$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: p7LgcBV8L0vCbgoCCS62zQpUtOzTjHt0B0pPS6mJpCw= Subject key identifier: 20:9B:B9:3B:3C:68:A2:0E:EC:75:7F:52:EA:2A:B9:93:0D:86:1A:22 Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 159FC5DA9333FDFC9CA0D8A7DF14AA856441FDAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 01A3 Signing time: Sun 07 Sep 2025 06:10:59 +0000 Manifest this update: Sun 07 Sep 2025 06:05:59 +0000 Manifest next update: Wed 10 Sep 2025 07:20:59 +0000 Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=) 2: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: jPAkvpGpV4O7mQLdTEfmxW8ErDSPpcxEvQuaCcjIu2A=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9f:c5:da:93:33:fd:fc:9c:a0:d8:a7:df:14:aa:85:64:41:fd:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Sep 7 06:05:59 2025 GMT Not After : Sep 10 07:20:59 2025 GMT Subject: CN=209BB93B3C68A20EEC757F52EA2AB9930D861A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:1e:ee:87:48:9b:4b:c8:18:df:3e:f7:79: 64:f5:b0:76:03:2d:c9:fa:7a:ec:c1:63:95:8e:da: cb:3a:5a:bb:46:0f:dd:61:ef:aa:f9:ee:8e:fb:c3: f9:25:50:5e:98:37:99:31:2b:9c:bb:d3:54:cc:55: 93:0e:4c:d5:e8:56:43:12:db:bd:32:5c:bf:f4:77: e5:0e:44:99:d3:06:20:59:47:45:f5:72:de:83:fb: 2e:5e:22:d0:3d:e7:0e:af:40:15:4f:d6:71:ad:87: d2:e0:e8:5d:1b:99:7b:4a:20:3a:77:74:a0:3f:70: ba:f1:1c:dc:a5:f6:f0:10:61:81:43:9d:55:ff:21: 53:68:9f:da:9f:26:b0:93:df:35:99:1e:b4:33:72: 5d:ef:82:53:ed:5b:67:19:b1:0d:65:f2:54:b6:cd: e0:3a:30:9c:c1:61:d5:1b:8a:8e:2c:72:9c:06:6d: 61:b0:05:60:8c:e6:bb:f4:9b:84:e1:ef:cd:36:d9: 17:09:48:4d:08:bf:1a:ce:32:10:16:f6:f4:bd:f5: 12:d3:bf:a9:2c:15:4b:cd:94:f8:6c:99:92:c2:9f: 7d:fb:20:6b:4d:16:d7:5f:f1:68:36:14:49:66:b4: 03:55:d5:c4:ed:bc:06:ca:cf:3d:92:05:f0:68:32: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:B9:3B:3C:68:A2:0E:EC:75:7F:52:EA:2A:B9:93:0D:86:1A:22 X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e5:9e:a8:06:33:ca:ae:c2:2a:a6:0f:75:25:e0:2e:5c:42: b7:9b:12:96:b4:97:99:c7:29:e9:23:67:13:69:0a:ec:8e:d9: 88:92:45:07:5b:64:f1:ba:80:91:ff:61:41:16:c0:12:64:94: c9:19:05:08:70:ea:5c:c5:fa:14:26:c2:b1:48:92:cc:c0:08: 80:29:74:d2:14:ab:25:d0:fb:7d:9d:b9:e5:11:27:b0:c7:18: c5:94:34:67:c2:bd:43:81:cb:ba:38:6d:af:96:7e:1f:ca:69: b8:1a:99:ad:db:58:4a:c5:f2:cf:d8:85:83:e2:ad:2b:b3:b9: 10:45:f0:18:ad:02:5a:7a:8f:f7:6b:0b:af:a2:d1:3f:96:ed: 2a:8a:d6:b1:03:7d:67:dd:ac:b5:21:a4:8a:e9:3c:b4:cd:b1: 28:15:9d:7d:ca:6f:fc:12:6d:54:9c:e8:00:90:02:04:a9:8a: 4d:68:7f:e1:d9:5b:03:c8:63:ec:8d:e8:0d:67:3f:6e:f2:1e: 66:89:e0:9e:a3:78:a2:1b:bf:1f:d5:df:7e:0d:25:c0:f1:f2: 03:6a:fe:a8:3c:cd:ea:26:36:b1:4e:a7:f5:fd:2d:00:69:59: 2e:e7:a0:7e:24:c0:c1:39:ab:8d:cb:03:31:56:cf:76:90:b4: c3:02:bd:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZ/F2pMz/fycoNin3xSqhWRB/aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTA5MDcwNjA1NTlaFw0yNTA5MTAwNzIwNTlaMDMxMTAvBgNV BAMTKDIwOUJCOTNCM0M2OEEyMEVFQzc1N0Y1MkVBMkFCOTkzMEQ4NjFBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjx7uh0ibS8gY3z73eWT1sHYD Lcn6euzBY5WO2ss6WrtGD91h76r57o77w/klUF6YN5kxK5y701TMVZMOTNXoVkMS 270yXL/0d+UORJnTBiBZR0X1ct6D+y5eItA95w6vQBVP1nGth9Lg6F0bmXtKIDp3 dKA/cLrxHNyl9vAQYYFDnVX/IVNon9qfJrCT3zWZHrQzcl3vglPtW2cZsQ1l8lS2 zeA6MJzBYdUbio4scpwGbWGwBWCM5rv0m4Th78022RcJSE0IvxrOMhAW9vS99RLT v6ksFUvNlPhsmZLCn337IGtNFtdf8Wg2FElmtANV1cTtvAbKzz2SBfBoMmQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJu5Ozxoog7sdX9S6iq5kw2GGiIwHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTlnqgGM8quwiqmD3Ul4C5cQrebEpa0l5nH KekjZxNpCuyO2YiSRQdbZPG6gJH/YUEWwBJklMkZBQhw6lzF+hQmwrFIkszACIAp dNIUqyXQ+32dueURJ7DHGMWUNGfCvUOBy7o4ba+Wfh/Kabgama3bWErF8s/YhYPi rSuzuRBF8BitAlp6j/drC6+i0T+W7SqK1rEDfWfdrLUhpIrpPLTNsSgVnX3Kb/wS bVSc6ACQAgSpik1of+HZWwPIY+yN6A1nP27yHmaJ4J6jeKIbvx/V334NJcDx8gNq /qg8zeomNrFOp/X9LQBpWS7noH4kwME5q43LAzFWz3aQtMMCvTM= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:00 2025 by rpki-client