$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft File: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json) Hash identifier: 7ZGITg+1R/OdxICNAfoZ61yDOTDE67sSf6PT0WRL3ns= Subject key identifier: DC:5E:1C:E5:74:70:A5:70:D0:FD:72:F7:82:19:EB:CF:09:07:FF:82 Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C Certificate issuer: /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Certificate serial: 35149AAE42BCD211DEE9D9BCF9E82E983283D86F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft Manifest number: 0100 Signing time: Sat 06 Sep 2025 06:40:40 +0000 Manifest this update: Sat 06 Sep 2025 06:35:40 +0000 Manifest next update: Tue 09 Sep 2025 15:50:40 +0000 Files and hashes: 1: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: U4ylIPcIlHW/938m9zNvEjzzTDkOSntmh8WGM08X7Ws=) 2: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (hash: IgVoycKP5/mx7bgYUiplGIVv/fIKosSF5j4o1IpUqEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:14:9a:ae:42:bc:d2:11:de:e9:d9:bc:f9:e8:2e:98:32:83:d8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Validity Not Before: Sep 6 06:35:40 2025 GMT Not After : Sep 9 15:50:40 2025 GMT Subject: CN=DC5E1CE57470A570D0FD72F78219EBCF0907FF82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:1d:43:ee:13:af:d3:9c:a8:71:10:dc:09: 8a:54:8b:32:3f:b5:4c:73:41:92:ca:ae:24:42:b5: d0:e9:92:d0:06:6c:4e:cb:e7:8b:76:e7:fa:f2:ef: c7:06:0c:31:d9:db:48:dd:44:01:09:2c:03:23:74: 78:f0:86:53:f6:0b:a4:87:86:34:28:37:c3:d3:a4: bd:ee:ac:ca:6a:e0:47:64:cf:46:89:58:24:a7:c0: 6a:90:c9:c6:a3:2d:e0:84:7b:3c:b7:ad:b2:1b:f7: d2:ff:5d:ca:4e:19:fd:68:c7:40:00:31:46:74:15: 86:8b:07:b1:e7:00:af:9f:ac:c1:58:99:a6:7b:a8: aa:f2:4b:3e:74:68:9d:1a:5b:56:cf:70:b1:90:09: fd:76:97:ee:16:5c:5e:ee:82:c5:79:4f:ae:a5:b4: cf:b8:cd:d6:4a:0b:49:9c:20:91:31:38:7a:ab:f1: b6:ab:47:a8:72:8a:e5:4b:c8:62:9b:dc:4c:fd:73: e7:e8:3b:97:73:ed:89:08:cb:2b:c5:2c:31:8e:79: 6d:06:54:c6:84:d0:b8:42:a8:69:a6:d8:19:e2:c4: 14:94:e8:98:22:54:6a:3c:55:9d:1c:17:a1:79:ad: 44:99:99:ad:48:1d:17:ad:1e:8a:4e:8d:e4:27:8c: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5E:1C:E5:74:70:A5:70:D0:FD:72:F7:82:19:EB:CF:09:07:FF:82 X509v3 Authority Key Identifier: keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:42:59:0e:30:61:7d:fd:60:7f:22:be:23:f2:cd:e3:c1:03: 73:79:85:44:47:8d:d3:43:e1:1d:47:0a:e2:cd:c4:ba:7a:3c: 44:15:cc:ee:63:44:f9:fb:29:d8:26:14:f7:61:89:f6:52:da: 25:af:30:b7:82:a0:13:54:1e:0e:3e:f1:7d:63:cd:b2:f8:77: 22:a8:cd:3a:9b:0d:a0:c0:7c:93:5e:c3:d2:e4:85:87:c9:22: 22:f4:2a:ce:eb:92:d5:54:77:08:2a:76:55:19:77:16:70:12: e3:f8:c2:e8:22:33:5f:f2:c4:b5:3a:49:75:68:4f:33:3f:9e: fe:b5:39:88:d4:96:67:22:e9:32:68:b1:6e:e2:a2:2a:83:b4: d1:50:a4:47:bd:1f:7a:65:7f:ba:1c:7b:33:7a:ed:9e:d0:0b: 0c:9a:8c:e7:45:e6:2b:78:5e:de:b2:d2:e1:ae:1b:8a:d5:84: f5:6c:e1:88:7d:07:7b:5a:ee:2b:0c:bb:52:4f:06:df:89:16: bb:0f:71:38:2d:9f:68:94:e8:75:e1:e9:40:3a:31:e0:d9:6d: 5e:26:91:22:01:7d:9e:67:42:88:ae:31:36:4e:fd:24:ca:f8: 9f:e2:c7:d3:c9:2b:80:59:5d:1d:f1:de:5c:78:14:17:4d:44: d1:9b:5e:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRSarkK80hHe6dm8+egumDKD2G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNG NTA5MkU0QzAeFw0yNTA5MDYwNjM1NDBaFw0yNTA5MDkxNTUwNDBaMDMxMTAvBgNV BAMTKERDNUUxQ0U1NzQ3MEE1NzBEMEZENzJGNzgyMTlFQkNGMDkwN0ZGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfx1D7hOv05yocRDcCYpUizI/ tUxzQZLKriRCtdDpktAGbE7L54t25/ry78cGDDHZ20jdRAEJLAMjdHjwhlP2C6SH hjQoN8PTpL3urMpq4Edkz0aJWCSnwGqQycajLeCEezy3rbIb99L/XcpOGf1ox0AA MUZ0FYaLB7HnAK+frMFYmaZ7qKrySz50aJ0aW1bPcLGQCf12l+4WXF7ugsV5T66l tM+4zdZKC0mcIJExOHqr8barR6hyiuVLyGKb3Ez9c+foO5dz7YkIyyvFLDGOeW0G VMaE0LhCqGmm2BnixBSU6JgiVGo8VZ0cF6F5rUSZma1IHRetHopOjeQnjOt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3F4c5XRwpXDQ/XL3ghnrzwkH/4IwHwYDVR0j BBgwFoAUlK6hGtwP53QJTKSmZoDD7PUJLkwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRmYzM0MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC85NEFFQTExQURD MEZFNzc0MDk0Q0E0QTY2NjgwQzNFQ0Y1MDkyRTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNGNTA5 MkU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0ZmMzNDAtYWY2OS00ZThlLWE3 NzctNzQ3ZGQ4MjlkYzNmLzAvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMz RUNGNTA5MkU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1CWQ4wYX39YH8iviPyzePBA3N5hURHjdND 4R1HCuLNxLp6PEQVzO5jRPn7KdgmFPdhifZS2iWvMLeCoBNUHg4+8X1jzbL4dyKo zTqbDaDAfJNew9LkhYfJIiL0Ks7rktVUdwgqdlUZdxZwEuP4wugiM1/yxLU6SXVo TzM/nv61OYjUlmci6TJosW7ioiqDtNFQpEe9H3plf7ocezN67Z7QCwyajOdF5it4 Xt6y0uGuG4rVhPVs4Yh9B3ta7isMu1JPBt+JFrsPcTgtn2iU6HXh6UA6MeDZbV4m kSIBfZ5nQoiuMTZO/STK+J/ix9PJK4BZXR3x3lx4FBdNRNGbXv8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:47 2025 by rpki-client