$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: 4tOgNGgzFfbH2700j945d3n2NOTQa+VDYzHCA5qKgIk= Subject key identifier: 4E:E8:3C:52:2E:A3:E1:79:4A:96:64:7F:9E:D3:83:7A:C6:64:A2:9F Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 4BD4638394B835CDCE81788B36DA9510E2A5C821 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: BE Signing time: Thu 04 Sep 2025 01:11:37 +0000 Manifest this update: Thu 04 Sep 2025 01:06:37 +0000 Manifest next update: Sun 07 Sep 2025 12:07:37 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: HUH9lfFfzJxS8B+XHxaRHW9ZMMfdMdusiBj1/T7/mls=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d4:63:83:94:b8:35:cd:ce:81:78:8b:36:da:95:10:e2:a5:c8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Sep 4 01:06:37 2025 GMT Not After : Sep 7 12:07:37 2025 GMT Subject: CN=4EE83C522EA3E1794A96647F9ED3837AC664A29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:83:c0:3d:33:10:0d:6b:a3:ce:f9:4e:fb: 12:99:e0:87:28:93:9e:68:c4:5e:c3:8c:eb:36:2b: 13:f8:93:aa:43:df:f0:8c:20:25:c7:cf:e8:3e:52: 18:af:df:69:4e:a9:96:1d:8a:7e:f1:b2:26:0b:da: 8e:1b:1b:d6:7f:bd:f0:a0:ed:ac:b2:94:bc:65:9f: 51:6e:27:07:32:32:dd:91:5a:8a:f0:10:d4:56:3f: 0a:30:04:a3:b0:7a:50:58:41:f6:b3:1a:2b:fa:95: 8b:7d:b3:27:07:9d:60:24:44:c2:ea:51:8d:f2:70: 9a:86:69:30:5d:fc:db:ad:27:43:fd:2c:bc:75:f6: 4b:0a:70:a9:0d:69:a5:06:ab:1c:4a:e4:2f:17:39: e0:16:99:f0:53:da:3b:33:08:a2:63:1d:51:93:78: 74:ac:b8:37:f3:8f:ef:d7:dd:77:d9:0b:49:03:c7: e7:0e:a9:79:7b:bb:91:05:4b:94:1b:05:5d:e0:72: bb:ef:a6:88:06:fd:06:71:de:72:83:ab:ed:e6:6d: 08:12:6b:75:2b:cd:8b:28:15:1a:4c:a6:f4:5a:ac: 14:c8:5f:d7:e3:62:6b:f6:af:5e:d0:46:19:dc:1d: e8:0f:12:a9:0a:2d:15:5c:9d:b2:d4:f1:63:13:6a: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:3C:52:2E:A3:E1:79:4A:96:64:7F:9E:D3:83:7A:C6:64:A2:9F X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ca:ea:06:ea:15:d8:d2:5a:4f:5c:4f:1e:6a:02:34:74:9b: 0a:63:65:10:18:de:a5:7a:36:f6:d6:36:97:55:c0:a7:db:13: 2c:14:9d:49:07:4f:31:cc:60:7a:56:d9:c6:71:fb:5f:28:7f: 4d:40:f6:6b:a6:6a:77:84:86:3a:67:97:62:be:2f:ec:e0:d2: e3:72:44:8d:78:1e:3a:da:40:4b:92:e4:a7:1f:12:6d:1d:68: d7:55:9e:75:08:14:cc:42:47:44:90:b5:bb:40:96:fa:78:e2: c5:36:ea:97:cf:41:34:d3:26:2f:28:1d:22:40:23:f8:d9:c7: f3:9c:37:13:f8:bb:a6:06:1e:69:f3:fb:88:94:de:c9:88:a9: 42:93:eb:12:dc:08:29:49:89:70:49:b9:80:ec:a5:ff:44:e1: 45:a7:f4:52:15:bb:d8:19:11:fe:cd:0f:07:db:a9:35:8a:ed: f0:c6:7b:40:5f:e8:c7:e2:ee:ff:b8:e0:47:78:ba:f7:3d:18: 51:eb:64:1d:7d:cd:39:bb:25:12:69:5a:83:85:c6:c0:f4:73: 2f:8b:c3:2b:e9:8f:fe:5e:d0:ba:96:db:0e:d1:5e:66:d9:de: fd:6c:96:96:75:89:b7:ab:1c:bc:8f:35:45:4e:03:de:a9:af: 8f:81:c7:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9Rjg5S4Nc3OgXiLNtqVEOKlyCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA5MDQwMTA2MzdaFw0yNTA5MDcxMjA3MzdaMDMxMTAvBgNV BAMTKDRFRTgzQzUyMkVBM0UxNzk0QTk2NjQ3RjlFRDM4MzdBQzY2NEEyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUv4PAPTMQDWujzvlO+xKZ4Ico k55oxF7DjOs2KxP4k6pD3/CMICXHz+g+Uhiv32lOqZYdin7xsiYL2o4bG9Z/vfCg 7ayylLxln1FuJwcyMt2RWorwENRWPwowBKOwelBYQfazGiv6lYt9sycHnWAkRMLq UY3ycJqGaTBd/NutJ0P9LLx19ksKcKkNaaUGqxxK5C8XOeAWmfBT2jszCKJjHVGT eHSsuDfzj+/X3XfZC0kDx+cOqXl7u5EFS5QbBV3gcrvvpogG/QZx3nKDq+3mbQgS a3UrzYsoFRpMpvRarBTIX9fjYmv2r17QRhncHegPEqkKLRVcnbLU8WMTagR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTug8Ui6j4XlKlmR/ntODesZkop8wHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjK6gbqFdjSWk9cTx5qAjR0mwpjZRAY3qV6 NvbWNpdVwKfbEywUnUkHTzHMYHpW2cZx+18of01A9mumaneEhjpnl2K+L+zg0uNy RI14HjraQEuS5KcfEm0daNdVnnUIFMxCR0SQtbtAlvp44sU26pfPQTTTJi8oHSJA I/jZx/OcNxP4u6YGHmnz+4iU3smIqUKT6xLcCClJiXBJuYDspf9E4UWn9FIVu9gZ Ef7NDwfbqTWK7fDGe0Bf6Mfi7v+44Ed4uvc9GFHrZB19zTm7JRJpWoOFxsD0cy+L wyvpj/5e0LqW2w7RXmbZ3v1slpZ1iberHLyPNUVOA96pr4+Bx9k= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:33 2025 by rpki-client