$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: 5isPOhVyVPszzumV+ZxgrYdKuVKyd0D0d1loCi6ueFY= Subject key identifier: AE:FB:7E:49:5E:BC:B2:CA:0F:45:E0:F3:F1:5A:F6:09:A7:81:8E:A1 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 3600253502B24C08954F8B54425B3A66F83320FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0216 Signing time: Fri 05 Sep 2025 08:12:03 +0000 Manifest this update: Fri 05 Sep 2025 08:07:03 +0000 Manifest next update: Mon 08 Sep 2025 14:08:03 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: RhA0n7KR/fKMX7B2HLju/gVGcyo5B2vtiqgmOBTm+SY=) 2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: NWTKjHM3PgU/D8DgzFheKr586Q+n/qcGSV1ZOdpOXco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:00:25:35:02:b2:4c:08:95:4f:8b:54:42:5b:3a:66:f8:33:20:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Sep 5 08:07:03 2025 GMT Not After : Sep 8 14:08:03 2025 GMT Subject: CN=AEFB7E495EBCB2CA0F45E0F3F15AF609A7818EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:4f:53:c1:a6:43:63:ae:80:39:e4:bc:2e: 45:ec:d7:31:c6:d7:29:66:88:96:ce:a1:85:54:60: e2:a4:3c:64:ca:65:e1:e5:24:4e:65:a0:a5:e3:26: bf:e2:b4:80:fa:ce:52:b1:14:fd:a6:93:35:47:2d: 3c:1d:45:00:f2:12:49:7b:39:ce:5b:32:9d:56:62: c6:09:20:a2:5a:de:6e:36:8a:f7:f1:8e:0b:f8:8c: 6b:94:05:d8:d0:32:1e:67:eb:a4:f1:b4:aa:65:f2: 6e:61:c5:06:83:73:47:ff:f3:7d:7a:cc:ad:30:ef: f8:00:09:bd:71:d4:4a:3a:76:18:0d:d1:f8:e6:d1: 43:c9:27:2a:ee:70:5f:61:55:72:8e:9b:ac:95:7a: d8:c4:75:16:ba:9b:c1:82:34:8f:26:6f:4f:42:94: 01:55:da:6d:46:bd:d0:81:5b:74:67:9c:a3:3e:7b: e0:d7:fc:24:92:5d:6c:3c:1a:c7:87:f0:96:26:76: e9:9c:2a:62:bd:47:1b:34:3e:9c:cb:e7:7f:44:7d: 8a:40:e4:37:79:65:b7:a1:0f:88:2b:16:5a:9b:cd: 74:ad:2b:b6:7b:b9:8a:47:0d:37:c9:6e:fb:48:dc: 76:2b:13:cf:83:53:91:cd:2c:46:a1:1b:61:72:8e: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:7E:49:5E:BC:B2:CA:0F:45:E0:F3:F1:5A:F6:09:A7:81:8E:A1 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:29:31:3c:3f:fa:e0:9a:f5:ab:92:0b:87:47:a3:8c:21:4a: 29:12:80:c2:d9:ea:39:4b:ea:66:18:e0:89:e1:a5:39:cc:5c: e4:c4:76:02:2e:a8:b2:2f:34:46:0c:d9:7d:bb:81:1a:87:ed: 39:84:cd:ab:a6:4c:be:08:2d:56:61:da:e2:d4:ef:de:2d:37: 03:5d:9c:32:ba:41:81:99:62:96:5a:15:c9:f8:4b:c9:3a:b3: c8:ac:56:d8:61:49:41:92:37:2c:40:2f:42:7c:4c:63:57:2e: 9c:25:d8:cb:43:99:93:b3:85:d5:a1:ee:9e:7c:e0:2c:ec:dc: e4:14:97:71:e1:aa:04:91:9e:08:bc:10:35:92:49:c2:31:d2: 73:bd:81:79:3b:e5:00:28:00:a3:55:98:d5:61:db:ed:00:70: d2:f0:c6:9f:38:8a:75:4c:1e:18:2c:47:2b:88:be:16:3e:0b: 71:eb:81:61:c0:1d:2c:4b:fe:21:cf:f7:05:2d:c9:e9:96:28: aa:d5:7d:4b:5d:94:06:80:67:b3:a7:44:0b:7e:2b:70:4b:d6: 0b:67:9a:c7:03:ac:04:fb:33:02:5b:e1:6a:05:29:9d:ea:1b: 4e:58:9c:7f:64:1b:ce:63:80:84:02:e1:6e:62:b1:fe:65:d0: fa:c7:87:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgAlNQKyTAiVT4tUQls6ZvgzIP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNTA5MDUwODA3MDNaFw0yNTA5MDgxNDA4MDNaMDMxMTAvBgNV BAMTKEFFRkI3RTQ5NUVCQ0IyQ0EwRjQ1RTBGM0YxNUFGNjA5QTc4MThFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSE9TwaZDY66AOeS8LkXs1zHG 1ylmiJbOoYVUYOKkPGTKZeHlJE5loKXjJr/itID6zlKxFP2mkzVHLTwdRQDyEkl7 Oc5bMp1WYsYJIKJa3m42ivfxjgv4jGuUBdjQMh5n66TxtKpl8m5hxQaDc0f/8316 zK0w7/gACb1x1Eo6dhgN0fjm0UPJJyrucF9hVXKOm6yVetjEdRa6m8GCNI8mb09C lAFV2m1GvdCBW3RnnKM+e+DX/CSSXWw8GseH8JYmdumcKmK9Rxs0PpzL539EfYpA 5Dd5ZbehD4grFlqbzXStK7Z7uYpHDTfJbvtI3HYrE8+DU5HNLEahG2Fyjv8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrvt+SV68ssoPReDz8Vr2CaeBjqEwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8pMTw/+uCa9auSC4dHo4whSikSgMLZ6jlL 6mYY4InhpTnMXOTEdgIuqLIvNEYM2X27gRqH7TmEzaumTL4ILVZh2uLU794tNwNd nDK6QYGZYpZaFcn4S8k6s8isVthhSUGSNyxAL0J8TGNXLpwl2MtDmZOzhdWh7p58 4Czs3OQUl3HhqgSRngi8EDWSScIx0nO9gXk75QAoAKNVmNVh2+0AcNLwxp84inVM HhgsRyuIvhY+C3HrgWHAHSxL/iHP9wUtyemWKKrVfUtdlAaAZ7OnRAt+K3BL1gtn mscDrAT7MwJb4WoFKZ3qG05YnH9kG85jgIQC4W5isf5l0PrHh1g= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:19 2025 by rpki-client