$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: bOmdOmZPD3BlxL54r0KH7LiFn0zXxmwbmo5wdTW31ww= Subject key identifier: 3A:84:59:06:CB:41:AA:19:4C:E8:1C:CB:E0:AD:08:0F:57:49:53:4C Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 7F69B16AABC215C7478A8EB92049082110899057 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 04CB Signing time: Sat 06 Sep 2025 08:50:04 +0000 Manifest this update: Sat 06 Sep 2025 08:45:04 +0000 Manifest next update: Tue 09 Sep 2025 12:50:04 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: UlAh8zKWIPZHwNHmAImvacovNeaS9Y+qOJYX1Qlb9uc=) 2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: mT6qqP2lnSBqXOgQDY5xCEfVGlp7QZu9bOPjet7dh4U=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:69:b1:6a:ab:c2:15:c7:47:8a:8e:b9:20:49:08:21:10:89:90:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: Sep 6 08:45:04 2025 GMT Not After : Sep 9 12:50:04 2025 GMT Subject: CN=3A845906CB41AA194CE81CCBE0AD080F5749534C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:33:b9:6b:0b:05:cf:4e:b9:ba:68:24:17: 8d:b1:a1:d8:c2:d6:3f:13:bc:af:b1:8d:27:17:b1: 01:3c:d8:e4:07:6a:e2:f2:e2:29:d4:cb:c7:dc:31: 1a:02:ca:16:c6:d1:65:62:d6:2d:29:df:7a:0d:6d: 86:6f:6e:4c:50:cd:e4:3c:d2:fd:cb:ca:8f:75:f1: 6f:9f:db:d8:94:4e:dc:e1:f3:20:de:6f:3f:63:90: 70:c7:f0:f5:b0:3c:2e:40:a8:73:a4:84:d7:ed:34: 30:f0:5f:7a:28:ee:fc:83:d3:cc:bd:23:a3:db:dc: c7:9a:56:e3:46:12:2b:b7:09:8b:35:e1:5a:22:80: 10:21:46:10:96:cf:da:63:b6:77:d1:84:47:f9:61: 44:d2:05:6e:62:8a:87:21:81:c4:50:8b:93:49:bb: 94:7a:38:e4:a8:83:01:b9:ca:71:90:a1:00:b7:30: 66:05:6d:d3:31:5b:c7:71:21:3c:4d:a2:df:84:8c: 15:94:cc:50:be:06:3a:e7:d4:03:47:ac:5c:5e:57: 97:f6:66:20:3f:76:e9:81:2a:81:87:a8:38:60:d6: a0:6d:b2:f0:0f:a0:de:53:ff:08:ff:05:8b:7d:85: fe:06:42:3c:b9:84:a0:f7:84:95:a0:f0:26:b4:59: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:59:06:CB:41:AA:19:4C:E8:1C:CB:E0:AD:08:0F:57:49:53:4C X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:8d:60:ce:ab:34:37:86:43:73:fd:f9:e7:1e:6d:28:01: 6e:5f:af:9e:d3:2e:6a:a9:bd:1c:93:84:4f:14:2a:32:2e:2a: 4d:ab:97:22:36:62:e7:39:9c:ab:9e:ef:86:d0:2b:af:96:ed: a7:8b:f5:ce:3f:f6:46:bb:47:50:3a:5a:7e:df:bc:fb:89:69: 88:c8:98:af:fc:3b:4a:cf:c9:59:26:93:85:17:ad:42:30:7a: 4d:17:4f:0e:67:66:69:60:69:66:ef:97:61:e1:69:a8:b6:61: 7a:50:bc:df:97:f8:b0:38:25:10:e0:a2:d6:73:82:92:d5:b4: ba:d7:0f:58:a2:ad:c3:73:8e:61:4f:73:66:8c:69:d6:05:f4: c4:b3:99:57:02:8d:a9:ab:4c:47:b0:f8:ac:8d:5b:47:90:2a: 61:fc:0e:0a:9a:ff:39:c1:7a:04:de:64:c8:d9:f4:6a:ae:8b: 3e:41:2f:cd:bb:a7:3d:74:bd:90:13:d0:38:9b:b2:b6:46:b5: c3:a0:5d:28:82:2d:d8:21:01:6f:97:ef:37:a8:b4:92:97:5e: 5e:7b:ef:93:c2:01:8b:23:89:26:25:eb:06:2a:21:1f:a5:83: 3c:d9:c9:c0:b2:21:23:da:e4:5f:36:46:26:93:9c:9c:4e:f8: 79:d6:f6:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2mxaqvCFcdHio65IEkIIRCJkFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNTA5MDYwODQ1MDRaFw0yNTA5MDkxMjUwMDRaMDMxMTAvBgNV BAMTKDNBODQ1OTA2Q0I0MUFBMTk0Q0U4MUNDQkUwQUQwODBGNTc0OTUzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOTO5awsFz065umgkF42xodjC 1j8TvK+xjScXsQE82OQHauLy4inUy8fcMRoCyhbG0WVi1i0p33oNbYZvbkxQzeQ8 0v3Lyo918W+f29iUTtzh8yDebz9jkHDH8PWwPC5AqHOkhNftNDDwX3oo7vyD08y9 I6Pb3MeaVuNGEiu3CYs14VoigBAhRhCWz9pjtnfRhEf5YUTSBW5iiochgcRQi5NJ u5R6OOSogwG5ynGQoQC3MGYFbdMxW8dxITxNot+EjBWUzFC+Bjrn1ANHrFxeV5f2 ZiA/dumBKoGHqDhg1qBtsvAPoN5T/wj/BYt9hf4GQjy5hKD3hJWg8Ca0WYApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOoRZBstBqhlM6BzL4K0ID1dJU0wwHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqVjWDOqzQ3hkNz/fnnHm0oAW5fr57TLmqp vRyThE8UKjIuKk2rlyI2Yuc5nKue74bQK6+W7aeL9c4/9ka7R1A6Wn7fvPuJaYjI mK/8O0rPyVkmk4UXrUIwek0XTw5nZmlgaWbvl2Hhaai2YXpQvN+X+LA4JRDgotZz gpLVtLrXD1iircNzjmFPc2aMadYF9MSzmVcCjamrTEew+KyNW0eQKmH8Dgqa/znB egTeZMjZ9Gquiz5BL827pz10vZAT0DibsrZGtcOgXSiCLdghAW+X7zeotJKXXl57 75PCAYsjiSYl6wYqIR+lgzzZycCyISPa5F82RiaTnJxO+HnW9hg= -----END CERTIFICATE-----Generated at Sun Sep 7 17:01:54 2025 by rpki-client