$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: Z12obKaUWJqePjvKkbhFZZMrelGFOPtzDfpum2pF80A= Subject key identifier: D4:D2:53:D7:74:66:BF:1F:C6:2B:C8:B0:57:E8:34:33:34:E7:3B:62 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 403EB57A9F867F07F76B463D327B6605EA0D546E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 01D1 Signing time: Tue 05 Aug 2025 23:01:24 +0000 Manifest this update: Tue 05 Aug 2025 22:56:24 +0000 Manifest next update: Sat 09 Aug 2025 07:22:24 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: /BUhWLgjUowgiAD7YMwP3oQb+rFPUPfTAtYKr+DceT4=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3e:b5:7a:9f:86:7f:07:f7:6b:46:3d:32:7b:66:05:ea:0d:54:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Aug 5 22:56:24 2025 GMT Not After : Aug 9 07:22:24 2025 GMT Subject: CN=D4D253D77466BF1FC62BC8B057E8343334E73B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:08:5b:e5:22:c2:a1:c3:a8:9f:0e:bb:42: 0e:a9:f4:09:c4:c3:0f:e0:d6:6e:b3:40:97:f7:9f: 91:b8:5d:33:e3:5d:15:cc:04:52:48:7c:f3:cf:be: 83:eb:de:fa:4c:6a:67:e2:bb:f8:be:df:a3:38:03: c0:a2:fc:f9:84:c6:16:4e:24:ab:5c:6b:2c:1e:cd: 9a:fa:b6:24:ca:9a:22:b6:eb:78:ea:bf:f6:e7:ff: 68:25:a0:8e:68:32:5c:c7:1f:ca:17:ae:71:7f:68: ea:4f:6d:84:42:09:e3:50:c9:8a:94:ef:5f:4d:ce: 1e:fa:38:f3:50:07:d5:e0:d5:e3:2e:13:89:88:a3: 69:79:07:e3:31:f4:76:14:0a:ae:21:c8:24:61:2d: 62:ac:89:46:d8:b0:3c:36:0e:3c:24:b2:7e:05:5f: bb:73:ac:77:3b:5a:75:b8:5f:c8:7f:58:89:e8:66: 2f:f3:89:e2:d2:8c:50:00:91:04:cc:b8:c9:bc:75: 52:5f:6b:44:5f:3a:6b:47:42:0b:fc:bc:d7:68:38: 07:6b:f8:cc:c0:40:b3:2d:ef:e4:fe:b9:05:2c:dc: 62:35:59:f4:eb:c5:a4:e8:7b:fa:43:05:8e:38:49: ab:42:d7:78:33:57:26:86:cc:74:66:13:5f:48:50: a6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:53:D7:74:66:BF:1F:C6:2B:C8:B0:57:E8:34:33:34:E7:3B:62 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e8:04:6e:37:66:15:af:b4:2a:08:10:c4:29:0f:d6:31:22: b5:f7:11:20:48:36:30:58:8a:6a:64:2c:e3:f9:89:45:54:a1: 0f:18:58:99:a9:23:78:a4:e6:6c:fe:48:b5:66:28:64:b0:ef: b3:82:46:6c:47:3c:9c:d8:ab:09:17:d7:5d:6a:a3:88:18:df: 66:17:27:0a:c0:fa:73:78:68:bf:96:54:83:79:aa:9a:52:5b: d4:89:2f:1c:65:43:57:05:64:86:ae:fa:9b:fe:be:70:72:81: ca:d9:b2:b3:07:a7:91:6e:a5:08:d1:3b:c6:3d:fc:84:bc:c1: e0:79:3b:88:0d:50:7e:cf:6b:05:67:52:ef:54:c2:fd:5d:84: d6:03:eb:84:66:e6:92:42:8b:4f:92:2e:53:95:75:e4:f5:3a: fa:6d:13:5f:77:c7:88:b7:37:ab:dd:5e:51:26:1f:a9:4d:98: 1c:e7:15:58:d7:a8:b0:d5:d3:a2:4f:e7:3b:5a:e5:9c:7d:44: d8:ed:f2:a7:82:2b:ff:4b:bc:5a:cd:56:62:80:eb:e2:75:9e: f1:5f:8a:ce:d6:8a:56:a3:ae:f9:9b:8c:3d:e4:db:ba:35:eb: 6b:0d:be:d7:65:f2:9d:cc:e2:e5:57:7a:9a:b7:a7:5d:23:3b: 78:29:0d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQD61ep+Gfwf3a0Y9MntmBeoNVG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNTA4MDUyMjU2MjRaFw0yNTA4MDkwNzIyMjRaMDMxMTAvBgNV BAMTKEQ0RDI1M0Q3NzQ2NkJGMUZDNjJCQzhCMDU3RTgzNDMzMzRFNzNCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbghb5SLCocOonw67Qg6p9AnE ww/g1m6zQJf3n5G4XTPjXRXMBFJIfPPPvoPr3vpMamfiu/i+36M4A8Ci/PmExhZO JKtcaywezZr6tiTKmiK263jqv/bn/2gloI5oMlzHH8oXrnF/aOpPbYRCCeNQyYqU 719Nzh76OPNQB9Xg1eMuE4mIo2l5B+Mx9HYUCq4hyCRhLWKsiUbYsDw2Djwksn4F X7tzrHc7WnW4X8h/WInoZi/zieLSjFAAkQTMuMm8dVJfa0RfOmtHQgv8vNdoOAdr +MzAQLMt7+T+uQUs3GI1WfTrxaToe/pDBY44SatC13gzVyaGzHRmE19IUKYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1NJT13Rmvx/GK8iwV+g0MzTnO2IwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPoBG43ZhWvtCoIEMQpD9YxIrX3ESBINjBY impkLOP5iUVUoQ8YWJmpI3ik5mz+SLVmKGSw77OCRmxHPJzYqwkX111qo4gY32YX JwrA+nN4aL+WVIN5qppSW9SJLxxlQ1cFZIau+pv+vnBygcrZsrMHp5FupQjRO8Y9 /IS8weB5O4gNUH7PawVnUu9Uwv1dhNYD64Rm5pJCi0+SLlOVdeT1OvptE193x4i3 N6vdXlEmH6lNmBznFVjXqLDV06JP5zta5Zx9RNjt8qeCK/9LvFrNVmKA6+J1nvFf is7WilajrvmbjD3k27o162sNvtdl8p3M4uVXepq3p10jO3gpDVA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:57:13 2025 by rpki-client