$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: lYBg7preDE+dBdJZ34hSJJWvQaFQUKQzohxcvlxXyeg= Subject key identifier: D8:27:91:1C:79:0D:C7:AD:6F:7B:05:2B:A3:2E:C5:1B:16:FC:44:D9 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 55A058DAAD18A5CD03E70934D600BDFBC7A3739C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0509 Signing time: Sat 06 Sep 2025 01:51:35 +0000 Manifest this update: Sat 06 Sep 2025 01:46:35 +0000 Manifest next update: Tue 09 Sep 2025 05:54:35 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 2: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: C7I36RhILqyI3X6sP4KqIx10yrz40eGVZT399qTTpF4=) 3: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a0:58:da:ad:18:a5:cd:03:e7:09:34:d6:00:bd:fb:c7:a3:73:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Sep 6 01:46:35 2025 GMT Not After : Sep 9 05:54:35 2025 GMT Subject: CN=D827911C790DC7AD6F7B052BA32EC51B16FC44D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3a:51:a8:a6:1a:40:2d:1f:3c:22:1e:15:42: bd:f2:0c:64:56:19:6a:4d:88:bd:9b:1a:32:b1:f2: 4d:13:ce:cb:c7:3c:bf:51:54:d5:fa:96:0c:7f:e2: 01:54:ae:a4:5b:1b:36:d8:44:1f:77:d6:dd:9f:8f: ec:e3:2d:06:b5:27:31:54:85:64:2d:c6:73:96:5d: a9:9d:36:a8:68:a8:72:1b:e4:79:0f:10:f0:0e:99: 52:49:ae:bf:f8:ba:ce:9f:e0:a6:cf:51:af:67:f4: af:67:fe:48:dd:06:08:5b:26:78:8c:ca:be:5b:91: b2:b1:da:51:0f:4a:40:3a:b3:d4:4c:ba:4d:10:0c: d8:c1:ab:e9:aa:93:8b:a9:65:a2:aa:29:bf:29:74: db:95:a9:93:1b:1e:ff:4f:91:b0:8f:13:94:55:29: 05:23:4c:2d:a8:e8:d0:b3:61:9f:ce:e8:15:be:a3: ec:b9:ac:b2:62:0e:b0:c1:d8:67:e1:72:00:0b:03: 9c:1d:c3:43:86:3d:ce:14:ac:f2:20:e8:75:76:c6: b1:cc:50:c5:a5:9b:6a:32:31:22:a9:ec:be:ae:cf: 4f:58:b2:66:d1:27:39:0c:9e:21:ac:a7:c3:96:7e: 66:48:c9:90:ea:1e:ab:92:a4:45:a0:54:ab:7e:b0: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:27:91:1C:79:0D:C7:AD:6F:7B:05:2B:A3:2E:C5:1B:16:FC:44:D9 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ca:dc:31:8c:b3:08:9c:26:1e:57:81:81:e1:a8:7f:d5:8b: 65:2e:16:8f:ce:61:d9:86:85:72:f4:70:4d:2b:42:35:f1:cb: 0b:25:ed:de:9a:ac:1c:cd:4c:d6:ba:c7:98:2d:3a:28:7d:5d: 5b:83:d2:37:f6:67:af:eb:e4:88:41:3b:93:c3:b9:90:6c:cc: 93:e0:f7:69:15:02:b6:ce:27:c7:78:7d:e6:3f:95:4c:83:6a: 9c:3b:83:ee:bc:e7:0d:86:61:3f:e3:06:52:c7:ab:06:21:10: b7:5c:7b:f4:2d:95:83:58:96:bf:76:5a:29:01:0e:c4:5d:64: d0:47:0a:2b:22:7a:29:70:08:2e:f1:bf:02:af:4c:11:a0:9d: c5:8e:a1:17:d1:1e:0c:97:eb:40:1d:b9:95:26:2c:27:60:49: e5:66:42:32:25:08:8a:78:80:19:1c:9b:2d:8b:ec:2c:6c:3c: a4:77:b7:a6:19:88:21:22:4f:c2:67:ca:0b:4b:d2:76:a0:41: 80:f0:7e:f0:37:71:30:6d:76:6d:e9:1b:cd:fb:44:c2:fa:49: a0:0a:16:d9:9b:68:b4:5c:52:47:ef:d0:84:43:33:51:03:61: 61:ff:e0:22:e0:d9:24:f2:00:aa:58:7c:60:07:f5:8e:5a:b2: c5:b1:a2:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVaBY2q0Ypc0D5wk01gC9+8ejc5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA5MDYwMTQ2MzVaFw0yNTA5MDkwNTU0MzVaMDMxMTAvBgNV BAMTKEQ4Mjc5MTFDNzkwREM3QUQ2RjdCMDUyQkEzMkVDNTFCMTZGQzQ0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOlGophpALR88Ih4VQr3yDGRW GWpNiL2bGjKx8k0TzsvHPL9RVNX6lgx/4gFUrqRbGzbYRB931t2fj+zjLQa1JzFU hWQtxnOWXamdNqhoqHIb5HkPEPAOmVJJrr/4us6f4KbPUa9n9K9n/kjdBghbJniM yr5bkbKx2lEPSkA6s9RMuk0QDNjBq+mqk4upZaKqKb8pdNuVqZMbHv9PkbCPE5RV KQUjTC2o6NCzYZ/O6BW+o+y5rLJiDrDB2GfhcgALA5wdw0OGPc4UrPIg6HV2xrHM UMWlm2oyMSKp7L6uz09YsmbRJzkMniGsp8OWfmZIyZDqHquSpEWgVKt+sGeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2CeRHHkNx61vewUroy7FGxb8RNkwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjK3DGMswicJh5XgYHhqH/Vi2UuFo/OYdmG hXL0cE0rQjXxywsl7d6arBzNTNa6x5gtOih9XVuD0jf2Z6/r5IhBO5PDuZBszJPg 92kVArbOJ8d4feY/lUyDapw7g+685w2GYT/jBlLHqwYhELdce/QtlYNYlr92WikB DsRdZNBHCisieilwCC7xvwKvTBGgncWOoRfRHgyX60AduZUmLCdgSeVmQjIlCIp4 gBkcmy2L7CxsPKR3t6YZiCEiT8JnygtL0nagQYDwfvA3cTBtdm3pG837RML6SaAK FtmbaLRcUkfv0IRDM1EDYWH/4CLg2STyAKpYfGAH9Y5assWxohc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:50 2025 by rpki-client