$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: CUuKrIHhX/4mbaGneoTYJrIGBRuQElfa/3FDKfssTOk= Subject key identifier: B9:EA:CC:85:5B:4D:1F:37:AD:85:D2:B8:A3:7A:07:EF:D5:FB:84:26 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 399FA4B8C863B6F708285AA603298E3AB171A0FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: C6 Signing time: Sat 06 Sep 2025 19:10:39 +0000 Manifest this update: Sat 06 Sep 2025 19:05:39 +0000 Manifest next update: Wed 10 Sep 2025 00:03:39 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: 9n+5JZG9tpZ9J6OaMBSfqdABcWhxYxauJKElgd7AXXA=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9f:a4:b8:c8:63:b6:f7:08:28:5a:a6:03:29:8e:3a:b1:71:a0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Sep 6 19:05:39 2025 GMT Not After : Sep 10 00:03:39 2025 GMT Subject: CN=B9EACC855B4D1F37AD85D2B8A37A07EFD5FB8426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:bd:db:54:85:2a:87:9c:21:64:e0:1f:63: 7b:45:cf:92:67:3b:1d:e8:7f:bf:fe:15:c4:88:97: 25:82:33:86:98:d9:6b:66:40:12:ad:5e:ba:97:19: f9:34:d4:dc:4c:eb:f5:06:4a:40:6f:cc:19:de:76: f8:e3:7a:64:fd:0b:ac:ef:ce:6b:cb:37:7f:f4:5e: 9f:60:e4:58:cb:6b:b4:df:21:ec:fd:1d:bf:43:9a: 3b:57:84:af:ff:92:38:12:10:32:59:a7:f8:5e:8d: fe:dd:6e:60:15:20:c7:5b:c7:eb:e5:08:fa:c3:15: bc:f2:ae:89:c6:ea:30:af:df:f0:24:41:73:3b:47: c9:cc:27:43:b0:aa:b4:be:73:9d:2e:c1:e9:99:14: 63:95:49:d6:7a:85:e1:0f:83:a3:53:0e:da:48:96: 0c:16:42:72:85:f0:f5:eb:eb:08:5a:ed:df:d2:88: 72:2a:49:49:ee:14:05:66:ce:d4:a1:b4:02:7b:63: 4b:0e:11:30:84:a3:1f:0b:b6:56:c1:bd:3f:fd:7a: 91:6a:0d:77:e3:f0:eb:b9:09:60:c2:d3:67:1f:5e: 1e:21:ae:89:3a:1a:f6:69:df:1e:f9:2a:4e:38:c0: 49:3d:62:da:ac:13:55:20:48:4e:32:f8:14:11:ce: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:CC:85:5B:4D:1F:37:AD:85:D2:B8:A3:7A:07:EF:D5:FB:84:26 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1c:14:6d:08:89:2b:e2:65:a0:23:0e:fe:40:c0:1c:24:f8: a5:32:80:b1:ce:f7:02:18:0a:ab:37:f5:e9:cd:fb:a2:2d:1b: 07:72:e9:d9:86:d3:06:74:d7:2c:d1:ae:bd:5f:d3:dd:e9:7e: 40:d4:58:ec:15:9f:50:a8:34:61:db:f9:a2:f3:22:63:9f:23: 5b:78:4b:0c:51:8d:f4:fa:04:06:18:e0:7e:c8:d8:1f:57:f9: 63:c5:6a:9b:3b:a7:a1:03:12:54:c2:bb:e3:d0:50:09:c7:02: dc:5c:3f:1a:96:c9:2f:74:2f:6d:f3:18:45:07:3a:6f:80:1d: ea:9a:ab:ce:2c:62:be:f1:27:3f:23:12:68:29:34:a2:03:48: 3b:5a:41:b4:7e:38:9e:20:3a:d3:da:e9:d3:94:8e:4d:f7:cb: 2f:5a:06:ba:63:40:d6:d2:50:bd:cb:ed:eb:d4:02:fd:93:90: d5:83:1c:28:6f:82:74:81:25:4f:ca:8f:50:f4:c6:2d:00:db: 5c:0b:93:2f:48:df:d9:0c:e6:48:3f:2d:21:e9:d2:50:66:1f: 09:fa:0c:ea:74:f9:05:18:62:40:16:6e:c6:68:35:39:39:5c: 88:4c:8f:20:52:11:26:57:9d:58:1a:1f:5d:f4:07:36:13:6a: f9:c5:e7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZ+kuMhjtvcIKFqmAymOOrFxoPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTA5MDYxOTA1MzlaFw0yNTA5MTAwMDAzMzlaMDMxMTAvBgNV BAMTKEI5RUFDQzg1NUI0RDFGMzdBRDg1RDJCOEEzN0EwN0VGRDVGQjg0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEm73bVIUqh5whZOAfY3tFz5Jn Ox3of7/+FcSIlyWCM4aY2WtmQBKtXrqXGfk01NxM6/UGSkBvzBnedvjjemT9C6zv zmvLN3/0Xp9g5FjLa7TfIez9Hb9DmjtXhK//kjgSEDJZp/hejf7dbmAVIMdbx+vl CPrDFbzyronG6jCv3/AkQXM7R8nMJ0OwqrS+c50uwemZFGOVSdZ6heEPg6NTDtpI lgwWQnKF8PXr6wha7d/SiHIqSUnuFAVmztShtAJ7Y0sOETCEox8LtlbBvT/9epFq DXfj8Ou5CWDC02cfXh4hrok6GvZp3x75Kk44wEk9YtqsE1UgSE4y+BQRzkIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuerMhVtNHzethdK4o3oH79X7hCYwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYcFG0IiSviZaAjDv5AwBwk+KUygLHO9wIY Cqs39enN+6ItGwdy6dmG0wZ01yzRrr1f093pfkDUWOwVn1CoNGHb+aLzImOfI1t4 SwxRjfT6BAYY4H7I2B9X+WPFaps7p6EDElTCu+PQUAnHAtxcPxqWyS90L23zGEUH Om+AHeqaq84sYr7xJz8jEmgpNKIDSDtaQbR+OJ4gOtPa6dOUjk33yy9aBrpjQNbS UL3L7evUAv2TkNWDHChvgnSBJU/Kj1D0xi0A21wLky9I39kM5kg/LSHp0lBmHwn6 DOp0+QUYYkAWbsZoNTk5XIhMjyBSESZXnVgaH130BzYTavnF50Y= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:12 2025 by rpki-client