$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: NRAl5OyLdryKFURhWCKdO9g0I4pI58H2EywFZVlmo54= Subject key identifier: 95:1A:18:6B:3D:27:25:EE:C5:19:4D:98:2A:80:D4:4E:28:80:C0:E9 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 374A747A6C0BAE8CD3AD5FC26983363BEECDDE46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: 0126 Signing time: Fri 05 Sep 2025 04:02:23 +0000 Manifest this update: Fri 05 Sep 2025 03:57:23 +0000 Manifest next update: Mon 08 Sep 2025 07:06:23 +0000 Files and hashes: 1: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: B+KRPZ45M3a2TGeFK6F8VhEWKIdDQtoU2as5/vkekC8=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: P7QsgIeBI6Jlmylg4E9bqTZzbWkEwew+La7Hoh4W7Lw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4a:74:7a:6c:0b:ae:8c:d3:ad:5f:c2:69:83:36:3b:ee:cd:de:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Sep 5 03:57:23 2025 GMT Not After : Sep 8 07:06:23 2025 GMT Subject: CN=951A186B3D2725EEC5194D982A80D44E2880C0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:42:02:18:eb:f7:61:d9:14:46:d6:23:c6: a7:34:e1:60:26:ba:f4:7f:04:c0:82:89:fc:eb:f7: b3:cb:a8:15:ff:cc:5c:08:c6:10:dd:e5:a7:75:08: 3a:1f:56:77:a3:93:70:d8:7d:89:8a:b0:ae:ec:c6: 85:e9:82:da:28:ee:07:bf:46:c4:43:ad:8d:9a:19: f2:7c:6e:19:b1:cf:e9:d6:26:55:69:0f:04:9a:2e: 23:7d:2e:d1:6d:63:6b:12:cd:b5:9a:68:2f:89:2c: d2:e4:98:d0:66:04:b9:5b:4c:e8:4b:83:4a:f9:d2: 46:2e:84:90:92:e9:79:b0:46:5c:e0:c9:24:53:5c: eb:57:23:ce:f1:f1:91:31:15:d0:cc:96:54:71:29: 57:18:cf:6c:58:79:cd:4f:12:a1:5e:f8:68:e8:6e: 70:3d:0f:25:a0:b5:00:29:61:38:3e:81:42:75:86: b5:c4:5c:e3:93:29:8c:32:a3:3a:31:d2:ac:41:fa: d0:92:4b:b2:38:3e:e0:91:29:8e:e5:4d:c1:b1:04: 4e:0e:36:06:13:73:b6:d5:d5:65:66:95:60:e9:4a: 72:2d:09:e3:74:27:e2:04:58:9e:d8:2a:f0:75:27: 44:f0:6b:dc:c4:ba:b2:47:50:a6:82:37:60:d8:32: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:18:6B:3D:27:25:EE:C5:19:4D:98:2A:80:D4:4E:28:80:C0:E9 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:78:bd:c5:94:d6:d6:22:c1:c0:65:cd:72:90:1c:79:8a:b2: c7:46:0a:c4:48:dd:5b:d6:43:1b:72:0c:00:f4:19:cb:b6:1d: 6d:d0:94:02:b8:ba:d1:9a:11:5e:08:cd:88:9d:6e:71:36:e1: 94:25:b0:39:bf:29:90:1a:6f:ef:0f:c5:5e:d6:60:75:27:f0: e6:d1:d3:7c:98:99:97:c1:85:d7:58:21:38:a1:7d:4d:97:94: 26:62:85:07:a2:96:61:24:20:a9:e6:0a:f3:c3:af:7d:b7:58: 91:1f:dd:50:d4:bf:cc:9d:8a:44:5c:a4:a0:b3:be:ea:29:85: 7a:c7:2a:d0:20:be:08:4c:b8:c9:54:9f:31:f5:4e:68:cd:f5: 46:83:47:d3:73:e9:3e:4e:f9:fe:6f:7d:be:c4:8a:bf:b2:f1: 9c:a2:35:b3:46:34:ba:80:0e:d9:ef:01:45:de:5c:a5:0a:ca: c9:bf:e7:90:56:6e:1d:ec:98:a3:7a:59:6c:83:e7:26:2e:80: e5:3b:f1:98:66:e5:8c:c1:83:f2:e0:28:70:b2:03:38:ec:58: ca:fe:03:f8:11:8c:84:0f:d7:1f:3a:3f:a7:26:bd:ea:57:f0: 3d:dc:c1:f1:b1:7e:5f:da:5d:d0:a4:0b:44:7d:6e:ad:04:bb: 6c:52:08:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0p0emwLrozTrV/CaYM2O+7N3kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTA5MDUwMzU3MjNaFw0yNTA5MDgwNzA2MjNaMDMxMTAvBgNV BAMTKDk1MUExODZCM0QyNzI1RUVDNTE5NEQ5ODJBODBENDRFMjg4MEMwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXEICGOv3YdkURtYjxqc04WAm uvR/BMCCifzr97PLqBX/zFwIxhDd5ad1CDofVnejk3DYfYmKsK7sxoXpgtoo7ge/ RsRDrY2aGfJ8bhmxz+nWJlVpDwSaLiN9LtFtY2sSzbWaaC+JLNLkmNBmBLlbTOhL g0r50kYuhJCS6XmwRlzgySRTXOtXI87x8ZExFdDMllRxKVcYz2xYec1PEqFe+Gjo bnA9DyWgtQApYTg+gUJ1hrXEXOOTKYwyozox0qxB+tCSS7I4PuCRKY7lTcGxBE4O NgYTc7bV1WVmlWDpSnItCeN0J+IEWJ7YKvB1J0Twa9zEurJHUKaCN2DYMqGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRoYaz0nJe7FGU2YKoDUTiiAwOkwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId4vcWU1tYiwcBlzXKQHHmKssdGCsRI3VvW QxtyDAD0Gcu2HW3QlAK4utGaEV4IzYidbnE24ZQlsDm/KZAab+8PxV7WYHUn8ObR 03yYmZfBhddYITihfU2XlCZihQeilmEkIKnmCvPDr323WJEf3VDUv8ydikRcpKCz vuophXrHKtAgvghMuMlUnzH1TmjN9UaDR9Nz6T5O+f5vfb7Eir+y8ZyiNbNGNLqA DtnvAUXeXKUKysm/55BWbh3smKN6WWyD5yYugOU78Zhm5YzBg/LgKHCyAzjsWMr+ A/gRjIQP1x86P6cmvepX8D3cwfGxfl/aXdCkC0R9bq0Eu2xSCHU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:55 2025 by rpki-client