$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft File: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft (raw, json) Hash identifier: +EKIp9fFEToFTS0OrTPzCUrP3cjBYSti059Qp1fzPZc= Subject key identifier: 9A:7B:A3:EC:16:B1:12:E8:C4:D3:F7:7A:61:98:50:23:C7:E1:D4:D6 Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 Certificate issuer: /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Certificate serial: 40C5F0CA688A907A27A9F119997E8E32D3174615 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft Manifest number: 018E Signing time: Thu 04 Sep 2025 09:01:48 +0000 Manifest this update: Thu 04 Sep 2025 08:56:48 +0000 Manifest next update: Sun 07 Sep 2025 17:15:48 +0000 Files and hashes: 1: 134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl (hash: inUr2kCTdYvqkpVkrY2Me6peFzofjPg6PWcJPTXvVv8=) 2: 3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (hash: 50nF5RNG6ulp5/eIfTDrLrdRKQqI76egmRTbXjqjcB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c5:f0:ca:68:8a:90:7a:27:a9:f1:19:99:7e:8e:32:d3:17:46:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85 Validity Not Before: Sep 4 08:56:48 2025 GMT Not After : Sep 7 17:15:48 2025 GMT Subject: CN=9A7BA3EC16B112E8C4D3F77A61985023C7E1D4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:62:a2:1d:23:52:a6:68:91:1c:d6:fa:75: 1b:78:6e:be:64:09:d5:6c:89:2a:c9:05:57:e2:04: 35:89:d8:dc:67:9b:db:69:9c:76:0c:19:de:82:24: 0b:03:f8:ae:fc:1a:11:38:bc:7d:36:0a:d6:ea:bd: d0:ab:89:24:64:48:69:8d:93:e7:69:80:02:60:cc: c5:b4:30:a3:71:51:40:d4:f7:05:39:0f:dd:fa:35: 2b:a1:30:31:d4:9e:89:b9:ee:2d:b4:8c:fd:ed:7a: 11:ce:07:80:fc:cf:2f:de:89:e5:92:3f:55:97:67: de:77:08:0c:59:8a:01:db:06:9f:aa:84:7f:06:65: 20:94:8a:51:f3:b4:58:98:4a:bd:3e:60:0f:85:e5: 47:80:a8:c2:c3:de:4a:09:8a:16:92:f1:ab:10:c7: d2:56:ec:1b:5c:eb:82:e1:7e:8e:c2:98:d1:53:a3: 54:7f:08:fa:ec:9f:1e:96:8f:44:81:85:1a:7f:5f: ed:5c:54:80:7c:91:1a:3a:bc:87:b4:43:a0:97:32: ec:7d:be:23:62:72:97:a5:21:bc:45:64:5e:ca:ff: 1d:e9:97:6b:31:c9:f8:77:da:20:0b:e2:ce:2d:4b: 87:1c:39:d4:09:b6:32:e3:a9:c4:4c:a0:e6:bf:2d: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:A3:EC:16:B1:12:E8:C4:D3:F7:7A:61:98:50:23:C7:E1:D4:D6 X509v3 Authority Key Identifier: keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:67:bb:10:4b:a1:48:53:6b:de:93:02:04:a8:7a:7e:de:29: cc:5d:8b:82:16:42:7e:a6:51:34:3d:39:68:84:0b:7f:79:cf: 31:4f:1a:b9:d0:aa:db:00:b2:95:36:bf:33:74:d9:a8:95:5e: 02:a7:91:13:7c:5f:14:64:b3:0c:7e:68:67:a1:76:9c:a5:26: 9d:e9:7d:7d:c7:e0:6b:f5:c3:0b:7e:ba:47:48:b2:82:74:ca: 7b:c1:de:4a:91:e9:27:b2:47:69:c7:fa:31:76:25:36:1d:5c: 18:ba:4f:e1:50:f6:2d:ea:1f:8b:69:f2:b0:70:71:50:09:db: fc:42:fe:c4:54:d8:2d:54:8e:bd:af:f8:42:46:72:51:4e:36: ff:53:1c:1e:a1:9f:cd:0b:f0:d1:7c:50:27:be:19:70:a9:6e: 34:8c:95:f5:15:6b:19:d4:55:65:ce:fa:ba:fb:30:23:7a:0a: 54:e6:44:f1:6b:14:a5:3f:e6:af:41:54:c0:7a:79:14:28:50: 67:ff:03:e2:eb:99:03:d0:7b:a7:fc:09:3a:4c:2a:5b:30:c7: 4a:06:97:44:92:e2:0b:6e:d7:9d:c1:82:ed:d4:f5:65:04:29: c5:52:18:db:64:3a:01:ee:48:8a:93:69:42:0d:66:05:ad:d8: 6d:b8:2b:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMXwymiKkHonqfEZmX6OMtMXRhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG NDZDOEE4NTAeFw0yNTA5MDQwODU2NDhaFw0yNTA5MDcxNzE1NDhaMDMxMTAvBgNV BAMTKDlBN0JBM0VDMTZCMTEyRThDNEQzRjc3QTYxOTg1MDIzQzdFMUQ0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQGKiHSNSpmiRHNb6dRt4br5k CdVsiSrJBVfiBDWJ2Nxnm9tpnHYMGd6CJAsD+K78GhE4vH02CtbqvdCriSRkSGmN k+dpgAJgzMW0MKNxUUDU9wU5D936NSuhMDHUnom57i20jP3tehHOB4D8zy/eieWS P1WXZ953CAxZigHbBp+qhH8GZSCUilHztFiYSr0+YA+F5UeAqMLD3koJihaS8asQ x9JW7Btc64Lhfo7CmNFTo1R/CPrsnx6Wj0SBhRp/X+1cVIB8kRo6vIe0Q6CXMux9 viNicpelIbxFZF7K/x3pl2sxyfh32iAL4s4tS4ccOdQJtjLjqcRMoOa/LYB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmnuj7BaxEujE0/d6YZhQI8fh1NYwHwYDVR0j BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD OEE4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTkwMjM0ZmUtYTcxNS00M2U1LThh YTQtZDk3OWNkMzU3ZDM5LzAvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4 QUZGNDZDOEE4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxnuxBLoUhTa96TAgSoen7eKcxdi4IWQn6m UTQ9OWiEC395zzFPGrnQqtsAspU2vzN02aiVXgKnkRN8XxRkswx+aGehdpylJp3p fX3H4Gv1wwt+ukdIsoJ0ynvB3kqR6SeyR2nH+jF2JTYdXBi6T+FQ9i3qH4tp8rBw cVAJ2/xC/sRU2C1Ujr2v+EJGclFONv9THB6hn80L8NF8UCe+GXCpbjSMlfUVaxnU VWXO+rr7MCN6ClTmRPFrFKU/5q9BVMB6eRQoUGf/A+LrmQPQe6f8CTpMKlswx0oG l0SS4gtu153Bgu3U9WUEKcVSGNtkOgHuSIqTaUINZgWt2G24K7M= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:35 2025 by rpki-client