$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: BBvxNI6F/VdRUiI2dluGUu0N+EJVQhMl3dL6C3onI0I= Subject key identifier: 08:25:C1:A3:4A:4B:C2:27:5D:A3:22:E8:9B:A4:A8:4E:2C:C5:CC:B1 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 7D437FA0180731D7A0F2F1E5857FC73E2CC81A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 0515 Signing time: Wed 03 Sep 2025 19:01:28 +0000 Manifest this update: Wed 03 Sep 2025 18:56:28 +0000 Manifest next update: Sun 07 Sep 2025 05:03:28 +0000 Files and hashes: 1: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: lX6yK5ZXngZW7ELU3wR8WQZxB1PZNhMXdAdxnRkfpzY=) 2: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q=) 3: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: ld3nEVlFcFCLRcEjCfs3AUA/tg9TghsW7VyWlqnrxIU=) 4: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: OjdsG/TdDn+RUWERJayMK04SkHQ7zRmm5hb518X40Eo=) 5: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: TiFQ5+3RDDZw3hEMovau4FHuHmfphOknHBNZEgIPquo=) 6: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: e9uiS3KNGlZ+EQjSXY4m6NwJ9lRr8aifmafZU96mQ7k=) 7: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: Gss2BFwCvkYMrYmTDPR8XZwGfdbzMzVTFBRvuPZp/uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:43:7f:a0:18:07:31:d7:a0:f2:f1:e5:85:7f:c7:3e:2c:c8:1a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Sep 3 18:56:28 2025 GMT Not After : Sep 7 05:03:28 2025 GMT Subject: CN=0825C1A34A4BC2275DA322E89BA4A84E2CC5CCB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:bd:4a:9b:cd:26:02:96:04:95:6e:0f:c8: 0f:d9:47:92:e6:bd:64:2f:db:53:09:23:f3:3c:05: e1:70:c4:5a:00:22:bb:1c:27:a5:dc:4a:33:e6:8d: 1b:a8:db:87:8f:b1:4d:bd:a4:ea:af:51:cf:94:6b: 18:dc:33:1d:2a:34:58:83:5d:e0:88:88:30:93:3e: e4:93:af:e3:20:c9:dd:96:5c:de:55:22:92:4d:95: c7:0f:c5:fc:27:a4:a2:be:fb:45:e7:95:0a:d2:13: 5c:2d:48:a7:48:1d:df:25:a4:44:5c:09:79:49:ae: 07:48:63:37:5f:2f:37:b7:7f:4f:85:96:13:38:98: df:d2:d6:6f:ad:57:a9:35:bc:89:ab:3d:97:8d:57: 75:23:49:65:aa:25:22:50:20:b0:06:07:72:6f:58: e6:28:ec:54:2c:b2:cc:5f:83:a6:f3:af:16:02:91: 99:56:79:50:a2:e9:65:3a:ca:33:14:b0:ac:74:23: 7e:54:0f:80:3f:35:31:8c:89:a5:87:87:98:41:aa: 9e:eb:e4:45:9d:f0:78:09:83:97:f5:16:7f:00:53: 8b:f4:f0:fc:1b:12:61:e0:2f:65:30:c9:02:5d:96: 70:47:41:8e:1d:5d:84:37:1f:db:8f:f3:ea:71:15: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:C1:A3:4A:4B:C2:27:5D:A3:22:E8:9B:A4:A8:4E:2C:C5:CC:B1 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:97:ff:79:0d:9c:44:2d:4f:f6:2f:45:47:8e:f0:bd:37:1d: 4b:b8:67:1f:6d:da:1c:5c:48:04:e3:e0:6c:9e:26:03:8e:2b: b3:21:cc:6c:0d:df:60:fa:50:8d:d3:90:a4:c1:4e:c6:92:8d: 7b:73:6a:ae:46:11:4b:ea:12:71:21:47:aa:b6:50:ee:ce:ef: fd:e4:39:01:19:9c:a7:a1:91:e9:ee:5f:03:99:74:b5:00:1e: 87:17:f9:eb:d2:2e:71:1a:b7:37:12:0c:73:77:72:f1:15:be: fd:4a:a5:d1:91:a3:85:06:54:74:8a:6d:42:c7:ae:38:07:4a: f1:37:a6:b0:b8:34:9e:b0:06:66:e6:5e:97:23:bb:a7:c6:22: 95:8c:67:2c:41:de:79:e7:b1:02:23:1e:68:99:81:1c:5f:a8: 52:87:c4:75:b3:b1:73:8c:8b:b3:44:59:96:78:a0:ed:75:1d: b4:0e:a2:51:d2:34:8b:4a:da:18:cd:3f:04:69:20:c7:80:06: 4d:ab:c4:4c:c5:44:1a:8d:66:ae:94:bd:69:04:62:73:ba:06: b6:5c:cb:3e:91:1a:55:e1:4b:57:1e:0d:34:02:68:2a:80:83: 4d:44:a4:68:9d:96:82:93:9a:f8:36:df:91:b8:55:5f:ce:31: 45:d9:c7:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUN/oBgHMdeg8vHlhX/HPizIGnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNTA5MDMxODU2MjhaFw0yNTA5MDcwNTAzMjhaMDMxMTAvBgNV BAMTKDA4MjVDMUEzNEE0QkMyMjc1REEzMjJFODlCQTRBODRFMkNDNUNDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4L1Km80mApYElW4PyA/ZR5Lm vWQv21MJI/M8BeFwxFoAIrscJ6XcSjPmjRuo24ePsU29pOqvUc+UaxjcMx0qNFiD XeCIiDCTPuSTr+Mgyd2WXN5VIpJNlccPxfwnpKK++0XnlQrSE1wtSKdIHd8lpERc CXlJrgdIYzdfLze3f0+FlhM4mN/S1m+tV6k1vImrPZeNV3UjSWWqJSJQILAGB3Jv WOYo7FQsssxfg6bzrxYCkZlWeVCi6WU6yjMUsKx0I35UD4A/NTGMiaWHh5hBqp7r 5EWd8HgJg5f1Fn8AU4v08PwbEmHgL2UwyQJdlnBHQY4dXYQ3H9uP8+pxFcR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCXBo0pLwiddoyLom6SoTizFzLEwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOX/3kNnEQtT/YvRUeO8L03HUu4Zx9t2hxc SATj4GyeJgOOK7MhzGwN32D6UI3TkKTBTsaSjXtzaq5GEUvqEnEhR6q2UO7O7/3k OQEZnKehkenuXwOZdLUAHocX+evSLnEatzcSDHN3cvEVvv1KpdGRo4UGVHSKbULH rjgHSvE3prC4NJ6wBmbmXpcju6fGIpWMZyxB3nnnsQIjHmiZgRxfqFKHxHWzsXOM i7NEWZZ4oO11HbQOolHSNItK2hjNPwRpIMeABk2rxEzFRBqNZq6UvWkEYnO6BrZc yz6RGlXhS1ceDTQCaCqAg01EpGidloKTmvg235G4VV/OMUXZx68= -----END CERTIFICATE-----Generated at Thu Sep 4 21:38:18 2025 by rpki-client