$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: RbP0KzAUOIvIVBI04+UuSEtiCUKWBdPEL8Gv9cXoG6Y= Subject key identifier: 3A:35:9C:16:E8:0B:74:27:EB:AD:6C:06:ED:00:BD:68:AC:92:2C:4A Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 598B8BD40F0B7613BD221073D85E893159B122CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0283 Signing time: Wed 03 Sep 2025 07:00:41 +0000 Manifest this update: Wed 03 Sep 2025 06:55:41 +0000 Manifest next update: Sat 06 Sep 2025 10:01:41 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: Fv00PJT2fBIJmpVaJffVjRDO47Wf0Jldhwu1BWJNsFM=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8b:8b:d4:0f:0b:76:13:bd:22:10:73:d8:5e:89:31:59:b1:22:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Sep 3 06:55:41 2025 GMT Not After : Sep 6 10:01:41 2025 GMT Subject: CN=3A359C16E80B7427EBAD6C06ED00BD68AC922C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:fe:e2:0d:b7:d7:7c:95:a3:e4:83:ee:3e: 7d:96:7e:0d:73:06:17:e5:e0:61:64:7b:a1:74:a1: e7:86:d2:db:1d:3a:e5:86:0a:2f:28:f9:d7:e2:18: 4e:33:f9:b6:b4:97:01:89:12:2a:d8:cb:b6:63:97: 00:9a:dc:d4:85:b8:c7:cb:92:f5:6c:d4:bb:09:e0: 61:77:38:84:b4:e1:91:67:13:7c:89:ac:de:e9:73: b8:59:21:ac:ef:96:5e:5c:22:97:35:89:d4:72:be: 6e:ab:1e:42:3a:7c:56:92:2e:da:1d:6e:db:3d:76: 62:05:98:96:5b:a9:77:15:98:c7:62:48:a9:34:e4: e0:9a:e9:9c:9c:c1:33:94:02:90:19:ad:90:ca:b3: 8d:4f:f4:2b:79:17:9c:24:67:f7:8a:7f:fc:cd:fd: f3:89:31:dd:6c:2c:e4:95:c1:66:61:0a:16:33:01: d8:c9:f2:f4:ee:01:7a:5d:78:78:5c:60:7b:7b:9b: c2:07:10:70:75:20:bc:c1:db:2a:e4:d5:69:98:0c: 67:57:64:57:9a:4f:39:1d:98:32:37:d8:a2:64:04: e0:a3:c0:64:b2:0e:4a:79:5c:a9:36:9c:be:d8:59: 44:01:30:51:6f:90:04:92:ce:2d:3e:ec:ef:21:b3: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:35:9C:16:E8:0B:74:27:EB:AD:6C:06:ED:00:BD:68:AC:92:2C:4A X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5e:fa:34:91:24:35:8d:d4:ac:43:76:58:5d:d4:12:d7:16: 22:01:b1:31:88:68:63:98:3d:68:02:99:9c:09:63:19:f6:1d: a4:6f:0c:9d:63:55:08:76:c1:1c:86:0a:0c:03:e2:77:e2:1f: 41:37:99:97:c2:77:3f:b9:be:a1:ed:63:1a:b7:22:d4:2a:f7: 32:9f:b5:8b:25:9f:39:ca:f2:e0:84:f8:e3:ba:bc:5c:7e:3a: 10:7d:fb:5c:58:bd:eb:07:02:93:cd:17:dc:2e:3b:ff:87:c7: e5:01:16:92:99:1d:5d:9f:4c:25:e2:1a:d9:73:c3:74:79:ce: cc:7b:a0:ae:18:81:f0:07:f3:aa:09:ef:20:87:80:28:fc:fd: 2d:20:0d:b0:5e:e5:f0:de:12:f2:43:f9:34:48:5d:f8:62:68: cd:b6:c3:32:6b:9f:24:df:65:b5:78:bd:94:ac:b8:96:3e:e9: 02:f6:28:14:82:80:30:45:65:72:0f:4d:e2:69:34:29:c4:7c: 58:4c:df:c2:2c:09:e2:01:00:0b:60:11:43:fa:e3:53:51:49: 1c:16:ac:9d:e6:b9:0c:4a:c0:89:23:75:f7:50:de:92:15:85: f9:41:9e:f6:db:4a:fc:80:bb:c8:f5:f8:73:4b:81:9e:48:bd: eb:7b:40:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYuL1A8LdhO9IhBz2F6JMVmxIs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA5MDMwNjU1NDFaFw0yNTA5MDYxMDAxNDFaMDMxMTAvBgNV BAMTKDNBMzU5QzE2RTgwQjc0MjdFQkFENkMwNkVEMDBCRDY4QUM5MjJDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXov7iDbfXfJWj5IPuPn2Wfg1z Bhfl4GFke6F0oeeG0tsdOuWGCi8o+dfiGE4z+ba0lwGJEirYy7ZjlwCa3NSFuMfL kvVs1LsJ4GF3OIS04ZFnE3yJrN7pc7hZIazvll5cIpc1idRyvm6rHkI6fFaSLtod bts9dmIFmJZbqXcVmMdiSKk05OCa6ZycwTOUApAZrZDKs41P9Ct5F5wkZ/eKf/zN /fOJMd1sLOSVwWZhChYzAdjJ8vTuAXpdeHhcYHt7m8IHEHB1ILzB2yrk1WmYDGdX ZFeaTzkdmDI32KJkBOCjwGSyDkp5XKk2nL7YWUQBMFFvkASSzi0+7O8hs4XpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjWcFugLdCfrrWwG7QC9aKySLEowHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEte+jSRJDWN1KxDdlhd1BLXFiIBsTGIaGOY PWgCmZwJYxn2HaRvDJ1jVQh2wRyGCgwD4nfiH0E3mZfCdz+5vqHtYxq3ItQq9zKf tYslnznK8uCE+OO6vFx+OhB9+1xYvesHApPNF9wuO/+Hx+UBFpKZHV2fTCXiGtlz w3R5zsx7oK4YgfAH86oJ7yCHgCj8/S0gDbBe5fDeEvJD+TRIXfhiaM22wzJrnyTf ZbV4vZSsuJY+6QL2KBSCgDBFZXIPTeJpNCnEfFhM38IsCeIBAAtgEUP641NRSRwW rJ3muQxKwIkjdfdQ3pIVhflBnvbbSvyAu8j1+HNLgZ5Ivet7QA8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:18 2025 by rpki-client