$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: OeHlnmQgsbeLKiV9Jz2CUO1uUOaTBIAPux/zj2xOdnQ= Subject key identifier: D4:E6:B3:61:51:FC:83:36:8C:D9:C7:58:25:71:73:22:60:9F:93:B6 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 010F90BDC61E6DC854740A091D68F049C6EAC9C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 023D Signing time: Fri 05 Sep 2025 10:01:41 +0000 Manifest this update: Fri 05 Sep 2025 09:56:41 +0000 Manifest next update: Mon 08 Sep 2025 15:49:41 +0000 Files and hashes: 1: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 2: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: vOAoFrR6y99JpOBpj1PVcTU6VhXHaD1BsECDGNJFzsE=) 3: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) 4: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 5: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0f:90:bd:c6:1e:6d:c8:54:74:0a:09:1d:68:f0:49:c6:ea:c9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Sep 5 09:56:41 2025 GMT Not After : Sep 8 15:49:41 2025 GMT Subject: CN=D4E6B36151FC83368CD9C75825717322609F93B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:47:2c:69:ee:43:c4:0d:ea:5a:d4:80:52: 89:01:0d:13:2a:9d:ab:ec:08:ac:10:ad:fa:da:41: 58:e8:b0:18:85:f8:0e:32:8a:7b:db:ac:10:ef:07: 15:0a:1f:ea:8b:e9:a1:88:0d:2a:09:59:35:c9:0e: 12:be:b8:74:54:aa:ad:69:40:19:ad:67:c1:81:e9: a2:ca:2d:aa:9b:70:68:b9:fc:fc:49:24:57:22:c7: 50:a6:96:c4:22:a9:cd:87:2f:62:30:6e:21:9e:18: ce:49:9f:e6:14:7f:74:2a:f5:33:af:fa:16:91:ce: f9:cc:13:72:1f:58:3b:ea:99:ee:91:04:ac:4b:0c: 49:7d:08:4f:69:fc:9b:5d:4b:84:bd:6f:ec:86:5d: da:91:54:a2:bb:ae:e2:fe:5a:a7:29:da:5d:a2:d9: 6b:48:80:de:4d:c8:82:59:d5:53:0e:0e:dd:6a:45: 31:33:71:40:dd:1a:83:be:ae:8c:b2:9f:23:9f:0a: 68:1a:6b:ed:64:f1:8e:69:0f:87:dd:22:cb:f6:e8: 55:16:b1:b5:68:93:b4:04:ce:57:9f:e7:89:31:52: 04:40:9e:80:e4:5c:b2:02:17:78:2c:75:35:b4:de: b5:d9:b6:8a:d5:35:5c:b4:fa:c9:13:7c:92:b9:a5: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E6:B3:61:51:FC:83:36:8C:D9:C7:58:25:71:73:22:60:9F:93:B6 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6e:15:67:5d:c4:76:79:ce:5d:66:81:49:7e:de:5b:05:20: 21:f1:a1:df:fc:4f:ed:ed:cf:e2:ab:67:90:aa:35:79:e7:9c: 3f:a4:b7:88:48:94:fb:87:9b:71:d4:ce:b4:3c:05:87:82:61: ad:e5:d7:28:e1:1b:04:4d:77:b2:c1:26:0d:2a:82:8e:3f:b3: fe:6b:76:7c:17:75:42:e2:68:92:3c:a9:f0:b6:a7:34:53:a6: 7e:b5:30:44:6c:dd:12:d9:54:10:41:73:38:b8:00:2b:57:a4: a1:50:4c:6d:88:2d:94:4a:ca:4c:43:88:61:0e:8b:32:4f:fc: 06:ec:b0:77:88:1b:1e:4b:f2:49:b6:10:17:a9:fb:9e:39:0f: 73:b4:f9:7f:b3:66:f6:7a:c0:18:e6:ce:18:a3:63:1b:61:00: 16:d8:be:b1:e1:26:ab:58:41:27:a7:d3:87:e5:4b:b3:0e:9c: 6e:38:52:fe:f0:84:bc:38:3a:34:ab:da:c9:27:9b:71:10:8a: 79:a7:33:b3:01:c2:37:b6:24:db:92:ab:d7:72:17:81:86:ad: 61:cb:42:27:04:68:b5:8e:cb:e2:5c:f9:42:a4:21:dc:a1:2a: 51:9b:a9:36:18:53:95:f7:85:18:31:b4:ed:c4:37:fa:18:bf: b5:68:e2:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQ+QvcYebchUdAoJHWjwScbqycYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTA5MDUwOTU2NDFaFw0yNTA5MDgxNTQ5NDFaMDMxMTAvBgNV BAMTKEQ0RTZCMzYxNTFGQzgzMzY4Q0Q5Qzc1ODI1NzE3MzIyNjA5RjkzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bUcsae5DxA3qWtSAUokBDRMq navsCKwQrfraQVjosBiF+A4yinvbrBDvBxUKH+qL6aGIDSoJWTXJDhK+uHRUqq1p QBmtZ8GB6aLKLaqbcGi5/PxJJFcix1CmlsQiqc2HL2IwbiGeGM5Jn+YUf3Qq9TOv +haRzvnME3IfWDvqme6RBKxLDEl9CE9p/JtdS4S9b+yGXdqRVKK7ruL+Wqcp2l2i 2WtIgN5NyIJZ1VMODt1qRTEzcUDdGoO+royynyOfCmgaa+1k8Y5pD4fdIsv26FUW sbVok7QEzlef54kxUgRAnoDkXLICF3gsdTW03rXZtorVNVy0+skTfJK5pfZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OazYVH8gzaM2cdYJXFzImCfk7YwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBuFWddxHZ5zl1mgUl+3lsFICHxod/8T+3t z+KrZ5CqNXnnnD+kt4hIlPuHm3HUzrQ8BYeCYa3l1yjhGwRNd7LBJg0qgo4/s/5r dnwXdULiaJI8qfC2pzRTpn61MERs3RLZVBBBczi4ACtXpKFQTG2ILZRKykxDiGEO izJP/AbssHeIGx5L8km2EBep+545D3O0+X+zZvZ6wBjmzhijYxthABbYvrHhJqtY QSen04flS7MOnG44Uv7whLw4OjSr2sknm3EQinmnM7MBwje2JNuSq9dyF4GGrWHL QicEaLWOy+Jc+UKkIdyhKlGbqTYYU5X3hRgxtO3EN/oYv7Vo4uQ= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:18 2025 by rpki-client