$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft File: 285A5330FE006D3660B306BEE40EC7FEABA96574.mft (raw, json) Hash identifier: mXw71LDiToIpIY6fMlMoayFrPBHl+R0iIp/mFqxfpWE= Subject key identifier: 1B:D9:69:D4:96:AA:91:1C:B0:12:94:79:97:7F:2A:ED:9E:7E:8B:55 Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 Certificate issuer: /CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Certificate serial: 4803AE1332B6ADE9B6DB26C4D5CBBE4E48C18E77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft Manifest number: 01FF Signing time: Sun 07 Sep 2025 04:20:52 +0000 Manifest this update: Sun 07 Sep 2025 04:15:52 +0000 Manifest next update: Wed 10 Sep 2025 08:27:52 +0000 Files and hashes: 1: 285A5330FE006D3660B306BEE40EC7FEABA96574.crl (hash: IXgV0GTpSn/D4xxFYyifNkw3/AQQPa8o9WieUf+WvLk=) 2: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: NcRBqt1Wn/tuGvM1xfS0JFewwd6sRo22gfKxjNahc88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:03:ae:13:32:b6:ad:e9:b6:db:26:c4:d5:cb:be:4e:48:c1:8e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Validity Not Before: Sep 7 04:15:52 2025 GMT Not After : Sep 10 08:27:52 2025 GMT Subject: CN=1BD969D496AA911CB0129479977F2AED9E7E8B55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0c:26:66:d0:ef:03:ec:98:3c:62:83:86:82: 3a:ef:78:ce:af:7c:c7:83:d2:97:9a:18:e1:bb:3e: 9b:c3:d4:d0:6c:ab:27:fc:dc:8c:01:97:25:5f:98: 8a:74:d8:1c:d7:ef:dc:1a:0d:ee:26:b8:53:0b:83: b1:fc:65:0f:94:0f:a9:d5:85:69:da:c3:5c:f1:e2: 68:96:0d:51:84:45:a8:f3:0d:2e:98:14:70:16:72: 93:66:44:17:60:a2:6a:8f:e2:07:63:0f:cc:8d:88: b0:8c:18:90:94:69:8d:96:f2:21:3b:3c:09:d9:10: 51:d5:d1:7a:57:76:b8:e0:3e:52:96:b1:a4:51:97: 4d:af:00:92:31:00:09:47:69:91:11:67:69:c5:c3: 3b:93:fd:bc:0d:4b:86:c2:ad:9c:2f:5f:34:4f:ff: fe:6d:60:8c:c3:a0:8c:d2:e4:0b:a8:af:0f:44:cf: de:6a:32:d7:83:0b:06:46:28:29:19:d8:be:66:ed: b4:56:44:67:ff:4c:67:a5:22:97:73:36:2e:d5:37: f8:73:04:07:99:38:68:a3:e1:64:c6:a5:2f:f7:a9: 11:1d:17:f7:e3:d8:07:c6:9e:00:bb:0c:98:cc:8f: f1:38:6f:79:d7:05:c9:d7:9e:e4:f0:36:93:ac:10: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:69:D4:96:AA:91:1C:B0:12:94:79:97:7F:2A:ED:9E:7E:8B:55 X509v3 Authority Key Identifier: keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:68:44:da:ca:40:a9:81:7e:4b:48:83:32:d3:6e:af:2c:da: 53:a1:86:92:7e:1a:c8:9c:c3:8e:ba:c6:e0:40:2e:f0:2b:b4: fc:23:af:32:ce:85:19:b4:4d:db:36:96:64:93:dc:9b:1c:ac: 53:28:0b:c3:09:7b:fc:5e:cf:ed:6c:2e:4a:3f:2c:fa:99:5f: e8:8b:60:6b:82:bf:a1:b4:a3:a6:ef:f6:ed:b5:6b:9a:e3:94: 03:bb:f9:6a:ae:c0:4c:42:30:1c:e3:86:c7:c3:2b:e2:1d:c8: a9:1b:10:50:7e:12:c9:03:96:64:79:a3:76:62:45:ed:17:dd: c4:17:fd:c0:cd:14:b4:d5:5e:64:02:aa:a6:37:1a:d5:09:c6: f6:97:88:bf:9c:82:22:77:98:b6:9d:8c:c5:1f:03:47:f9:87: cb:0f:b5:d6:7d:f3:a6:76:05:bb:4a:7e:e6:3e:78:ba:70:e1: 8f:c7:7b:fc:b9:d8:ef:17:de:1c:54:f4:fa:fc:ff:99:c7:7a: 1a:d3:8d:63:d8:ee:1f:82:32:8b:2f:88:96:de:0f:83:a4:f9: 2b:d0:c7:b0:78:03:94:15:2e:40:88:c5:ba:e4:3f:b2:73:28: 66:04:b4:2b:ff:17:ba:09:e8:c6:80:f2:8e:9f:18:77:8c:2e: 38:ef:32:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSAOuEzK2rem22ybE1cu+TkjBjncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVB QkE5NjU3NDAeFw0yNTA5MDcwNDE1NTJaFw0yNTA5MTAwODI3NTJaMDMxMTAvBgNV BAMTKDFCRDk2OUQ0OTZBQTkxMUNCMDEyOTQ3OTk3N0YyQUVEOUU3RThCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvDCZm0O8D7Jg8YoOGgjrveM6v fMeD0peaGOG7PpvD1NBsqyf83IwBlyVfmIp02BzX79waDe4muFMLg7H8ZQ+UD6nV hWnaw1zx4miWDVGERajzDS6YFHAWcpNmRBdgomqP4gdjD8yNiLCMGJCUaY2W8iE7 PAnZEFHV0XpXdrjgPlKWsaRRl02vAJIxAAlHaZERZ2nFwzuT/bwNS4bCrZwvXzRP //5tYIzDoIzS5Auorw9Ez95qMteDCwZGKCkZ2L5m7bRWRGf/TGelIpdzNi7VN/hz BAeZOGij4WTGpS/3qREdF/fj2AfGngC7DJjMj/E4b3nXBcnXnuTwNpOsEMn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9lp1JaqkRywEpR5l38q7Z5+i1UwHwYDVR0j BBgwFoAUKFpTMP4AbTZgswa+5A7H/qupZXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8yODVBNTMzMEZF MDA2RDM2NjBCMzA2QkVFNDBFQzdGRUFCQTk2NTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVBQkE5 NjU3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3 RkVBQkE5NjU3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9oRNrKQKmBfktIgzLTbq8s2lOhhpJ+Gsic w466xuBALvArtPwjrzLOhRm0Tds2lmST3JscrFMoC8MJe/xez+1sLko/LPqZX+iL YGuCv6G0o6bv9u21a5rjlAO7+WquwExCMBzjhsfDK+IdyKkbEFB+EskDlmR5o3Zi Re0X3cQX/cDNFLTVXmQCqqY3GtUJxvaXiL+cgiJ3mLadjMUfA0f5h8sPtdZ986Z2 BbtKfuY+eLpw4Y/He/y52O8X3hxU9Pr8/5nHehrTjWPY7h+CMosviJbeD4Ok+SvQ x7B4A5QVLkCIxbrkP7JzKGYEtCv/F7oJ6MaA8o6fGHeMLjjvMgk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:41 2025 by rpki-client