$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft File: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json) Hash identifier: Xke8bquGLFR/VD7sSoMvtrKw7JkqpSKuZVrUDDi5EZg= Subject key identifier: FA:49:60:86:0F:C1:2B:3E:E1:D6:C8:78:B8:B9:5A:FB:F4:65:24:5B Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC Certificate issuer: /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Certificate serial: 4A263CDB98B2E1008B092763E3AB56D1A32BA49C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft Manifest number: 0502 Signing time: Fri 05 Sep 2025 18:00:46 +0000 Manifest this update: Fri 05 Sep 2025 17:55:46 +0000 Manifest next update: Mon 08 Sep 2025 23:48:46 +0000 Files and hashes: 1: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: EMablcrgyJ45vQHyoJaHGzCs+YBfYMVJSrUcpapQ5/s=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: PgHEb146XoyGC0/9tuhNMcAsAzVP9MObWQdPhmy9XiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 23:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:26:3c:db:98:b2:e1:00:8b:09:27:63:e3:ab:56:d1:a3:2b:a4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Validity Not Before: Sep 5 17:55:46 2025 GMT Not After : Sep 8 23:48:46 2025 GMT Subject: CN=FA4960860FC12B3EE1D6C878B8B95AFBF465245B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:5b:eb:04:32:53:be:b0:c7:ae:9b:e1:ca: 25:8c:36:ca:78:fa:d3:15:37:c1:ec:cd:8e:f0:06: 7c:ff:f8:bc:dc:10:8a:4d:e3:e2:bf:cf:9d:ec:85: 72:64:19:bc:01:df:71:27:eb:7d:90:e4:26:3d:bd: db:07:4e:f6:50:f1:ea:13:db:7c:d7:e1:76:28:6f: 63:c3:30:8d:f1:b3:3e:c2:fd:31:b3:fb:55:1d:f6: 0e:42:b6:c8:69:30:8a:da:16:11:a6:d9:c9:89:6a: 1f:0a:d5:4f:10:7b:6c:48:06:b8:7f:a7:f0:8b:93: 7c:e5:2f:48:dd:02:ea:e2:2e:cb:36:f1:23:cc:75: de:a9:1e:57:21:3e:49:2f:e6:35:b7:83:ae:1a:c9: a8:1d:25:ae:68:81:29:21:4a:3c:30:bb:67:4e:5b: 4c:20:29:4a:ae:12:11:62:80:73:cd:99:9a:73:d0: 1e:c0:b7:2f:da:72:df:6d:12:63:30:fc:d5:20:28: 97:6d:2e:fc:02:8b:82:ef:9c:fb:be:5c:ea:4f:8f: 74:87:94:cd:81:04:6e:fe:e2:94:3c:71:81:a3:e7: 41:af:ce:e8:de:48:6b:68:9e:7d:81:cd:4d:fe:de: 2e:a3:a3:e8:c8:b7:08:0f:71:45:10:aa:17:a6:78: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:60:86:0F:C1:2B:3E:E1:D6:C8:78:B8:B9:5A:FB:F4:65:24:5B X509v3 Authority Key Identifier: keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:81:47:c0:e1:16:93:fb:df:d6:eb:8e:94:01:38:a9:29:ff: 26:e8:a6:81:6e:d4:74:d9:0a:db:f5:7e:56:f0:16:e5:7a:50: 3a:f8:aa:7d:ca:69:ac:73:bd:ce:8f:29:ac:a9:0e:7f:4b:a7: d9:3a:51:08:94:fc:43:b1:a9:f5:04:b4:a0:bb:f8:e9:4d:c5: 5b:c2:38:66:bb:d1:a1:2a:ff:aa:9b:d0:d3:52:82:27:16:8b: b4:87:2f:fc:61:ef:2d:66:a6:da:8a:59:5c:ba:c3:96:65:ac: 78:fe:bd:f5:29:68:3f:fc:e4:22:cc:3f:6f:f7:1c:d5:0c:0d: 39:d8:4e:55:b6:ee:8a:b5:88:13:80:05:10:ac:9b:ef:4a:7e: a4:6a:b8:21:e8:f6:b2:c7:d9:db:ae:ed:ab:cb:1e:30:7d:b6: db:9c:be:88:1c:b1:38:38:8d:8d:a4:16:50:12:4b:a3:56:55: 52:c3:27:82:e4:42:7a:48:fe:8d:f0:a9:d5:2d:34:da:f1:52: b0:05:cf:f8:03:73:10:27:51:75:b6:ea:47:c6:02:52:86:2c: 13:47:19:c8:5e:c0:ec:ee:27:63:46:54:e8:11:ed:51:d8:c5: 6f:84:f0:85:93:13:e0:86:db:16:9e:59:75:3f:c4:22:76:6a: ec:92:eb:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiY825iy4QCLCSdj46tW0aMrpJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUx NTk1MEFFQzAeFw0yNTA5MDUxNzU1NDZaFw0yNTA5MDgyMzQ4NDZaMDMxMTAvBgNV BAMTKEZBNDk2MDg2MEZDMTJCM0VFMUQ2Qzg3OEI4Qjk1QUZCRjQ2NTI0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHlvrBDJTvrDHrpvhyiWMNsp4 +tMVN8HszY7wBnz/+LzcEIpN4+K/z53shXJkGbwB33En632Q5CY9vdsHTvZQ8eoT 23zX4XYob2PDMI3xsz7C/TGz+1Ud9g5CtshpMIraFhGm2cmJah8K1U8Qe2xIBrh/ p/CLk3zlL0jdAuriLss28SPMdd6pHlchPkkv5jW3g64ayagdJa5ogSkhSjwwu2dO W0wgKUquEhFigHPNmZpz0B7Aty/act9tEmMw/NUgKJdtLvwCi4LvnPu+XOpPj3SH lM2BBG7+4pQ8cYGj50GvzujeSGtonn2BzU3+3i6jo+jItwgPcUUQqhemeIUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+klghg/BKz7h1sh4uLla+/RlJFswHwYDVR0j BBgwFoAUGXXwsvJ95K/0PMJGBYornhWVCuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDMzNjJlMi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTc1RjBCMkYy N0RFNEFGRjQzQ0MyNDYwNThBMkI5RTE1OTUwQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUxNTk1 MEFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJC OUUxNTk1MEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqBR8DhFpP739brjpQBOKkp/ybopoFu1HTZ Ctv1flbwFuV6UDr4qn3Kaaxzvc6PKaypDn9Lp9k6UQiU/EOxqfUEtKC7+OlNxVvC OGa70aEq/6qb0NNSgicWi7SHL/xh7y1mptqKWVy6w5ZlrHj+vfUpaD/85CLMP2/3 HNUMDTnYTlW27oq1iBOABRCsm+9KfqRquCHo9rLH2duu7avLHjB9ttucvogcsTg4 jY2kFlASS6NWVVLDJ4LkQnpI/o3wqdUtNNrxUrAFz/gDcxAnUXW26kfGAlKGLBNH GchewOzuJ2NGVOgR7VHYxW+E8IWTE+CG2xaeWXU/xCJ2auyS6yI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:37 2025 by rpki-client