$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: n0/WxkCwmAzul//RK08XpotM6xY1f5DPKY2Qirrmxrk= Subject key identifier: 04:8C:E9:0A:DC:5F:BC:A8:F6:44:AA:D9:AB:3C:2C:F1:52:9A:91:9C Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 6122B4319C2315E1924F40E9171DC2F8DAE761A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: F7 Signing time: Wed 03 Sep 2025 15:22:17 +0000 Manifest this update: Wed 03 Sep 2025 15:17:17 +0000 Manifest next update: Sat 06 Sep 2025 19:43:17 +0000 Files and hashes: 1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: nlTDLXM70btvs+dBBE/vSWnONS+Nl7WYrvIM3b+PEo0=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:22:b4:31:9c:23:15:e1:92:4f:40:e9:17:1d:c2:f8:da:e7:61:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Sep 3 15:17:17 2025 GMT Not After : Sep 6 19:43:17 2025 GMT Subject: CN=048CE90ADC5FBCA8F644AAD9AB3C2CF1529A919C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:bf:9a:20:c7:99:f7:cc:8d:f5:8c:a7:cf: 68:1b:ef:11:12:aa:4f:e0:4f:36:45:82:9f:ec:9e: e8:ad:50:8c:11:b4:9e:53:ac:01:5c:38:da:a7:00: 97:78:f2:cc:8f:54:37:de:48:72:b6:c8:c7:ff:d2: 31:ca:84:1c:73:b2:bc:5b:77:30:42:a4:16:b1:e7: 27:91:43:9f:aa:4c:fb:51:12:c3:d7:fa:68:69:e0: ee:b9:9f:56:d2:85:53:a6:30:55:33:a0:bf:08:d8: a1:4b:25:b7:cf:c1:7e:90:42:a8:3c:cd:36:aa:be: b0:4a:60:13:9f:8b:3f:86:1e:6a:49:fd:07:c5:bb: a7:8d:6b:ad:ff:40:de:98:c3:0f:51:3a:15:a3:24: 6b:dc:9d:f5:c2:23:6b:30:dc:f8:74:92:e9:32:20: 0b:74:00:08:c0:c1:46:c6:44:5a:f4:54:65:0c:92: aa:c2:da:9d:4b:58:fb:e9:5e:c0:22:c3:58:3d:d2: 86:b7:79:e5:aa:57:bb:dc:21:07:17:23:31:e8:a9: c6:ff:ab:34:2e:84:df:07:45:4e:66:7b:32:40:1c: 74:43:9c:a0:6a:68:7a:23:88:e9:0b:66:1b:67:14: 62:89:58:81:df:36:de:d3:72:88:a1:72:42:9f:e3: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8C:E9:0A:DC:5F:BC:A8:F6:44:AA:D9:AB:3C:2C:F1:52:9A:91:9C X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f9:fc:79:7c:2a:0c:bc:78:05:3a:bf:df:69:13:98:2d:a7: df:51:7a:cd:01:e8:db:2a:88:bf:94:78:fb:79:e9:58:c9:40: 10:b1:c5:26:6a:6c:59:58:70:15:e9:23:f7:6f:73:9d:c5:8b: 2e:fa:32:bd:e1:99:16:ed:df:58:ea:8b:64:0b:5e:54:7b:e0: c6:ab:7f:f3:3e:8f:c0:8c:f3:63:3e:10:30:8a:62:0f:9e:ea: 96:c3:6c:63:d2:d5:7b:07:73:99:37:46:5e:88:ba:3e:6b:9f: a1:95:09:3b:03:84:9d:42:22:13:57:7d:45:ca:c5:69:ae:95: eb:a6:33:a2:ba:2e:21:cd:5d:70:3e:af:2d:2d:28:4c:f5:1d: d3:f3:f9:8e:a1:8f:1d:6f:7e:77:e7:ee:65:61:a3:04:06:08: 01:c5:d0:5a:b0:04:01:3a:cd:f4:fc:3d:41:03:61:11:6b:b1: 38:9d:9c:2f:5b:c2:3d:44:a1:a6:98:d7:3a:96:f5:de:2e:98: 5d:af:82:2e:3c:70:ee:d2:96:4e:cd:68:f1:a5:c3:2f:d4:0f: f6:21:08:39:bf:cb:4e:cf:8b:ad:35:36:0a:2e:e5:c4:90:79: f9:24:f5:83:ca:3e:56:3c:2e:a5:46:8b:c9:86:bb:f5:68:49: cb:75:2a:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSK0MZwjFeGST0DpFx3C+NrnYacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTA5MDMxNTE3MTdaFw0yNTA5MDYxOTQzMTdaMDMxMTAvBgNV BAMTKDA0OENFOTBBREM1RkJDQThGNjQ0QUFEOUFCM0MyQ0YxNTI5QTkxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUL+aIMeZ98yN9Yynz2gb7xES qk/gTzZFgp/snuitUIwRtJ5TrAFcONqnAJd48syPVDfeSHK2yMf/0jHKhBxzsrxb dzBCpBax5yeRQ5+qTPtREsPX+mhp4O65n1bShVOmMFUzoL8I2KFLJbfPwX6QQqg8 zTaqvrBKYBOfiz+GHmpJ/QfFu6eNa63/QN6Yww9ROhWjJGvcnfXCI2sw3Ph0kuky IAt0AAjAwUbGRFr0VGUMkqrC2p1LWPvpXsAiw1g90oa3eeWqV7vcIQcXIzHoqcb/ qzQuhN8HRU5mezJAHHRDnKBqaHojiOkLZhtnFGKJWIHfNt7TcoihckKf4/7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBIzpCtxfvKj2RKrZqzws8VKakZwwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL5/Hl8Kgy8eAU6v99pE5gtp99Res0B6Nsq iL+UePt56VjJQBCxxSZqbFlYcBXpI/dvc53Fiy76Mr3hmRbt31jqi2QLXlR74Mar f/M+j8CM82M+EDCKYg+e6pbDbGPS1XsHc5k3Rl6Iuj5rn6GVCTsDhJ1CIhNXfUXK xWmuleumM6K6LiHNXXA+ry0tKEz1HdPz+Y6hjx1vfnfn7mVhowQGCAHF0FqwBAE6 zfT8PUEDYRFrsTidnC9bwj1EoaaY1zqW9d4umF2vgi48cO7Slk7NaPGlwy/UD/Yh CDm/y07Pi601Ngou5cSQefkk9YPKPlY8LqVGi8mGu/VoSct1Kgs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:20 2025 by rpki-client