$ rpki-client -vvf repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft File: 00C1EB3BEE971CEAB531D756361F934BE0179628.mft (raw, json) Hash identifier: NIsZanmDaXC6+aiQ3sYvcAzvUE2z7geWNPuDWWfNIvU= Subject key identifier: 11:5C:59:A1:D7:F7:35:38:12:E1:71:64:E6:79:6B:E6:C7:48:3D:EC Authority key identifier: 00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 Certificate issuer: /CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Certificate serial: 0D6991B7D54E3BC18F39A7D3691F705C4E9E141A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft Manifest number: AA Signing time: Thu 04 Sep 2025 15:41:44 +0000 Manifest this update: Thu 04 Sep 2025 15:36:44 +0000 Manifest next update: Mon 08 Sep 2025 01:28:44 +0000 Files and hashes: 1: 00C1EB3BEE971CEAB531D756361F934BE0179628.crl (hash: wtb/FigdH/fUh3UL970N3A+VBqunESDRBq96HsKKyDA=) 2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: 2PH25lGx4aoDxJSQ/LOSozIUBGDxDVOVLodCc7y15nU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:69:91:b7:d5:4e:3b:c1:8f:39:a7:d3:69:1f:70:5c:4e:9e:14:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00C1EB3BEE971CEAB531D756361F934BE0179628 Validity Not Before: Sep 4 15:36:44 2025 GMT Not After : Sep 8 01:28:44 2025 GMT Subject: CN=115C59A1D7F7353812E17164E6796BE6C7483DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:2f:6b:e9:86:4d:73:f2:f5:85:46:04:05: ef:cc:b0:2f:7b:5e:5d:8d:1c:f0:7c:79:0d:b0:1d: 71:98:46:36:dc:ce:42:f7:35:a4:2f:9b:77:56:52: 26:c6:f0:e8:cb:ea:dc:6b:bd:8b:96:54:31:ac:25: 4d:cb:97:b4:32:2e:42:fc:6a:80:88:0e:84:a0:ff: 99:95:0b:20:7d:46:b0:26:c5:e6:38:a6:44:6c:18: 66:94:da:91:4a:96:0a:11:c0:e5:6e:a2:18:81:00: 42:08:63:b5:20:f1:d6:d3:12:c9:c8:8e:96:77:4d: 80:e0:93:5e:27:63:2c:cc:0b:85:34:92:e9:fc:bb: ef:29:79:a1:8c:38:70:de:56:fb:06:80:b4:3a:ef: 09:5b:ef:74:4a:5f:75:1f:bd:2a:4a:25:4a:8d:29: 91:4e:d9:6b:a5:da:f5:dc:77:ce:2e:17:d3:fb:85: 0a:01:a1:c8:7d:43:0c:58:2d:af:d8:e8:e6:f7:62: 75:8c:75:89:58:b3:79:7a:08:b4:e5:ce:71:fa:fa: bb:28:18:a3:81:01:a0:9d:d9:90:fc:fd:3d:98:37: 35:cb:c4:d7:2b:1f:1c:18:e0:93:82:13:58:11:96: 19:da:d2:89:28:8f:6a:bb:2c:07:49:83:82:61:38: 63:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5C:59:A1:D7:F7:35:38:12:E1:71:64:E6:79:6B:E6:C7:48:3D:EC X509v3 Authority Key Identifier: keyid:00:C1:EB:3B:EE:97:1C:EA:B5:31:D7:56:36:1F:93:4B:E0:17:96:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00C1EB3BEE971CEAB531D756361F934BE0179628.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d720ce76-db75-4651-85b0-0bfb18e0b175/0/00C1EB3BEE971CEAB531D756361F934BE0179628.