$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: kzg4XRDkKp2u/uVkEzKQOoK4TnYGG/hNR76rJGqQIyI= Subject key identifier: 28:8A:52:43:4A:D2:7B:4B:12:1D:42:71:4A:E7:84:CD:CA:D8:08:CA Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 7002E67FD536A5E02AC4D67BB5DC1B9724DF96F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: DA Signing time: Fri 29 Aug 2025 05:52:10 +0000 Manifest this update: Fri 29 Aug 2025 05:47:10 +0000 Manifest next update: Mon 01 Sep 2025 17:07:10 +0000 Files and hashes: 1: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: 7J2O4IZrFoIPpuRX79XKGrdsZlU2i5bxrKjHIJZuHKs=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 17:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:02:e6:7f:d5:36:a5:e0:2a:c4:d6:7b:b5:dc:1b:97:24:df:96:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Aug 29 05:47:10 2025 GMT Not After : Sep 1 17:07:10 2025 GMT Subject: CN=288A52434AD27B4B121D42714AE784CDCAD808CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:f5:dd:b2:5e:37:c1:cf:1e:3d:43:12:5c: 07:1b:8c:ad:85:35:3d:d7:ca:e0:dd:d5:f2:ab:6f: fb:27:42:ce:10:fa:14:21:76:1e:35:b8:45:ac:2a: 37:5b:0a:cc:da:12:ce:4c:f1:f1:d5:7d:8a:cd:83: 69:21:b5:bf:9e:28:39:82:0f:6f:e4:e4:a1:84:1f: 3c:19:77:f1:62:df:86:7c:5c:b3:c6:9a:91:cd:26: 67:76:bf:c2:bc:ec:97:25:12:8f:8f:ea:c4:8d:71: 93:23:2a:68:c9:3c:7c:86:95:4e:02:93:5e:b3:27: b5:78:9f:4b:66:c5:bb:41:d5:91:ff:c9:05:22:32: cf:61:7c:94:59:c2:ff:68:1f:8e:c1:2f:d5:de:73: d7:3b:e1:bc:3c:f5:b4:cc:23:70:fe:52:05:56:99: 65:2b:ce:dc:02:33:37:b4:59:94:8c:af:20:ef:99: e8:03:56:28:c9:0f:10:cd:a2:ec:a9:af:c9:ff:7e: 87:3c:7c:a0:ae:b2:66:fb:a9:1b:b3:9d:85:ed:a9: f3:bd:08:eb:3f:ac:2e:1e:73:ff:ee:35:04:0a:7a: 97:ca:38:47:9a:ec:ed:84:38:41:e1:33:5f:18:ae: 70:be:e2:16:bc:2e:85:92:6a:fd:9f:3c:85:12:c6: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8A:52:43:4A:D2:7B:4B:12:1D:42:71:4A:E7:84:CD:CA:D8:08:CA X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:67:c6:b7:92:5f:f8:1a:d9:75:ad:fc:33:65:5f:c7:d1:31: ed:31:81:d3:23:2a:84:55:6b:84:ec:b4:7b:36:03:ff:f1:b5: 19:38:26:3c:03:37:85:7f:55:9b:77:19:f3:55:cc:51:6f:ed: 0c:2b:07:b8:91:ce:f9:32:29:48:9e:17:80:7a:10:1e:59:50: ed:6c:b9:b5:e1:b4:0c:c8:7a:aa:1d:26:f0:f2:b3:74:fe:99: c7:3e:c6:17:54:f7:8b:5c:94:78:7a:16:05:71:0c:7a:52:e0: 98:ff:da:f9:6e:da:68:b5:b2:10:0f:31:07:bd:48:d6:87:b1: 49:81:8f:49:62:a3:15:7f:45:0b:f9:92:a1:c9:19:51:a7:e0: bb:c4:3a:3b:ec:29:95:09:b5:ba:e7:f2:c6:77:cd:b8:99:3f: 74:8b:7f:72:a1:2b:26:f7:9c:64:26:3b:9a:d7:11:2c:86:8f: 04:f5:e8:7b:f0:74:bd:3a:13:fc:8a:69:2e:94:5d:22:71:68: 2d:1a:72:37:f0:6e:2d:4c:92:94:78:4c:4b:02:8b:7a:0a:42: 8c:21:58:eb:44:76:d4:3c:36:a6:c6:16:c4:cf:50:56:e5:dd: dc:97:0c:bd:c9:48:27:68:6b:0f:50:9b:f8:b1:43:09:9e:da: 13:c6:f6:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcALmf9U2peAqxNZ7tdwblyTflvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA4MjkwNTQ3MTBaFw0yNTA5MDExNzA3MTBaMDMxMTAvBgNV BAMTKDI4OEE1MjQzNEFEMjdCNEIxMjFENDI3MTRBRTc4NENEQ0FEODA4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCvXdsl43wc8ePUMSXAcbjK2F NT3XyuDd1fKrb/snQs4Q+hQhdh41uEWsKjdbCszaEs5M8fHVfYrNg2khtb+eKDmC D2/k5KGEHzwZd/Fi34Z8XLPGmpHNJmd2v8K87JclEo+P6sSNcZMjKmjJPHyGlU4C k16zJ7V4n0tmxbtB1ZH/yQUiMs9hfJRZwv9oH47BL9Xec9c74bw89bTMI3D+UgVW mWUrztwCMze0WZSMryDvmegDVijJDxDNouypr8n/foc8fKCusmb7qRuznYXtqfO9 COs/rC4ec//uNQQKepfKOEea7O2EOEHhM18YrnC+4ha8LoWSav2fPIUSxuMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIpSQ0rSe0sSHUJxSueEzcrYCMowHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9nxreSX/ga2XWt/DNlX8fRMe0xgdMjKoRV a4TstHs2A//xtRk4JjwDN4V/VZt3GfNVzFFv7QwrB7iRzvkyKUieF4B6EB5ZUO1s ubXhtAzIeqodJvDys3T+mcc+xhdU94tclHh6FgVxDHpS4Jj/2vlu2mi1shAPMQe9 SNaHsUmBj0lioxV/RQv5kqHJGVGn4LvEOjvsKZUJtbrn8sZ3zbiZP3SLf3KhKyb3 nGQmO5rXESyGjwT16HvwdL06E/yKaS6UXSJxaC0acjfwbi1MkpR4TEsCi3oKQowh WOtEdtQ8NqbGFsTPUFbl3dyXDL3JSCdoaw9Qm/ixQwme2hPG9tY= -----END CERTIFICATE-----Generated at Sun Aug 31 08:44:53 2025 by rpki-client