$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: qd/34C1DZBxdYGWOE3enb1QV6LWDIwjFPYz5F5Aktx8= Subject key identifier: AC:32:0E:7B:2C:66:BF:90:EC:B5:25:BF:89:A1:79:93:D7:C3:4A:63 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 667339428EC55837716751293B056123D1D567AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 011A Signing time: Fri 05 Sep 2025 22:51:03 +0000 Manifest this update: Fri 05 Sep 2025 22:46:03 +0000 Manifest next update: Tue 09 Sep 2025 00:23:03 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: zn6z3TLrJnHAyAWJEWxYRKIIcdJVHYjr13n6YpaBqr4=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:73:39:42:8e:c5:58:37:71:67:51:29:3b:05:61:23:d1:d5:67:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Sep 5 22:46:03 2025 GMT Not After : Sep 9 00:23:03 2025 GMT Subject: CN=AC320E7B2C66BF90ECB525BF89A17993D7C34A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c9:fa:2a:14:aa:41:c0:b6:f2:0a:7f:0b:94: 41:8c:8e:ce:00:59:26:46:3a:3d:17:9a:ab:5a:ac: 9b:c3:f0:18:75:c3:e9:99:07:67:9d:03:2c:32:21: b3:7f:b0:66:8b:88:7f:cb:d8:65:c1:db:63:c2:f9: 57:3d:6f:dc:62:9f:76:13:d7:cf:7e:8e:63:49:53: 96:2c:8e:e1:fa:63:aa:39:cd:d6:da:90:6f:f6:a9: b3:fd:07:45:a6:89:5c:f4:a4:e6:7a:80:8e:57:2e: e0:49:ff:ff:d4:24:69:75:65:1d:84:95:c3:10:d1: bf:16:23:aa:e9:fd:d2:c1:ed:1b:bb:ef:81:6f:59: 86:3d:4d:4a:8b:07:35:89:8d:ee:e0:d2:87:b0:91: 4e:61:ff:aa:70:bd:c1:4f:9e:36:99:e0:be:5d:fa: 0e:7c:e1:dd:70:1d:1e:3b:c0:1f:6c:55:39:66:75: 20:63:63:a6:98:66:3b:93:10:bb:6a:53:f8:a1:6c: 38:81:d5:2e:d3:4b:bf:d9:aa:75:ae:53:e8:2c:ed: 79:56:1e:3c:29:40:07:1a:4a:b4:41:31:58:4d:74: 67:a3:78:14:41:9d:bc:86:e2:70:82:4c:e2:06:82: 14:be:e5:1c:da:c8:aa:07:a6:a7:38:12:e8:3f:dc: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:0E:7B:2C:66:BF:90:EC:B5:25:BF:89:A1:79:93:D7:C3:4A:63 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f5:7b:24:0e:58:b0:df:0c:ce:47:41:6a:56:36:ce:43:09: 8b:8f:99:95:34:6d:5c:ca:5e:16:4a:fe:07:16:e1:3c:28:9a: ff:d9:9f:80:bd:1b:21:9f:f8:4c:5e:22:bc:3a:6e:7a:68:0a: 6a:cd:31:48:bc:fa:7a:34:38:8a:78:61:b1:ca:0c:cd:12:13: 1c:76:e5:62:29:2d:f9:25:02:ea:a7:d0:74:6d:a8:e6:9f:47: 96:3d:1f:cb:57:e7:6c:33:a2:d2:a7:c0:03:b5:75:91:6e:30: 74:c0:35:ed:a4:72:f0:4d:21:e1:6e:09:30:0c:5f:b2:cb:85: ab:4f:c6:f6:85:75:19:0d:ec:48:21:fb:6d:4b:7f:0f:15:bc: c1:fb:f8:91:a0:1f:81:b5:1e:6a:ba:3c:de:02:0c:b8:4e:37: 38:9a:d4:82:34:ad:44:c8:11:54:52:78:7f:0e:ef:12:94:6d: 82:6e:44:ed:58:e0:e7:ba:96:54:14:13:f6:4d:07:29:21:4d: 6f:27:30:f3:2c:a7:46:5c:98:6c:04:e5:23:8d:2d:de:db:81: a2:b8:aa:71:e9:76:8c:89:07:da:a9:e5:cf:76:56:ca:af:24: fe:2b:aa:70:5d:a1:e7:c6:c6:92:53:5d:ff:51:ed:d1:f3:f0: 66:b2:3a:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnM5Qo7FWDdxZ1EpOwVhI9HVZ6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA5MDUyMjQ2MDNaFw0yNTA5MDkwMDIzMDNaMDMxMTAvBgNV BAMTKEFDMzIwRTdCMkM2NkJGOTBFQ0I1MjVCRjg5QTE3OTkzRDdDMzRBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyyfoqFKpBwLbyCn8LlEGMjs4A WSZGOj0XmqtarJvD8Bh1w+mZB2edAywyIbN/sGaLiH/L2GXB22PC+Vc9b9xin3YT 189+jmNJU5YsjuH6Y6o5zdbakG/2qbP9B0WmiVz0pOZ6gI5XLuBJ///UJGl1ZR2E lcMQ0b8WI6rp/dLB7Ru774FvWYY9TUqLBzWJje7g0oewkU5h/6pwvcFPnjaZ4L5d +g584d1wHR47wB9sVTlmdSBjY6aYZjuTELtqU/ihbDiB1S7TS7/ZqnWuU+gs7XlW HjwpQAcaSrRBMVhNdGejeBRBnbyG4nCCTOIGghS+5RzayKoHpqc4Eug/3C7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDIOeyxmv5DstSW/iaF5k9fDSmMwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf1eyQOWLDfDM5HQWpWNs5DCYuPmZU0bVzK XhZK/gcW4Twomv/Zn4C9GyGf+ExeIrw6bnpoCmrNMUi8+no0OIp4YbHKDM0SExx2 5WIpLfklAuqn0HRtqOafR5Y9H8tX52wzotKnwAO1dZFuMHTANe2kcvBNIeFuCTAM X7LLhatPxvaFdRkN7Egh+21Lfw8VvMH7+JGgH4G1Hmq6PN4CDLhONzia1II0rUTI EVRSeH8O7xKUbYJuRO1Y4Oe6llQUE/ZNBykhTW8nMPMsp0ZcmGwE5SONLd7bgaK4 qnHpdoyJB9qp5c92VsqvJP4rqnBdoefGxpJTXf9R7dHz8GayOqc= -----END CERTIFICATE-----Generated at Sat Sep 6 15:00:01 2025 by rpki-client