$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: oE2M0n2YeHjNWsNQ21MVZiDt63IOlhFpuw/w1a9sBnU= Subject key identifier: 7B:CA:A7:7C:C4:AE:18:3A:63:FB:C3:1D:66:23:46:F0:D5:83:09:4C Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 1F70BE2A4BABC9C267FD806A60F22CFB3178E42E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 0182 Signing time: Fri 05 Sep 2025 11:10:57 +0000 Manifest this update: Fri 05 Sep 2025 11:05:57 +0000 Manifest next update: Mon 08 Sep 2025 21:07:57 +0000 Files and hashes: 1: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: 2KuB7542AQkVou/JyxMyr/yd2JdDR6tuP8R1W309h8M=) 2: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 3: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 4: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 5: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:70:be:2a:4b:ab:c9:c2:67:fd:80:6a:60:f2:2c:fb:31:78:e4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Sep 5 11:05:57 2025 GMT Not After : Sep 8 21:07:57 2025 GMT Subject: CN=7BCAA77CC4AE183A63FBC31D662346F0D583094C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:4a:fd:e8:29:62:28:0b:43:4a:b5:e7:81: fe:ec:5a:95:8f:2b:3f:12:d4:4a:ea:6a:97:f4:a5: a3:8e:78:39:f4:f1:1c:19:51:1b:db:f8:9e:33:f0: a8:d0:5a:15:97:75:f5:a3:26:b4:33:84:8a:f6:a1: 6c:15:35:63:eb:a3:60:aa:95:63:53:d5:e3:e0:c5: aa:1e:d5:4c:fe:ad:3d:71:24:34:77:f2:f5:47:d9: 10:eb:33:90:c7:53:72:f1:22:1c:ec:c9:10:d6:5b: 29:15:b2:0a:39:90:b4:aa:f6:44:e3:e0:c2:64:e4: 2e:6f:0e:ee:cb:40:1e:3c:bc:42:1e:ef:9c:0a:0e: 86:23:fb:bd:46:0f:ec:8c:8b:86:9a:08:11:0f:49: d8:d0:25:72:46:13:4c:2b:23:ed:e4:da:49:c9:b0: 0b:16:95:3c:d6:63:92:38:77:f5:44:76:4c:43:9c: 2d:5b:1a:5b:bc:f1:9b:25:34:cc:e6:f7:8a:be:af: a8:2f:bf:f4:f0:7f:4a:40:86:bd:a5:26:9a:e3:fa: dc:02:a6:00:a9:29:1f:61:47:a2:e9:fd:89:fe:36: ba:43:f7:2e:9d:dd:3a:8d:51:25:af:3b:e4:52:fb: 0b:d4:ca:26:df:14:64:fb:0e:b1:63:1d:b7:6e:d6: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CA:A7:7C:C4:AE:18:3A:63:FB:C3:1D:66:23:46:F0:D5:83:09:4C X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:49:0e:16:27:01:e0:49:ce:24:ca:ff:6c:04:59:6a:33:78: 26:a4:76:94:52:00:97:b0:00:74:59:52:37:6c:99:b6:47:d2: 74:77:d4:3c:90:12:7f:50:1d:7c:75:7e:69:06:02:4a:a8:dd: a9:cb:8a:87:2d:db:c2:9a:96:a0:ec:39:39:07:7d:4e:0b:c0: 9a:fa:87:dd:84:18:46:1c:5f:98:ad:89:11:3e:a0:db:53:5f: f0:b9:20:75:03:2f:e5:14:a2:88:f5:7b:f2:42:a4:23:1a:94: 9b:a4:87:3c:0c:d3:35:cb:0c:e6:7e:a2:56:98:1d:ca:19:ae: 31:48:99:ac:7c:4a:67:06:e5:16:4f:90:dc:ab:23:f2:c3:3d: 70:ad:20:c7:37:7e:e4:1e:88:1e:97:5f:16:72:a3:a6:cd:7a: e3:1f:b5:8b:27:06:e4:37:21:56:eb:07:48:4a:47:92:49:5b: 9f:50:f9:fb:fd:a8:49:bd:ae:c7:6d:33:9a:53:bf:14:c9:ee: 1b:da:26:04:ef:62:9c:64:f5:c1:c4:e0:a5:cd:28:9d:bb:29: e1:f2:a0:9e:6c:31:03:e1:86:39:d5:f7:18:5f:ac:67:3b:fd: df:3d:de:de:ec:8c:81:ff:a6:ab:c2:0c:4a:b6:42:3e:b7:df: 10:06:8c:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3C+KkurycJn/YBqYPIs+zF45C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTA5MDUxMTA1NTdaFw0yNTA5MDgyMTA3NTdaMDMxMTAvBgNV BAMTKDdCQ0FBNzdDQzRBRTE4M0E2M0ZCQzMxRDY2MjM0NkYwRDU4MzA5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo9Er96CliKAtDSrXngf7sWpWP Kz8S1Erqapf0paOOeDn08RwZURvb+J4z8KjQWhWXdfWjJrQzhIr2oWwVNWPro2Cq lWNT1ePgxaoe1Uz+rT1xJDR38vVH2RDrM5DHU3LxIhzsyRDWWykVsgo5kLSq9kTj 4MJk5C5vDu7LQB48vEIe75wKDoYj+71GD+yMi4aaCBEPSdjQJXJGE0wrI+3k2knJ sAsWlTzWY5I4d/VEdkxDnC1bGlu88ZslNMzm94q+r6gvv/Twf0pAhr2lJprj+twC pgCpKR9hR6Lp/Yn+NrpD9y6d3TqNUSWvO+RS+wvUyibfFGT7DrFjHbdu1jC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe8qnfMSuGDpj+8MdZiNG8NWDCUwwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1JDhYnAeBJziTK/2wEWWozeCakdpRSAJew AHRZUjdsmbZH0nR31DyQEn9QHXx1fmkGAkqo3anLioct28KalqDsOTkHfU4LwJr6 h92EGEYcX5itiRE+oNtTX/C5IHUDL+UUooj1e/JCpCMalJukhzwM0zXLDOZ+olaY HcoZrjFImax8SmcG5RZPkNyrI/LDPXCtIMc3fuQeiB6XXxZyo6bNeuMftYsnBuQ3 IVbrB0hKR5JJW59Q+fv9qEm9rsdtM5pTvxTJ7hvaJgTvYpxk9cHE4KXNKJ27KeHy oJ5sMQPhhjnV9xhfrGc7/d893t7sjIH/pqvCDEq2Qj633xAGjDs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:53 2025 by rpki-client