$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: TwmLY+++Eb5nk9OlFD0nQnux7+YtVJI/1u8D0z6p36g= Subject key identifier: 44:6E:43:1E:2D:F3:B7:EA:DD:27:F4:81:9E:4E:E0:13:E8:5C:79:C9 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 5E768ABF7B3DAB0326CB2306EE2A680EA8F42539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 032D Signing time: Sat 06 Sep 2025 18:41:47 +0000 Manifest this update: Sat 06 Sep 2025 18:36:47 +0000 Manifest next update: Wed 10 Sep 2025 03:31:47 +0000 Files and hashes: 1: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) 2: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 3: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: MipB2oOzPSgqPI/UjvtbuMhNNl2GuGGSpvc+FVGtgeU=) 4: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:76:8a:bf:7b:3d:ab:03:26:cb:23:06:ee:2a:68:0e:a8:f4:25:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Sep 6 18:36:47 2025 GMT Not After : Sep 10 03:31:47 2025 GMT Subject: CN=446E431E2DF3B7EADD27F4819E4EE013E85C79C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:58:61:53:96:28:45:a2:2b:05:c6:31:97: cb:d8:ed:2e:8a:a2:4e:f0:85:20:af:37:70:c2:2d: 9e:61:a9:a4:0d:ac:29:24:3c:0e:34:7b:09:1a:96: b5:cb:cf:be:10:18:d2:6e:7b:37:43:a6:a8:8c:28: 90:1b:61:5d:c7:8d:ed:59:ec:67:67:3e:66:a5:6c: e0:c5:fe:77:0a:ce:4b:69:98:52:75:7e:0b:b7:a9: 86:84:78:50:8e:4f:70:09:55:22:5e:d6:54:6a:29: d7:86:ef:7c:07:8b:7a:25:c7:05:10:bf:8e:9c:bc: ef:81:dd:d5:61:15:a2:96:26:26:09:97:e1:bb:70: a7:f9:91:50:48:37:8c:65:b9:44:6e:d7:4f:e6:8a: 44:fd:05:af:10:d6:d2:c2:9b:37:d9:09:6c:5a:dd: 49:aa:70:fa:d6:11:87:61:bc:16:29:94:e6:28:82: 3c:e3:b9:4c:e2:98:24:c1:ae:31:23:ac:a6:36:46: d1:ba:ee:8f:06:26:6d:9a:5c:35:37:48:94:89:3f: c5:1c:1a:a4:8b:dc:ab:89:e7:a7:dc:67:91:19:40: ce:45:31:47:d0:3c:aa:ba:24:df:cb:83:8d:19:5f: 9a:c1:22:72:d3:d2:dc:83:88:27:43:59:d6:f4:f9: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:43:1E:2D:F3:B7:EA:DD:27:F4:81:9E:4E:E0:13:E8:5C:79:C9 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0d:98:d2:e4:81:6d:91:5b:12:49:b4:62:f3:75:3e:f6:98: 95:65:c0:db:72:77:62:0c:40:0f:a4:b4:98:94:8b:a4:26:86: c0:4b:a6:04:74:f5:67:ab:2e:b1:af:f3:ea:57:d8:c7:75:0a: 75:0b:02:f6:4f:18:7a:ad:63:b3:d3:6c:05:e8:ed:2e:d3:d7: fd:ae:50:eb:31:dc:48:ae:88:76:63:51:c8:25:85:97:56:cc: ea:5c:51:b2:6d:59:ee:a2:48:7d:5a:81:79:60:f4:dc:ee:25: 7f:d3:2b:9b:bd:8a:63:8c:d8:1c:5d:b4:df:3a:f9:e6:8d:e5: 15:53:72:57:2c:36:06:51:cc:19:17:73:4b:72:a6:eb:ac:6f: 07:45:28:f0:12:eb:e7:4d:35:a4:2d:cb:93:50:8a:22:b5:5c: 79:06:a2:98:ab:dd:5d:af:53:6d:06:cc:92:6a:89:42:34:dd: f3:ae:aa:74:7d:ee:fe:9b:0e:3b:c9:70:91:39:88:04:a7:cb: b5:25:17:48:8c:3b:df:1e:5c:fc:6e:e9:88:9b:dc:84:f8:92: 37:4e:8f:66:ed:4d:ca:79:9f:2b:87:b8:71:89:f8:92:bd:71: ec:fc:c9:ab:a7:ed:cc:a8:f0:9d:0e:9b:6a:81:d5:c4:d5:97: 60:26:e7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnaKv3s9qwMmyyMG7ipoDqj0JTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTA5MDYxODM2NDdaFw0yNTA5MTAwMzMxNDdaMDMxMTAvBgNV BAMTKDQ0NkU0MzFFMkRGM0I3RUFERDI3RjQ4MTlFNEVFMDEzRTg1Qzc5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJg1hhU5YoRaIrBcYxl8vY7S6K ok7whSCvN3DCLZ5hqaQNrCkkPA40ewkalrXLz74QGNJuezdDpqiMKJAbYV3Hje1Z 7GdnPmalbODF/ncKzktpmFJ1fgu3qYaEeFCOT3AJVSJe1lRqKdeG73wHi3olxwUQ v46cvO+B3dVhFaKWJiYJl+G7cKf5kVBIN4xluURu10/mikT9Ba8Q1tLCmzfZCWxa 3UmqcPrWEYdhvBYplOYogjzjuUzimCTBrjEjrKY2RtG67o8GJm2aXDU3SJSJP8Uc GqSL3KuJ56fcZ5EZQM5FMUfQPKq6JN/Lg40ZX5rBInLT0tyDiCdDWdb0+firAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURG5DHi3zt+rdJ/SBnk7gE+hceckwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsNmNLkgW2RWxJJtGLzdT72mJVlwNtyd2IM QA+ktJiUi6QmhsBLpgR09WerLrGv8+pX2Md1CnULAvZPGHqtY7PTbAXo7S7T1/2u UOsx3EiuiHZjUcglhZdWzOpcUbJtWe6iSH1agXlg9NzuJX/TK5u9imOM2BxdtN86 +eaN5RVTclcsNgZRzBkXc0typuusbwdFKPAS6+dNNaQty5NQiiK1XHkGopir3V2v U20GzJJqiUI03fOuqnR97v6bDjvJcJE5iASny7UlF0iMO98eXPxu6Yib3IT4kjdO j2btTcp5nyuHuHGJ+JK9cez8yaun7cyo8J0Om2qB1cTVl2Am59Q= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:26 2025 by rpki-client