$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: qgvso0VT4NRkOXYYMnJ5K2ieyChbVbGCmBcQQMDZ2zA= Subject key identifier: 4B:5B:9B:E2:45:68:B7:D9:DC:3B:86:EB:7A:51:91:3E:14:E8:97:0E Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 4F94A3279C5DA1FBB37DD81BCEB22C48D6DC7986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 017D Signing time: Fri 05 Sep 2025 21:20:02 +0000 Manifest this update: Fri 05 Sep 2025 21:15:02 +0000 Manifest next update: Tue 09 Sep 2025 03:09:02 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DCx7j/PqY/+rgrc9ArlbSADHe4Cwa01sUUvNHN3T5RM=) 2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: 0IAsxTEo0umrE7oAz0/9tf6aCgil6GBydvHAZt+DUy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:94:a3:27:9c:5d:a1:fb:b3:7d:d8:1b:ce:b2:2c:48:d6:dc:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Sep 5 21:15:02 2025 GMT Not After : Sep 9 03:09:02 2025 GMT Subject: CN=4B5B9BE24568B7D9DC3B86EB7A51913E14E8970E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:92:6c:8d:ce:98:b3:a0:eb:44:04:57:bd: b7:bf:ef:8c:88:78:9f:1e:c4:46:d6:b2:3e:e9:21: e9:92:bb:2f:ca:07:ec:c5:69:ba:dc:39:71:d3:2d: 41:4d:b8:6d:f5:09:cd:c7:ec:99:13:b1:dd:7c:fe: a1:76:e3:a2:32:38:d3:21:0a:3b:fc:0f:0b:89:de: a6:97:b5:e3:ca:19:17:77:65:ff:d9:3c:d1:07:d9: 94:14:28:a2:f5:97:b5:a5:f4:c8:12:3f:ca:59:c9: 7e:2c:f6:73:9d:7d:ec:e8:de:b1:0d:a4:ad:0a:52: 72:45:55:30:45:4b:68:17:aa:b8:c7:70:77:06:04: 99:67:09:9c:f5:06:be:6a:dd:4a:de:3b:28:52:b9: 48:e1:54:fe:a7:08:ce:1d:29:47:3e:dc:33:28:48: 71:20:36:86:31:57:c5:1e:7e:40:82:03:23:a2:d7: fd:6e:6b:cf:28:1e:7d:ce:17:99:6a:ae:b0:ae:2a: b0:95:0d:21:75:87:d2:77:17:a3:73:f7:c4:43:9e: 2b:3d:83:07:31:84:db:5f:0e:8e:15:f8:70:9b:d7: 24:51:63:b6:b5:e9:8c:fd:91:55:c4:3d:e0:d2:ee: 78:42:86:bc:b8:8b:1a:d6:63:1d:7d:76:68:1a:de: cb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:9B:E2:45:68:B7:D9:DC:3B:86:EB:7A:51:91:3E:14:E8:97:0E X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1e:27:d3:ff:1f:7c:ac:e8:ba:60:38:9d:2f:91:10:a5:56: 1e:99:d7:27:21:41:a6:c7:52:0f:6c:1d:1d:14:21:7a:7f:45: d3:f5:7e:cb:b8:94:d7:ec:65:60:23:d4:de:4e:83:c2:b3:45: e4:32:26:2d:8f:cf:53:47:f3:8f:2f:b2:5e:39:97:93:3b:d4: 48:a7:f9:e2:d7:c7:a7:fe:f3:5e:bd:2f:42:d3:40:1f:57:ed: e7:85:2b:47:b5:51:c6:91:0a:43:f5:d2:fe:a5:6e:22:34:00: 0a:ea:b5:4d:b0:f5:28:69:9b:9d:eb:8b:ad:b4:9b:8e:42:a2: c5:27:60:1c:b4:fa:b2:ab:27:7c:f6:01:8d:18:e4:93:1a:14: 26:3d:9e:67:e3:8b:03:c7:4c:37:a2:b6:9f:a0:b6:1e:3b:34: 43:fd:15:9d:8e:20:62:2d:58:ea:a7:d2:8e:e6:98:bb:da:e9: 42:c3:e5:4c:33:fb:3d:f5:55:3a:34:06:2d:7d:c0:84:68:db: 43:df:8e:45:de:af:9d:be:2c:28:bb:52:96:a3:f2:4f:c1:f4: 6b:4b:2b:41:c1:8a:58:98:ca:71:45:1b:d9:c1:df:80:78:ac: f1:93:53:f5:63:d8:6b:c8:71:8d:f8:97:11:4d:1a:7b:db:92: 63:9a:0d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5SjJ5xdofuzfdgbzrIsSNbceYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNTA5MDUyMTE1MDJaFw0yNTA5MDkwMzA5MDJaMDMxMTAvBgNV BAMTKDRCNUI5QkUyNDU2OEI3RDlEQzNCODZFQjdBNTE5MTNFMTRFODk3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqF5Jsjc6Ys6DrRARXvbe/74yI eJ8exEbWsj7pIemSuy/KB+zFabrcOXHTLUFNuG31Cc3H7JkTsd18/qF246IyONMh Cjv8DwuJ3qaXtePKGRd3Zf/ZPNEH2ZQUKKL1l7Wl9MgSP8pZyX4s9nOdfezo3rEN pK0KUnJFVTBFS2gXqrjHcHcGBJlnCZz1Br5q3UreOyhSuUjhVP6nCM4dKUc+3DMo SHEgNoYxV8UefkCCAyOi1/1ua88oHn3OF5lqrrCuKrCVDSF1h9J3F6Nz98RDnis9 gwcxhNtfDo4V+HCb1yRRY7a16Yz9kVXEPeDS7nhChry4ixrWYx19dmga3stLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1ub4kVot9ncO4brelGRPhTolw4wHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFceJ9P/H3ys6LpgOJ0vkRClVh6Z1ychQabH Ug9sHR0UIXp/RdP1fsu4lNfsZWAj1N5Og8KzReQyJi2Pz1NH848vsl45l5M71Ein +eLXx6f+8169L0LTQB9X7eeFK0e1UcaRCkP10v6lbiI0AArqtU2w9Shpm53ri620 m45CosUnYBy0+rKrJ3z2AY0Y5JMaFCY9nmfjiwPHTDeitp+gth47NEP9FZ2OIGIt WOqn0o7mmLva6ULD5Uwz+z31VTo0Bi19wIRo20PfjkXer52+LCi7Upaj8k/B9GtL K0HBiliYynFFG9nB34B4rPGTU/Vj2GvIcY34lxFNGnvbkmOaDSI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:47 2025 by rpki-client