$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: gRBfjFAswztVKJs6/PiuvgdGqMhGvS0+g2M9EE/xs1g= Subject key identifier: E0:1A:15:A8:09:7A:08:40:5B:D8:42:BF:17:CE:F6:8F:72:48:29:AE Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 21F3AA6E22C235269D5A04AB171033CC6EE59ADD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: C3 Signing time: Sun 07 Sep 2025 01:41:33 +0000 Manifest this update: Sun 07 Sep 2025 01:36:33 +0000 Manifest next update: Wed 10 Sep 2025 04:37:33 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: 5/XCqWwdSaSqnw1W15wxIzZ/FVQ31rfH8hP5BpU2qQM=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f3:aa:6e:22:c2:35:26:9d:5a:04:ab:17:10:33:cc:6e:e5:9a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Sep 7 01:36:33 2025 GMT Not After : Sep 10 04:37:33 2025 GMT Subject: CN=E01A15A8097A08405BD842BF17CEF68F724829AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:2e:43:41:13:90:9e:5f:82:5e:45:93:06: 83:ba:47:ef:45:3a:fd:38:79:01:ec:b8:ba:54:82: 8b:10:5a:41:7a:d5:73:f0:11:d3:5e:b5:24:be:9b: 10:bb:ce:19:9e:f6:47:33:de:28:7f:2a:51:8a:62: b7:41:93:af:16:29:38:31:4c:d1:b1:8e:bd:67:2d: f3:f3:bb:44:0d:a1:c2:a2:09:e7:c9:ed:fa:b5:d1: 4b:2d:dc:d5:83:af:8b:2b:ba:28:3b:86:cc:b1:6d: 64:df:bd:91:9f:ee:f6:53:a7:79:34:29:c0:55:fa: 01:cd:4e:29:5e:a3:bc:ff:1b:3f:b9:07:10:da:44: 79:7b:47:5e:d6:23:bb:74:b1:29:7b:f2:49:1c:59: 74:66:c0:c3:de:9e:5f:13:38:07:83:58:17:16:b3: 56:7b:65:79:04:54:a0:1a:f3:0f:08:e5:d0:37:96: 00:b5:a4:b1:74:6e:b0:69:be:96:b2:9d:85:3c:8c: da:bd:a8:24:eb:4d:02:e8:ba:05:08:7b:33:7a:e8: d1:82:35:24:8c:33:d9:a9:b8:66:e6:7e:3b:47:4f: 54:9a:e5:8a:61:7c:8b:1a:8b:c5:55:ee:b5:8e:8f: 69:38:e6:f4:62:20:66:38:65:3e:5a:33:04:ff:e3: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1A:15:A8:09:7A:08:40:5B:D8:42:BF:17:CE:F6:8F:72:48:29:AE X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7c:63:00:66:33:31:67:d7:71:9c:3a:65:ca:aa:81:ee:44: ac:72:82:d6:83:45:90:09:29:38:1b:21:59:89:fb:47:aa:20: 7b:14:d9:86:fe:c3:12:d8:32:66:9c:b2:aa:89:ce:36:22:b7: 21:fa:ad:e9:14:04:1f:fd:a6:30:04:28:70:71:de:1c:65:7a: bf:8a:c5:84:b0:be:49:93:d5:02:56:13:9d:0a:2d:50:3d:e0: 1e:16:8a:b6:06:ae:3d:f2:71:d4:70:cc:ed:3d:1f:f0:73:6d: ce:23:91:0c:fd:4f:64:ab:a0:41:22:25:a2:6b:5e:76:ef:12: 12:04:d9:6d:e9:3f:6a:5e:ad:2d:3d:59:59:ad:03:91:be:5d: 3e:64:32:ca:7d:64:86:fb:ac:ba:ea:cb:bf:c4:bb:97:9d:dc: 5e:6c:e9:c4:83:5d:0d:84:bc:18:43:1d:10:10:c2:87:01:1b: b3:87:58:c4:be:3f:61:33:0a:99:55:f2:f2:01:d0:71:d0:32: 60:3a:f0:2a:40:0f:42:4c:67:bb:b5:52:ff:06:69:73:1d:c5: a6:fd:b4:c5:3a:52:f5:17:d6:37:77:79:b2:1d:ec:69:7a:20: 2b:93:7e:bc:54:fb:f4:17:dc:7d:f3:81:9c:d2:9b:0e:0a:f4: 10:93:07:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfOqbiLCNSadWgSrFxAzzG7lmt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTA5MDcwMTM2MzNaFw0yNTA5MTAwNDM3MzNaMDMxMTAvBgNV BAMTKEUwMUExNUE4MDk3QTA4NDA1QkQ4NDJCRjE3Q0VGNjhGNzI0ODI5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4S5DQROQnl+CXkWTBoO6R+9F Ov04eQHsuLpUgosQWkF61XPwEdNetSS+mxC7zhme9kcz3ih/KlGKYrdBk68WKTgx TNGxjr1nLfPzu0QNocKiCefJ7fq10Ust3NWDr4sruig7hsyxbWTfvZGf7vZTp3k0 KcBV+gHNTileo7z/Gz+5BxDaRHl7R17WI7t0sSl78kkcWXRmwMPenl8TOAeDWBcW s1Z7ZXkEVKAa8w8I5dA3lgC1pLF0brBpvpaynYU8jNq9qCTrTQLougUIezN66NGC NSSMM9mpuGbmfjtHT1Sa5YphfIsai8VV7rWOj2k45vRiIGY4ZT5aMwT/48sXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4BoVqAl6CEBb2EK/F872j3JIKa4wHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJt8YwBmMzFn13GcOmXKqoHuRKxygtaDRZAJ KTgbIVmJ+0eqIHsU2Yb+wxLYMmacsqqJzjYityH6rekUBB/9pjAEKHBx3hxler+K xYSwvkmT1QJWE50KLVA94B4WirYGrj3ycdRwzO09H/Bzbc4jkQz9T2SroEEiJaJr XnbvEhIE2W3pP2perS09WVmtA5G+XT5kMsp9ZIb7rLrqy7/Eu5ed3F5s6cSDXQ2E vBhDHRAQwocBG7OHWMS+P2EzCplV8vIB0HHQMmA68CpAD0JMZ7u1Uv8GaXMdxab9 tMU6UvUX1jd3ebId7Gl6ICuTfrxU+/QX3H3zgZzSmw4K9BCTB64= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:25 2025 by rpki-client