$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: nrPb11tQpRAsjQdWhpeo0Kn//zf2D2+YUfxMT2rwJFk= Subject key identifier: 2B:CD:6C:0D:A7:DC:43:0E:2C:23:78:4B:9C:23:D3:34:BF:94:C5:19 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 2410E2FB739BE2060BB9060300742A2CC524E998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 030A Signing time: Fri 05 Sep 2025 19:40:56 +0000 Manifest this update: Fri 05 Sep 2025 19:35:56 +0000 Manifest next update: Tue 09 Sep 2025 02:54:56 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: 7YgAJqzd1z5BsuNTHwbvUtcky/5fQfV47VdEvbW7wsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 02:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:10:e2:fb:73:9b:e2:06:0b:b9:06:03:00:74:2a:2c:c5:24:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Sep 5 19:35:56 2025 GMT Not After : Sep 9 02:54:56 2025 GMT Subject: CN=2BCD6C0DA7DC430E2C23784B9C23D334BF94C519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:ec:d7:6b:6b:11:cc:24:c3:a6:e0:f4:a1: cc:d6:e9:36:cd:70:3e:a5:56:96:f8:a1:1f:1b:50: 78:bd:71:3c:35:9c:14:64:c3:38:2c:e2:e6:d9:32: 6a:e3:27:38:e7:fb:99:03:87:69:69:08:29:a6:5b: 92:2a:28:06:7c:82:2c:c3:bd:47:3b:65:c2:bf:d7: 73:d2:56:00:75:e5:99:e5:18:80:3d:27:33:1e:83: 16:39:49:7e:44:7a:45:53:3f:a6:9e:0e:af:8d:a0: c1:17:16:7a:e3:9b:ac:92:e2:3e:af:84:80:57:81: d7:49:62:41:d8:d5:2c:eb:3e:65:a2:0b:b2:41:ab: e9:fa:5c:cc:b3:69:f8:a8:76:2a:1d:a0:22:2c:e6: 23:c2:fc:c7:76:37:da:c1:97:02:d4:a1:38:86:d2: 5c:ce:e3:1a:02:38:d5:e2:5f:b8:32:4e:da:82:19: 62:cd:47:dd:8a:2d:55:bd:20:15:f1:65:50:37:32: 51:aa:3b:f6:19:a3:f5:a9:c9:4a:52:43:00:b8:5a: e1:0e:fa:7d:6e:7b:d0:08:21:c0:1b:1a:2c:2c:87: 62:26:cf:91:04:82:29:c8:3b:3c:f2:88:4d:b9:4a: c5:04:93:e5:39:ea:3d:a2:98:01:4b:e0:ed:71:d4: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CD:6C:0D:A7:DC:43:0E:2C:23:78:4B:9C:23:D3:34:BF:94:C5:19 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:40:8e:44:12:37:3c:af:4b:64:d2:a1:78:66:c1:eb:e4:69: 57:b6:a5:c3:63:7c:d5:da:f6:33:13:23:50:f2:64:87:99:ce: 3e:f5:b5:d9:bf:86:b5:a8:10:0b:90:ec:0d:10:1e:b6:fc:af: 04:e9:34:75:a2:c4:e1:2a:c7:3c:ba:c7:2e:39:cd:29:66:a5: 8e:c9:db:ba:55:7b:14:bc:03:98:84:3b:5a:3b:01:31:f8:cf: 79:7e:7a:4c:39:5a:7f:ad:86:15:65:1d:dd:70:74:31:c6:a9: 61:0d:0a:49:ba:f3:21:3c:a7:3b:f9:e9:70:df:26:b2:be:95: 27:69:ee:94:cc:50:6d:9b:87:1b:a4:01:11:38:8d:fc:09:ff: 93:a1:a7:63:8f:56:16:dc:89:ac:93:67:57:f9:66:99:a6:88: 12:88:b2:aa:1a:09:54:85:ae:f5:0a:a0:d5:ce:b7:2b:1e:3a: ca:d1:b9:d5:13:35:10:86:d5:21:94:ec:34:31:a8:d7:43:f0: 91:b0:9b:e8:32:ff:e9:52:5e:46:14:5a:6d:91:e0:c7:f3:3d: 94:66:08:27:f4:56:de:ad:d3:b9:78:0b:d5:1b:20:b9:f7:6c: e6:61:fe:a2:3b:c8:6b:82:58:41:6d:0c:50:c5:ea:d0:b9:6a: 1c:71:a9:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBDi+3Ob4gYLuQYDAHQqLMUk6ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA5MDUxOTM1NTZaFw0yNTA5MDkwMjU0NTZaMDMxMTAvBgNV BAMTKDJCQ0Q2QzBEQTdEQzQzMEUyQzIzNzg0QjlDMjNEMzM0QkY5NEM1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfOzXa2sRzCTDpuD0oczW6TbN cD6lVpb4oR8bUHi9cTw1nBRkwzgs4ubZMmrjJzjn+5kDh2lpCCmmW5IqKAZ8gizD vUc7ZcK/13PSVgB15ZnlGIA9JzMegxY5SX5EekVTP6aeDq+NoMEXFnrjm6yS4j6v hIBXgddJYkHY1SzrPmWiC7JBq+n6XMyzafiodiodoCIs5iPC/Md2N9rBlwLUoTiG 0lzO4xoCONXiX7gyTtqCGWLNR92KLVW9IBXxZVA3MlGqO/YZo/WpyUpSQwC4WuEO +n1ue9AIIcAbGiwsh2Imz5EEginIOzzyiE25SsUEk+U56j2imAFL4O1x1FAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK81sDafcQw4sI3hLnCPTNL+UxRkwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBAjkQSNzyvS2TSoXhmwevkaVe2pcNjfNXa 9jMTI1DyZIeZzj71tdm/hrWoEAuQ7A0QHrb8rwTpNHWixOEqxzy6xy45zSlmpY7J 27pVexS8A5iEO1o7ATH4z3l+ekw5Wn+thhVlHd1wdDHGqWENCkm68yE8pzv56XDf JrK+lSdp7pTMUG2bhxukARE4jfwJ/5Ohp2OPVhbciayTZ1f5ZpmmiBKIsqoaCVSF rvUKoNXOtyseOsrRudUTNRCG1SGU7DQxqNdD8JGwm+gy/+lSXkYUWm2R4MfzPZRm CCf0Vt6t07l4C9UbILn3bOZh/qI7yGuCWEFtDFDF6tC5ahxxqS0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:38 2025 by rpki-client