$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: /BVODcAVIZfXbp4So4y5eSOqEucG1KkSnWloevx8344= Subject key identifier: 28:74:61:B8:D7:90:FF:6D:7F:D4:C7:63:F6:93:F4:D8:67:CA:1C:E8 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 1B4AAFEC3C18F0F4FC6B7DAC2A68EA2615979723 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01A9 Signing time: Fri 05 Sep 2025 16:01:03 +0000 Manifest this update: Fri 05 Sep 2025 15:56:03 +0000 Manifest next update: Tue 09 Sep 2025 01:43:03 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) 2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: haqH7T7+MAFi/Wq+XtUlecFhNlGHjJ7BM7JOFSsfVY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4a:af:ec:3c:18:f0:f4:fc:6b:7d:ac:2a:68:ea:26:15:97:97:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Sep 5 15:56:03 2025 GMT Not After : Sep 9 01:43:03 2025 GMT Subject: CN=287461B8D790FF6D7FD4C763F693F4D867CA1CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:e6:0e:1b:66:6b:3b:a3:c2:73:76:63:31: 48:82:b1:4a:f6:9d:50:ad:c2:10:aa:72:53:34:da: 01:e0:3a:2d:b0:56:d5:dd:e9:c2:2d:80:94:17:ee: c2:66:33:13:53:6b:4e:77:f6:03:3c:9a:48:34:ce: b3:f2:36:4f:40:a4:31:8a:7b:10:c9:90:61:42:d4: 17:c5:02:5d:1a:07:4c:f5:aa:be:5c:06:bc:58:f2: fa:4d:2b:97:ab:b4:6f:03:5d:77:ad:91:14:e2:8a: 69:ef:b1:94:e8:7b:43:74:16:ad:8c:06:10:0a:d7: 29:ae:4a:e6:df:f1:c6:b3:75:9f:46:a8:2e:28:45: 6d:89:4c:94:27:e9:22:3c:b2:da:26:57:72:9d:1c: d3:c1:80:db:2d:37:9d:34:70:1e:e2:04:ba:70:a8: 02:f4:fb:26:50:a2:78:a6:d6:ec:dd:38:7a:ec:f7: a5:5c:01:b9:66:4b:e2:50:2a:4f:d8:39:bf:0a:d3: 50:9c:46:7b:08:6e:bd:90:c4:e4:8a:97:4e:37:2f: b2:f4:45:ef:16:f2:03:d9:4e:52:6a:2d:77:39:5e: 06:69:f6:6f:da:0e:7e:d5:d9:21:bb:20:a3:f4:64: c2:3c:df:9d:f0:02:f5:11:88:d8:0b:df:ed:69:e5: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:61:B8:D7:90:FF:6D:7F:D4:C7:63:F6:93:F4:D8:67:CA:1C:E8 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c2:30:39:87:4d:94:90:88:c7:c9:85:ce:01:48:cb:c6:4b: 4a:9c:82:71:ed:4f:46:4c:88:f2:77:2d:b6:be:42:2d:f3:a9: 10:b7:93:08:d2:be:07:e6:75:0c:50:49:e1:01:fa:1f:76:af: fa:c6:64:35:89:e4:06:77:a7:8c:e3:b4:3f:b0:db:d2:38:8d: 55:11:a0:c2:1c:45:65:e0:05:dc:b1:54:15:39:b5:86:18:33: fb:8b:55:91:10:9f:9d:0a:1d:f7:08:97:2b:cd:8b:23:3d:4c: b3:2b:11:2c:3a:99:8b:20:43:2f:39:a4:b8:68:50:a4:fe:8c: 7d:05:95:cb:29:c9:c9:ed:23:59:d4:54:f7:7e:19:0f:54:a9: a2:09:a2:4f:d3:6a:9d:ef:01:ca:7f:c4:a8:e2:6f:2b:00:d7: 3d:17:6f:8a:46:dc:7a:06:23:87:19:1a:6e:9a:08:a3:76:00: 2a:10:e4:29:37:7c:f0:d2:40:08:69:11:24:cb:79:d4:d3:cc: 99:bd:c3:4b:66:16:f2:ef:40:d6:b8:f7:9a:1f:d3:e0:25:b7: 44:5b:e8:d2:0c:0b:31:70:0a:6a:21:63:10:a5:ce:99:ec:40: 04:8f:12:24:e5:13:9d:03:14:90:17:78:06:f9:aa:35:43:f8: 95:e6:2e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0qv7DwY8PT8a32sKmjqJhWXlyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTA5MDUxNTU2MDNaFw0yNTA5MDkwMTQzMDNaMDMxMTAvBgNV BAMTKDI4NzQ2MUI4RDc5MEZGNkQ3RkQ0Qzc2M0Y2OTNGNEQ4NjdDQTFDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUuYOG2ZrO6PCc3ZjMUiCsUr2 nVCtwhCqclM02gHgOi2wVtXd6cItgJQX7sJmMxNTa0539gM8mkg0zrPyNk9ApDGK exDJkGFC1BfFAl0aB0z1qr5cBrxY8vpNK5ertG8DXXetkRTiimnvsZToe0N0Fq2M BhAK1ymuSubf8cazdZ9GqC4oRW2JTJQn6SI8stomV3KdHNPBgNstN500cB7iBLpw qAL0+yZQonim1uzdOHrs96VcAblmS+JQKk/YOb8K01CcRnsIbr2QxOSKl043L7L0 Re8W8gPZTlJqLXc5XgZp9m/aDn7V2SG7IKP0ZMI8353wAvURiNgL3+1p5VMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKHRhuNeQ/21/1Mdj9pP02GfKHOgwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzCMDmHTZSQiMfJhc4BSMvGS0qcgnHtT0ZM iPJ3Lba+Qi3zqRC3kwjSvgfmdQxQSeEB+h92r/rGZDWJ5AZ3p4zjtD+w29I4jVUR oMIcRWXgBdyxVBU5tYYYM/uLVZEQn50KHfcIlyvNiyM9TLMrESw6mYsgQy85pLho UKT+jH0FlcspycntI1nUVPd+GQ9UqaIJok/Tap3vAcp/xKjibysA1z0Xb4pG3HoG I4cZGm6aCKN2ACoQ5Ck3fPDSQAhpESTLedTTzJm9w0tmFvLvQNa495of0+Alt0Rb 6NIMCzFwCmohYxClzpnsQASPEiTlE50DFJAXeAb5qjVD+JXmLrg= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:51 2025 by rpki-client