$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: kutM9Xstb+7Onxh80+i4TiQU+s9eSyABMEtCbbBNnxw= Subject key identifier: 59:93:92:E1:D8:21:D1:FC:08:1D:EA:3B:F3:39:0C:5A:93:A1:19:05 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 2D6E5EA12FEE19F84CEA35D293ACEC8154C4B081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 0318 Signing time: Sat 06 Sep 2025 04:02:29 +0000 Manifest this update: Sat 06 Sep 2025 03:57:29 +0000 Manifest next update: Tue 09 Sep 2025 13:43:29 +0000 Files and hashes: 1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: V/CNLhnOjWTcJ9KLGOO0ieAD7uSSdhNbOx4tcppjxKA=) 2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: ZHafjJKgXW9RsmPF8VNVEw6T28/f2O0/FZCCLymCOMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6e:5e:a1:2f:ee:19:f8:4c:ea:35:d2:93:ac:ec:81:54:c4:b0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Sep 6 03:57:29 2025 GMT Not After : Sep 9 13:43:29 2025 GMT Subject: CN=599392E1D821D1FC081DEA3BF3390C5A93A11905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:e8:35:45:67:bb:ee:d6:a1:e0:c6:c4:27: d2:17:a8:dd:ce:a5:a5:53:31:d1:96:14:ba:9f:df: 9a:bb:fe:77:87:da:fd:46:81:c0:9d:7c:61:36:d6: 53:44:e8:d7:f2:7c:ce:ef:14:32:3f:60:86:ee:97: 61:74:d5:5e:e2:ba:ac:50:e4:32:86:df:f6:ff:b4: d7:c1:0c:a6:3c:cc:93:c9:ba:b1:a5:7c:32:14:51: 7b:9f:a1:74:df:51:7c:97:46:f8:c9:ba:8e:0e:0a: 78:22:ab:1e:41:71:4d:6a:ed:18:e3:6f:75:75:d7: 69:93:79:2b:ae:f3:18:b6:fb:d5:08:8b:b8:91:e8: 7b:72:32:5a:ab:d4:c3:d3:08:ba:07:90:7c:83:9a: 68:04:e9:62:37:33:0b:88:a6:29:06:dc:69:ea:51: f7:cb:53:fc:88:33:52:bb:32:84:20:bb:8a:92:9f: e6:fb:d5:31:03:ce:0b:59:ea:3c:15:c7:49:86:16: 68:b7:22:3e:a2:7f:47:44:45:32:1c:07:5e:fa:65: ad:bc:86:90:1d:44:27:d3:56:82:d3:88:1c:ef:f6: 8b:74:e6:9b:32:4f:cb:f3:5a:b0:b3:ec:18:9d:21: e1:36:17:26:2a:e7:48:05:11:ce:c2:c2:73:2e:67: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:92:E1:D8:21:D1:FC:08:1D:EA:3B:F3:39:0C:5A:93:A1:19:05 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:76:e3:99:e3:06:f6:2f:18:45:c7:0b:58:ae:51:51:26:6e: e5:fc:b4:0a:d5:87:52:99:e9:91:45:c9:ff:e6:4f:32:09:77: 44:56:7f:ae:79:8f:34:58:f4:ea:49:ef:cc:d2:38:7b:f4:85: d7:90:de:e6:dc:26:ba:e1:6b:ea:83:e4:e3:4b:e5:d3:02:b6: b3:55:e9:d8:e2:9a:b8:d3:88:66:ee:62:8a:68:aa:9d:f5:44: d9:73:b3:62:ea:f3:8f:d9:6a:08:47:32:b5:58:30:9e:6c:5e: 70:e7:08:65:fc:e1:4f:ea:ef:13:f4:10:2d:88:95:73:00:c0: 2b:1f:a1:a1:ab:f2:f7:61:a5:4b:68:b2:56:fa:b7:c0:43:99: 65:66:50:74:6c:e3:4b:df:f4:98:81:a0:b4:25:6f:76:a5:b3: 87:a3:ae:39:00:30:ad:6d:78:ce:dd:c5:dd:6e:40:aa:d7:a6: 54:09:42:6d:ff:89:4e:8e:e4:a1:65:1c:6e:82:28:7e:72:c9: bb:c0:07:33:75:31:a7:f1:8a:20:06:6b:2a:e4:62:ec:d0:fd: d0:1c:48:4a:d8:d4:5f:74:cb:81:df:9c:be:44:53:b0:71:4d: 7d:05:e8:4d:11:51:9f:60:ed:bb:a7:a9:10:97:6d:12:17:7e: 0f:de:c4:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULW5eoS/uGfhM6jXSk6zsgVTEsIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTA5MDYwMzU3MjlaFw0yNTA5MDkxMzQzMjlaMDMxMTAvBgNV BAMTKDU5OTM5MkUxRDgyMUQxRkMwODFERUEzQkYzMzkwQzVBOTNBMTE5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxOg1RWe77tah4MbEJ9IXqN3O paVTMdGWFLqf35q7/neH2v1GgcCdfGE21lNE6NfyfM7vFDI/YIbul2F01V7iuqxQ 5DKG3/b/tNfBDKY8zJPJurGlfDIUUXufoXTfUXyXRvjJuo4OCngiqx5BcU1q7Rjj b3V112mTeSuu8xi2+9UIi7iR6HtyMlqr1MPTCLoHkHyDmmgE6WI3MwuIpikG3Gnq UffLU/yIM1K7MoQgu4qSn+b71TEDzgtZ6jwVx0mGFmi3Ij6if0dERTIcB176Za28 hpAdRCfTVoLTiBzv9ot05psyT8vzWrCz7BidIeE2FyYq50gFEc7CwnMuZ1KXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZOS4dgh0fwIHeo78zkMWpOhGQUwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9245njBvYvGEXHC1iuUVEmbuX8tArVh1KZ 6ZFFyf/mTzIJd0RWf655jzRY9OpJ78zSOHv0hdeQ3ubcJrrha+qD5ONL5dMCtrNV 6djimrjTiGbuYopoqp31RNlzs2Lq84/ZaghHMrVYMJ5sXnDnCGX84U/q7xP0EC2I lXMAwCsfoaGr8vdhpUtoslb6t8BDmWVmUHRs40vf9JiBoLQlb3als4ejrjkAMK1t eM7dxd1uQKrXplQJQm3/iU6O5KFlHG6CKH5yybvABzN1MafxiiAGayrkYuzQ/dAc SErY1F90y4HfnL5EU7BxTX0F6E0RUZ9g7bunqRCXbRIXfg/exCA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:20 2025 by rpki-client