$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: Hs/Id4FbHyCUNH1DdYeZeTMW5DnMoWdhi17OIlb+yv0= Subject key identifier: 97:E1:9D:7F:AB:06:5B:39:73:C4:73:33:84:93:3E:3F:69:52:E0:09 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 0AD9E64109CDA9FA075C244AC56DD5521E6A29E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 01E9 Signing time: Wed 03 Sep 2025 18:50:43 +0000 Manifest this update: Wed 03 Sep 2025 18:45:43 +0000 Manifest next update: Sun 07 Sep 2025 00:07:43 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 2: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) 3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: NuQ6x1qY3e9GLFpSQh9X78J2XE/fH5DDwekUerjKXMI=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 00:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d9:e6:41:09:cd:a9:fa:07:5c:24:4a:c5:6d:d5:52:1e:6a:29:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Sep 3 18:45:43 2025 GMT Not After : Sep 7 00:07:43 2025 GMT Subject: CN=97E19D7FAB065B3973C4733384933E3F6952E009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:55:68:6b:f8:cb:ab:2b:52:c5:d2:02:ef: 40:e8:29:7d:db:fd:28:3e:51:88:aa:be:7c:fc:79: 3b:52:73:c4:45:c4:08:0f:5d:7a:80:50:75:83:5d: 8d:40:74:21:a9:aa:58:d1:09:3d:fa:99:97:f0:82: 2b:09:27:92:da:af:82:61:0c:8a:cd:1b:f6:3a:86: 41:05:46:f6:bb:bc:05:0e:e7:d6:53:de:8f:4a:a1: a9:5c:af:68:cf:bb:b2:9e:2d:07:6c:8b:c1:34:e3: 67:3c:a4:43:15:c8:a5:f7:3b:75:ab:0e:ae:b1:11: 4f:55:38:10:8c:75:d0:a0:0d:60:a2:4a:93:39:fe: 91:4d:ed:47:91:32:af:05:c9:13:e2:0e:2b:f0:50: 70:e1:17:2d:e3:07:cc:01:9b:ec:e7:1a:fd:20:42: 76:78:f6:3e:71:2f:1f:ab:32:c9:fa:9a:d4:b6:41: bd:f0:0c:6e:9d:24:18:df:15:fd:69:ad:e8:6b:f0: d8:8a:f6:2e:6e:c0:8c:58:67:a9:a2:ae:c6:72:bc: b1:49:b1:2a:9f:c0:21:a2:7b:1f:e4:fa:cb:1f:c2: 06:71:05:97:15:61:c7:47:90:8c:b7:e0:7a:8c:03: bd:0f:7e:4c:c5:34:3c:f2:3b:df:e8:37:ae:be:48: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E1:9D:7F:AB:06:5B:39:73:C4:73:33:84:93:3E:3F:69:52:E0:09 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:66:9d:b4:9f:ae:44:c6:7d:f3:54:f0:6b:06:39:ba:df:5e: 24:5b:df:55:83:2e:bf:b3:45:f8:01:b6:7d:0e:db:92:0a:d8: 4b:45:e6:94:96:77:cb:90:67:e9:ab:8c:cb:4d:55:48:d3:fa: 67:7d:de:55:b0:a4:ab:ed:9a:3d:33:c2:95:d0:2a:c5:5a:9f: 5f:4a:ce:56:f4:1a:be:f2:36:4d:b7:29:4f:0b:51:7d:54:f7: 72:28:ee:ea:cc:37:c9:0e:80:c8:59:dc:0b:75:5e:eb:f8:38: e7:5b:9d:10:43:b6:8b:a4:1f:fa:5b:f7:8c:d0:a8:03:c8:4b: 99:4d:7a:2d:5e:51:49:ca:07:3c:c8:ce:ba:ea:ed:d9:29:8d: a2:cb:4e:fd:a4:d0:f0:bc:b9:d1:68:ea:91:35:9f:8b:75:36: 6a:45:a4:0c:41:69:7b:31:c1:a1:ea:0b:b6:fe:b0:d0:5b:61: 8b:cf:9c:d6:3a:7f:f6:c0:c6:ce:e6:57:00:86:0c:3b:dd:a5: f4:a3:d5:d9:7b:24:77:42:28:a0:41:57:54:64:6d:15:71:f3: 70:4e:ad:98:af:f7:ff:53:49:5e:bd:51:b2:5d:52:a1:6e:e6: 8c:d5:c9:46:02:01:3c:09:fc:08:d0:87:0f:bf:64:14:60:9c: 61:a8:af:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtnmQQnNqfoHXCRKxW3VUh5qKekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTA5MDMxODQ1NDNaFw0yNTA5MDcwMDA3NDNaMDMxMTAvBgNV BAMTKDk3RTE5RDdGQUIwNjVCMzk3M0M0NzMzMzg0OTMzRTNGNjk1MkUwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QFVoa/jLqytSxdIC70DoKX3b /Sg+UYiqvnz8eTtSc8RFxAgPXXqAUHWDXY1AdCGpqljRCT36mZfwgisJJ5Lar4Jh DIrNG/Y6hkEFRva7vAUO59ZT3o9Koalcr2jPu7KeLQdsi8E042c8pEMVyKX3O3Wr Dq6xEU9VOBCMddCgDWCiSpM5/pFN7UeRMq8FyRPiDivwUHDhFy3jB8wBm+znGv0g QnZ49j5xLx+rMsn6mtS2Qb3wDG6dJBjfFf1prehr8NiK9i5uwIxYZ6mirsZyvLFJ sSqfwCGiex/k+ssfwgZxBZcVYcdHkIy34HqMA70PfkzFNDzyO9/oN66+SHl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+Gdf6sGWzlzxHMzhJM+P2lS4AkwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9mnbSfrkTGffNU8GsGObrfXiRb31WDLr+z RfgBtn0O25IK2EtF5pSWd8uQZ+mrjMtNVUjT+md93lWwpKvtmj0zwpXQKsVan19K zlb0Gr7yNk23KU8LUX1U93Io7urMN8kOgMhZ3At1Xuv4OOdbnRBDtoukH/pb94zQ qAPIS5lNei1eUUnKBzzIzrrq7dkpjaLLTv2k0PC8udFo6pE1n4t1NmpFpAxBaXsx waHqC7b+sNBbYYvPnNY6f/bAxs7mVwCGDDvdpfSj1dl7JHdCKKBBV1RkbRVx83BO rZiv9/9TSV69UbJdUqFu5ozVyUYCATwJ/AjQhw+/ZBRgnGGoryI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:31 2025 by rpki-client