$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: LNp4K4nkiGaX6nDk/1JprnpJHYN+fmAKae1vb6Dmqn8= Subject key identifier: 32:BD:09:8E:43:74:B8:7F:3B:EC:47:12:F2:BE:5F:3B:D0:60:1B:F1 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 01E378150F5D893E26E95B121B3EFD30F3C31B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 0397 Signing time: Tue 09 Sep 2025 03:11:40 +0000 Manifest this update: Tue 09 Sep 2025 03:06:40 +0000 Manifest next update: Fri 12 Sep 2025 07:38:40 +0000 Files and hashes: 1: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: BfoVNQ1FLeS7lFek8RCJY+j9LyqRP3fQUiraMRl3k2Y=) 2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) 3: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 4: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 5: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e3:78:15:0f:5d:89:3e:26:e9:5b:12:1b:3e:fd:30:f3:c3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Sep 9 03:06:40 2025 GMT Not After : Sep 12 07:38:40 2025 GMT Subject: CN=32BD098E4374B87F3BEC4712F2BE5F3BD0601BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:76:cd:2b:6b:ba:94:1f:d3:5a:4f:eb:35: f1:63:b4:ac:19:ed:23:46:83:8b:71:c2:f2:a1:93: 4e:f6:50:2e:d8:9b:be:26:0a:1a:3a:fd:7b:61:c4: e6:81:70:6f:bc:39:5b:f8:f7:63:0d:e1:86:e7:8c: e4:2b:a0:14:6a:e7:88:b4:6c:fe:b2:30:a0:fc:7b: f5:61:be:04:26:55:dd:12:a5:63:5e:da:69:ff:39: 0f:56:47:b5:c4:f4:72:39:01:05:d8:42:44:b1:37: 9d:4f:e9:10:86:64:56:68:3c:a6:5f:ff:77:78:bf: 1d:a3:88:1a:39:67:cf:6a:69:ff:4f:d5:19:b5:44: 9a:6d:36:9d:fb:07:96:71:83:96:75:15:9e:2c:a3: b9:d7:fc:0f:8d:8d:4c:29:66:8e:37:52:68:0a:0a: 86:31:5f:08:8d:7d:81:39:80:f3:c7:1c:90:35:67: 02:5a:89:cc:b2:30:de:21:30:d4:00:22:3c:f2:e7: 84:04:5c:2c:ae:a2:2b:35:d4:a0:5a:fc:16:6c:64: 8d:d1:32:bd:0f:77:24:7b:11:28:cf:62:b5:28:78: dd:a6:43:c9:16:c5:ab:20:b2:91:81:c2:a4:94:f9: ee:a7:2d:d0:a3:47:0c:37:bd:f0:5c:c6:ba:fd:e3: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:09:8E:43:74:B8:7F:3B:EC:47:12:F2:BE:5F:3B:D0:60:1B:F1 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:93:ab:22:14:3b:22:0a:35:35:3e:ca:59:76:1e:08:19:29: 0d:ef:8d:d6:a8:8f:48:17:70:37:cc:63:c6:fe:1b:01:c9:74: 28:51:52:9a:9b:10:3d:eb:f9:78:e3:e2:75:3d:2a:30:52:c6: 6f:6f:3b:38:2e:c5:db:bf:c5:df:92:52:04:5c:31:1c:08:cb: 24:82:0d:6c:e7:39:d0:87:e8:dd:9b:c6:29:b6:e9:1f:e5:ee: 4a:c6:8e:e8:3c:94:4f:fb:e5:3e:03:9a:d9:6b:1d:c9:20:5e: 5b:3e:37:c8:5c:12:0a:69:86:b6:93:18:9c:00:7f:06:d4:16: 26:29:a2:5a:21:57:54:90:48:2f:3d:14:18:a9:5a:b8:a7:bf: ec:c4:63:f7:d1:3f:fc:a2:b0:b1:2a:78:d4:e4:01:9e:74:ed: 39:95:88:f8:65:d4:b3:90:bc:b1:80:43:8d:02:1d:9f:ea:c1: 34:22:80:a3:c4:51:c3:2c:a1:85:0d:15:cd:e7:a7:6a:72:2c: 99:36:8f:b6:a3:46:78:da:77:74:41:75:c5:f8:e3:7a:c4:63: 13:92:2d:4a:54:0c:12:12:c5:70:6d:b1:c9:94:69:d4:ae:23: 58:1c:6b:e1:18:ff:11:f7:4c:32:bb:07:28:2c:48:c1:76:e8: a9:d3:9b:20 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITAeN4FQ9diT4m6VsSGz79MPPDGzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1N0QwNzVCMjg3M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZF QjlBNjExMB4XDTI1MDkwOTAzMDY0MFoXDTI1MDkxMjA3Mzg0MFowMzExMC8GA1UE AxMoMzJCRDA5OEU0Mzc0Qjg3RjNCRUM0NzEyRjJCRTVGM0JEMDYwMUJGMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALEQds0ra7qUH9NaT+s18WO0rBnt I0aDi3HC8qGTTvZQLtibviYKGjr9e2HE5oFwb7w5W/j3Yw3hhueM5CugFGrniLRs /rIwoPx79WG+BCZV3RKlY17aaf85D1ZHtcT0cjkBBdhCRLE3nU/pEIZkVmg8pl// d3i/HaOIGjlnz2pp/0/VGbVEmm02nfsHlnGDlnUVniyjudf8D42NTClmjjdSaAoK hjFfCI19gTmA88cckDVnAlqJzLIw3iEw1AAiPPLnhARcLK6iKzXUoFr8FmxkjdEy vQ93JHsRKM9itSh43aZDyRbFqyCykYHCpJT57qct0KNHDDe98FzGuv3jQNsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQyvQmOQ3S4fzvsRxLyvl870GAb8TAfBgNVHSME GDAWgBRX0HWyhzoeH4REhdqsd0xlbrmmETAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3 NzRiMThjLWYyNjMtNGZlMS04ZGY4LTFlN2M2OGJmYmVmYy8wLzU3RDA3NUIyODcz QTFFMUY4NDQ0ODVEQUFDNzc0QzY1NkVCOUE2MTEuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81N0QwNzVCMjg3M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlB NjExLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9kNzc0YjE4Yy1mMjYzLTRmZTEtOGRm OC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3M0ExRTFGODQ0NDg1REFBQzc3NEM2 NTZFQjlBNjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAspOrIhQ7Igo1NT7KWXYeCBkpDe+N1qiPSBdw N8xjxv4bAcl0KFFSmpsQPev5eOPidT0qMFLGb287OC7F27/F35JSBFwxHAjLJIIN bOc50Ifo3ZvGKbbpH+XuSsaO6DyUT/vlPgOa2WsdySBeWz43yFwSCmmGtpMYnAB/ BtQWJimiWiFXVJBILz0UGKlauKe/7MRj99E//KKwsSp41OQBnnTtOZWI+GXUs5C8 sYBDjQIdn+rBNCKAo8RRwyyhhQ0VzeenanIsmTaPtqNGeNp3dEF1xfjjesRjE5It SlQMEhLFcG2xyZRp1K4jWBxr4Rj/EfdMMrsHKCxIwXboqdObIA== -----END CERTIFICATE-----Generated at Tue Sep 9 08:06:44 2025 by rpki-client