$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: 5wfCjxbiFa5SKV9ce6kaY2qxWNJARGLmXbYIcsljaEM= Subject key identifier: 27:8A:A2:82:2E:56:31:6F:B9:02:E5:ED:B8:30:21:6E:1D:62:D2:C5 Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 3058DD68B79C443299DB7ACCB5B77BF1CD266CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: 0118 Signing time: Sun 07 Sep 2025 13:41:45 +0000 Manifest this update: Sun 07 Sep 2025 13:36:45 +0000 Manifest next update: Thu 11 Sep 2025 00:19:45 +0000 Files and hashes: 1: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: R6UxpNA244tj5Winwkl8b1i78QxPhG6WheTgPg+OV4o=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: nlk9kDpk/BSuBGjIxDCCHEnpVQe5Pmyq5qHbN5r7XAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:58:dd:68:b7:9c:44:32:99:db:7a:cc:b5:b7:7b:f1:cd:26:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Sep 7 13:36:45 2025 GMT Not After : Sep 11 00:19:45 2025 GMT Subject: CN=278AA2822E56316FB902E5EDB830216E1D62D2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:38:dd:1f:c6:7e:24:5a:c4:89:cb:09:22: a4:21:3a:c7:32:1a:a5:02:3b:f2:1b:bc:dc:1b:d0: 22:a0:42:4d:ad:5f:6b:bd:b7:e6:57:de:fc:8c:f1: 11:98:c4:95:81:86:56:46:ed:86:60:b0:dd:3f:fd: 31:3b:4c:74:cf:15:3c:7b:6e:e3:95:7c:29:ce:83: ef:24:06:91:b4:e7:a1:36:c6:5b:a3:f4:b4:29:37: 1c:91:cd:54:33:73:61:d2:8f:ea:b4:e4:b8:1c:65: 1c:70:50:de:46:00:b8:ae:05:0e:d1:26:79:32:be: a3:58:e0:12:20:5b:51:af:b8:c1:c1:35:8d:94:d8: 82:3d:11:6c:c5:51:cb:44:bf:f4:2e:8c:a4:cc:b6: 95:37:e5:67:38:20:b7:e5:83:34:98:9c:35:9d:0d: e0:b3:e6:bf:a2:c1:3a:9f:8f:3e:c6:ac:77:eb:d9: bb:33:f2:fc:81:28:29:b8:6d:35:ec:c6:f1:1b:ab: 71:f3:64:a5:8e:84:96:13:40:a5:66:4d:d2:db:6d: 4a:2a:1f:e3:de:69:8b:e8:dd:90:c5:de:ac:c9:f6: f4:a5:a5:7b:01:ff:82:48:ed:e2:10:89:58:04:be: 11:18:b6:6c:4d:16:5f:bc:92:9f:eb:04:6b:fe:57: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:A2:82:2E:56:31:6F:B9:02:E5:ED:B8:30:21:6E:1D:62:D2:C5 X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0d:3c:8a:d5:f3:30:86:e5:47:9a:2f:19:a2:88:0c:3c:5a: 43:ee:db:d0:5d:71:91:20:71:b9:46:22:aa:9c:fc:0e:2a:1c: e4:ae:f6:ba:bd:48:18:b1:5f:51:f2:d8:0d:1e:ac:65:cd:c9: 87:d2:63:14:15:38:10:11:d2:98:05:f3:e8:f6:88:33:3b:8c: 5d:a1:46:89:ce:c6:34:df:a8:73:bc:bf:04:c6:4b:9c:9d:e4: 46:9d:11:a9:f7:9f:de:b8:6b:d6:da:f9:35:c7:8a:b6:bd:1e: 0c:f5:83:66:ab:c0:27:a4:fd:4d:cf:2b:34:1c:21:b6:00:b0: 0f:84:34:3c:c4:56:ef:e7:4c:fc:c9:a0:17:9b:9a:83:5c:4a: 60:d4:71:05:13:63:8f:af:1f:1e:12:f5:28:38:80:70:cf:78: 48:aa:b4:61:71:54:05:56:e1:27:50:78:27:a6:16:d5:59:bc: 5b:c2:85:40:57:0e:f7:dd:9a:7c:08:57:64:61:e7:b5:77:bb: b6:a0:aa:90:b9:05:60:57:42:e1:71:90:9d:f8:95:16:53:d1: dd:a1:a9:fa:73:d0:bc:41:b3:c4:f5:ea:f5:1c:c2:32:10:dd: 5f:dd:b0:64:01:48:4b:c7:41:6b:16:f6:d1:89:86:fa:21:04: 0d:05:03:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFjdaLecRDKZ23rMtbd78c0mbKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTA5MDcxMzM2NDVaFw0yNTA5MTEwMDE5NDVaMDMxMTAvBgNV BAMTKDI3OEFBMjgyMkU1NjMxNkZCOTAyRTVFREI4MzAyMTZFMUQ2MkQyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvsDjdH8Z+JFrEicsJIqQhOscy GqUCO/IbvNwb0CKgQk2tX2u9t+ZX3vyM8RGYxJWBhlZG7YZgsN0//TE7THTPFTx7 buOVfCnOg+8kBpG056E2xluj9LQpNxyRzVQzc2HSj+q05LgcZRxwUN5GALiuBQ7R JnkyvqNY4BIgW1GvuMHBNY2U2II9EWzFUctEv/QujKTMtpU35Wc4ILflgzSYnDWd DeCz5r+iwTqfjz7GrHfr2bsz8vyBKCm4bTXsxvEbq3HzZKWOhJYTQKVmTdLbbUoq H+PeaYvo3ZDF3qzJ9vSlpXsB/4JI7eIQiVgEvhEYtmxNFl+8kp/rBGv+V/OpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4qigi5WMW+5AuXtuDAhbh1i0sUwHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgNPIrV8zCG5UeaLxmiiAw8WkPu29BdcZEg cblGIqqc/A4qHOSu9rq9SBixX1Hy2A0erGXNyYfSYxQVOBAR0pgF8+j2iDM7jF2h RonOxjTfqHO8vwTGS5yd5EadEan3n964a9ba+TXHira9Hgz1g2arwCek/U3PKzQc IbYAsA+ENDzEVu/nTPzJoBebmoNcSmDUcQUTY4+vHx4S9Sg4gHDPeEiqtGFxVAVW 4SdQeCemFtVZvFvChUBXDvfdmnwIV2Rh57V3u7agqpC5BWBXQuFxkJ34lRZT0d2h qfpz0LxBs8T16vUcwjIQ3V/dsGQBSEvHQWsW9tGJhvohBA0FA9E= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:25 2025 by rpki-client