$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: A7jhPRxdei2vknajmjE4NaGByxjIpvsSelfINXAXdoQ= Subject key identifier: C3:2C:D7:E4:16:87:E4:7F:5C:FF:CF:5C:FA:09:68:BB:FE:DD:90:A2 Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 3B4D665016218CB9DCA714456B6789FE9926D75F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 24 Signing time: Mon 08 Sep 2025 15:32:10 +0000 Manifest this update: Mon 08 Sep 2025 15:27:10 +0000 Manifest next update: Thu 11 Sep 2025 22:08:10 +0000 Files and hashes: 1: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: GBC6+VLEzvKBffCoyqGBSR/QSG0TEhfx7IE5z1p2dvw=) 2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4d:66:50:16:21:8c:b9:dc:a7:14:45:6b:67:89:fe:99:26:d7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Sep 8 15:27:10 2025 GMT Not After : Sep 11 22:08:10 2025 GMT Subject: CN=C32CD7E41687E47F5CFFCF5CFA0968BBFEDD90A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:95:f4:5a:a1:c9:8c:6b:f6:65:d4:69:89: 0e:5e:9f:9d:ea:05:20:cd:41:8b:de:50:b7:85:a4: de:e8:27:51:87:37:e6:60:7e:44:1c:c6:51:0e:8a: 15:d2:2c:22:5f:ae:3c:60:ea:9a:fd:d2:14:24:79: a3:a7:4f:40:65:25:fb:7f:3e:6d:e1:18:62:a4:1d: 36:18:1f:77:3b:77:29:91:85:06:ed:fc:03:2e:a7: d3:ec:e2:f9:ce:36:b3:09:82:f1:84:17:08:08:c7: 53:26:bf:f1:12:14:00:4d:93:d9:13:11:0f:c5:c1: f8:ab:12:4e:3f:37:7b:44:df:f4:d8:f4:53:08:c2: 81:12:80:70:40:67:13:f9:21:f6:56:1d:fc:42:4e: ff:5c:e2:f9:a7:5f:ae:5b:1a:0f:41:cf:59:3c:46: 0c:7e:68:19:a3:5f:85:39:11:76:37:d6:66:08:62: 2a:f0:07:13:a5:8e:b7:4f:19:99:3c:24:cb:19:f2: 22:30:45:6b:24:91:26:1a:7f:bc:53:3a:2f:d2:20: d7:32:66:a8:eb:de:74:cf:10:97:76:47:17:da:a2: 4d:56:ca:60:fb:42:fa:f8:c4:1f:24:38:d4:a3:26: 09:f1:49:66:02:35:74:b1:38:d9:f9:aa:2f:12:0e: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:D7:E4:16:87:E4:7F:5C:FF:CF:5C:FA:09:68:BB:FE:DD:90:A2 X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a8:a8:42:1b:b2:92:75:c9:06:f3:58:dd:4b:f2:b0:f4:1a: 03:e2:6d:e0:8d:37:5f:8b:9a:eb:c2:7d:6f:51:03:e4:dc:1d: b8:fe:21:95:9e:3d:88:b5:e9:14:ac:59:96:f0:3a:a6:88:1b: ea:1d:ba:89:d5:f7:80:03:ac:fc:b5:e0:98:0c:d9:36:c1:d9: d5:ec:06:51:4c:af:f0:32:48:ce:23:e3:48:ee:c4:5a:98:03: dd:0d:79:2c:22:be:50:fc:e6:49:4f:4b:05:1f:e9:5d:98:29: 30:87:11:1e:8e:e0:38:18:de:4e:00:34:ff:e9:dc:2d:be:d3: 12:8e:84:17:ad:b3:b9:d5:6f:75:68:18:8a:9b:b7:9c:6d:7d: 23:ed:72:5e:6c:98:bc:5a:21:ec:1e:70:d7:7c:3e:67:01:47: f5:69:6e:99:c4:c5:7f:3e:61:e8:e3:44:c3:6b:a5:2e:0b:35: 10:1d:8d:e2:a8:fa:b3:95:98:98:20:ac:95:55:bd:86:5f:98: 39:eb:e9:3d:25:63:1e:53:27:75:79:cb:85:d8:ca:da:fe:f2: 0e:e0:c0:47:51:23:18:ef:1e:40:a3:b7:14:0e:03:ca:15:39: a8:b3:cf:7d:bb:13:a6:65:a9:e4:57:5a:d1:00:af:a4:3c:25: 35:29:15:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO01mUBYhjLncpxRFa2eJ/pkm118wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNTA5MDgxNTI3MTBaFw0yNTA5MTEyMjA4MTBaMDMxMTAvBgNV BAMTKEMzMkNEN0U0MTY4N0U0N0Y1Q0ZGQ0Y1Q0ZBMDk2OEJCRkVERDkwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeZX0WqHJjGv2ZdRpiQ5en53q BSDNQYveULeFpN7oJ1GHN+ZgfkQcxlEOihXSLCJfrjxg6pr90hQkeaOnT0BlJft/ Pm3hGGKkHTYYH3c7dymRhQbt/AMup9Ps4vnONrMJgvGEFwgIx1Mmv/ESFABNk9kT EQ/FwfirEk4/N3tE3/TY9FMIwoESgHBAZxP5IfZWHfxCTv9c4vmnX65bGg9Bz1k8 Rgx+aBmjX4U5EXY31mYIYirwBxOljrdPGZk8JMsZ8iIwRWskkSYaf7xTOi/SINcy Zqjr3nTPEJd2Rxfaok1WymD7Qvr4xB8kONSjJgnxSWYCNXSxONn5qi8SDnEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwyzX5BaH5H9c/89c+glou/7dkKIwHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2oqEIbspJ1yQbzWN1L8rD0GgPibeCNN1+L muvCfW9RA+TcHbj+IZWePYi16RSsWZbwOqaIG+oduonV94ADrPy14JgM2TbB2dXs BlFMr/AySM4j40juxFqYA90NeSwivlD85klPSwUf6V2YKTCHER6O4DgY3k4ANP/p 3C2+0xKOhBets7nVb3VoGIqbt5xtfSPtcl5smLxaIewecNd8PmcBR/VpbpnExX8+ YejjRMNrpS4LNRAdjeKo+rOVmJggrJVVvYZfmDnr6T0lYx5TJ3V5y4XYytr+8g7g wEdRIxjvHkCjtxQOA8oVOaizz327E6ZlqeRXWtEAr6Q8JTUpFRk= -----END CERTIFICATE-----Generated at Tue Sep 9 01:16:38 2025 by rpki-client