$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: AERNV9gFackcEVsnkU5H6BNJEBo/S/6Nt0T7mNcsGW8= Subject key identifier: E3:21:B8:9C:CD:34:73:F6:19:03:F9:E0:BB:EC:80:08:D7:39:FD:65 Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 2D2CA6DC504E2C5F849C24D2505586C70B998034 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0128 Signing time: Sat 06 Sep 2025 09:40:44 +0000 Manifest this update: Sat 06 Sep 2025 09:35:44 +0000 Manifest next update: Tue 09 Sep 2025 12:30:44 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: 8rRzKbXxM7JbqlliFf/wDyC7Rc9CVk2AoWCVylO5lhs=) 2: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 0vbyY37xfecmYZZ06+vwEcy+Hnbk4rhg/muBGmLCtEA=) 3: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: M1hF6hzrTqBQlRZY5pyzjSb0ajulQLEkucXulY49Vs0=) 4: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: GdFQ16ys5THdsOt0JvI+f1x6ys8/DZCpLZHhWmZPVdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2c:a6:dc:50:4e:2c:5f:84:9c:24:d2:50:55:86:c7:0b:99:80:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Sep 6 09:35:44 2025 GMT Not After : Sep 9 12:30:44 2025 GMT Subject: CN=E321B89CCD3473F61903F9E0BBEC8008D739FD65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ef:02:b2:e4:9b:5b:eb:10:10:aa:dd:14:cc: da:d1:c1:cc:b3:bc:d7:68:ed:53:3c:92:87:1d:09: ee:94:f8:af:35:9e:8e:15:13:2e:3c:0b:f7:61:3e: c0:e9:a9:97:3b:eb:67:75:e4:4a:09:27:22:12:bf: d0:b9:a0:a6:f2:53:40:36:07:a5:33:80:bd:62:85: 10:92:b2:3c:79:22:d1:46:25:52:98:3f:29:db:82: 9f:7a:83:8d:7e:82:a3:ba:5a:e8:4b:b1:0e:d5:ce: 68:99:db:31:f2:d2:4f:ac:e5:0a:bf:2b:c1:2a:cf: 13:40:c4:01:b9:e9:b8:09:aa:8c:ec:04:b8:02:ef: 90:18:fd:c9:12:ad:3e:c6:77:de:ac:ec:8a:3b:29: 35:41:9b:d3:81:5e:d8:4b:f0:de:72:b3:e1:cb:f7: cd:69:39:a5:17:b3:21:0a:9d:38:36:02:7a:18:ee: 53:fa:27:4e:b2:5e:a2:50:e5:92:41:1e:f7:77:93: 13:39:0f:a4:8a:97:1d:be:05:2e:b0:88:37:4b:43: e7:42:9b:eb:d8:06:5f:c1:a1:ef:56:b3:d6:53:82: 84:23:35:67:99:6e:82:36:27:90:99:3b:a0:42:7a: 2b:74:d6:92:f1:38:e1:79:87:f7:16:52:ba:2d:c5: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:21:B8:9C:CD:34:73:F6:19:03:F9:E0:BB:EC:80:08:D7:39:FD:65 X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:39:5c:d8:dc:d4:f3:45:b4:2e:bd:87:02:c1:0a:27:0e:c4: 9e:5a:bd:bf:b3:3b:aa:86:6f:35:46:11:2a:9c:43:ab:6a:83: 37:d5:0d:a0:71:58:4d:69:f3:c4:62:f5:4d:eb:43:0e:d3:d4: fc:05:08:8c:69:14:7d:9d:87:c0:f4:8b:4f:2b:7b:16:d9:30: f0:48:0c:4f:19:b7:2d:59:3e:81:14:e9:cb:1e:76:5b:bb:01: 98:ea:07:a7:c2:d3:c7:52:2c:21:70:a8:1b:15:e1:2d:f9:49: e1:31:37:3f:59:8f:28:e2:3e:9c:66:72:21:9b:25:f7:85:df: 8f:b7:a9:ff:56:8a:32:6c:ce:9e:c2:69:ab:2a:f5:21:16:d1: 21:fa:71:b5:eb:c7:82:71:d1:2d:f8:fd:2e:3b:10:c2:63:63: 5f:16:5f:c6:14:4f:92:e7:cc:55:55:79:31:6a:f1:45:47:7a: 28:90:6c:e3:af:9b:65:5e:7f:04:97:96:d4:1e:0f:33:13:82: 5a:35:d2:d8:75:35:ab:7b:61:16:e7:51:d6:c3:c2:cf:4b:9f: 24:15:30:c2:2d:01:0d:34:ae:21:23:53:5a:ef:86:0b:19:4a: ac:af:d9:b8:b1:f1:66:b0:9f:14:2f:d9:be:a1:1d:a1:af:fb: ef:d4:a5:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSym3FBOLF+EnCTSUFWGxwuZgDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTA5MDYwOTM1NDRaFw0yNTA5MDkxMjMwNDRaMDMxMTAvBgNV BAMTKEUzMjFCODlDQ0QzNDczRjYxOTAzRjlFMEJCRUM4MDA4RDczOUZENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7wKy5Jtb6xAQqt0UzNrRwcyz vNdo7VM8kocdCe6U+K81no4VEy48C/dhPsDpqZc762d15EoJJyISv9C5oKbyU0A2 B6UzgL1ihRCSsjx5ItFGJVKYPynbgp96g41+gqO6WuhLsQ7VzmiZ2zHy0k+s5Qq/ K8EqzxNAxAG56bgJqozsBLgC75AY/ckSrT7Gd96s7Io7KTVBm9OBXthL8N5ys+HL 981pOaUXsyEKnTg2AnoY7lP6J06yXqJQ5ZJBHvd3kxM5D6SKlx2+BS6wiDdLQ+dC m+vYBl/Boe9Ws9ZTgoQjNWeZboI2J5CZO6BCeit01pLxOOF5h/cWUrotxYANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4yG4nM00c/YZA/ngu+yACNc5/WUwHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg5XNjc1PNFtC69hwLBCicOxJ5avb+zO6qG bzVGESqcQ6tqgzfVDaBxWE1p88Ri9U3rQw7T1PwFCIxpFH2dh8D0i08rexbZMPBI DE8Zty1ZPoEU6csedlu7AZjqB6fC08dSLCFwqBsV4S35SeExNz9ZjyjiPpxmciGb JfeF34+3qf9WijJszp7Caasq9SEW0SH6cbXrx4Jx0S34/S47EMJjY18WX8YUT5Ln zFVVeTFq8UVHeiiQbOOvm2VefwSXltQeDzMTglo10th1Nat7YRbnUdbDws9LnyQV MMItAQ00riEjU1rvhgsZSqyv2bix8WawnxQv2b6hHaGv++/UpZQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:33 2025 by rpki-client