$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: mMXV+hIR3W2oCsKQP/PUx9K6EYTVE6T12KRks3y4v7M= Subject key identifier: 9B:76:62:88:D4:05:BA:D3:91:3B:E2:67:7C:84:34:FF:EB:78:CF:E2 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 71629A4E38A007AF86A28AA1147AF42B6F087D2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 0199 Signing time: Thu 04 Sep 2025 15:11:24 +0000 Manifest this update: Thu 04 Sep 2025 15:06:24 +0000 Manifest next update: Sun 07 Sep 2025 20:23:24 +0000 Files and hashes: 1: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: ZdMkDOnx4hNOB8b2y8v2461HT/U2gmm0V9h3DP50AsM=) 2: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: woqtXJ7tvZtaqT4bT+mvntSsCYpQhJCgghI0AwY59dM=) 3: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: oOXhCLiciSiF4LNGqrw2l02/AXr4qACVxr/e8EYBhtY=) 4: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: RbJkotiAtcGAz/X/4fMxCRReBEYK6ZI39CQ4Uu7mC8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:62:9a:4e:38:a0:07:af:86:a2:8a:a1:14:7a:f4:2b:6f:08:7d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Sep 4 15:06:24 2025 GMT Not After : Sep 7 20:23:24 2025 GMT Subject: CN=9B766288D405BAD3913BE2677C8434FFEB78CFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:9c:8d:3f:95:4f:31:aa:22:a0:78:b7:54: 99:2f:f2:74:6d:60:66:0c:4e:1a:4e:8e:74:da:28: 9a:42:15:d2:2e:9e:43:e6:9d:b6:fd:e7:93:49:fb: 75:18:ea:73:b4:5b:78:ef:ad:92:34:db:e0:3a:97: 98:d7:50:c3:be:70:df:58:0b:00:47:17:30:31:c1: 5a:a5:7f:2d:e7:b2:61:9a:98:ad:ca:c7:b6:40:6e: 58:47:e2:df:0c:6c:bf:f3:e0:c5:e6:08:e4:2a:b1: 90:84:cf:12:e4:f4:5d:6f:38:52:4c:97:21:fa:39: b6:b4:22:f0:df:ae:f4:fd:2c:14:79:ae:76:17:44: 64:71:b8:ae:25:32:5d:b2:6e:e0:99:37:48:2a:22: b8:4a:32:6d:e1:11:0e:4d:56:56:30:64:2a:c0:03: 45:00:c3:2a:b2:48:41:fc:09:ca:7e:5b:e8:cf:ec: 71:42:08:5c:8e:6d:6d:d2:06:ce:63:29:19:55:78: ad:1d:d9:c8:e7:4f:63:83:6d:e2:45:fe:7e:4c:81: 36:49:92:9e:e1:46:0e:42:cd:cb:f6:63:06:5f:48: 53:61:82:1c:30:5c:2f:d2:43:de:14:5a:f6:63:94: d1:e5:df:41:32:44:61:bc:96:00:69:79:f6:bd:a5: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:76:62:88:D4:05:BA:D3:91:3B:E2:67:7C:84:34:FF:EB:78:CF:E2 X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:96:89:14:66:66:9d:34:25:10:3b:fc:95:df:73:e3:b3:3d: cb:67:ca:b6:78:dc:64:2c:64:85:30:1d:7a:d5:29:1c:b0:3c: 07:04:52:9e:6d:eb:f7:95:90:7d:c3:db:9d:e9:69:66:f6:56: 2b:0a:55:72:1f:72:3e:6b:95:26:ba:f7:f6:8a:d6:2f:7b:e6: d1:c7:f2:e8:2e:ba:f5:76:df:10:13:32:55:f7:4e:7b:30:42: 11:9f:65:2c:3a:36:85:63:65:1f:31:f7:08:36:15:51:4e:03: f9:f5:61:e4:9b:6e:ed:ac:93:c3:a9:76:1e:2f:54:ba:9b:83: 02:51:56:c8:de:26:33:af:99:6c:8f:a0:fb:98:b2:d0:4e:df: 23:5b:4f:7b:bc:70:39:b1:73:9f:f4:cf:fe:b1:22:57:33:50: 9e:c6:64:44:1d:38:94:8c:2d:6d:8d:1a:0d:04:fb:07:d6:c6: ea:5c:75:62:32:57:5c:98:3d:d9:10:51:0e:0d:34:c1:2f:af: 05:6c:6b:40:1c:5e:33:2b:15:dc:63:e7:b4:df:f1:e9:be:55: 89:9b:2a:20:e1:56:2c:fb:50:f1:9b:ed:ae:bd:9c:29:e2:f5: 1f:01:c8:e0:c6:e6:ce:6e:f1:45:ac:44:73:c8:00:ef:4e:5e: 9e:1f:2d:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWKaTjigB6+GooqhFHr0K28IfSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNTA5MDQxNTA2MjRaFw0yNTA5MDcyMDIzMjRaMDMxMTAvBgNV BAMTKDlCNzY2Mjg4RDQwNUJBRDM5MTNCRTI2NzdDODQzNEZGRUI3OENGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00pyNP5VPMaoioHi3VJkv8nRt YGYMThpOjnTaKJpCFdIunkPmnbb955NJ+3UY6nO0W3jvrZI02+A6l5jXUMO+cN9Y CwBHFzAxwVqlfy3nsmGamK3Kx7ZAblhH4t8MbL/z4MXmCOQqsZCEzxLk9F1vOFJM lyH6Oba0IvDfrvT9LBR5rnYXRGRxuK4lMl2ybuCZN0gqIrhKMm3hEQ5NVlYwZCrA A0UAwyqySEH8Ccp+W+jP7HFCCFyObW3SBs5jKRlVeK0d2cjnT2ODbeJF/n5MgTZJ kp7hRg5Czcv2YwZfSFNhghwwXC/SQ94UWvZjlNHl30EyRGG8lgBpefa9pU6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3ZiiNQFutORO+JnfIQ0/+t4z+IwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyWiRRmZp00JRA7/JXfc+OzPctnyrZ43GQs ZIUwHXrVKRywPAcEUp5t6/eVkH3D253paWb2VisKVXIfcj5rlSa69/aK1i975tHH 8uguuvV23xATMlX3TnswQhGfZSw6NoVjZR8x9wg2FVFOA/n1YeSbbu2sk8Opdh4v VLqbgwJRVsjeJjOvmWyPoPuYstBO3yNbT3u8cDmxc5/0z/6xIlczUJ7GZEQdOJSM LW2NGg0E+wfWxupcdWIyV1yYPdkQUQ4NNMEvrwVsa0AcXjMrFdxj57Tf8em+VYmb KiDhViz7UPGb7a69nCni9R8ByODG5s5u8UWsRHPIAO9OXp4fLSQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:37 2025 by rpki-client