1:26:9f:81:24:42:b5:19:96:48:0a:1d:1a:58:13: 41:e6:e5:f7:89:b1:90:0e:61:5f:3e:74:38:ef:cb: 45:f2:53:8b:61:38:a0:b9:80:b7:41:f0:d6:78:29: e6:d3:f9:3e:94:cd:ad:49:0e:ea:17:49:52:1d:10: 91:b4:fb:d9:e7:b5:e1:cf:42:4e:7c:c3:82:72:e8: 73:f5:11:88:07:25:f0:58:00:0e:85:af:a9:0f:d1: b0:18:4e:50:13:61:ae:b9:81:fe:dd:e2:bc:7e:a3: 93:73:33:36:b8:47:80:2d:f4:4d:85:c3:c7:e7:df: cb:a8:7f:14:e1:86:c1:15:f6:ff:45:db:74:72:27: fa:59:6c:56:c3:fa:f6:44:01:d4:61:32:4c:29:1b: 77:5a:69:cf:e0:0b:03:cb:81:02:b8:59:47:f8:2f: 32:58:dd:83:f7:c5:c8:13:5b:4c:e2:08:c8:57:95: fd:b0:f5:d7:81:2f:bf:8c:70:f7:8c:28:f7:51:2c: 79:ac:5e:c9:59:00:6e:35:a5:14:ab:39:89:b3:d9: cd:a8:b0:d6:2c:4b:96:8e:7a:c3:2a:25:18:0b:56: ae:5a:6d:4b:50:1c:e3:e6:3f:88:b4:7c:2d:16:8c: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:06:0C:79:0C:37:D9:31:B4:3B:98:4C:99:98:D7:C4:65:DB:C6 X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f4:93:a1:4f:12:2d:a3:87:ca:2b:5f:98:be:a0:0e:b9:0f:9e: 00:b0:98:39:f7:70:29:2a:82:c2:be:57:f5:04:16:63:e6:29: 65:c0:c3:45:c5:ed:a8:06:86:55:6c:45:2f:ef:60:02:6d:03: 3f:5a:f2:a2:16:d6:7a:d0:62:30:9f:2d:e1:2c:2a:d7:21:9b: 4a:ba:52:e3:f3:2d:f3:29:9c:0a:e9:e5:33:c9:02:cd:15:4c: 6e:08:65:da:8c:46:23:38:90:62:fc:29:f2:50:70:44:dc:90: 3b:6e:ff:9b:75:a3:97:9e:75:66:cc:29:22:eb:4a:09:58:8c: 43:5a:66:ba:2f:1c:70:a1:03:ab:23:a1:14:db:f5:e1:9c:9b: 40:3f:b0:0d:cd:79:71:84:8f:e7:1b:29:ec:1e:61:bc:35:d8: 05:88:ac:75:a6:82:98:bc:e6:ea:b8:02:ee:94:79:24:75:65: af:62:cf:ee:27:fa:58:d9:bc:46:f3:8f:9e:cc:0e:99:c5:ed: c1:5b:3b:a0:ec:6b:6a:06:8a:cf:73:a6:c6:05:4d:28:1d:f7: f6:25:a8:ba:19:9e:09:1e:89:bc:a9:f5:65:5e:16:6e:30:9d: e1:67:00:2b:65:f1:bc:94:1a:4c:92:83:ed:13:f7:52:fe:a6: 7b:88:1a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDrXkAggC/PSVL3X1Syh/76CB/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNTA5MDgwOTM1MDRaFw0yNTA5MTExOTIyMDRaMDMxMTAvBgNV BAMTKDM5RUIwNjBDNzkwQzM3RDkzMUI0M0I5ODRDOTk5OEQ3QzQ2NURCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Q4AYOVeVMul0EkOEE/Emn4Ek QrUZlkgKHRpYE0Hm5feJsZAOYV8+dDjvy0XyU4thOKC5gLdB8NZ4KebT+T6Uza1J DuoXSVIdEJG0+9nnteHPQk58w4Jy6HP1EYgHJfBYAA6Fr6kP0bAYTlATYa65gf7d 4rx+o5NzMza4R4At9E2Fw8fn38uofxThhsEV9v9F23RyJ/pZbFbD+vZEAdRhMkwp G3daac/gCwPLgQK4WUf4LzJY3YP3xcgTW0ziCMhXlf2w9deBL7+McPeMKPdRLHms XslZAG41pRSrOYmz2c2osNYsS5aOesMqJRgLVq5abUtQHOPmP4i0fC0WjFvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOesGDHkMN9kxtDuYTJmY18Rl28YwHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPSToU8SLaOHyitfmL6gDrkPngCwmDn3cCkq gsK+V/UEFmPmKWXAw0XF7agGhlVsRS/vYAJtAz9a8qIW1nrQYjCfLeEsKtchm0q6 UuPzLfMpnArp5TPJAs0VTG4IZdqMRiM4kGL8KfJQcETckDtu/5t1o5eedWbMKSLr SglYjENaZrovHHChA6sjoRTb9eGcm0A/sA3NeXGEj+cbKeweYbw12AWIrHWmgpi8 5uq4Au6UeSR1Za9iz+4n+ljZvEbzj57MDpnF7cFbO6Dsa2oGis9zpsYFTSgd9/Yl qLoZngkeibyp9WVeFm4wneFnACtl8byUGkySg+0T91L+pnuIGsg= -----END CERTIFICATE-----Generated at Tue Sep 9 01:09:50 2025 by rpki-client