$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: q+p7VHBb3SeDU0lBTxcN/54tRuS9GgGJ98VMRMQTOO4= Subject key identifier: C3:40:8B:24:A6:66:CD:5B:01:11:A8:B4:FD:81:52:A7:19:A2:50:6F Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 0111B17F86C3F27A990534A3434FB97E6BF05C74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: AA Signing time: Sat 06 Sep 2025 01:51:08 +0000 Manifest this update: Sat 06 Sep 2025 01:46:08 +0000 Manifest next update: Tue 09 Sep 2025 11:27:08 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: RzuaI/+Bci6fyK8ugY6OgVWCRvuSA7C4N4RlTLGK+8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:11:b1:7f:86:c3:f2:7a:99:05:34:a3:43:4f:b9:7e:6b:f0:5c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Sep 6 01:46:08 2025 GMT Not After : Sep 9 11:27:08 2025 GMT Subject: CN=C3408B24A666CD5B0111A8B4FD8152A719A2506F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:f3:95:77:68:a5:8e:d6:61:95:dd:ac:0f: 6b:1a:5e:63:7d:bf:45:61:f6:95:15:97:ab:b3:46: 79:72:55:4f:45:ae:f1:cc:29:d5:b7:be:44:38:22: d5:f4:94:44:0f:f1:2e:7b:e7:95:f2:7c:2e:5d:2d: da:fd:a8:20:16:70:4e:33:9c:b0:84:01:67:9b:0c: 3c:ce:93:2a:13:62:b5:8f:e6:4d:bb:83:3a:b3:80: 78:77:5c:27:da:58:ba:85:25:bc:02:3b:d1:b7:09: 2a:9a:18:51:d8:d8:77:cb:63:87:d6:0c:d6:12:99: b0:55:b7:09:3e:04:52:c2:d0:cb:59:15:de:3b:6d: 27:81:b4:ef:21:c2:15:07:89:ed:29:39:19:5f:b2: 5a:27:e2:00:92:27:cc:44:d5:cf:96:37:ae:64:31: bb:5c:38:c5:2c:12:99:46:13:59:d5:b2:8f:06:85: d5:9b:8f:e0:a3:7d:bf:49:0e:e3:d1:17:0f:03:a4: 67:a7:86:cf:fb:be:00:03:34:d0:9c:5f:94:b5:fc: d8:74:23:c5:69:11:7a:94:fd:5e:81:70:b9:2b:d3: bd:9a:f1:9d:88:da:3f:40:85:79:90:da:0e:3e:f3: 17:ec:4f:6f:b7:2c:7c:89:28:84:8b:cb:9d:3d:cd: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:40:8B:24:A6:66:CD:5B:01:11:A8:B4:FD:81:52:A7:19:A2:50:6F X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:59:1a:ef:d1:86:31:d8:fd:b6:09:1b:05:05:59:41:85:30: cc:68:b7:7e:4c:66:32:3f:d7:fd:d9:49:96:8a:51:a7:cf:02: 2d:95:ef:db:89:94:64:19:28:12:79:ea:d1:96:8f:6c:f2:16: d9:84:ea:4e:ef:cc:55:ce:8c:02:e6:62:35:02:04:d7:16:c9: 7f:41:15:65:2e:0c:c6:dc:62:6a:c5:64:80:50:51:55:cf:7a: d5:df:f5:ba:b3:ce:42:9c:9b:48:6d:3e:85:ca:c2:d7:07:87: 3d:6e:3f:9e:c3:18:0e:d0:70:40:fd:6d:b7:69:3b:43:73:6b: fe:21:50:e3:c1:fa:66:df:42:02:9b:63:61:6e:b8:0d:7a:84: 86:cf:78:4d:cb:a2:3a:95:7e:c1:10:b8:17:ee:86:5e:88:60: f0:1d:3a:1e:ea:24:e8:7b:67:cd:b0:10:df:22:0f:d6:85:2e: e0:45:51:37:c4:2e:36:0d:f1:e1:f3:11:70:71:83:cb:d0:d1: 06:5a:80:a4:39:52:dd:6e:01:73:f0:e4:d0:94:2e:50:1c:c4: f7:87:37:0d:2e:83:f9:2e:59:e8:29:9a:a0:ce:7c:58:25:56: 55:9f:6e:76:64:ee:a0:31:ce:9f:16:3e:c4:af:94:b6:b7:aa: 3c:9d:aa:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARGxf4bD8nqZBTSjQ0+5fmvwXHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA5MDYwMTQ2MDhaFw0yNTA5MDkxMTI3MDhaMDMxMTAvBgNV BAMTKEMzNDA4QjI0QTY2NkNENUIwMTExQThCNEZEODE1MkE3MTlBMjUwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RPOVd2iljtZhld2sD2saXmN9 v0Vh9pUVl6uzRnlyVU9FrvHMKdW3vkQ4ItX0lEQP8S5755XyfC5dLdr9qCAWcE4z nLCEAWebDDzOkyoTYrWP5k27gzqzgHh3XCfaWLqFJbwCO9G3CSqaGFHY2HfLY4fW DNYSmbBVtwk+BFLC0MtZFd47bSeBtO8hwhUHie0pORlfslon4gCSJ8xE1c+WN65k MbtcOMUsEplGE1nVso8GhdWbj+Cjfb9JDuPRFw8DpGenhs/7vgADNNCcX5S1/Nh0 I8VpEXqU/V6BcLkr072a8Z2I2j9AhXmQ2g4+8xfsT2+3LHyJKISLy509zYf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw0CLJKZmzVsBEai0/YFSpxmiUG8wHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFZGu/RhjHY/bYJGwUFWUGFMMxot35MZjI/ 1/3ZSZaKUafPAi2V79uJlGQZKBJ56tGWj2zyFtmE6k7vzFXOjALmYjUCBNcWyX9B FWUuDMbcYmrFZIBQUVXPetXf9bqzzkKcm0htPoXKwtcHhz1uP57DGA7QcED9bbdp O0Nza/4hUOPB+mbfQgKbY2FuuA16hIbPeE3LojqVfsEQuBfuhl6IYPAdOh7qJOh7 Z82wEN8iD9aFLuBFUTfELjYN8eHzEXBxg8vQ0QZagKQ5Ut1uAXPw5NCULlAcxPeH Nw0ug/kuWegpmqDOfFglVlWfbnZk7qAxzp8WPsSvlLa3qjydqns= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:24 2025 by rpki-client