$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: hAvflNgT0+WSWK7qUXLZ1zDj4rgEu8jnfnTgCCAsoYI= Subject key identifier: D1:75:21:A1:05:C4:1E:24:B4:B0:13:F8:DB:53:9A:2E:50:1A:05:2F Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 68C457C481C14772A3523BAC1E6E8BE9156A909E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 0502 Signing time: Sat 06 Sep 2025 13:11:26 +0000 Manifest this update: Sat 06 Sep 2025 13:06:26 +0000 Manifest next update: Tue 09 Sep 2025 23:57:26 +0000 Files and hashes: 1: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) 2: 285218D0288125F1010B5469F03888B08A661969.crl (hash: tkAcDYV0LI3S9yDSQeBPtt38xYQZ+Yp7d6y8A48SOsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c4:57:c4:81:c1:47:72:a3:52:3b:ac:1e:6e:8b:e9:15:6a:90:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Sep 6 13:06:26 2025 GMT Not After : Sep 9 23:57:26 2025 GMT Subject: CN=D17521A105C41E24B4B013F8DB539A2E501A052F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:b7:9c:88:0d:ad:b6:0b:fd:17:21:f5:41: c4:82:32:dd:e9:e5:ac:cc:f3:72:54:13:1c:34:a7: cd:1f:dd:40:96:bb:81:ad:1b:45:d4:67:d3:6e:1e: 5e:cb:9e:e8:c6:a7:d1:1e:b5:16:86:2c:7a:cf:b6: 2c:78:a7:d9:a3:d8:5c:3d:29:1c:a4:88:01:de:1a: 80:ea:58:5e:ed:52:3c:97:08:6b:df:07:2a:87:bb: ff:85:fc:00:59:4e:23:01:9f:68:2c:3e:0d:c2:43: ab:e2:b3:3d:c6:b6:ba:fb:c3:28:5b:46:29:91:41: 4f:cf:d4:df:7d:3a:ba:c8:b9:81:60:42:29:18:d5: c9:a4:d5:4f:72:78:0d:6e:3e:3f:98:74:2d:1b:5e: 74:b5:56:1f:2b:1f:2d:57:14:fc:dd:30:07:5c:1e: 5b:60:7e:6e:94:5b:5d:02:18:2c:53:c7:68:6d:13: 47:d3:24:30:4d:ea:aa:4a:32:a8:48:a3:87:29:69: ea:38:00:d6:18:09:e3:b2:8f:d6:4f:ce:71:a8:27: fe:03:ea:3a:5f:fc:12:fe:32:77:e0:37:f8:4a:6e: 46:cf:b4:97:ad:7e:b0:fd:68:aa:5f:fa:c6:82:8a: 0d:36:f2:6c:6e:5c:79:89:15:58:30:af:b1:8e:6a: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:21:A1:05:C4:1E:24:B4:B0:13:F8:DB:53:9A:2E:50:1A:05:2F X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d9:9b:b3:21:8e:72:14:a4:c5:fc:5f:3d:a9:3d:1f:c9:2c: d4:db:af:9b:d2:20:00:f4:fd:7e:85:24:24:d3:25:c2:ac:ca: c8:cf:c7:35:06:3c:d6:73:61:f1:6b:f1:ac:44:71:b2:72:d8: fc:0d:c6:17:6e:ee:e4:10:0e:54:3e:73:30:bd:d8:ff:ea:00: fb:ea:c5:92:15:49:74:31:f1:8f:c0:f0:78:81:b4:37:c6:45: 4f:bd:96:22:b2:8e:84:c0:13:ab:e7:ab:64:a2:5f:a3:fe:a0: 66:83:17:6e:1f:be:bf:cb:f9:80:9b:5e:f5:95:d4:e3:4d:0b: ce:fb:6b:4a:2a:cc:f8:d6:af:50:38:3a:47:86:da:30:54:9b: 31:62:13:5a:97:00:79:ec:c8:c7:30:cc:22:d3:95:c0:ff:4e: a5:8a:33:b0:21:07:44:66:94:1e:f5:7e:86:fb:ce:9c:ac:a1: d6:f5:ea:42:3a:c4:b9:d3:3a:03:55:aa:06:ce:85:5c:d5:da: 01:62:2a:f0:05:16:a5:0f:46:fc:e9:cc:a5:0d:a9:94:93:d8: cf:8e:ca:e4:7e:1b:2d:78:55:ce:2f:1c:e1:7e:64:6e:08:55: 37:9f:53:c0:f0:c7:5e:50:77:cc:d3:6a:99:5c:a4:f9:7c:e7: f2:a8:89:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMRXxIHBR3KjUjusHm6L6RVqkJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA5MDYxMzA2MjZaFw0yNTA5MDkyMzU3MjZaMDMxMTAvBgNV BAMTKEQxNzUyMUExMDVDNDFFMjRCNEIwMTNGOERCNTM5QTJFNTAxQTA1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQbeciA2ttgv9FyH1QcSCMt3p 5azM83JUExw0p80f3UCWu4GtG0XUZ9NuHl7LnujGp9EetRaGLHrPtix4p9mj2Fw9 KRykiAHeGoDqWF7tUjyXCGvfByqHu/+F/ABZTiMBn2gsPg3CQ6visz3Gtrr7wyhb RimRQU/P1N99OrrIuYFgQikY1cmk1U9yeA1uPj+YdC0bXnS1Vh8rHy1XFPzdMAdc Hltgfm6UW10CGCxTx2htE0fTJDBN6qpKMqhIo4cpaeo4ANYYCeOyj9ZPznGoJ/4D 6jpf/BL+MnfgN/hKbkbPtJetfrD9aKpf+saCig028mxuXHmJFVgwr7GOaleRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XUhoQXEHiS0sBP421OaLlAaBS8wHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3Zm7MhjnIUpMX8Xz2pPR/JLNTbr5vSIAD0 /X6FJCTTJcKsysjPxzUGPNZzYfFr8axEcbJy2PwNxhdu7uQQDlQ+czC92P/qAPvq xZIVSXQx8Y/A8HiBtDfGRU+9liKyjoTAE6vnq2SiX6P+oGaDF24fvr/L+YCbXvWV 1ONNC877a0oqzPjWr1A4OkeG2jBUmzFiE1qXAHnsyMcwzCLTlcD/TqWKM7AhB0Rm lB71fob7zpysodb16kI6xLnTOgNVqgbOhVzV2gFiKvAFFqUPRvzpzKUNqZST2M+O yuR+Gy14Vc4vHOF+ZG4IVTefU8Dwx15Qd8zTaplcpPl85/KoiWs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:47 2025 by rpki-client