$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: QCJyur72MOpRqtcsPrUcUAKJbuyf+QpUDsAYFo//imE= Subject key identifier: 79:7A:DD:EB:0E:98:34:2D:70:D1:C2:82:3A:58:53:11:F6:46:E9:90 Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 62F656996E1F97AFE2064345305F70CF5A9E8E26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 13 Signing time: Fri 05 Sep 2025 20:01:34 +0000 Manifest this update: Fri 05 Sep 2025 19:56:34 +0000 Manifest next update: Tue 09 Sep 2025 07:55:34 +0000 Files and hashes: 1: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: O52+7J1YEsb7qKhyzIKsV27OHx+K00Yim0O58So8hck=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f6:56:99:6e:1f:97:af:e2:06:43:45:30:5f:70:cf:5a:9e:8e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Sep 5 19:56:34 2025 GMT Not After : Sep 9 07:55:34 2025 GMT Subject: CN=797ADDEB0E98342D70D1C2823A585311F646E990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:7d:2e:0f:30:d9:75:e7:f0:25:df:02:f0: 46:00:d4:a4:4d:89:81:3d:ec:69:79:d2:12:30:42: 9c:ed:98:f5:5d:83:b7:50:f7:44:3d:4a:8d:6c:4f: ab:ad:9b:35:21:e5:b3:b0:f3:cf:a5:64:2e:63:a8: f0:e5:4a:a3:4e:d4:07:bf:1f:42:f9:50:4c:11:88: f8:ab:17:1e:80:5f:d1:70:eb:d6:95:7a:81:2c:4f: 4d:cd:ad:75:ca:28:f8:49:1d:f6:1c:d3:07:9e:e6: ed:6b:a8:7c:9e:b5:3c:66:ed:12:f7:26:25:4f:b8: 7a:ce:b6:5b:ba:d9:45:1a:f1:dc:58:42:8f:0b:63: 6c:fb:92:a0:4f:09:2f:36:97:99:48:d5:c2:4c:9b: 3a:64:7c:f0:f3:4b:62:0e:c8:5a:6e:00:93:e2:3e: 4f:bb:6c:28:22:94:2c:df:1b:a1:c3:e9:0a:0b:d7: ff:e6:f5:0b:04:77:4e:2e:be:74:92:9e:94:b7:a8: c4:4d:06:b2:29:68:8b:f1:b1:60:3b:84:f7:c6:66: c5:fc:7c:90:f1:f1:8d:d6:87:10:d3:81:25:09:8e: 77:da:69:51:ee:ba:23:93:b6:55:95:1f:f7:37:42: 18:a0:51:cd:29:a0:93:46:1c:ff:35:79:59:c3:d8: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7A:DD:EB:0E:98:34:2D:70:D1:C2:82:3A:58:53:11:F6:46:E9:90 X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:82:c5:c9:97:94:f5:96:64:3d:0c:07:d2:82:4d:89:80:46: 37:71:83:bc:3c:51:dc:46:df:a9:32:87:01:de:5d:26:f4:0f: e1:fe:d7:2c:af:d9:00:b5:00:be:c1:aa:0e:cd:0a:51:e5:1a: 85:41:dc:2d:be:91:b5:f3:1b:a1:10:6d:69:f7:0c:8c:c3:e7: bf:e3:47:16:33:2b:38:c2:df:55:d4:f6:ff:9d:c7:dc:09:6c: 6c:ff:2a:1a:d9:97:b3:76:f0:49:a4:3f:53:ec:6d:8e:f4:ae: bb:49:a5:d5:9e:14:9f:85:24:12:2d:af:53:4b:22:dd:ac:97: 8e:a2:0a:9b:bd:31:31:68:7c:ef:a1:6e:6b:b5:ad:dd:e3:04: c3:df:0c:6f:bd:99:fe:bd:a8:46:17:17:46:a8:b7:0a:04:06: cb:84:8b:34:46:c8:9c:9a:f2:9b:d2:bf:08:43:96:d6:f1:f2: d4:e2:33:06:5a:25:2b:8d:24:d6:31:50:7e:67:06:65:aa:1f: 38:d9:2e:fa:5b:39:f2:95:b9:bc:b2:73:4c:72:8c:64:93:9c: 50:17:77:ef:52:e7:0d:c3:2b:dd:43:29:18:82:a5:1e:5d:f3: 18:ef:90:56:ad:c5:83:7f:85:23:13:1f:cc:15:1d:28:26:16: 35:5a:04:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvZWmW4fl6/iBkNFMF9wz1qejiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNTA5MDUxOTU2MzRaFw0yNTA5MDkwNzU1MzRaMDMxMTAvBgNV BAMTKDc5N0FEREVCMEU5ODM0MkQ3MEQxQzI4MjNBNTg1MzExRjY0NkU5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUX0uDzDZdefwJd8C8EYA1KRN iYE97Gl50hIwQpztmPVdg7dQ90Q9So1sT6utmzUh5bOw88+lZC5jqPDlSqNO1Ae/ H0L5UEwRiPirFx6AX9Fw69aVeoEsT03NrXXKKPhJHfYc0wee5u1rqHyetTxm7RL3 JiVPuHrOtlu62UUa8dxYQo8LY2z7kqBPCS82l5lI1cJMmzpkfPDzS2IOyFpuAJPi Pk+7bCgilCzfG6HD6QoL1//m9QsEd04uvnSSnpS3qMRNBrIpaIvxsWA7hPfGZsX8 fJDx8Y3WhxDTgSUJjnfaaVHuuiOTtlWVH/c3QhigUc0poJNGHP81eVnD2AhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeXrd6w6YNC1w0cKCOlhTEfZG6ZAwHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeCxcmXlPWWZD0MB9KCTYmARjdxg7w8UdxG 36kyhwHeXSb0D+H+1yyv2QC1AL7Bqg7NClHlGoVB3C2+kbXzG6EQbWn3DIzD57/j RxYzKzjC31XU9v+dx9wJbGz/KhrZl7N28EmkP1PsbY70rrtJpdWeFJ+FJBItr1NL It2sl46iCpu9MTFofO+hbmu1rd3jBMPfDG+9mf69qEYXF0aotwoEBsuEizRGyJya 8pvSvwhDltbx8tTiMwZaJSuNJNYxUH5nBmWqHzjZLvpbOfKVubyyc0xyjGSTnFAX d+9S5w3DK91DKRiCpR5d8xjvkFatxYN/hSMTH8wVHSgmFjVaBIg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:33 2025 by rpki-client