$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: Sl1l1XCahPpWuYju/cKO7SkdTD7dYtN47xcF7xGSQDo= Subject key identifier: E8:26:74:CD:88:1E:7B:E4:74:14:05:AF:66:E5:65:28:91:8D:0A:DF Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 4AC39F84FED08E1FFA57264E23F764B63D572D7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 0451 Signing time: Fri 05 Sep 2025 22:50:01 +0000 Manifest this update: Fri 05 Sep 2025 22:45:01 +0000 Manifest next update: Tue 09 Sep 2025 01:03:01 +0000 Files and hashes: 1: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: Kzvv6EeCly1h4OzhzIy/9Y7pVEZaB7NB7zC8qYAAYoI=) 2: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) 3: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c3:9f:84:fe:d0:8e:1f:fa:57:26:4e:23:f7:64:b6:3d:57:2d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Sep 5 22:45:01 2025 GMT Not After : Sep 9 01:03:01 2025 GMT Subject: CN=E82674CD881E7BE4741405AF66E56528918D0ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:b3:e6:6e:a1:c1:fe:f0:a4:81:d1:30:47: c5:f4:b4:16:d4:27:a3:f1:22:dd:d9:4d:99:fc:ae: 0a:9e:f1:13:bb:3e:13:61:49:32:3e:d1:6d:d1:03: 51:f4:7c:7d:6e:95:43:6b:bb:0e:f9:46:35:a3:d3: 89:96:34:e1:61:f3:03:7d:1e:71:d6:65:78:28:92: 7c:9f:a3:c9:46:13:5a:1e:66:09:f6:85:6a:51:a1: 3a:0b:86:52:df:e3:63:7e:48:04:23:ee:2c:f0:1f: dd:7d:6d:ee:7d:f7:b9:60:fe:9e:96:98:ee:b8:e0: d0:ff:0f:0b:a5:48:e4:8b:0b:4e:d7:f6:17:68:4d: db:06:b2:85:cb:c2:e8:37:3a:fd:73:27:01:6c:0f: 05:e5:f8:6e:f6:61:f4:38:a6:1c:ce:f3:fa:c1:1a: 44:10:fe:3b:f8:bb:88:06:79:99:9e:17:6f:d8:d2: aa:43:6c:31:55:d8:af:50:a5:00:db:d5:38:74:29: d2:bf:2b:8e:e9:5f:53:d7:66:f3:e9:d7:96:92:69: 94:cc:89:97:c6:f1:f7:9d:9f:23:9e:67:da:ac:b5: af:6c:21:57:52:57:69:15:c8:d2:4c:00:73:4e:ed: 7e:a8:7e:04:75:8e:34:a9:61:61:78:94:e6:6a:a4: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:26:74:CD:88:1E:7B:E4:74:14:05:AF:66:E5:65:28:91:8D:0A:DF X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8e:77:2f:0e:ad:1d:a3:e0:9e:3c:8d:a9:6a:f7:5e:09:1c: 24:62:c4:3a:f4:b4:99:27:7f:f4:6e:0b:8c:e2:fd:bb:a0:a3: 94:89:78:a1:bd:41:d0:c7:2a:12:9f:3a:e7:41:de:c4:92:ff: 3a:66:b8:87:92:67:8f:a3:cd:98:f5:89:b0:b7:8d:7b:e4:bb: 96:5b:93:24:57:51:fc:58:b9:1d:66:35:c0:46:1b:61:41:32: 69:93:f7:ac:d2:19:2a:e9:d5:62:cd:5a:c7:b4:a9:9b:d3:93: 63:0d:37:d0:b3:cd:4d:10:88:34:75:8c:03:9f:8f:e0:9b:d4: da:55:11:1c:01:46:a3:c9:4c:76:df:2f:a6:dc:77:b7:8c:a8: c4:70:12:51:f4:9c:33:ed:03:a4:99:32:2e:6c:d9:ce:0f:09: 5e:dd:78:59:7e:40:f1:1d:ea:c1:21:2c:d9:56:0d:80:1c:64: 0e:4e:ce:ac:a7:d4:46:13:dd:68:15:2c:1e:a3:2c:b9:a2:30: 86:25:a4:37:aa:6a:e0:db:9d:61:58:8f:45:13:21:da:71:67: 18:dd:2d:90:56:98:d7:4a:7f:9d:27:8a:9c:58:3d:45:9a:e8: 66:40:d3:cf:3c:5e:37:3c:be:7f:02:0a:27:46:12:35:98:d0: 86:4c:1f:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsOfhP7Qjh/6VyZOI/dktj1XLXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTA5MDUyMjQ1MDFaFw0yNTA5MDkwMTAzMDFaMDMxMTAvBgNV BAMTKEU4MjY3NENEODgxRTdCRTQ3NDE0MDVBRjY2RTU2NTI4OTE4RDBBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1A7PmbqHB/vCkgdEwR8X0tBbU J6PxIt3ZTZn8rgqe8RO7PhNhSTI+0W3RA1H0fH1ulUNruw75RjWj04mWNOFh8wN9 HnHWZXgoknyfo8lGE1oeZgn2hWpRoToLhlLf42N+SAQj7izwH919be5997lg/p6W mO644ND/DwulSOSLC07X9hdoTdsGsoXLwug3Ov1zJwFsDwXl+G72YfQ4phzO8/rB GkQQ/jv4u4gGeZmeF2/Y0qpDbDFV2K9QpQDb1Th0KdK/K47pX1PXZvPp15aSaZTM iZfG8fednyOeZ9qsta9sIVdSV2kVyNJMAHNO7X6ofgR1jjSpYWF4lOZqpPffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6CZ0zYgee+R0FAWvZuVlKJGNCt8wHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2Ody8OrR2j4J48jalq914JHCRixDr0tJkn f/RuC4zi/bugo5SJeKG9QdDHKhKfOudB3sSS/zpmuIeSZ4+jzZj1ibC3jXvku5Zb kyRXUfxYuR1mNcBGG2FBMmmT96zSGSrp1WLNWse0qZvTk2MNN9CzzU0QiDR1jAOf j+Cb1NpVERwBRqPJTHbfL6bcd7eMqMRwElH0nDPtA6SZMi5s2c4PCV7deFl+QPEd 6sEhLNlWDYAcZA5Ozqyn1EYT3WgVLB6jLLmiMIYlpDeqauDbnWFYj0UTIdpxZxjd LZBWmNdKf50nipxYPUWa6GZA0888Xjc8vn8CCidGEjWY0IZMH6I= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:41 2025 by rpki-client