$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: ddWztsnx2OfHrhWnGzUK8Ur4jhF+jiteSYEw7yasLwY= Subject key identifier: 1A:43:80:F2:8F:92:C7:26:0B:33:4D:4A:23:D6:BA:F5:C1:E4:28:C6 Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 5BDABBD9CA32830FA3D5E4D4EBD5729F8ABD97E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 01AA Signing time: Fri 05 Sep 2025 11:32:22 +0000 Manifest this update: Fri 05 Sep 2025 11:27:22 +0000 Manifest next update: Mon 08 Sep 2025 16:16:22 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: ubnU5/lJuOWCKuKl5h1FwND3q5vHYZroq2xm5SBKB/s=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:da:bb:d9:ca:32:83:0f:a3:d5:e4:d4:eb:d5:72:9f:8a:bd:97:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Sep 5 11:27:22 2025 GMT Not After : Sep 8 16:16:22 2025 GMT Subject: CN=1A4380F28F92C7260B334D4A23D6BAF5C1E428C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:99:54:46:31:86:41:66:ee:c2:9d:95:0f: 43:b4:00:33:a8:e1:b7:d4:45:cd:bd:e9:50:17:02: 0a:5f:fd:1b:3a:e8:4e:be:4c:26:38:a2:3e:5a:f3: bd:e4:ab:3c:4c:76:d1:d5:a0:c5:cf:8d:5c:49:84: ad:6c:5f:87:66:4b:53:0a:51:7e:00:2d:b4:30:75: 94:b5:42:0f:35:7c:77:53:b6:ef:8e:c1:68:a7:8b: ec:af:e1:9a:83:60:7c:bc:1a:ca:74:53:16:df:8b: 66:65:71:9d:d0:b6:b3:2b:eb:38:33:45:90:09:b8: ab:42:5d:9d:68:ea:86:af:84:50:03:dc:b4:79:68: 72:ff:eb:f8:4a:b8:3f:0a:71:62:d0:ba:de:fc:9a: 48:3e:8f:35:69:11:8d:1a:dc:05:99:9d:3a:df:09: 5d:5e:99:08:97:f0:ee:23:6c:de:13:11:c5:59:0a: 91:64:d2:14:2d:11:19:b1:48:61:20:b4:4a:2f:62: 8d:60:c5:4d:63:e3:d4:fb:a5:9c:82:25:88:a1:e7: f4:91:56:18:88:42:dd:2a:1d:76:80:74:22:32:d6: 1e:ba:ec:b9:12:3d:a9:1c:c1:2a:1d:db:48:82:2a: 88:54:47:32:b7:1c:da:13:d3:b8:17:97:cb:64:34: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:43:80:F2:8F:92:C7:26:0B:33:4D:4A:23:D6:BA:F5:C1:E4:28:C6 X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:19:81:8e:20:66:47:71:45:de:30:45:68:68:27:f3:0e:95: 99:31:f5:48:24:35:47:45:3c:85:2d:f6:db:7f:e5:45:34:4f: 9a:48:7e:2a:14:90:e8:1f:78:da:50:4f:8d:ba:f8:df:fd:9a: 2c:98:81:19:32:8e:30:e0:59:f5:69:3e:17:c8:72:41:cb:91: 0e:cc:00:50:01:13:da:e1:cf:3f:6c:c4:ce:15:a0:ab:1e:61: 2d:79:b7:a6:5d:d2:19:0a:4e:59:92:66:be:cf:1b:db:1d:7d: ad:75:f8:4b:13:7d:af:c5:e3:3a:e1:52:11:1f:5e:e6:a1:c0: dc:c7:29:2a:f5:e4:5f:ee:02:16:f0:28:21:01:01:db:c6:00: 14:7e:ca:d6:2d:2e:c4:d3:45:90:09:02:4f:3a:26:b5:6e:63: 5a:5d:b9:1e:5b:2f:e7:1c:90:ce:d7:91:b3:2e:b8:05:f0:a4: 63:a5:fe:4d:24:60:f6:b6:91:56:8b:78:da:05:10:05:c4:75: 5f:72:a1:e3:b8:f7:a8:69:ac:d9:75:34:cd:9f:0d:49:0f:61: be:93:0c:3e:06:db:e7:2c:f3:2c:37:1c:47:96:13:50:9a:f5: d8:47:03:85:9a:b4:53:d2:c1:93:bc:74:2a:41:a9:e7:38:12: 50:fe:e1:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9q72coygw+j1eTU69Vyn4q9l+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTA5MDUxMTI3MjJaFw0yNTA5MDgxNjE2MjJaMDMxMTAvBgNV BAMTKDFBNDM4MEYyOEY5MkM3MjYwQjMzNEQ0QTIzRDZCQUY1QzFFNDI4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XplURjGGQWbuwp2VD0O0ADOo 4bfURc296VAXAgpf/Rs66E6+TCY4oj5a873kqzxMdtHVoMXPjVxJhK1sX4dmS1MK UX4ALbQwdZS1Qg81fHdTtu+OwWini+yv4ZqDYHy8Gsp0Uxbfi2ZlcZ3QtrMr6zgz RZAJuKtCXZ1o6oavhFAD3LR5aHL/6/hKuD8KcWLQut78mkg+jzVpEY0a3AWZnTrf CV1emQiX8O4jbN4TEcVZCpFk0hQtERmxSGEgtEovYo1gxU1j49T7pZyCJYih5/SR VhiIQt0qHXaAdCIy1h667LkSPakcwSod20iCKohURzK3HNoT07gXl8tkNIRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGkOA8o+SxyYLM01KI9a69cHkKMYwHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwZgY4gZkdxRd4wRWhoJ/MOlZkx9UgkNUdF PIUt9tt/5UU0T5pIfioUkOgfeNpQT426+N/9miyYgRkyjjDgWfVpPhfIckHLkQ7M AFABE9rhzz9sxM4VoKseYS15t6Zd0hkKTlmSZr7PG9sdfa11+EsTfa/F4zrhUhEf XuahwNzHKSr15F/uAhbwKCEBAdvGABR+ytYtLsTTRZAJAk86JrVuY1pduR5bL+cc kM7XkbMuuAXwpGOl/k0kYPa2kVaLeNoFEAXEdV9yoeO496hprNl1NM2fDUkPYb6T DD4G2+cs8yw3HEeWE1Ca9dhHA4WatFPSwZO8dCpBqec4ElD+4RA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:15 2025 by rpki-client