$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: 2sHetVj+XIznOWy/YRfRqCvkp3NBbcSYYJ0LNeENr20= Subject key identifier: 0C:8C:42:75:7D:F5:45:20:2F:43:D6:A1:05:35:B2:67:B7:2C:0A:9F Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 2989D3FEEA162F41C7A0C0A26D31AD39C23E863C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: DB Signing time: Fri 05 Sep 2025 23:31:04 +0000 Manifest this update: Fri 05 Sep 2025 23:26:04 +0000 Manifest next update: Tue 09 Sep 2025 08:01:04 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) 2: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: NrzxYxAVx4o85efjWKvtfYDtdyxKc8nfrp+ElkUjzL4=) 3: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) 4: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:89:d3:fe:ea:16:2f:41:c7:a0:c0:a2:6d:31:ad:39:c2:3e:86:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Sep 5 23:26:04 2025 GMT Not After : Sep 9 08:01:04 2025 GMT Subject: CN=0C8C42757DF545202F43D6A10535B267B72C0A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:83:2d:88:a6:c0:1c:c8:dd:ec:4f:52:63: 1b:71:61:86:f6:87:ed:a0:58:4a:7a:5a:01:57:6f: 48:c5:e9:8a:7c:5a:e6:e1:6a:d2:8b:9a:13:86:2b: bb:00:fa:97:e3:af:43:df:25:9e:ed:7a:4f:32:94: 33:73:ac:cd:c6:72:eb:3b:17:fc:78:66:d0:24:92: 8c:72:27:be:85:78:93:34:6c:6f:df:63:a1:20:e2: 1d:ee:48:e5:c8:f5:c2:d7:f7:84:aa:7d:35:2b:39: 25:cc:32:67:fb:38:22:66:4d:2d:df:7c:70:d0:ac: f9:88:8b:8d:9b:0e:7a:23:5e:f6:d7:0d:f1:19:fc: b2:df:91:b0:cb:bf:25:a0:2f:42:72:2e:a2:02:c5: 29:f5:38:5b:40:35:9f:66:c3:a0:d5:b6:5b:0a:79: ab:c4:0d:83:71:d3:e6:63:f0:c2:86:28:ef:b2:3e: e3:69:5e:11:6a:1c:b5:69:19:c0:ac:be:e6:44:71: 4f:13:11:50:af:b0:30:84:87:27:17:18:ea:68:a0: 6f:0b:3b:52:84:40:17:5b:26:10:05:a9:cc:ee:de: c8:cd:74:f1:ff:06:ec:1b:cc:4d:a8:23:5c:27:d9: 7a:6e:9b:1f:a4:9f:ef:2e:90:88:b8:13:1b:b1:fb: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8C:42:75:7D:F5:45:20:2F:43:D6:A1:05:35:B2:67:B7:2C:0A:9F X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ac:90:8c:64:d2:af:ca:de:df:8c:90:58:d8:07:2e:24:81: fc:88:85:e6:71:7f:9c:4e:90:05:6a:75:79:6b:20:49:da:3d: bf:01:19:83:8a:f0:ca:06:de:23:14:aa:01:64:dd:9d:f5:fd: 1c:16:9b:02:c7:19:0c:92:4e:0a:0a:e5:02:6c:72:1f:4c:c5: e4:e9:c0:e9:76:52:e1:74:57:c1:74:07:9a:6f:cf:15:13:b3: 39:ca:f3:1b:a8:e6:d1:20:0f:5b:fd:a2:8b:cd:fa:6f:63:c3: 4f:24:de:93:1f:e7:c6:d8:c0:53:56:eb:ab:d2:9b:24:41:c7: d1:00:25:b3:74:cf:6c:fd:29:f4:c6:29:3a:a2:cb:7c:32:37: cb:bd:ae:01:95:08:f6:6b:5d:12:5d:ac:dd:52:10:81:84:d8: 7a:b5:58:95:5d:49:13:db:87:0d:0f:97:2d:15:5b:bd:44:4d: 3c:54:2e:36:1d:e4:e9:71:f1:54:f2:3e:4e:49:d4:a8:76:06: e6:5e:5a:8f:00:fa:05:46:83:3c:61:2a:58:56:59:85:c9:5f: b3:b3:a0:7e:61:d6:d1:36:fd:4d:36:0b:04:52:31:4c:35:46: f2:39:6a:8b:2f:75:8e:15:50:9a:2f:9c:32:f4:94:3a:ff:6d: cb:90:02:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYnT/uoWL0HHoMCibTGtOcI+hjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTA5MDUyMzI2MDRaFw0yNTA5MDkwODAxMDRaMDMxMTAvBgNV BAMTKDBDOEM0Mjc1N0RGNTQ1MjAyRjQzRDZBMTA1MzVCMjY3QjcyQzBBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OIMtiKbAHMjd7E9SYxtxYYb2 h+2gWEp6WgFXb0jF6Yp8WubhatKLmhOGK7sA+pfjr0PfJZ7tek8ylDNzrM3Gcus7 F/x4ZtAkkoxyJ76FeJM0bG/fY6Eg4h3uSOXI9cLX94SqfTUrOSXMMmf7OCJmTS3f fHDQrPmIi42bDnojXvbXDfEZ/LLfkbDLvyWgL0JyLqICxSn1OFtANZ9mw6DVtlsK eavEDYNx0+Zj8MKGKO+yPuNpXhFqHLVpGcCsvuZEcU8TEVCvsDCEhycXGOpooG8L O1KEQBdbJhAFqczu3sjNdPH/BuwbzE2oI1wn2Xpumx+kn+8ukIi4Exux+xwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIxCdX31RSAvQ9ahBTWyZ7csCp8wHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaskIxk0q/K3t+MkFjYBy4kgfyIheZxf5xO kAVqdXlrIEnaPb8BGYOK8MoG3iMUqgFk3Z31/RwWmwLHGQySTgoK5QJsch9MxeTp wOl2UuF0V8F0B5pvzxUTsznK8xuo5tEgD1v9oovN+m9jw08k3pMf58bYwFNW66vS myRBx9EAJbN0z2z9KfTGKTqiy3wyN8u9rgGVCPZrXRJdrN1SEIGE2Hq1WJVdSRPb hw0Ply0VW71ETTxULjYd5Olx8VTyPk5J1Kh2BuZeWo8A+gVGgzxhKlhWWYXJX7Oz oH5h1tE2/U02CwRSMUw1RvI5aosvdY4VUJovnDL0lDr/bcuQAmk= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:05 2025 by rpki-client