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:ac:30:20:6e:26:64:be:2b:b8:1c:1d:8a:ea:ae:4d:61: 0d:c7:4e:ce:63:23:9c:a8:14:ce:86:01:57:89:01:54:5d:e3: 3d:61:ba:eb:e1:0f:10:dc:66:e5:9d:87:d4:18:54:fc:bd:6c: ed:3f:2d:46:5d:9d:68:2d:f4:5e:dc:2c:17:cb:0b:0d:5d:d4: 7b:26:e8:87:4c:89:c8:c9:e1:77:77:17:e0:87:ba:ce:90:4b: 10:65:6c:93:30:6b:85:5f:58:c6:db:e2:2f:46:8e:7f:7a:93: 96:c7:a5:74:dc:b5:8b:34:ec:d4:a9:09:07:21:27:5e:37:3d: 86:86:6a:a7:a1:db:06:84:e3:c6:db:e4:af:fe:5c:71:23:0f: 21:70:a1:25:18:f0:89:dc:29:d0:b7:ce:34:f7:85:d5:51:ce: 2e:c6:e2:96:d8:24:59:6d:78:2f:e1:f7:95:a8:55:7b:0e:65: e5:c2:7b:65:6d:93:e2:83:2e:f3:62:f9:00:73:19:17:fb:85: db:ea:ef:f0:c8:1e:7e:b2:db:3e:b2:35:68:2e:e6:17:52:65: d2:70:9f:1b:6e:9e:1b:19:a3:43:a8:65:0d:39:84:b4:2d:89: 60:d2:f5:14:88:a8:49:65:8c:a5:37:66:7b:f8:0e:f1:8e:e8: d7:85:dc:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWmRt9VOO8GPOafTaR9wXE6eFBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJF MDE3OTYyODAeFw0yNTA5MDQxNTM2NDRaFw0yNTA5MDgwMTI4NDRaMDMxMTAvBgNV BAMTKDExNUM1OUExRDdGNzM1MzgxMkUxNzE2NEU2Nzk2QkU2Qzc0ODNERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyS9r6YZNc/L1hUYEBe/MsC97 Xl2NHPB8eQ2wHXGYRjbczkL3NaQvm3dWUibG8OjL6txrvYuWVDGsJU3Ll7QyLkL8 aoCIDoSg/5mVCyB9RrAmxeY4pkRsGGaU2pFKlgoRwOVuohiBAEIIY7Ug8dbTEsnI jpZ3TYDgk14nYyzMC4U0kun8u+8peaGMOHDeVvsGgLQ67wlb73RKX3UfvSpKJUqN KZFO2Wul2vXcd84uF9P7hQoBoch9QwxYLa/Y6Ob3YnWMdYlYs3l6CLTlznH6+rso GKOBAaCd2ZD8/T2YNzXLxNcrHxwY4JOCE1gRlhna0okoj2q7LAdJg4JhOGMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVxZodf3NTgS4XFk5nlr5sdIPewwHwYDVR0j BBgwFoAUAMHrO+6XHOq1MddWNh+TS+AXligwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzIwY2U3Ni1kYjc1LTQ2NTEtODViMC0wYmZiMThlMGIxNzUvMC8wMEMxRUIzQkVF OTcxQ0VBQjUzMUQ3NTYzNjFGOTM0QkUwMTc5NjI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkzNEJFMDE3 OTYyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcyMGNlNzYtZGI3NS00NjUxLTg1 YjAtMGJmYjE4ZTBiMTc1LzAvMDBDMUVCM0JFRTk3MUNFQUI1MzFENzU2MzYxRjkz NEJFMDE3OTYyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTcrDAgbiZkviu4HB2K6q5NYQ3HTs5jI5yo FM6GAVeJAVRd4z1huuvhDxDcZuWdh9QYVPy9bO0/LUZdnWgt9F7cLBfLCw1d1Hsm 6IdMicjJ4Xd3F+CHus6QSxBlbJMwa4VfWMbb4i9Gjn96k5bHpXTctYs07NSpCQch J143PYaGaqeh2waE48bb5K/+XHEjDyFwoSUY8IncKdC3zjT3hdVRzi7G4pbYJFlt eC/h95WoVXsOZeXCe2Vtk+KDLvNi+QBzGRf7hdvq7/DIHn6y2z6yNWgu5hdSZdJw nxtunhsZo0OoZQ05hLQtiWDS9RSIqElljKU3Znv4DvGO6NeF3PI= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:10 2025 by rpki-client