$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: CFpOOJv1CRefo3MMdmG3FjhGO/YUtlSBtyQQzfI0D3E= Subject key identifier: 1C:CF:25:6D:A4:B9:B6:C9:3A:1A:32:36:21:93:E1:83:71:03:4A:1A Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 4AF5DBE28AF113102993982C34634DCE1DC49A7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 01DA Signing time: Fri 05 Sep 2025 06:01:21 +0000 Manifest this update: Fri 05 Sep 2025 05:56:21 +0000 Manifest next update: Mon 08 Sep 2025 15:13:21 +0000 Files and hashes: 1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) 2: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: kx0DWdr73vSjffC/ro8dpTBLOJFZwbc2A7SrS0e0tNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:db:e2:8a:f1:13:10:29:93:98:2c:34:63:4d:ce:1d:c4:9a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Sep 5 05:56:21 2025 GMT Not After : Sep 8 15:13:21 2025 GMT Subject: CN=1CCF256DA4B9B6C93A1A32362193E18371034A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:22:a2:d1:6e:0d:63:18:fd:4b:13:f4:b0: 58:da:cd:bd:71:9b:c8:a6:68:ef:8a:6b:96:7c:c6: 5e:f3:5f:88:39:a9:16:1b:e6:22:f4:21:11:f3:ab: bf:e5:97:a4:ad:33:0c:92:27:f9:a2:98:8d:de:d9: 65:ab:51:f1:21:cd:23:2b:4f:d1:25:b0:f2:4c:05: a2:45:44:ec:44:04:11:2f:34:f3:55:08:58:4f:62: d1:5b:e9:e4:02:66:0f:75:c8:93:78:21:ca:1b:88: b7:2e:78:45:15:be:0f:14:ae:05:a4:ec:cb:fd:74: 52:75:93:6a:0f:cc:a4:c2:83:32:dd:08:b5:08:91: cd:1d:12:e0:61:43:7b:c9:6e:9d:ca:5c:7c:43:d2: 0a:22:5b:d5:7c:3c:0f:92:55:41:12:19:f9:b1:78: 0c:37:a0:12:44:72:fb:8a:b5:b3:62:f1:18:b4:82: fa:c5:3d:d3:6e:a0:0c:87:60:c7:21:ec:86:cc:57: 4b:05:14:17:f5:b1:c5:90:e6:cf:5a:87:49:f2:f6: 71:8c:09:a5:69:54:67:4f:01:27:1d:a3:f1:3e:63: 70:09:36:84:0a:f7:d3:e4:c3:2a:e3:b4:74:21:2e: 92:3b:79:f3:01:2b:74:f1:7f:13:8c:a2:a0:d1:8b: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:25:6D:A4:B9:B6:C9:3A:1A:32:36:21:93:E1:83:71:03:4A:1A X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:76:1a:0d:b3:fc:88:94:2b:98:05:23:65:86:7c:7f:0b:16: 88:9d:ce:fa:79:94:cc:0e:e2:06:d8:f7:84:13:88:d1:c4:78: f7:0c:aa:0c:2a:a0:19:f6:15:9d:c0:d0:85:2c:17:9e:df:5c: 78:4b:2d:b3:c3:de:a7:ee:e2:f9:ee:d3:3c:d3:9c:18:38:ab: de:2b:8f:11:a3:a0:8c:62:ef:e5:31:7a:60:6d:12:61:40:fa: 68:a1:b1:bd:58:45:08:78:87:ed:c1:fb:4c:34:94:61:36:50: d9:3d:da:41:28:c8:5a:f3:6e:bd:b2:ff:da:3f:47:3f:9a:16: 6d:3f:88:51:d3:ad:3b:ac:cd:cb:18:c7:49:7e:cb:6f:8b:a1: aa:97:fe:3a:6f:65:6e:9f:e8:e4:d0:09:0b:a0:c4:94:59:11: b0:9a:20:ae:0d:35:80:a4:ac:1f:72:1a:59:05:ef:f7:e8:21: 3a:54:c4:3e:b6:0d:9e:4f:e4:69:58:3f:b9:e8:72:99:70:5a: ec:1d:67:65:bc:cd:37:72:c5:e4:05:89:fd:42:e7:0b:b4:1b: 22:0a:db:54:7d:62:a2:3c:f2:17:4f:11:c4:5e:97:12:67:fe: fe:19:86:6e:f7:4e:e9:06:a1:81:83:93:b4:01:73:0c:ee:eb: d8:49:39:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvXb4orxExApk5gsNGNNzh3EmnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTA5MDUwNTU2MjFaFw0yNTA5MDgxNTEzMjFaMDMxMTAvBgNV BAMTKDFDQ0YyNTZEQTRCOUI2QzkzQTFBMzIzNjIxOTNFMTgzNzEwMzRBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+CKi0W4NYxj9SxP0sFjazb1x m8imaO+Ka5Z8xl7zX4g5qRYb5iL0IRHzq7/ll6StMwySJ/mimI3e2WWrUfEhzSMr T9ElsPJMBaJFROxEBBEvNPNVCFhPYtFb6eQCZg91yJN4IcobiLcueEUVvg8UrgWk 7Mv9dFJ1k2oPzKTCgzLdCLUIkc0dEuBhQ3vJbp3KXHxD0goiW9V8PA+SVUESGfmx eAw3oBJEcvuKtbNi8Ri0gvrFPdNuoAyHYMch7IbMV0sFFBf1scWQ5s9ah0ny9nGM CaVpVGdPAScdo/E+Y3AJNoQK99PkwyrjtHQhLpI7efMBK3TxfxOMoqDRi/Q1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHM8lbaS5tsk6GjI2IZPhg3EDShowHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA52Gg2z/IiUK5gFI2WGfH8LFoidzvp5lMwO 4gbY94QTiNHEePcMqgwqoBn2FZ3A0IUsF57fXHhLLbPD3qfu4vnu0zzTnBg4q94r jxGjoIxi7+UxemBtEmFA+mihsb1YRQh4h+3B+0w0lGE2UNk92kEoyFrzbr2y/9o/ Rz+aFm0/iFHTrTuszcsYx0l+y2+LoaqX/jpvZW6f6OTQCQugxJRZEbCaIK4NNYCk rB9yGlkF7/foITpUxD62DZ5P5GlYP7nocplwWuwdZ2W8zTdyxeQFif1C5wu0GyIK 21R9YqI88hdPEcRelxJn/v4Zhm73TukGoYGDk7QBcwzu69hJObI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:54 2025 by rpki-client