$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: PMV/bT5SWwP51AbvZyMSsKCB8U8pPeMOchLq0WJ0IIo= Subject key identifier: 1F:29:40:99:06:18:3D:EF:80:AD:60:83:7A:EC:C4:4B:B8:4F:34:11 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 28A1A5E92C8AA0AB810FAD6562FF84C5E57E3493 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01EB Signing time: Thu 04 Sep 2025 15:50:36 +0000 Manifest this update: Thu 04 Sep 2025 15:45:36 +0000 Manifest next update: Mon 08 Sep 2025 00:24:36 +0000 Files and hashes: 1: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 2: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 3: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: 5p8k17uipteu0kb7PcDcMByOjm6/Sr7cQ31EbiJMSRg=) 4: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 5: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a1:a5:e9:2c:8a:a0:ab:81:0f:ad:65:62:ff:84:c5:e5:7e:34:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Sep 4 15:45:36 2025 GMT Not After : Sep 8 00:24:36 2025 GMT Subject: CN=1F29409906183DEF80AD60837AECC44BB84F3411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:72:4e:79:99:f3:db:ca:fe:8f:5b:7c:96: a2:38:74:04:11:cf:09:af:73:9e:b1:b3:98:58:5c: 7d:69:56:bb:e0:13:94:89:4f:25:fc:5d:04:ae:12: 76:d3:b3:90:da:cf:60:77:d6:05:c7:d1:c1:43:e4: 0a:11:21:a9:41:45:6a:28:d5:58:f2:d0:54:e7:2d: 2a:52:b5:a0:95:3e:77:1b:7a:57:e9:03:18:a7:6c: 5d:f9:08:65:26:f8:ec:92:38:12:d7:04:11:d5:77: d0:aa:19:02:51:fa:ec:ea:f4:b6:26:6c:c9:49:13: d1:8e:fe:d2:eb:6d:5b:f2:cc:c3:0b:4b:3d:ba:0a: 1e:0b:a9:cb:2a:95:3a:6e:f7:2b:56:20:61:bc:d8: 21:cf:11:64:d3:7c:b9:46:e5:13:85:17:4b:8a:79: 56:b0:4b:c1:95:91:d0:16:08:42:92:b7:33:e3:8c: 79:fc:c1:ef:5a:31:88:29:4d:48:ce:88:f3:9c:7e: 74:f8:d4:d4:30:ac:a6:2b:1f:66:34:49:75:85:11: 5b:bd:e8:5a:f5:88:64:b4:ad:7b:e9:28:bd:0a:b0: 47:3b:f4:ea:a0:71:32:c6:1d:cd:09:e5:5e:fc:e0: 02:dc:70:78:7d:b8:63:6c:15:07:b2:bc:74:d7:b7: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:29:40:99:06:18:3D:EF:80:AD:60:83:7A:EC:C4:4B:B8:4F:34:11 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2e:6a:02:0d:6a:f1:e5:65:fe:cc:de:46:e1:bb:94:98:7e: ea:2a:bc:d0:33:31:c9:4c:8f:a5:7b:e6:34:cc:89:7b:8b:e2: a7:d2:d6:88:84:ff:3d:54:27:6f:af:67:bb:32:47:cc:c1:5e: 35:e1:dd:c9:f8:a7:d9:d7:86:40:f5:81:1a:4b:d6:59:72:22: a1:c0:00:39:79:99:be:60:74:ae:88:38:53:d5:df:7a:ac:eb: 45:c8:1b:a2:d8:89:25:27:6a:70:58:30:c7:70:30:1e:28:9a: 37:1c:cf:e2:0c:0f:d7:e6:b4:13:58:0a:84:0b:48:b1:30:7d: 07:88:93:fa:30:aa:75:d7:60:29:b8:29:49:be:5a:f7:a0:cf: d5:14:d8:93:2b:63:95:6d:dc:7b:56:14:2b:37:40:05:d9:90: eb:ec:2d:d4:01:c2:d9:98:c3:ed:5d:da:aa:e1:19:5b:29:fb: 0e:c9:70:d7:af:5f:1c:99:b9:02:ea:71:e3:55:3e:a4:43:02: ed:25:52:c5:23:d7:5d:ae:bd:d5:0a:eb:65:e7:07:0d:64:bb: c9:0b:56:57:88:91:cc:a7:94:7b:4c:40:b5:9e:49:0d:ac:62: 4b:45:50:9e:be:f5:a1:ee:5c:81:d5:aa:cc:75:30:95:72:b3: c3:34:8d:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKGl6SyKoKuBD61lYv+ExeV+NJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA5MDQxNTQ1MzZaFw0yNTA5MDgwMDI0MzZaMDMxMTAvBgNV BAMTKDFGMjk0MDk5MDYxODNERUY4MEFENjA4MzdBRUNDNDRCQjg0RjM0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdLXJOeZnz28r+j1t8lqI4dAQR zwmvc56xs5hYXH1pVrvgE5SJTyX8XQSuEnbTs5Daz2B31gXH0cFD5AoRIalBRWoo 1Vjy0FTnLSpStaCVPncbelfpAxinbF35CGUm+OySOBLXBBHVd9CqGQJR+uzq9LYm bMlJE9GO/tLrbVvyzMMLSz26Ch4LqcsqlTpu9ytWIGG82CHPEWTTfLlG5ROFF0uK eVawS8GVkdAWCEKStzPjjHn8we9aMYgpTUjOiPOcfnT41NQwrKYrH2Y0SXWFEVu9 6Fr1iGS0rXvpKL0KsEc79OqgcTLGHc0J5V784ALccHh9uGNsFQeyvHTXt0ChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHylAmQYYPe+ArWCDeuzES7hPNBEwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIuagINavHlZf7M3kbhu5SYfuoqvNAzMclM j6V75jTMiXuL4qfS1oiE/z1UJ2+vZ7syR8zBXjXh3cn4p9nXhkD1gRpL1llyIqHA ADl5mb5gdK6IOFPV33qs60XIG6LYiSUnanBYMMdwMB4omjccz+IMD9fmtBNYCoQL SLEwfQeIk/owqnXXYCm4KUm+Wvegz9UU2JMrY5Vt3HtWFCs3QAXZkOvsLdQBwtmY w+1d2qrhGVsp+w7JcNevXxyZuQLqceNVPqRDAu0lUsUj112uvdUK62XnBw1ku8kL VleIkcynlHtMQLWeSQ2sYktFUJ6+9aHuXIHVqsx1MJVys8M0jf8= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:11 2025 by rpki-client