$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: vHc7p8/5u3OTdgvxphSnMmujR/cdWSXQOeOEB7wpL2c= Subject key identifier: 63:2F:B8:FA:CF:06:84:DC:B3:7E:CA:50:08:03:B9:33:D5:E9:45:1A Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 7C0A3CC393AA70116A8AC7BFC96A0D577FBD248E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 01AA Signing time: Fri 05 Sep 2025 20:32:18 +0000 Manifest this update: Fri 05 Sep 2025 20:27:18 +0000 Manifest next update: Mon 08 Sep 2025 20:57:18 +0000 Files and hashes: 1: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: qNLSNSyoRSqq66rE3tVrbbxeIYZqB1Bw0+wP79LTdOY=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: LIbGQcjTGWGxJqCR/9o7Sf1Rl1mg0hzyvdT64dJ+oqM=) 3: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: wiXNpqjWMMKF354ExIqtRDLGcDlkrMzaHsyKlAIgOVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0a:3c:c3:93:aa:70:11:6a:8a:c7:bf:c9:6a:0d:57:7f:bd:24:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Sep 5 20:27:18 2025 GMT Not After : Sep 8 20:57:18 2025 GMT Subject: CN=632FB8FACF0684DCB37ECA500803B933D5E9451A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:ad:f2:29:04:e9:01:6f:92:3f:ea:72:4b: 6d:f6:b4:ed:99:49:49:6c:1f:01:17:e7:6b:c1:33: f0:ac:83:02:40:13:47:7c:89:0e:46:a5:55:e2:f9: 8f:d6:00:6a:a9:15:6b:c3:ce:54:e0:ca:a4:f0:00: 0f:30:61:16:99:9a:fa:8c:f8:11:63:21:f9:3c:f9: d7:a4:08:5d:8c:49:f8:af:2f:4d:0f:2c:85:6d:b4: 2b:ea:00:8e:49:ad:37:3a:56:ae:b7:d7:be:23:69: 91:ee:92:63:33:29:62:64:69:75:95:f9:ea:62:fe: aa:71:11:85:04:08:ab:9c:c1:c6:e2:3e:61:ef:40: f2:57:ca:6c:59:9a:b6:ab:ff:7f:e0:6b:5a:63:75: 76:b5:26:ed:0e:03:1f:ec:ab:db:78:64:08:86:15: 22:eb:c5:98:d8:2b:21:69:d0:9d:d7:1c:c4:d7:fa: 65:fd:d0:cd:05:56:9d:6b:fe:1c:06:22:41:b5:5c: 47:47:be:0b:d7:88:7b:d9:b3:c3:bb:87:54:2a:1f: d1:bf:3e:e7:95:be:92:96:2e:f8:9e:1f:b8:80:97: cf:06:79:5b:39:6b:15:32:e0:5d:d9:eb:b3:1e:d1: 23:f3:6d:5d:00:6b:e8:2a:63:46:b7:1d:97:7e:ba: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2F:B8:FA:CF:06:84:DC:B3:7E:CA:50:08:03:B9:33:D5:E9:45:1A X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9c:d7:a5:8c:a0:7f:f9:f7:8b:8a:9c:c8:2d:4d:81:24:92: 66:b0:c6:4e:3d:67:ea:81:2f:eb:16:47:5d:aa:d1:d2:e5:28: cc:62:02:95:aa:9c:ba:b8:d3:6f:08:b0:fc:b6:6f:d9:b1:85: 82:f2:0b:1a:6e:84:98:ad:00:45:30:af:b5:68:fc:ec:a8:36: c3:1f:57:1c:f9:4f:52:ff:55:79:f9:6c:60:dc:74:55:0e:cc: 46:0e:2d:5e:66:44:ba:77:b3:fe:e9:a1:42:40:76:70:2e:5b: 36:d3:ba:a5:dd:31:4d:f6:ea:28:46:00:9a:8d:4c:2f:a1:02: 91:0f:ea:61:79:8f:31:68:fa:c6:6c:d0:d3:72:0b:55:e5:00: 96:ae:a4:f2:42:89:fd:d3:ee:c8:4d:e3:04:23:79:9c:af:44: 1c:0a:09:a6:9c:80:dd:b9:c7:99:8a:7a:bd:a9:ee:7d:73:69: 9f:cf:d5:cd:5d:ee:ec:58:ea:43:03:e8:d9:14:30:e0:3d:63: 92:51:31:22:f3:32:52:9c:76:c7:27:40:98:8e:9f:d1:f9:0d: 0e:e1:12:f6:55:f8:f8:56:cb:af:d5:83:ff:cb:29:d1:57:5d: fe:d7:69:5a:b9:10:4e:07:6c:d1:0c:26:6f:c8:0c:ff:fb:51: 41:4c:d5:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAo8w5OqcBFqise/yWoNV3+9JI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTA5MDUyMDI3MThaFw0yNTA5MDgyMDU3MThaMDMxMTAvBgNV BAMTKDYzMkZCOEZBQ0YwNjg0RENCMzdFQ0E1MDA4MDNCOTMzRDVFOTQ1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ca3yKQTpAW+SP+pyS232tO2Z SUlsHwEX52vBM/CsgwJAE0d8iQ5GpVXi+Y/WAGqpFWvDzlTgyqTwAA8wYRaZmvqM +BFjIfk8+dekCF2MSfivL00PLIVttCvqAI5JrTc6Vq63174jaZHukmMzKWJkaXWV +epi/qpxEYUECKucwcbiPmHvQPJXymxZmrar/3/ga1pjdXa1Ju0OAx/sq9t4ZAiG FSLrxZjYKyFp0J3XHMTX+mX90M0FVp1r/hwGIkG1XEdHvgvXiHvZs8O7h1QqH9G/ PueVvpKWLvieH7iAl88GeVs5axUy4F3Z67Me0SPzbV0Aa+gqY0a3HZd+utY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYy+4+s8GhNyzfspQCAO5M9XpRRowHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2c16WMoH/594uKnMgtTYEkkmawxk49Z+qB L+sWR12q0dLlKMxiApWqnLq4028IsPy2b9mxhYLyCxpuhJitAEUwr7Vo/OyoNsMf Vxz5T1L/VXn5bGDcdFUOzEYOLV5mRLp3s/7poUJAdnAuWzbTuqXdMU326ihGAJqN TC+hApEP6mF5jzFo+sZs0NNyC1XlAJaupPJCif3T7shN4wQjeZyvRBwKCaacgN25 x5mKer2p7n1zaZ/P1c1d7uxY6kMD6NkUMOA9Y5JRMSLzMlKcdscnQJiOn9H5DQ7h EvZV+PhWy6/Vg//LKdFXXf7XaVq5EE4HbNEMJm/IDP/7UUFM1WY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client