$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: C+3+TT/zHL2p4VvkZEbiZT+SyaPepDQSlFZcgj/wrUc= Subject key identifier: D4:E7:B4:E7:38:60:58:FE:4E:6C:CD:0E:5E:5A:E5:0B:CC:1E:82:7B Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 29617BC27637DDF2F06C9F7F783A2F8CFD24C232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: C9 Signing time: Sat 06 Sep 2025 15:21:22 +0000 Manifest this update: Sat 06 Sep 2025 15:16:22 +0000 Manifest next update: Wed 10 Sep 2025 00:03:22 +0000 Files and hashes: 1: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: zMH6PVYuQvR8Lp9vBPqjWmGeT4KxBpXxOLnNBCCROFQ=) 2: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:61:7b:c2:76:37:dd:f2:f0:6c:9f:7f:78:3a:2f:8c:fd:24:c2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Sep 6 15:16:22 2025 GMT Not After : Sep 10 00:03:22 2025 GMT Subject: CN=D4E7B4E7386058FE4E6CCD0E5E5AE50BCC1E827B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:76:ac:83:a1:9a:29:a7:a1:bf:3d:d9:fa: f1:ea:50:f0:a9:19:95:60:cd:00:0c:34:84:2b:15: 0f:80:82:79:7b:4d:78:7d:9a:be:58:a0:11:d3:45: 3e:e6:6d:50:03:4e:36:21:93:c5:da:7a:7b:eb:dd: 0a:95:bc:8f:45:71:16:11:24:d4:be:e0:63:34:0c: ec:5f:74:5b:ed:94:96:ef:12:07:fc:d3:8b:bf:2f: e8:fa:4b:f6:d5:7c:46:ac:66:db:99:92:af:ef:4e: 32:fc:c5:cb:42:73:73:69:0e:1a:fe:b5:d8:b2:6d: 85:5a:61:40:ec:78:95:93:46:52:a0:57:fd:37:d3: de:88:52:14:39:90:0f:50:21:1c:05:b6:3d:7e:4d: c7:6d:67:8d:78:7f:b6:b9:c5:d7:b1:29:26:8d:62: 48:4e:1f:10:7a:4f:d9:02:44:ac:0f:d8:04:0f:1d: bc:3e:a2:29:74:d1:e8:c7:db:cd:67:96:d0:da:7b: b6:8a:ef:c1:aa:05:1b:04:e5:91:b7:cf:ea:06:f1: 88:47:65:84:d3:19:9c:b3:16:6a:9e:bd:70:a0:ab: a4:10:95:c5:85:a7:2d:74:2f:ba:ec:92:a4:f9:81: a1:e6:3d:4a:99:af:66:75:20:a5:c8:f9:be:f2:87: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E7:B4:E7:38:60:58:FE:4E:6C:CD:0E:5E:5A:E5:0B:CC:1E:82:7B X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:63:94:22:ad:23:ff:1e:af:e7:06:3c:ac:e8:2c:68:ec:33: eb:cb:bb:e4:76:f5:23:bf:3b:3d:db:a7:0a:2e:41:10:5d:27: b5:c3:9b:5f:19:9f:62:3c:47:e0:9e:9f:26:4b:ce:14:e2:71: e7:15:b8:7c:2e:e5:36:cd:02:50:c1:c1:bc:12:4c:55:c4:27: b8:6d:ce:10:17:d6:76:50:9b:90:89:1c:07:72:72:b3:36:2b: b9:c7:90:b1:3f:87:93:80:69:80:da:06:cc:94:95:6d:21:87: a0:c2:26:b0:00:ae:e8:22:0f:bc:9e:0c:f9:c3:81:dc:0d:fd: 92:ea:cf:c3:61:3b:9b:a8:64:bd:cf:a1:15:af:49:20:79:ce: a2:10:20:20:6b:fc:e7:9a:68:77:bd:e2:4d:fc:7c:ba:f4:e2: 4c:2f:a7:ed:5d:48:aa:26:10:0b:dd:7e:16:20:1b:8a:f1:f2: 77:13:f3:8e:19:db:08:6d:3c:f9:82:87:55:97:09:36:9e:38: c4:73:30:6c:82:93:2e:c0:b1:80:1f:61:c8:97:85:f6:6c:3b: 6d:3d:6f:61:7c:7e:05:25:20:a3:35:63:1b:77:56:1c:ca:cd: 5b:96:76:11:de:74:e1:50:71:51:ec:f4:b4:0c:ab:2f:40:1c: 32:44:38:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWF7wnY33fLwbJ9/eDovjP0kwjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNTA5MDYxNTE2MjJaFw0yNTA5MTAwMDAzMjJaMDMxMTAvBgNV BAMTKEQ0RTdCNEU3Mzg2MDU4RkU0RTZDQ0QwRTVFNUFFNTBCQ0MxRTgyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDXasg6GaKaehvz3Z+vHqUPCp GZVgzQAMNIQrFQ+Agnl7TXh9mr5YoBHTRT7mbVADTjYhk8Xaenvr3QqVvI9FcRYR JNS+4GM0DOxfdFvtlJbvEgf804u/L+j6S/bVfEasZtuZkq/vTjL8xctCc3NpDhr+ tdiybYVaYUDseJWTRlKgV/03096IUhQ5kA9QIRwFtj1+TcdtZ414f7a5xdexKSaN YkhOHxB6T9kCRKwP2AQPHbw+oil00ejH281nltDae7aK78GqBRsE5ZG3z+oG8YhH ZYTTGZyzFmqevXCgq6QQlcWFpy10L7rskqT5gaHmPUqZr2Z1IKXI+b7yhw0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Oe05zhgWP5ObM0OXlrlC8wegnswHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFjlCKtI/8er+cGPKzoLGjsM+vLu+R29SO/ Oz3bpwouQRBdJ7XDm18Zn2I8R+CenyZLzhTicecVuHwu5TbNAlDBwbwSTFXEJ7ht zhAX1nZQm5CJHAdycrM2K7nHkLE/h5OAaYDaBsyUlW0hh6DCJrAArugiD7yeDPnD gdwN/ZLqz8NhO5uoZL3PoRWvSSB5zqIQICBr/OeaaHe94k38fLr04kwvp+1dSKom EAvdfhYgG4rx8ncT844Z2whtPPmCh1WXCTaeOMRzMGyCky7AsYAfYciXhfZsO209 b2F8fgUlIKM1Yxt3VhzKzVuWdhHedOFQcVHs9LQMqy9AHDJEOLE= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:09 2025 by rpki-client