$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: o0+btRlIvLVq135B4qrgs4ntkZdZu+UcBVxGcMQFngw= Subject key identifier: F2:7B:16:41:6A:56:1B:5F:95:FA:9C:C0:81:C6:A8:E0:11:90:81:5F Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 2A24A973FCA85AEDE3197045FDE0B1E1B6EE7C04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 0125 Signing time: Tue 02 Sep 2025 23:22:17 +0000 Manifest this update: Tue 02 Sep 2025 23:17:17 +0000 Manifest next update: Sat 06 Sep 2025 10:04:17 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: i9Jt7dDtVgLOXxDUftr0u0aLV4Q5pmh9/nOQOKCD3NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:24:a9:73:fc:a8:5a:ed:e3:19:70:45:fd:e0:b1:e1:b6:ee:7c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Sep 2 23:17:17 2025 GMT Not After : Sep 6 10:04:17 2025 GMT Subject: CN=F27B16416A561B5F95FA9CC081C6A8E01190815F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:14:54:c8:92:53:15:c7:52:33:b1:c8:90: 16:5e:43:72:bd:13:c2:3a:ec:57:85:17:5a:dd:8c: c6:bf:5d:e7:18:6c:14:ab:b7:1e:79:1e:b1:8f:25: fa:5f:0e:82:5f:0e:0a:26:91:05:0a:04:67:e9:e6: 1b:57:d4:8f:97:64:2d:ef:8d:c1:89:33:a0:e5:41: a3:5f:1b:64:78:1d:84:2e:7f:c7:5f:00:4f:e9:89: 37:77:ac:98:02:0d:e8:59:84:42:59:74:ce:57:15: 23:66:7a:5c:49:a9:82:f7:df:fe:62:13:f2:9b:09: 73:36:d6:32:40:ce:1c:dc:7f:ed:70:3f:ad:ce:bf: a7:5a:7c:d2:e4:6d:26:a3:b8:6c:b3:61:11:af:1d: 4d:f2:aa:15:e8:80:32:df:2f:c2:a7:76:29:b6:8a: 81:a7:cb:8a:ce:99:99:b0:61:6b:f6:6b:f6:8d:ba: 87:1e:6e:04:3c:af:33:7f:44:87:cc:b2:ff:dc:00: ea:b8:fd:e6:a5:8b:8d:68:8d:9e:46:53:ad:fc:9b: 0a:af:49:1a:9a:ea:a3:41:14:5d:28:ad:f6:80:ea: 0f:3d:9e:52:ac:c6:4e:42:dc:23:24:dc:b0:8f:05: 4d:ea:4a:d3:65:1f:5b:2f:2e:c5:c9:1a:15:7b:65: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:16:41:6A:56:1B:5F:95:FA:9C:C0:81:C6:A8:E0:11:90:81:5F X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:83:98:48:3c:48:ca:a5:0c:f4:2e:2c:4a:f8:24:3d:b0: 59:aa:42:16:d4:8a:83:ed:c8:e6:a1:05:36:bc:8d:b2:33:51: e8:ea:4a:fb:f5:f8:a1:16:3d:c3:d6:63:5e:76:58:fe:d1:02: 1e:d6:2e:01:f8:56:2f:a0:e1:2a:1a:4d:ff:43:1c:80:fd:70: 79:f1:22:71:68:c9:64:41:44:3c:5f:a2:b1:76:6d:ec:cb:50: d9:50:89:a0:ff:37:3b:1c:40:30:5e:9a:b4:44:bb:d7:b7:49: f4:64:e4:0c:04:6f:36:75:9a:61:be:58:97:ec:df:5e:18:65: 61:35:72:c9:a9:d2:28:63:68:25:d7:d4:80:84:4e:11:0b:8e: e5:dc:60:87:cd:46:d0:25:c5:0b:93:5e:bd:20:6f:38:78:e0: 63:54:23:72:4e:7e:ad:60:2b:db:dd:6a:f9:1c:da:e6:00:ea: 55:29:6d:b4:e4:1c:2d:b6:ec:e6:94:81:65:cf:e6:42:f6:39: 48:b6:09:99:dd:96:8a:e1:d8:b4:b2:3c:dd:10:72:07:3d:45: d4:75:70:67:5d:0c:ab:c9:91:55:49:55:4f:5b:f7:ac:ff:f8: db:d5:70:16:dd:e5:ae:0a:d8:a8:58:9f:28:11:08:38:21:5b: 5b:6c:1d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiSpc/yoWu3jGXBF/eCx4bbufAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA5MDIyMzE3MTdaFw0yNTA5MDYxMDA0MTdaMDMxMTAvBgNV BAMTKEYyN0IxNjQxNkE1NjFCNUY5NUZBOUNDMDgxQzZBOEUwMTE5MDgxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oxRUyJJTFcdSM7HIkBZeQ3K9 E8I67FeFF1rdjMa/XecYbBSrtx55HrGPJfpfDoJfDgomkQUKBGfp5htX1I+XZC3v jcGJM6DlQaNfG2R4HYQuf8dfAE/piTd3rJgCDehZhEJZdM5XFSNmelxJqYL33/5i E/KbCXM21jJAzhzcf+1wP63Ov6dafNLkbSajuGyzYRGvHU3yqhXogDLfL8Kndim2 ioGny4rOmZmwYWv2a/aNuocebgQ8rzN/RIfMsv/cAOq4/eali41ojZ5GU638mwqv SRqa6qNBFF0orfaA6g89nlKsxk5C3CMk3LCPBU3qStNlH1svLsXJGhV7ZZyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nsWQWpWG1+V+pzAgcao4BGQgV8wHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2ag5hIPEjKpQz0LixK+CQ9sFmqQhbUioPt yOahBTa8jbIzUejqSvv1+KEWPcPWY152WP7RAh7WLgH4Vi+g4SoaTf9DHID9cHnx InFoyWRBRDxforF2bezLUNlQiaD/NzscQDBemrREu9e3SfRk5AwEbzZ1mmG+WJfs 314YZWE1csmp0ihjaCXX1ICEThELjuXcYIfNRtAlxQuTXr0gbzh44GNUI3JOfq1g K9vdavkc2uYA6lUpbbTkHC227OaUgWXP5kL2OUi2CZndlorh2LSyPN0Qcgc9RdR1 cGddDKvJkVVJVU9b96z/+NvVcBbd5a4K2KhYnygRCDghW1tsHSs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:41 2025 by rpki-client