$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: TTXdVzpOtqZ5t2Gh/WW8brw+pSTD2vt9dyEkXl5mPAQ= Subject key identifier: 73:73:C8:25:31:9F:19:B6:82:A8:37:A4:1F:CE:18:58:DE:F2:EA:54 Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 21E8C49DD4C519C1E86475DE10D6A0A89ECBE2B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 01F2 Signing time: Fri 05 Sep 2025 08:20:38 +0000 Manifest this update: Fri 05 Sep 2025 08:15:38 +0000 Manifest next update: Mon 08 Sep 2025 09:36:38 +0000 Files and hashes: 1: 2985976A4B3081770748882703E16497964D05A6.crl (hash: kWlnUf7wCCBD9B/GcLb3qUJEPpk8ztnULfvpgaH6doc=) 2: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) 3: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) 4: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) 5: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) 6: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e8:c4:9d:d4:c5:19:c1:e8:64:75:de:10:d6:a0:a8:9e:cb:e2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Sep 5 08:15:38 2025 GMT Not After : Sep 8 09:36:38 2025 GMT Subject: CN=7373C825319F19B682A837A41FCE1858DEF2EA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:84:dd:e9:38:24:a2:2f:49:3d:6c:ef:36: bb:7a:61:96:2a:98:80:63:11:20:1e:f3:90:6d:55: 3a:c1:02:2f:3c:fe:90:be:d5:6d:d2:a8:be:64:09: 78:a5:36:6b:34:72:c2:34:13:51:75:a2:cf:ac:57: 83:2f:eb:9b:70:26:43:1b:d4:2b:2e:29:45:98:3f: d0:0e:1b:b9:19:05:87:15:85:32:15:b4:b8:ff:24: bf:0c:ba:72:bc:54:ad:3e:34:c8:25:c5:d2:de:a5: fb:8e:0b:1d:e2:e5:c3:56:0c:1d:8e:20:4b:a8:61: 4d:e8:5d:d5:cc:6c:c4:d9:65:c6:72:18:d6:f9:76: 77:e3:b5:cb:dd:fe:45:c5:9c:0b:b1:b8:fa:9d:96: e8:9a:8e:8c:32:0c:66:b7:be:92:3a:44:4b:44:f5: 01:60:b4:e2:d9:1d:cd:85:7a:97:e3:f0:17:0f:dc: 45:f0:1a:9c:3b:b2:36:c2:0f:da:44:31:de:02:2f: 6a:ef:bb:7c:6d:c6:f8:4d:b8:a5:2b:5f:87:05:88: f2:4e:e1:72:ea:de:da:64:38:5f:01:b7:29:58:0b: 7a:3e:ff:93:f1:f3:ed:b3:fe:76:69:d4:22:fa:8a: ea:42:34:66:87:37:0a:cc:00:62:8b:40:ef:38:9c: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:73:C8:25:31:9F:19:B6:82:A8:37:A4:1F:CE:18:58:DE:F2:EA:54 X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:15:db:b9:11:ef:b5:3f:ba:b4:dd:f3:88:37:72:42:6e:af: d9:bc:70:db:ae:84:af:38:d2:d9:9d:b0:cc:dc:d9:78:1f:f0: 7b:44:71:e9:1f:af:f5:ca:21:e8:75:71:f3:24:93:25:17:4c: 79:c2:c5:1f:02:df:48:44:39:aa:d7:60:8f:ec:1e:47:b0:ab: 08:6b:eb:fe:4f:b1:d0:f0:a9:6c:ac:b9:7a:04:b8:d0:7c:bc: c9:bb:7b:05:9a:e6:24:6d:56:03:5c:46:76:d6:d8:7d:e2:e0: 2d:c5:83:98:68:c4:54:3e:96:2a:30:51:68:08:55:ec:7f:e3: 9f:ce:7d:3e:ca:5b:b3:58:31:85:8e:ad:02:c0:55:0e:f1:c2: ce:22:13:23:b0:ef:c8:41:73:2f:ea:6c:41:ad:56:7e:67:4b: 4c:9a:57:33:cc:de:36:e7:4c:50:35:18:7e:16:32:56:b2:99: 51:f9:ca:c5:87:ba:4c:ff:d5:6a:de:1c:c4:af:26:1b:ba:f8: 3f:f8:f0:f2:7d:bc:f6:06:85:6b:01:0c:f7:38:d5:a3:64:80: 2a:e4:ef:b0:d6:aa:f5:28:23:ba:ea:b3:23:28:7b:73:d5:cf: 77:b6:99:1f:ba:6c:71:b3:39:dd:c0:d1:a6:64:b5:0f:a4:11: b2:3b:dd:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIejEndTFGcHoZHXeENagqJ7L4rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNTA5MDUwODE1MzhaFw0yNTA5MDgwOTM2MzhaMDMxMTAvBgNV BAMTKDczNzNDODI1MzE5RjE5QjY4MkE4MzdBNDFGQ0UxODU4REVGMkVBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDioITd6Tgkoi9JPWzvNrt6YZYq mIBjESAe85BtVTrBAi88/pC+1W3SqL5kCXilNms0csI0E1F1os+sV4Mv65twJkMb 1CsuKUWYP9AOG7kZBYcVhTIVtLj/JL8MunK8VK0+NMglxdLepfuOCx3i5cNWDB2O IEuoYU3oXdXMbMTZZcZyGNb5dnfjtcvd/kXFnAuxuPqdluiajowyDGa3vpI6REtE 9QFgtOLZHc2Fepfj8BcP3EXwGpw7sjbCD9pEMd4CL2rvu3xtxvhNuKUrX4cFiPJO 4XLq3tpkOF8BtylYC3o+/5Px8+2z/nZp1CL6iupCNGaHNwrMAGKLQO84nDLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3PIJTGfGbaCqDekH84YWN7y6lQwHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMV27kR77U/urTd84g3ckJur9m8cNuuhK84 0tmdsMzc2Xgf8HtEcekfr/XKIeh1cfMkkyUXTHnCxR8C30hEOarXYI/sHkewqwhr 6/5PsdDwqWysuXoEuNB8vMm7ewWa5iRtVgNcRnbW2H3i4C3Fg5hoxFQ+liowUWgI Vex/45/OfT7KW7NYMYWOrQLAVQ7xws4iEyOw78hBcy/qbEGtVn5nS0yaVzPM3jbn TFA1GH4WMlaymVH5ysWHukz/1WreHMSvJhu6+D/48PJ9vPYGhWsBDPc41aNkgCrk 77DWqvUoI7rqsyMoe3PVz3e2mR+6bHGzOd3A0aZktQ+kEbI73dk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:19 2025 by rpki-client