$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: SSo1UYMYbTydAAJ/j7eqYvAzy9pvV+WJtQmkhNzcyGQ= Subject key identifier: 65:FE:46:F3:EB:0A:E0:16:AC:20:51:F0:28:1C:A6:AA:14:4A:2E:79 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 21424F72965BB3578406063F7E6E433F9C1D92BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: CD Signing time: Fri 05 Sep 2025 06:51:27 +0000 Manifest this update: Fri 05 Sep 2025 06:46:27 +0000 Manifest next update: Mon 08 Sep 2025 14:38:27 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: zV5YxmI9/4jXLZOnrCRWvbuAuCtRkErxiGY0hDVkHxs=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:42:4f:72:96:5b:b3:57:84:06:06:3f:7e:6e:43:3f:9c:1d:92:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Sep 5 06:46:27 2025 GMT Not After : Sep 8 14:38:27 2025 GMT Subject: CN=65FE46F3EB0AE016AC2051F0281CA6AA144A2E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:5e:3e:0a:2f:49:51:25:82:33:10:db:bf: ce:27:8d:76:14:1a:0f:93:35:9e:f5:c0:91:1d:1e: 80:5a:e3:64:80:04:ec:33:09:5c:31:7c:f1:e8:49: 34:f9:4f:24:0c:bb:71:e1:09:ee:84:c4:56:93:94: 5d:72:8b:33:88:75:aa:aa:fb:1b:54:81:e3:e1:c3: 85:f9:ff:a2:32:9c:7f:33:a2:33:91:d8:d0:71:13: 18:4e:3f:3c:2d:88:69:8b:bf:df:ba:37:f7:21:66: 56:2c:af:e6:d3:06:22:d9:67:37:7e:4f:1a:6d:0a: 79:78:95:9f:2e:ce:aa:5a:ce:f2:0a:b0:23:df:8d: d1:fc:3a:4c:d9:5b:99:a4:5c:ae:8d:36:59:7d:df: d8:da:58:26:ae:31:7d:15:9c:55:c1:2d:b8:dc:e2: 90:b3:b0:50:d9:f2:ec:1c:80:b7:c3:02:f1:be:f0: d0:cb:eb:bc:b4:d4:d1:6a:97:ab:58:fe:3d:45:96: 87:cb:1d:a8:6a:39:54:ad:d6:30:f1:77:94:67:a3: 9f:07:69:45:c0:ba:a5:01:20:9b:63:42:85:e0:d9: 53:b6:bb:99:6e:d5:a8:21:cf:79:61:fb:8f:90:c6: 28:21:93:b7:a8:da:91:54:43:e8:0e:e6:38:bd:07: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:46:F3:EB:0A:E0:16:AC:20:51:F0:28:1C:A6:AA:14:4A:2E:79 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:42:d6:e0:00:1a:c4:d4:72:df:af:a6:4f:c0:ba:27:a8: d9:62:59:8a:97:ce:ac:03:99:dd:1b:fe:23:9b:13:07:88:81: 5e:6c:38:a4:e0:bd:db:db:5e:de:3c:4d:c4:c9:dd:07:4a:86: ce:1a:31:c8:b2:fb:53:ec:5e:6e:a8:6e:b4:97:1d:0e:d3:2a: a5:e3:58:1b:55:f1:42:1d:e6:90:41:28:b1:0c:33:b2:2d:90: 9d:31:a9:5d:17:05:2b:fb:a1:50:0c:43:65:8f:58:4f:f3:4a: e9:8d:3a:5e:86:fa:cf:73:b8:8d:85:f3:cd:7e:42:56:e7:19: 64:00:1a:7d:e1:3b:5b:62:55:63:87:9e:2b:aa:43:7a:41:aa: 27:c4:fc:15:2d:cd:eb:3e:5e:00:92:05:0b:e8:31:72:5c:9c: 47:31:d8:0b:01:c5:bb:c8:10:84:87:82:2b:04:4e:49:2a:d0: 83:21:ad:b3:c9:f3:93:54:05:2d:6c:57:ee:c1:5c:64:9b:73: ea:d6:98:f7:05:32:4e:63:b0:27:22:f4:27:75:a3:22:9b:5a: 86:d7:dd:b5:59:d6:e1:b8:98:7c:74:38:5e:79:4b:69:c6:fe: 9f:2a:e8:78:c9:19:de:4a:9a:96:cc:a1:a1:dc:9b:94:3e:41: 37:6a:06:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUJPcpZbs1eEBgY/fm5DP5wdkr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTA5MDUwNjQ2MjdaFw0yNTA5MDgxNDM4MjdaMDMxMTAvBgNV BAMTKDY1RkU0NkYzRUIwQUUwMTZBQzIwNTFGMDI4MUNBNkFBMTQ0QTJFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0G14+Ci9JUSWCMxDbv84njXYU Gg+TNZ71wJEdHoBa42SABOwzCVwxfPHoSTT5TyQMu3HhCe6ExFaTlF1yizOIdaqq +xtUgePhw4X5/6IynH8zojOR2NBxExhOPzwtiGmLv9+6N/chZlYsr+bTBiLZZzd+ TxptCnl4lZ8uzqpazvIKsCPfjdH8OkzZW5mkXK6NNll939jaWCauMX0VnFXBLbjc 4pCzsFDZ8uwcgLfDAvG+8NDL67y01NFql6tY/j1FlofLHahqOVSt1jDxd5Rno58H aUXAuqUBIJtjQoXg2VO2u5lu1aghz3lh+4+Qxighk7eo2pFUQ+gO5ji9B/VHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZf5G8+sK4BasIFHwKBymqhRKLnkwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt1QtbgABrE1HLfr6ZPwLonqNliWYqXzqwD md0b/iObEweIgV5sOKTgvdvbXt48TcTJ3QdKhs4aMciy+1PsXm6obrSXHQ7TKqXj WBtV8UId5pBBKLEMM7ItkJ0xqV0XBSv7oVAMQ2WPWE/zSumNOl6G+s9zuI2F881+ QlbnGWQAGn3hO1tiVWOHniuqQ3pBqifE/BUtzes+XgCSBQvoMXJcnEcx2AsBxbvI EISHgisETkkq0IMhrbPJ85NUBS1sV+7BXGSbc+rWmPcFMk5jsCci9Cd1oyKbWobX 3bVZ1uG4mHx0OF55S2nG/p8q6HjJGd5KmpbMoaHcm5Q+QTdqBq4= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:50 2025 by rpki-client