$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: fcLM3+hIIjecj+tLcss2Jf0zMk4o7a5cGMO11vI73/I= Subject key identifier: 7B:CE:3A:27:F9:0B:25:70:06:D9:5F:55:9E:58:1A:9C:41:6F:01:A0 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 6D0991795E55CB6436606FF9CB30D7F607455BE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 0188 Signing time: Fri 05 Sep 2025 13:41:44 +0000 Manifest this update: Fri 05 Sep 2025 13:36:44 +0000 Manifest next update: Mon 08 Sep 2025 15:28:44 +0000 Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: 4pXPb4bWEWKeDU/pike2XPt7mte7vGRQq/GQUMuJtH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:09:91:79:5e:55:cb:64:36:60:6f:f9:cb:30:d7:f6:07:45:5b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Sep 5 13:36:44 2025 GMT Not After : Sep 8 15:28:44 2025 GMT Subject: CN=7BCE3A27F90B257006D95F559E581A9C416F01A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:cf:c3:9f:b9:0b:08:09:09:39:c1:01:9f: 4b:5f:fb:d1:25:9b:4b:ea:e5:c9:8b:45:c5:49:ec: ea:4b:c7:97:2b:62:51:8f:39:13:5d:24:6c:32:36: e7:d5:28:d3:71:f5:5b:07:4c:02:c7:16:9a:dc:f3: a5:de:0a:09:d9:2a:03:ee:e7:8a:1f:e0:d8:16:f7: 6a:06:a5:d4:cb:da:3d:0f:4a:90:8e:fb:6d:b2:df: e5:3a:16:22:a1:0c:85:1e:5d:c4:26:0a:8a:f0:18: 4c:5d:6d:11:49:ce:ed:75:00:7e:23:47:1c:a1:9f: d4:7c:2a:2d:7c:eb:15:b8:7c:ae:c3:85:93:70:a9: d7:65:71:6e:2b:d9:26:00:23:b6:77:d7:3a:65:2c: dc:82:f1:1f:e0:aa:73:4c:48:b2:13:2c:9c:1f:f5: c2:dc:d0:0f:da:7a:d3:c8:7b:54:77:7b:1f:a2:35: d2:ab:5c:f7:74:38:b9:5e:82:90:7a:0d:dc:a5:ef: 89:17:9c:e6:d7:34:06:41:3a:3e:f7:2e:68:63:33: 93:42:eb:2c:8c:40:63:19:2b:a4:c3:6a:47:81:4b: bf:5a:81:1d:dd:e6:e1:5b:34:74:e5:d1:0c:f7:9c: 0e:e8:07:21:24:f4:20:19:44:3b:05:f8:4c:7c:8c: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:3A:27:F9:0B:25:70:06:D9:5F:55:9E:58:1A:9C:41:6F:01:A0 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:19:69:a0:ed:b4:94:bb:8c:28:16:8a:67:31:04:dc:fd:0c: 13:fd:12:c1:59:7e:fc:3a:86:1d:f5:fd:93:9d:e6:a1:c1:9e: dc:60:a6:8f:e7:1d:be:ed:88:74:aa:c0:36:3e:30:72:74:2f: 7d:0f:f0:9b:33:f0:26:e9:cf:0d:ab:54:fb:1e:54:28:6b:2e: 92:14:32:de:86:37:79:46:19:6c:ca:5a:6e:3a:4c:75:4a:56: 92:4b:30:6c:e8:f6:2d:0e:8f:4c:58:67:ec:de:dd:5a:88:eb: c9:d5:3f:75:96:ba:2a:99:ec:e5:ea:ac:ce:60:8a:ab:d3:5c: 80:b0:14:08:d0:16:5c:69:fd:64:9c:d1:d5:68:50:8b:40:23: f2:99:87:21:20:01:6d:e3:2e:7f:36:bc:ce:62:0b:88:eb:81: ed:9f:e6:29:97:d9:de:96:47:dc:48:c3:ad:c0:a0:b3:52:5d: 9b:7b:b9:8e:cc:9a:86:cd:80:33:42:e9:46:41:ef:ae:af:05: 95:38:17:3e:58:40:57:d5:33:6b:06:88:30:6a:e2:f6:92:8f: 60:9b:65:fe:6b:38:f7:70:28:6d:ca:51:07:3b:29:2c:17:83: f2:61:2e:f7:de:98:40:63:ad:bf:a9:14:6c:0b:a1:5a:6a:d2: 51:71:e0:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQmReV5Vy2Q2YG/5yzDX9gdFW+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTA5MDUxMzM2NDRaFw0yNTA5MDgxNTI4NDRaMDMxMTAvBgNV BAMTKDdCQ0UzQTI3RjkwQjI1NzAwNkQ5NUY1NTlFNTgxQTlDNDE2RjAxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdF8/Dn7kLCAkJOcEBn0tf+9El m0vq5cmLRcVJ7OpLx5crYlGPORNdJGwyNufVKNNx9VsHTALHFprc86XeCgnZKgPu 54of4NgW92oGpdTL2j0PSpCO+22y3+U6FiKhDIUeXcQmCorwGExdbRFJzu11AH4j Rxyhn9R8Ki186xW4fK7DhZNwqddlcW4r2SYAI7Z31zplLNyC8R/gqnNMSLITLJwf 9cLc0A/aetPIe1R3ex+iNdKrXPd0OLlegpB6Ddyl74kXnObXNAZBOj73LmhjM5NC 6yyMQGMZK6TDakeBS79agR3d5uFbNHTl0Qz3nA7oByEk9CAZRDsF+Ex8jFWXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe846J/kLJXAG2V9VnlganEFvAaAwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYZaaDttJS7jCgWimcxBNz9DBP9EsFZfvw6 hh31/ZOd5qHBntxgpo/nHb7tiHSqwDY+MHJ0L30P8Jsz8Cbpzw2rVPseVChrLpIU Mt6GN3lGGWzKWm46THVKVpJLMGzo9i0Oj0xYZ+ze3VqI68nVP3WWuiqZ7OXqrM5g iqvTXICwFAjQFlxp/WSc0dVoUItAI/KZhyEgAW3jLn82vM5iC4jrge2f5imX2d6W R9xIw63AoLNSXZt7uY7MmobNgDNC6UZB766vBZU4Fz5YQFfVM2sGiDBq4vaSj2Cb Zf5rOPdwKG3KUQc7KSwXg/JhLvfemEBjrb+pFGwLoVpq0lFx4G4= -----END CERTIFICATE-----Generated at Sun Sep 7 03:38:12 2025 by rpki-client