$ rpki-client -vvf repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft File: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft (raw, json) Hash identifier: /U6NymTYTnJfg0kAgvKe2H/ubzAazAI7ZOlDdPWeGOY= Subject key identifier: 9E:70:2E:92:99:36:3C:6A:06:FA:86:E5:03:88:4B:94:10:4F:30:A5 Authority key identifier: D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 Certificate issuer: /CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Certificate serial: 49C4D6A86452F2BE9004A1BF91E16981429A91C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft Manifest number: 0377 Signing time: Thu 04 Sep 2025 16:12:11 +0000 Manifest this update: Thu 04 Sep 2025 16:07:11 +0000 Manifest next update: Mon 08 Sep 2025 01:22:11 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: Cw4pOJ79jeEX4VYPEj0ggp3n3fPwHSaTIPKQamrNGso=) 2: D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl (hash: ifIGuC7vhozrLA63IqdL6S5rRZ7kH+hX7em2SeXlG00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c4:d6:a8:64:52:f2:be:90:04:a1:bf:91:e1:69:81:42:9a:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7286D5F5B9ADD4CC166AD32519692F0C8902B29 Validity Not Before: Sep 4 16:07:11 2025 GMT Not After : Sep 8 01:22:11 2025 GMT Subject: CN=9E702E9299363C6A06FA86E503884B94104F30A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:b4:35:f5:6c:86:a0:6e:05:86:48:51:6e: db:d2:f9:4a:1a:7e:74:fe:03:c0:e6:b6:07:69:58: 15:42:4a:b8:b9:38:29:c1:2e:30:6f:f3:bf:45:64: 92:8e:57:64:c5:36:3c:b6:d8:71:1c:28:82:e1:83: 60:21:94:81:4d:b8:52:d0:32:0a:f8:63:74:a3:fc: 56:92:92:5b:3c:84:cf:39:aa:e6:a7:2b:23:20:09: 9b:99:7b:b3:6f:5b:30:51:62:13:0d:23:6a:5d:79: 9d:2d:27:f9:e3:83:27:bd:00:aa:1d:22:29:17:fb: 40:70:60:7d:42:58:26:bf:0c:aa:ce:d9:df:d5:89: 3d:bd:79:d9:b6:4c:8a:db:d3:cf:46:b8:ad:59:4f: b9:ec:80:76:8c:5a:1d:d4:f1:16:73:06:67:8a:33: d8:37:1c:f0:21:9b:af:ce:7a:a0:64:96:09:1d:41: 5f:ad:d4:1e:10:25:55:4c:b3:b2:6a:b3:ec:b1:5a: 45:01:dd:55:79:46:4c:18:a6:f3:fd:10:f7:b5:50: 0f:70:ca:01:ea:b1:06:f4:b4:c4:6b:e8:ca:cd:d9: b8:43:8f:1f:06:f8:78:dd:68:0f:dc:66:78:7b:fe: d8:5c:ea:47:24:48:14:54:65:08:97:d1:d1:98:54: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:70:2E:92:99:36:3C:6A:06:FA:86:E5:03:88:4B:94:10:4F:30:A5 X509v3 Authority Key Identifier: keyid:D7:28:6D:5F:5B:9A:DD:4C:C1:66:AD:32:51:96:92:F0:C8:90:2B:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/D7286D5F5B9ADD4CC166AD32519692F0C8902B29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4c:30:11:b3:7c:01:7e:73:62:42:2b:a9:72:0a:ac:f5:66: 64:e5:7c:3a:67:f5:8a:c9:16:f2:ad:f2:5d:b5:0d:f4:57:fc: 12:d3:66:c0:ee:22:90:f7:5e:f2:ba:fc:be:21:49:79:4d:fb: 41:ae:b1:78:64:a8:e9:54:2d:51:5f:1f:76:36:22:23:76:1a: 93:e7:13:42:2f:2f:fe:5f:15:03:e0:fa:bd:43:56:d6:57:e5: 5a:2c:d5:22:fe:e3:4e:6f:a9:48:0c:a1:b6:41:be:f6:d3:0c: 56:4a:e6:5a:1f:06:6d:0d:fe:6e:1e:f4:2a:17:a0:5c:62:b7: 17:83:12:f9:7f:09:8e:7e:c6:59:79:57:d5:f5:21:e1:71:53: f5:ed:c5:18:f8:d0:e5:57:8e:4b:5e:8a:f3:88:a3:e3:de:36: 11:17:92:75:f4:84:d3:c9:b7:b1:b6:0a:eb:b0:55:04:35:1a: 44:9f:a2:61:e3:77:2c:c6:66:68:91:2a:d7:64:51:85:a6:96: e0:73:28:c5:cc:24:3e:0d:0e:78:d0:11:37:bb:cd:82:ca:5c: d6:dc:4a:43:90:38:8e:2e:2f:e8:ec:87:45:62:ab:33:bf:0e: d5:0d:ff:6d:4d:fb:d9:4c:b3:8b:84:3e:bc:44:21:d5:d8:c1: d0:50:e8:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScTWqGRS8r6QBKG/keFpgUKakcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBD ODkwMkIyOTAeFw0yNTA5MDQxNjA3MTFaFw0yNTA5MDgwMTIyMTFaMDMxMTAvBgNV BAMTKDlFNzAyRTkyOTkzNjNDNkEwNkZBODZFNTAzODg0Qjk0MTA0RjMwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXbQ19WyGoG4FhkhRbtvS+Uoa fnT+A8DmtgdpWBVCSri5OCnBLjBv879FZJKOV2TFNjy22HEcKILhg2AhlIFNuFLQ Mgr4Y3Sj/FaSkls8hM85quanKyMgCZuZe7NvWzBRYhMNI2pdeZ0tJ/njgye9AKod IikX+0BwYH1CWCa/DKrO2d/ViT29edm2TIrb089GuK1ZT7nsgHaMWh3U8RZzBmeK M9g3HPAhm6/OeqBklgkdQV+t1B4QJVVMs7Jqs+yxWkUB3VV5RkwYpvP9EPe1UA9w ygHqsQb0tMRr6MrN2bhDjx8G+HjdaA/cZnh7/thc6kckSBRUZQiX0dGYVGbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnnAukpk2PGoG+oblA4hLlBBPMKUwHwYDVR0j BBgwFoAU1yhtX1ua3UzBZq0yUZaS8MiQKykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTI2MDY0MS1iY2UyLTQ0NWMtOWRlNS0zNzBhNzg3Zjk1MzAvMC9ENzI4NkQ1RjVC OUFERDRDQzE2NkFEMzI1MTk2OTJGMEM4OTAyQjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5NjkyRjBDODkw MkIyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvRDcyODZENUY1QjlBREQ0Q0MxNjZBRDMyNTE5Njky RjBDODkwMkIyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZMMBGzfAF+c2JCK6lyCqz1ZmTlfDpn9YrJ FvKt8l21DfRX/BLTZsDuIpD3XvK6/L4hSXlN+0GusXhkqOlULVFfH3Y2IiN2GpPn E0IvL/5fFQPg+r1DVtZX5Vos1SL+405vqUgMobZBvvbTDFZK5lofBm0N/m4e9CoX oFxitxeDEvl/CY5+xll5V9X1IeFxU/XtxRj40OVXjkteivOIo+PeNhEXknX0hNPJ t7G2CuuwVQQ1GkSfomHjdyzGZmiRKtdkUYWmluBzKMXMJD4NDnjQETe7zYLKXNbc SkOQOI4uL+jsh0ViqzO/DtUN/21N+9lMs4uEPrxEIdXYwdBQ6L4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:16 2025 by rpki-client