$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: U5JBHX8kqywGgVU5rg8cFqwbfTd4/ljDdNMhzuu/5I4= Subject key identifier: AE:EB:AB:15:A7:17:4C:EE:04:D4:FC:E0:D1:65:CE:67:2A:FB:7B:4D Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 03956253BFBC8E9D967D42118CDBB7502D086876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: FD Signing time: Wed 03 Sep 2025 21:52:13 +0000 Manifest this update: Wed 03 Sep 2025 21:47:13 +0000 Manifest next update: Sun 07 Sep 2025 01:50:13 +0000 Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: TI3iOr5R8TP+RQOzVnPDpMKtx5QDlbYeDkijnYl9Wmg=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: bZtCXaxnCo0kXFhv+UgtkdHVo3axHOoHwsSEN85b1Nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 01:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:95:62:53:bf:bc:8e:9d:96:7d:42:11:8c:db:b7:50:2d:08:68:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: Sep 3 21:47:13 2025 GMT Not After : Sep 7 01:50:13 2025 GMT Subject: CN=AEEBAB15A7174CEE04D4FCE0D165CE672AFB7B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:f1:8e:cf:7d:3a:c0:1f:d3:b4:a4:ff:42: 52:ea:82:8e:af:7e:40:ed:ed:86:41:15:6e:4a:76: bc:4b:ef:1a:73:d8:dc:83:ff:68:18:4c:64:2e:f9: 14:f7:88:02:d8:a8:d6:2a:ba:9d:f5:80:1c:2a:d5: e6:4f:42:c3:55:ac:93:c2:e2:1d:05:0f:34:6e:44: a2:b5:4a:e0:03:98:88:0a:ae:eb:6d:08:aa:4d:10: c0:37:cf:ac:5b:8e:9f:2b:1e:54:45:ee:6a:6c:77: 16:16:ed:37:26:db:ef:c1:5c:1e:5a:5c:0e:c5:96: f4:c2:0c:65:3f:b8:5f:23:c6:74:2d:0f:75:ad:f6: 63:a8:8d:35:ba:87:68:1c:75:d5:a2:16:10:6c:51: 8c:d3:89:f6:d3:bc:2c:e7:4a:77:fd:4b:5d:3a:10: 47:3f:e3:ad:7a:09:f6:3c:2f:3d:55:fe:73:3f:27: a4:70:7a:e9:c1:26:03:1a:8e:c2:61:66:64:0a:fb: f0:d2:90:19:a1:f5:5c:5d:07:1b:f7:19:44:30:e8: 96:f7:d4:28:5c:25:0e:53:c3:4c:c4:9c:0a:2b:cd: 66:b4:85:32:b9:e6:2e:a5:8e:31:fe:4b:a7:f9:6c: 1a:d9:ac:c0:30:42:19:c3:cc:2a:15:94:f3:71:7b: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:AB:15:A7:17:4C:EE:04:D4:FC:E0:D1:65:CE:67:2A:FB:7B:4D X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d6:3a:af:cb:60:71:fd:df:8a:63:b5:6b:e5:84:0d:a1:2d: 98:a3:8f:ca:f1:91:0f:74:f7:e2:60:49:06:47:69:60:ac:d4: 2c:9d:ad:27:30:7e:05:1d:c6:b8:88:10:11:f3:b9:42:80:75: 8a:2b:5b:a7:e0:57:26:56:9e:19:c5:14:7a:6f:e2:79:8e:ba: c7:c3:3b:89:09:2a:45:27:9a:f1:7f:58:0e:ac:58:fe:55:82: 39:25:67:f5:de:3e:24:c9:8c:fa:ab:e3:78:8d:dc:c4:e2:2e: d6:59:e0:1b:d8:58:43:f9:6f:81:a8:7b:95:5c:ca:dd:58:ef: 63:03:21:28:a7:3c:e8:52:df:8c:f3:88:66:b5:70:7f:12:de: ef:af:c7:10:4a:ed:6c:93:2b:f7:44:a7:55:5b:cf:a1:51:04: f6:63:cc:a3:61:6a:35:44:f6:71:54:91:ba:62:22:30:76:2f: fa:70:8f:67:99:26:e2:07:18:a8:d1:b2:29:17:18:24:1f:91: e5:7b:d9:80:6f:dd:5f:53:d2:6f:71:96:5a:54:bd:cd:c7:8f: 3f:f9:77:83:b6:8d:2c:7f:cb:a8:4c:e7:d5:25:cc:ef:92:ef: 36:fe:4f:7a:a2:18:94:50:69:b4:42:e9:85:ae:12:78:46:99: c7:5e:b5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5ViU7+8jp2WfUIRjNu3UC0IaHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNTA5MDMyMTQ3MTNaFw0yNTA5MDcwMTUwMTNaMDMxMTAvBgNV BAMTKEFFRUJBQjE1QTcxNzRDRUUwNEQ0RkNFMEQxNjVDRTY3MkFGQjdCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8/GOz306wB/TtKT/QlLqgo6v fkDt7YZBFW5KdrxL7xpz2NyD/2gYTGQu+RT3iALYqNYqup31gBwq1eZPQsNVrJPC 4h0FDzRuRKK1SuADmIgKruttCKpNEMA3z6xbjp8rHlRF7mpsdxYW7Tcm2+/BXB5a XA7FlvTCDGU/uF8jxnQtD3Wt9mOojTW6h2gcddWiFhBsUYzTifbTvCznSnf9S106 EEc/4616CfY8Lz1V/nM/J6RweunBJgMajsJhZmQK+/DSkBmh9VxdBxv3GUQw6Jb3 1ChcJQ5Tw0zEnAorzWa0hTK55i6ljjH+S6f5bBrZrMAwQhnDzCoVlPNxew4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUruurFacXTO4E1Pzg0WXOZyr7e00wHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPWOq/LYHH934pjtWvlhA2hLZijj8rxkQ90 9+JgSQZHaWCs1CydrScwfgUdxriIEBHzuUKAdYorW6fgVyZWnhnFFHpv4nmOusfD O4kJKkUnmvF/WA6sWP5VgjklZ/XePiTJjPqr43iN3MTiLtZZ4BvYWEP5b4Goe5Vc yt1Y72MDISinPOhS34zziGa1cH8S3u+vxxBK7WyTK/dEp1Vbz6FRBPZjzKNhajVE 9nFUkbpiIjB2L/pwj2eZJuIHGKjRsikXGCQfkeV72YBv3V9T0m9xllpUvc3Hjz/5 d4O2jSx/y6hM59UlzO+S7zb+T3qiGJRQabRC6YWuEnhGmcdetSE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:56 2025 by rpki-client