$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: CNiUYuOEYAgAmAoc3JUaAx/3A8dgYGTPfa9WTURJmBQ= Subject key identifier: C1:9E:AC:D0:AB:00:EF:8D:9C:02:07:1A:FD:47:61:A9:28:45:69:E4 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 477E69E5259DE295F6467A0BAF832AAC34ED48D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: E9 Signing time: Sat 09 Aug 2025 07:30:02 +0000 Manifest this update: Sat 09 Aug 2025 07:25:02 +0000 Manifest next update: Tue 12 Aug 2025 15:35:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: Ndtcm4jhrK8zZoGchC7vOx93AVy057zSnEh5JTnw5Es=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 15:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7e:69:e5:25:9d:e2:95:f6:46:7a:0b:af:83:2a:ac:34:ed:48:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Aug 9 07:25:02 2025 GMT Not After : Aug 12 15:35:02 2025 GMT Subject: CN=C19EACD0AB00EF8D9C02071AFD4761A9284569E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:0a:28:85:4b:ee:43:00:44:a9:4e:c2:6e: 50:d0:10:ce:d0:0e:26:f2:f6:1f:54:db:63:e8:bc: 9c:1e:03:f3:31:e7:43:dd:5d:a9:db:eb:82:8b:8c: 2e:31:47:ac:a0:d2:36:ef:a3:d1:e5:3d:06:b7:6f: b0:0c:9f:e9:2a:f4:62:55:24:ae:fc:9a:a2:f3:25: 53:39:39:8a:7c:2e:a1:b5:6f:e9:48:fe:94:85:d9: 87:cb:f8:02:ce:ab:20:98:35:33:57:36:47:a8:ca: bf:37:ea:15:b2:68:96:0e:6b:32:05:f6:d5:0e:bd: 30:8d:a6:f4:eb:13:82:55:32:44:b9:fe:da:44:66: 76:46:29:03:fe:cc:ce:d7:a0:6e:ba:86:2a:0d:4b: 82:2e:7b:4a:f1:b5:88:02:d4:08:d5:e8:62:b1:20: a6:7c:ef:79:9c:bd:d4:16:31:04:d7:cc:f3:54:6f: cd:5d:93:2e:8a:d4:1f:83:c8:d5:84:44:e9:72:ac: b4:9c:4f:8c:9d:59:3c:b2:56:4b:aa:ec:98:b3:24: 37:25:c3:cf:0a:17:53:d6:68:a7:e8:b6:3d:90:e2: c3:80:c6:b5:55:3e:ea:05:6a:c0:0e:df:5e:7e:c2: 94:17:c2:44:27:26:19:a4:fc:18:39:52:47:08:e8: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9E:AC:D0:AB:00:EF:8D:9C:02:07:1A:FD:47:61:A9:28:45:69:E4 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cc:9d:ff:de:64:b3:d3:e7:54:6a:38:d9:c7:b0:b7:7e:bb: 06:61:6e:a2:e4:cd:38:7c:dc:a1:d2:21:30:f8:30:86:a0:e6: ac:e3:1e:d2:17:0e:67:de:6b:9d:e8:3f:b0:96:82:76:59:1e: a5:10:96:bb:ad:eb:e0:da:2d:a7:2d:14:78:f4:64:82:86:6b: 94:1b:74:5b:a2:37:94:49:d3:e7:66:54:8e:b6:ac:40:d1:67: fe:34:f4:de:75:3f:b1:ba:ff:f1:95:1a:13:91:23:dd:1b:0e: 1f:ca:36:60:6a:f2:13:32:49:d1:5a:f7:c0:91:de:85:53:4e: 11:e2:cf:6b:81:ff:3f:76:82:66:c9:58:f1:a2:62:fd:72:c9: 9b:59:15:14:7c:ea:a4:de:a7:4c:6b:bc:fa:d6:97:83:63:16: f2:66:14:21:3f:dd:d5:3b:46:22:9b:39:50:13:34:3a:5a:e8: a8:52:12:b6:91:df:a2:43:af:45:30:d6:fa:1b:50:0d:e0:5f: be:75:32:4c:8c:11:31:2f:f1:51:7b:fa:4f:1a:1b:a6:2f:17: dc:93:16:69:57:a4:48:98:5e:3b:2f:6b:b7:ef:71:68:79:08: 04:be:ad:3b:25:eb:e6:61:34:2c:4b:e7:af:7f:d9:f6:5e:6d: 2c:45:a2:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR35p5SWd4pX2RnoLr4MqrDTtSNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTA4MDkwNzI1MDJaFw0yNTA4MTIxNTM1MDJaMDMxMTAvBgNV BAMTKEMxOUVBQ0QwQUIwMEVGOEQ5QzAyMDcxQUZENDc2MUE5Mjg0NTY5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ7goohUvuQwBEqU7CblDQEM7Q Diby9h9U22PovJweA/Mx50PdXanb64KLjC4xR6yg0jbvo9HlPQa3b7AMn+kq9GJV JK78mqLzJVM5OYp8LqG1b+lI/pSF2YfL+ALOqyCYNTNXNkeoyr836hWyaJYOazIF 9tUOvTCNpvTrE4JVMkS5/tpEZnZGKQP+zM7XoG66hioNS4Iue0rxtYgC1AjV6GKx IKZ873mcvdQWMQTXzPNUb81dky6K1B+DyNWEROlyrLScT4ydWTyyVkuq7JizJDcl w88KF1PWaKfotj2Q4sOAxrVVPuoFasAO315+wpQXwkQnJhmk/Bg5UkcI6Bm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZ6s0KsA742cAgca/UdhqShFaeQwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnMnf/eZLPT51RqONnHsLd+uwZhbqLkzTh8 3KHSITD4MIag5qzjHtIXDmfea53oP7CWgnZZHqUQlrut6+DaLactFHj0ZIKGa5Qb dFuiN5RJ0+dmVI62rEDRZ/409N51P7G6//GVGhORI90bDh/KNmBq8hMySdFa98CR 3oVTThHiz2uB/z92gmbJWPGiYv1yyZtZFRR86qTep0xrvPrWl4NjFvJmFCE/3dU7 RiKbOVATNDpa6KhSEraR36JDr0Uw1vobUA3gX751MkyMETEv8VF7+k8aG6YvF9yT FmlXpEiYXjsva7fvcWh5CAS+rTsl6+ZhNCxL569/2fZebSxFotM= -----END CERTIFICATE-----Generated at Sat Aug 9 20:45:52 2025 by rpki-client