$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: CATQnGQASBWp1sKxufLnQkEA2WnSGF3YKfecSvaQXOU= Subject key identifier: B9:D8:ED:CE:B2:65:16:B5:41:4D:61:30:48:05:66:A6:33:87:71:93 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 1B09807498C02BD9157AFFF4A1442647BA45CF82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: BE Signing time: Sat 30 Aug 2025 02:22:17 +0000 Manifest this update: Sat 30 Aug 2025 02:17:17 +0000 Manifest next update: Tue 02 Sep 2025 03:12:17 +0000 Files and hashes: 1: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: mugYnvvHTf1sDcT6tsD9JXkFqtFv91R+f611zVAszGU=) 2: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 4: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:09:80:74:98:c0:2b:d9:15:7a:ff:f4:a1:44:26:47:ba:45:cf:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Aug 30 02:17:17 2025 GMT Not After : Sep 2 03:12:17 2025 GMT Subject: CN=B9D8EDCEB26516B5414D6130480566A633877193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:64:a9:8f:59:4a:2f:fa:80:6f:60:62:bf: b0:ef:c6:62:62:ab:d2:4b:c1:45:95:76:2d:2e:e6: cb:5c:b8:6a:0f:f3:2d:bf:65:07:70:d4:99:40:8c: 95:2d:1e:dd:27:56:05:7a:cd:c8:d1:a3:86:71:19: 87:bc:a4:da:48:b6:68:f5:59:50:fc:fe:7a:eb:07: 50:85:88:bc:6f:33:24:13:61:4b:4c:60:a6:90:e3: 45:36:c3:57:79:51:7b:c5:dd:31:63:17:b7:78:9e: 89:e0:6a:cf:4c:5f:51:69:67:4a:50:61:b7:f5:43: 1d:73:fa:2a:a2:17:1b:bc:02:be:de:6f:55:2b:89: b7:3b:d2:2e:32:0d:42:ed:37:af:5b:c6:63:a3:b6: 7d:e2:31:e7:d6:df:51:f1:17:62:30:cf:be:44:b4: cb:4f:0e:29:0b:89:b9:d7:7b:6e:c4:38:0e:6a:33: 4e:e4:e0:da:05:37:ca:6e:db:f6:a0:9b:99:3a:65: d3:9c:b0:86:94:42:6e:6c:81:73:69:2f:44:bc:a0: 1f:fd:0f:81:de:cf:40:f8:ca:77:fa:c4:94:ca:2f: f5:da:02:43:76:e2:82:6b:63:cc:7e:bf:24:04:39: 97:67:34:e1:9a:9d:2f:af:d3:3c:04:f3:0f:d8:da: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D8:ED:CE:B2:65:16:B5:41:4D:61:30:48:05:66:A6:33:87:71:93 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:eb:cf:4a:d7:44:0c:20:79:f7:19:b5:c4:e1:9a:5e:9f:f7: bb:af:9f:ac:e0:02:e8:a0:37:ff:e2:74:e8:0b:04:a3:19:b2: 3a:f0:ec:c3:68:b2:fc:c6:dd:28:a1:e1:ef:65:ff:92:1e:48: 4a:f5:5e:59:aa:28:33:a1:35:d2:06:83:70:a7:0d:f9:a3:8f: ce:d5:b8:ed:64:74:b6:f8:3c:2b:42:52:82:32:1e:d7:ce:11: c3:bc:a2:f2:19:21:0e:9f:ca:8f:36:20:80:05:5b:0d:63:f7: 62:ed:e9:ce:54:e7:16:8a:8d:7f:a2:da:91:68:c1:6a:26:18: 7c:0d:02:27:04:dd:9b:20:a6:54:5e:4b:51:57:7d:27:ab:94: 83:6f:e5:30:73:cf:fd:c9:38:56:ca:d9:08:07:b1:dd:3f:01: 88:8a:d4:66:7f:f2:94:48:2f:f0:17:9f:02:01:3a:01:9f:a0: 70:0d:51:70:69:8d:51:8d:9c:38:15:78:89:64:66:81:b3:d1: f4:0e:b5:91:ff:bb:31:5e:f1:5b:e8:a2:87:5c:1d:dc:63:fc: bf:f3:1d:7a:c0:cb:a9:65:2b:53:44:98:6f:c3:ac:85:64:90: 10:4a:0c:53:90:41:15:25:f4:03:0b:7b:b6:3f:42:93:63:50: 5a:55:50:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwmAdJjAK9kVev/0oUQmR7pFz4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTA4MzAwMjE3MTdaFw0yNTA5MDIwMzEyMTdaMDMxMTAvBgNV BAMTKEI5RDhFRENFQjI2NTE2QjU0MTRENjEzMDQ4MDU2NkE2MzM4NzcxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmWSpj1lKL/qAb2Biv7DvxmJi q9JLwUWVdi0u5stcuGoP8y2/ZQdw1JlAjJUtHt0nVgV6zcjRo4ZxGYe8pNpItmj1 WVD8/nrrB1CFiLxvMyQTYUtMYKaQ40U2w1d5UXvF3TFjF7d4nongas9MX1FpZ0pQ Ybf1Qx1z+iqiFxu8Ar7eb1Uribc70i4yDULtN69bxmOjtn3iMefW31HxF2Iwz75E tMtPDikLibnXe27EOA5qM07k4NoFN8pu2/agm5k6ZdOcsIaUQm5sgXNpL0S8oB/9 D4Hez0D4ynf6xJTKL/XaAkN24oJrY8x+vyQEOZdnNOGanS+v0zwE8w/Y2iwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudjtzrJlFrVBTWEwSAVmpjOHcZMwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfrz0rXRAwgefcZtcThml6f97uvn6zgAuig N//idOgLBKMZsjrw7MNosvzG3Sih4e9l/5IeSEr1XlmqKDOhNdIGg3CnDfmjj87V uO1kdLb4PCtCUoIyHtfOEcO8ovIZIQ6fyo82IIAFWw1j92Lt6c5U5xaKjX+i2pFo wWomGHwNAicE3ZsgplReS1FXfSerlINv5TBzz/3JOFbK2QgHsd0/AYiK1GZ/8pRI L/AXnwIBOgGfoHANUXBpjVGNnDgVeIlkZoGz0fQOtZH/uzFe8VvooodcHdxj/L/z HXrAy6llK1NEmG/DrIVkkBBKDFOQQRUl9AMLe7Y/QpNjUFpVUIs= -----END CERTIFICATE-----Generated at Sun Aug 31 22:06:19 2025 by rpki-client