$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: /gpsHAh17P07M8yLQKCPfeeYD/pyQPjen57ohcm+8b8= Subject key identifier: F8:83:41:CC:72:B3:AD:88:AB:62:9D:3C:B3:60:6B:F0:B3:01:47:48 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 6ED6AAA6B3BFC92588BB63EA196585C2A988BED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: BB Signing time: Sat 30 Aug 2025 23:40:41 +0000 Manifest this update: Sat 30 Aug 2025 23:35:41 +0000 Manifest next update: Wed 03 Sep 2025 08:54:41 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: hIYuorecuxSK0FJc0AIGEhit1QsJBhW6+ViVL4zFllU=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d6:aa:a6:b3:bf:c9:25:88:bb:63:ea:19:65:85:c2:a9:88:be:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Aug 30 23:35:41 2025 GMT Not After : Sep 3 08:54:41 2025 GMT Subject: CN=F88341CC72B3AD88AB629D3CB3606BF0B3014748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:f3:c2:aa:c3:9a:fc:7c:16:00:1b:3d:d2: 6d:db:c4:96:90:3b:7e:1f:af:af:46:c4:a2:ca:9c: 3f:c6:75:24:22:b3:ea:f0:c9:fb:1e:fc:a1:ce:4d: 9d:31:42:ee:32:b6:a8:85:95:01:65:a3:be:a0:37: a0:2d:95:da:92:45:d6:1b:23:9e:27:36:75:49:4f: 24:33:d2:74:4a:2e:ad:6f:8c:2f:e5:1c:57:33:c3: 22:fd:19:4a:44:74:04:4e:a4:f7:d9:21:12:9d:6d: 1d:69:34:fe:f6:31:6d:e5:cb:12:75:e0:f9:6c:f7: 42:d6:99:09:90:ae:b5:1a:9f:62:99:8c:3a:c5:0b: d8:df:81:ea:cb:6c:29:b8:88:48:9d:4a:14:a0:7c: 14:de:b5:15:73:82:d6:e9:52:2d:e5:d4:9a:66:6c: e6:d7:50:cf:ea:20:cd:7b:7a:a6:8c:3f:d0:4c:cc: 1c:85:c3:c3:d6:92:bd:22:8e:e9:29:92:d1:33:e3: 6d:d8:ee:a6:7b:65:f7:27:96:33:00:ca:07:22:f1: 92:09:8d:14:c9:a6:6b:9c:b2:f0:df:3a:55:1b:9b: 8c:29:89:5c:28:73:13:fc:d9:6e:eb:ca:b6:d7:d4: b2:ce:8c:4a:b8:4c:ea:1e:f1:cd:f2:5a:8b:a9:f9: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:83:41:CC:72:B3:AD:88:AB:62:9D:3C:B3:60:6B:F0:B3:01:47:48 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a6:65:5d:97:21:08:95:42:70:06:48:ee:84:6e:d1:7b:70: f2:a5:56:df:f5:70:24:94:e8:70:e0:e8:0a:10:26:ee:9b:ef: f4:90:54:22:b5:a5:e0:1f:71:0f:30:b4:d7:2a:89:74:66:a5: 1e:ca:7e:c0:0a:00:7a:56:26:1e:f3:08:76:de:30:d2:39:f0: a1:f0:bb:54:fc:7f:5e:61:13:e5:3f:80:e5:27:e1:49:b0:67: 58:3e:bb:21:90:16:b7:45:98:74:93:3c:52:8d:e6:3c:6c:73: b8:bb:8e:1b:69:d9:ea:4f:cd:80:28:3b:ae:b7:8f:9d:2f:60: 9e:04:7f:ec:d8:a8:be:dc:20:0a:ae:10:ad:21:dc:64:8c:01: bb:d8:fa:16:4d:f5:b4:d6:69:b2:a3:71:22:b4:51:b9:e8:e9: a2:fa:f2:f5:43:f1:1e:31:22:77:40:9b:9d:05:2a:d6:0e:31: 9c:4f:00:65:64:1a:81:91:91:ba:a1:1f:97:79:9d:f3:c1:e4: 23:3c:ed:e0:25:95:ea:f6:a3:56:a1:68:30:de:32:3c:4e:4f: 39:73:55:9d:91:ef:cc:ab:fa:00:05:94:13:15:d6:9b:3a:5b: f0:f9:99:94:34:ce:37:ef:f5:7a:03:50:54:9c:7d:ac:16:00: 0d:f7:0b:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtaqprO/ySWIu2PqGWWFwqmIvtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNTA4MzAyMzM1NDFaFw0yNTA5MDMwODU0NDFaMDMxMTAvBgNV BAMTKEY4ODM0MUNDNzJCM0FEODhBQjYyOUQzQ0IzNjA2QkYwQjMwMTQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2vPCqsOa/HwWABs90m3bxJaQ O34fr69GxKLKnD/GdSQis+rwyfse/KHOTZ0xQu4ytqiFlQFlo76gN6AtldqSRdYb I54nNnVJTyQz0nRKLq1vjC/lHFczwyL9GUpEdAROpPfZIRKdbR1pNP72MW3lyxJ1 4Pls90LWmQmQrrUan2KZjDrFC9jfgerLbCm4iEidShSgfBTetRVzgtbpUi3l1Jpm bObXUM/qIM17eqaMP9BMzByFw8PWkr0ijukpktEz423Y7qZ7ZfcnljMAygci8ZIJ jRTJpmucsvDfOlUbm4wpiVwocxP82W7ryrbX1LLOjEq4TOoe8c3yWoup+YEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+INBzHKzrYirYp08s2Br8LMBR0gwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKmZV2XIQiVQnAGSO6EbtF7cPKlVt/1cCSU 6HDg6AoQJu6b7/SQVCK1peAfcQ8wtNcqiXRmpR7KfsAKAHpWJh7zCHbeMNI58KHw u1T8f15hE+U/gOUn4UmwZ1g+uyGQFrdFmHSTPFKN5jxsc7i7jhtp2epPzYAoO663 j50vYJ4Ef+zYqL7cIAquEK0h3GSMAbvY+hZN9bTWabKjcSK0Ubno6aL68vVD8R4x IndAm50FKtYOMZxPAGVkGoGRkbqhH5d5nfPB5CM87eAller2o1ahaDDeMjxOTzlz VZ2R78yr+gAFlBMV1ps6W/D5mZQ0zjfv9XoDUFScfawWAA33C3w= -----END CERTIFICATE-----Generated at Sun Aug 31 21:59:10 2025 by rpki-client