$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: UuVmMiGmTAzs7Caz2h/kZzRvIKUZL9KzNg7CxHoXb70= Subject key identifier: 05:C3:F3:19:C0:2F:FF:A8:35:98:3A:CD:4E:C1:24:2B:F4:D4:3C:33 Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 76FCD1134DB5016CEB64FBCECBC6B09C3E1838A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01EB Signing time: Thu 04 Sep 2025 16:01:42 +0000 Manifest this update: Thu 04 Sep 2025 15:56:42 +0000 Manifest next update: Sun 07 Sep 2025 20:37:42 +0000 Files and hashes: 1: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: f23UlW2A1LAQg7sC/O3BUR3ejLZs27NGc0kRF9bc+K8=) 2: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fc:d1:13:4d:b5:01:6c:eb:64:fb:ce:cb:c6:b0:9c:3e:18:38:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Sep 4 15:56:42 2025 GMT Not After : Sep 7 20:37:42 2025 GMT Subject: CN=05C3F319C02FFFA835983ACD4EC1242BF4D43C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:96:55:ca:37:e6:5d:1e:ed:ec:1c:ed:db: f8:e4:1b:26:43:24:c3:40:05:bb:21:b1:48:37:3f: c7:44:1f:3f:db:b9:8b:d4:ec:e0:9b:3c:12:02:08: e5:46:47:b4:77:7e:7f:a2:61:6b:f0:a8:70:ff:2a: 66:59:03:54:3f:11:f1:dd:af:03:a2:28:a4:a6:b3: 0f:3d:a6:dc:32:39:f6:ff:2a:a3:67:16:45:a1:c9: 99:05:c2:28:1b:2d:81:d2:a9:0f:7f:25:2b:94:d4: b6:23:ef:57:4e:53:b2:6c:d6:07:c1:6d:7a:d5:8f: 9d:a1:87:f5:2c:2b:2a:d3:d4:b8:33:cd:58:b8:28: 5e:e6:eb:aa:cc:9f:4c:fb:33:23:2e:93:39:3f:16: c0:ae:74:90:26:1d:99:21:8e:aa:09:f9:eb:a3:cd: 5a:4b:53:f4:90:a2:e1:4e:9e:a4:5b:1a:7d:e2:72: f1:65:20:42:41:20:98:e4:1b:a8:b6:fe:3c:44:96: 7b:b3:3a:00:3f:8d:b1:e8:ef:ee:65:e3:e1:48:ba: 74:77:05:d0:52:1b:1b:b1:1e:1f:8b:8a:7f:a6:a9: 0c:c8:9b:ca:3b:ea:3f:ad:30:9b:19:21:b6:40:ec: 8d:ff:df:62:3c:1e:ba:03:48:74:9b:49:2f:f6:cc: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:F3:19:C0:2F:FF:A8:35:98:3A:CD:4E:C1:24:2B:F4:D4:3C:33 X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c2:96:42:31:5f:38:47:0f:a7:bc:42:b7:56:c6:9f:ad:41: a2:a8:b1:91:35:e3:48:87:cc:f4:1b:c0:52:e1:c0:29:78:4b: ab:f1:93:7f:13:6f:d1:2a:d9:0a:78:9b:ea:01:fc:22:72:a3: 1c:02:00:58:b8:83:e1:3c:88:e3:c8:ad:97:77:51:ce:9e:07: 47:bd:d5:3a:57:bb:b8:6f:04:55:ed:4e:27:11:28:4c:f3:37: 5e:73:fa:04:96:1f:27:55:62:dd:91:5f:8f:85:40:99:15:4b: 21:13:0e:73:25:ea:46:33:d5:46:7a:3d:6b:8f:15:32:42:ab: 63:3d:2d:2a:a6:d3:ad:7a:a0:c1:69:e6:3c:61:7d:59:36:a8: 7a:bc:b7:06:c0:1f:9c:50:94:40:b5:77:e2:b7:20:5b:9d:eb: f8:23:8b:0d:66:3c:4e:5f:4c:3e:41:a6:cf:a4:4b:52:8b:e5: 88:7c:d9:f5:d4:4c:8f:4a:f1:3a:d9:2b:eb:4d:3b:12:9f:db: 88:8d:b9:bd:e8:16:6a:54:c7:55:20:f6:ea:74:b6:1b:13:83: 9a:77:1c:7b:6c:21:45:47:14:91:c4:62:d8:58:65:48:d4:e5: fd:a6:d5:c5:58:d8:f9:39:1a:7b:7b:a3:77:b0:a4:89:98:98: 23:c5:ec:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvzRE021AWzrZPvOy8awnD4YOKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTA5MDQxNTU2NDJaFw0yNTA5MDcyMDM3NDJaMDMxMTAvBgNV BAMTKDA1QzNGMzE5QzAyRkZGQTgzNTk4M0FDRDRFQzEyNDJCRjRENDNDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0JZVyjfmXR7t7Bzt2/jkGyZD JMNABbshsUg3P8dEHz/buYvU7OCbPBICCOVGR7R3fn+iYWvwqHD/KmZZA1Q/EfHd rwOiKKSmsw89ptwyOfb/KqNnFkWhyZkFwigbLYHSqQ9/JSuU1LYj71dOU7Js1gfB bXrVj52hh/UsKyrT1LgzzVi4KF7m66rMn0z7MyMukzk/FsCudJAmHZkhjqoJ+euj zVpLU/SQouFOnqRbGn3icvFlIEJBIJjkG6i2/jxElnuzOgA/jbHo7+5l4+FIunR3 BdBSGxuxHh+Lin+mqQzIm8o76j+tMJsZIbZA7I3/32I8HroDSHSbSS/2zB5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcPzGcAv/6g1mDrNTsEkK/TUPDMwHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfClkIxXzhHD6e8QrdWxp+tQaKosZE140iH zPQbwFLhwCl4S6vxk38Tb9Eq2Qp4m+oB/CJyoxwCAFi4g+E8iOPIrZd3Uc6eB0e9 1TpXu7hvBFXtTicRKEzzN15z+gSWHydVYt2RX4+FQJkVSyETDnMl6kYz1UZ6PWuP FTJCq2M9LSqm0616oMFp5jxhfVk2qHq8twbAH5xQlEC1d+K3IFud6/gjiw1mPE5f TD5Bps+kS1KL5Yh82fXUTI9K8TrZK+tNOxKf24iNub3oFmpUx1Ug9up0thsTg5p3 HHtsIUVHFJHEYthYZUjU5f2m1cVY2Pk5Gnt7o3ewpImYmCPF7DE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:53 2025 by rpki-client