$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: 1NEN586xRvf6Ia0YEmW/r8tFgH0t7L0pp5UKcbDtusE= Subject key identifier: 1A:85:E9:C0:CF:F1:34:DD:A6:05:3B:6C:6E:08:DB:D1:5A:E6:DF:43 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 7BB2D7871E8F5DD466570634438D17C541A09789 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: D1 Signing time: Fri 29 Aug 2025 14:01:13 +0000 Manifest this update: Fri 29 Aug 2025 13:56:13 +0000 Manifest next update: Mon 01 Sep 2025 16:56:13 +0000 Files and hashes: 1: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 3: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 4: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: FLb5ETFCZHRPjwBzFfzIhexmHSHYNbcuxxE8NIDDLPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 16:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b2:d7:87:1e:8f:5d:d4:66:57:06:34:43:8d:17:c5:41:a0:97:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Aug 29 13:56:13 2025 GMT Not After : Sep 1 16:56:13 2025 GMT Subject: CN=1A85E9C0CFF134DDA6053B6C6E08DBD15AE6DF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:83:59:ad:ae:8f:ea:79:e9:df:65:51:b3: d0:ab:d0:f9:79:dd:1c:60:db:f0:c4:e3:8a:c3:e5: 06:40:60:c6:e0:8c:8c:b8:e0:d7:c7:12:2b:09:a1: cc:3e:32:d8:14:a8:66:5f:6d:b6:8c:0d:f6:5f:e9: fb:e2:26:f3:2d:ae:19:db:e3:7f:a6:16:59:34:22: de:e9:f2:16:37:8b:1a:1f:12:9b:c5:e7:8c:51:3b: 29:33:05:63:34:d5:83:24:12:e3:40:25:64:06:62: 57:e2:64:5f:27:cc:0d:d7:db:07:be:7a:a7:55:22: 03:0a:a6:3b:21:c1:4a:cb:88:d8:f0:cd:ff:43:17: a6:fd:7c:83:a4:9b:48:5b:e4:52:13:e7:cc:d8:39: 13:ee:ec:fe:52:05:4b:a9:89:39:29:42:1e:3a:13: 14:f5:8d:de:f8:e9:17:6e:dc:6e:d2:3f:ba:32:cb: 05:26:0b:9d:ab:4f:8a:d7:67:85:40:84:8e:28:fc: b9:bd:c4:f3:fa:a2:3e:7f:2e:cc:18:c9:2b:a3:a5: 6e:89:2e:e6:54:82:90:cb:d3:35:26:86:75:c9:04: e6:1f:3f:10:e7:87:7e:6f:0b:97:a7:d8:d1:25:2e: 46:3b:29:0a:93:55:a6:76:10:e4:9d:c8:d4:f2:1f: 58:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:E9:C0:CF:F1:34:DD:A6:05:3B:6C:6E:08:DB:D1:5A:E6:DF:43 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:be:a5:aa:78:e4:ec:b3:e4:7b:da:17:4c:85:f7:20:82:1a: a1:63:b5:da:c7:ee:dc:1f:fe:2d:93:d9:59:80:db:34:2f:32: 58:14:98:5e:ed:7c:09:e2:1a:a9:7d:65:26:58:d3:91:44:3e: b6:21:17:b0:da:bd:a7:e8:4c:1d:28:16:78:7a:f8:ce:1c:ba: 34:44:76:c6:66:17:11:dd:c1:f7:80:14:15:8b:cd:c3:d2:aa: 5f:d7:a4:1a:a6:2a:58:96:67:43:78:ab:d1:8e:e2:57:2c:bd: 28:62:df:d3:9a:af:fc:88:a1:3d:05:d0:4a:94:b7:53:a3:09: 88:de:f4:40:e3:05:d4:e3:a5:09:7b:2b:43:de:a6:06:c5:52: ff:33:20:f5:4d:41:2b:89:39:36:85:95:36:b2:56:69:98:ef: 1d:d6:f1:36:0f:86:19:87:90:cd:56:f2:01:21:81:63:a2:9a: bf:1a:5d:71:1d:f8:85:97:56:84:d4:6a:c8:a4:2d:2c:6b:74: 59:4a:2e:d3:a9:13:c4:03:4c:12:70:bc:f0:a9:45:ae:bf:74: 45:f1:58:52:fa:e9:08:53:2e:10:b0:37:14:67:42:87:5c:bd: 4f:65:0b:cd:7c:4c:2d:f3:5f:27:ef:02:a7:14:2b:81:6a:b7: 66:14:7e:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7LXhx6PXdRmVwY0Q40XxUGgl4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTA4MjkxMzU2MTNaFw0yNTA5MDExNjU2MTNaMDMxMTAvBgNV BAMTKDFBODVFOUMwQ0ZGMTM0RERBNjA1M0I2QzZFMDhEQkQxNUFFNkRGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+INZra6P6nnp32VRs9Cr0Pl5 3Rxg2/DE44rD5QZAYMbgjIy44NfHEisJocw+MtgUqGZfbbaMDfZf6fviJvMtrhnb 43+mFlk0It7p8hY3ixofEpvF54xROykzBWM01YMkEuNAJWQGYlfiZF8nzA3X2we+ eqdVIgMKpjshwUrLiNjwzf9DF6b9fIOkm0hb5FIT58zYORPu7P5SBUupiTkpQh46 ExT1jd746Rdu3G7SP7oyywUmC52rT4rXZ4VAhI4o/Lm9xPP6oj5/LswYySujpW6J LuZUgpDL0zUmhnXJBOYfPxDnh35vC5en2NElLkY7KQqTVaZ2EOSdyNTyH1hHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoXpwM/xNN2mBTtsbgjb0Vrm30MwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFG+pap45Oyz5HvaF0yF9yCCGqFjtdrH7twf /i2T2VmA2zQvMlgUmF7tfAniGql9ZSZY05FEPrYhF7DavafoTB0oFnh6+M4cujRE dsZmFxHdwfeAFBWLzcPSql/XpBqmKliWZ0N4q9GO4lcsvShi39Oar/yIoT0F0EqU t1OjCYje9EDjBdTjpQl7K0PepgbFUv8zIPVNQSuJOTaFlTayVmmY7x3W8TYPhhmH kM1W8gEhgWOimr8aXXEd+IWXVoTUasikLSxrdFlKLtOpE8QDTBJwvPCpRa6/dEXx WFL66QhTLhCwNxRnQodcvU9lC818TC3zXyfvAqcUK4Fqt2YUfjA= -----END CERTIFICATE-----Generated at Sun Aug 31 13:57:26 2025 by rpki-client