$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: MTVN5fWUCRjrHGDNjdeVfvX/7GzIgAzB4vVA14Bkvis= Subject key identifier: 3D:6D:31:9D:1E:1D:CB:BA:1C:A5:55:04:77:7A:31:0C:0B:5D:46:48 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 3FD84E48C207AC3696BD3A1BB3B3210DB00AA4BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 0195 Signing time: Sun 07 Sep 2025 11:00:43 +0000 Manifest this update: Sun 07 Sep 2025 10:55:43 +0000 Manifest next update: Wed 10 Sep 2025 12:40:43 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: BrmUEYBwKHMdk0Un3ZfCoKTCSDYO0rI7DXrFe5TIHVM=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:4e:48:c2:07:ac:36:96:bd:3a:1b:b3:b3:21:0d:b0:0a:a4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Sep 7 10:55:43 2025 GMT Not After : Sep 10 12:40:43 2025 GMT Subject: CN=3D6D319D1E1DCBBA1CA55504777A310C0B5D4648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:ff:6d:7b:d1:c3:a9:12:a0:66:8f:6c:7a: 60:c3:3f:ef:5e:01:51:23:62:b2:cb:96:a9:13:a4: 41:78:31:88:59:4e:d6:e3:10:87:79:7c:a7:19:10: ae:02:d8:a6:64:79:1c:79:33:ca:62:d3:ff:3c:20: 8f:34:46:63:70:fd:31:99:6c:4c:c3:a8:01:d6:1f: eb:a0:5b:5e:a8:ff:0a:a4:49:68:2e:ee:a9:8f:0d: d2:96:d7:19:da:2e:c9:ea:cc:77:4f:b8:39:f8:05: 04:f8:68:ed:7f:0f:ce:08:a3:cd:b2:d0:af:54:ec: fe:86:7b:2f:bc:28:ef:37:2e:41:16:a1:a4:55:48: a3:bd:27:89:fc:77:c1:fd:e1:eb:12:e0:b5:9e:6a: 9d:dc:c4:5c:fb:00:bc:bc:05:f1:bd:eb:2b:8b:02: 14:20:e9:75:10:2f:4d:0b:82:40:62:e7:7a:2f:38: 74:5e:db:f8:a7:1b:fa:90:62:bd:7d:95:3b:a5:16: 76:80:8e:51:3d:ac:d3:40:ea:24:07:71:90:da:0d: 6b:54:a8:c1:1a:d3:44:8c:7f:db:fc:7f:6f:5b:fc: 82:67:39:9b:56:9d:ca:e7:73:04:9b:15:2b:bc:9b: d7:7a:50:e3:a2:a5:0b:3f:74:df:24:07:f2:7c:01: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:31:9D:1E:1D:CB:BA:1C:A5:55:04:77:7A:31:0C:0B:5D:46:48 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:65:b9:14:33:3d:f6:ac:5a:9b:30:dd:a1:33:a5:cf:bc:c5: e2:de:34:03:f9:e8:d1:5f:0b:b8:83:b7:6d:80:13:4a:c1:e2: 4e:aa:4c:04:71:e6:15:a9:6e:f3:a2:ff:5c:42:6a:89:a6:6e: 91:18:1a:d7:4a:be:f9:f4:19:81:63:2c:14:16:3d:10:44:5f: 1c:87:0c:38:e7:ac:d9:52:6e:b0:c9:77:85:5d:6e:72:97:10: 25:4c:7a:bb:ad:b1:05:7a:1d:08:ec:2e:e7:45:21:8c:dc:51: eb:09:48:4d:40:13:05:61:96:cd:ee:4b:06:25:ac:33:1b:49: 52:a6:78:ea:f0:dc:b8:0b:26:3d:61:82:3e:7c:a0:bd:24:54: d7:f5:06:dd:f9:f4:02:ca:4c:32:c5:02:51:b5:d9:61:8c:0e: cb:b8:9a:5f:3f:44:71:c6:8d:82:94:38:df:49:eb:79:52:20: b4:9d:c6:c8:ce:5a:c8:65:86:44:68:9a:3b:17:18:60:75:6a: 3e:68:05:91:1d:fb:9e:84:31:cc:79:ee:78:32:75:47:65:8c: be:28:4c:73:c6:bc:2d:e5:96:c3:f5:ec:49:a7:55:f6:34:eb: 80:00:27:50:e9:00:ed:5c:6b:87:07:dc:84:07:5b:55:1c:d7: 43:0f:0c:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9hOSMIHrDaWvTobs7MhDbAKpL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTA5MDcxMDU1NDNaFw0yNTA5MTAxMjQwNDNaMDMxMTAvBgNV BAMTKDNENkQzMTlEMUUxRENCQkExQ0E1NTUwNDc3N0EzMTBDMEI1RDQ2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvof9te9HDqRKgZo9semDDP+9e AVEjYrLLlqkTpEF4MYhZTtbjEId5fKcZEK4C2KZkeRx5M8pi0/88II80RmNw/TGZ bEzDqAHWH+ugW16o/wqkSWgu7qmPDdKW1xnaLsnqzHdPuDn4BQT4aO1/D84Io82y 0K9U7P6Gey+8KO83LkEWoaRVSKO9J4n8d8H94esS4LWeap3cxFz7ALy8BfG96yuL AhQg6XUQL00LgkBi53ovOHRe2/inG/qQYr19lTulFnaAjlE9rNNA6iQHcZDaDWtU qMEa00SMf9v8f29b/IJnOZtWncrncwSbFSu8m9d6UOOipQs/dN8kB/J8AaHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPW0xnR4dy7ocpVUEd3oxDAtdRkgwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpluRQzPfasWpsw3aEzpc+8xeLeNAP56NFf C7iDt22AE0rB4k6qTARx5hWpbvOi/1xCaommbpEYGtdKvvn0GYFjLBQWPRBEXxyH DDjnrNlSbrDJd4VdbnKXECVMerutsQV6HQjsLudFIYzcUesJSE1AEwVhls3uSwYl rDMbSVKmeOrw3LgLJj1hgj58oL0kVNf1Bt359ALKTDLFAlG12WGMDsu4ml8/RHHG jYKUON9J63lSILSdxsjOWshlhkRomjsXGGB1aj5oBZEd+56EMcx57ngydUdljL4o THPGvC3llsP17EmnVfY064AAJ1DpAO1ca4cH3IQHW1Uc10MPDCg= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:48 2025 by rpki-client