$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: sDTnuq4vSDZS3IALySocOieA5pdgylT18vGuNqNaCKw= Subject key identifier: 64:C7:B0:C5:2E:C6:79:2A:7A:DF:DC:9E:6A:35:2F:6E:88:57:81:14 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 5BAC5DF6D8E9844BAEF26B5198B3F2BF2E5A1955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01C2 Signing time: Fri 08 Aug 2025 22:40:56 +0000 Manifest this update: Fri 08 Aug 2025 22:35:56 +0000 Manifest next update: Tue 12 Aug 2025 08:42:56 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) 2: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: akPjtH/RMExzV3PnN9wgbSZtp6sN6lvR+hQvQVFig1A=) 3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: G08Zsb0m7nLFy8P1hWnzM0k+V4xtFf95Ynj7WmJyU4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ac:5d:f6:d8:e9:84:4b:ae:f2:6b:51:98:b3:f2:bf:2e:5a:19:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Aug 8 22:35:56 2025 GMT Not After : Aug 12 08:42:56 2025 GMT Subject: CN=64C7B0C52EC6792A7ADFDC9E6A352F6E88578114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:6d:a2:26:ba:95:e2:57:a5:f1:14:4a:46: f6:48:6e:4f:9f:80:31:24:c5:85:25:2f:72:08:6c: 30:27:a8:41:b2:17:f2:bb:c5:0d:e5:11:44:f3:eb: 28:92:25:7e:7f:6b:12:5a:20:9c:c4:02:eb:8d:98: 3e:4a:63:1c:64:2a:db:66:ac:a3:50:01:bb:af:c2: 86:de:d4:86:6c:97:2e:cc:13:30:60:dd:aa:4b:41: 69:c1:10:94:fd:53:20:96:25:fc:fb:e4:3e:2e:de: 9d:40:e7:68:e7:39:36:87:51:20:be:be:99:bd:3c: 08:a1:45:b6:e6:a9:23:16:54:de:15:88:f4:bd:15: 9b:cc:6c:11:4a:73:53:4c:27:8b:61:95:a2:8f:af: 90:97:7d:47:47:7e:37:1d:9c:90:bd:4e:bd:5b:15: a5:68:8a:13:c1:65:a3:e3:f4:a5:41:d5:a4:80:49: ee:bb:c1:bc:27:4e:0b:23:b8:ce:60:68:ac:8a:47: f5:32:df:8c:97:8d:d5:0d:6e:7a:9c:40:7a:0c:2f: 11:a6:89:2f:9f:46:84:7f:2a:ae:f4:10:23:b0:77: 77:b5:ff:2f:71:aa:f0:3b:97:e3:65:e6:01:91:3d: 1e:ab:c0:2e:7f:4f:74:ff:af:26:ce:d1:0c:f8:73: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C7:B0:C5:2E:C6:79:2A:7A:DF:DC:9E:6A:35:2F:6E:88:57:81:14 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:72:1b:26:1c:a3:22:a1:24:af:47:f7:99:0c:10:cd:60:20: 3a:f5:17:f5:44:85:9b:ef:c8:58:4e:35:ee:63:d3:2c:d6:22: a9:c1:33:e8:f3:2a:bf:75:71:a5:ca:69:ba:29:ff:95:08:4e: 3c:e2:3e:d2:aa:ca:fd:be:6d:b8:72:ae:ad:c6:47:d8:12:f8: 26:36:ad:b8:f5:2b:ec:67:8e:c7:f1:d9:46:3b:e0:81:83:18: 79:4b:c4:d3:2d:7d:82:ab:a4:93:11:26:00:dc:90:3f:a4:79: c6:2c:b4:f2:21:e2:9d:83:cb:8c:ec:17:9b:d1:26:f2:24:a6: dc:45:30:e8:dc:06:95:f4:df:7d:47:db:c9:0d:62:3f:55:33: c9:a9:2e:7d:53:97:11:93:c1:7c:85:e7:a3:62:c8:5f:69:a1: 6b:d8:4f:40:84:e4:f5:90:14:e4:0d:2d:a0:2f:93:c6:b2:8d: 96:95:85:07:c2:61:2d:01:03:6b:16:d6:1f:7e:00:d8:25:aa: d4:60:2a:9b:3a:52:6a:1b:f3:e7:1d:70:29:41:92:77:73:c1: 24:d8:6d:52:af:b0:2a:33:1d:09:aa:53:08:b6:b9:f9:00:ae: a0:d6:6d:e0:0b:82:a2:6f:af:4e:d4:c1:93:8f:7c:a9:db:b9: 41:a5:71:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6xd9tjphEuu8mtRmLPyvy5aGVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTA4MDgyMjM1NTZaFw0yNTA4MTIwODQyNTZaMDMxMTAvBgNV BAMTKDY0QzdCMEM1MkVDNjc5MkE3QURGREM5RTZBMzUyRjZFODg1NzgxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9G2iJrqV4lel8RRKRvZIbk+f gDEkxYUlL3IIbDAnqEGyF/K7xQ3lEUTz6yiSJX5/axJaIJzEAuuNmD5KYxxkKttm rKNQAbuvwobe1IZsly7MEzBg3apLQWnBEJT9UyCWJfz75D4u3p1A52jnOTaHUSC+ vpm9PAihRbbmqSMWVN4ViPS9FZvMbBFKc1NMJ4thlaKPr5CXfUdHfjcdnJC9Tr1b FaVoihPBZaPj9KVB1aSASe67wbwnTgsjuM5gaKyKR/Uy34yXjdUNbnqcQHoMLxGm iS+fRoR/Kq70ECOwd3e1/y9xqvA7l+Nl5gGRPR6rwC5/T3T/rybO0Qz4c5BbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZMewxS7GeSp639yeajUvbohXgRQwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxyGyYcoyKhJK9H95kMEM1gIDr1F/VEhZvv yFhONe5j0yzWIqnBM+jzKr91caXKabop/5UITjziPtKqyv2+bbhyrq3GR9gS+CY2 rbj1K+xnjsfx2UY74IGDGHlLxNMtfYKrpJMRJgDckD+kecYstPIh4p2Dy4zsF5vR JvIkptxFMOjcBpX0331H28kNYj9VM8mpLn1TlxGTwXyF56NiyF9poWvYT0CE5PWQ FOQNLaAvk8ayjZaVhQfCYS0BA2sW1h9+ANglqtRgKps6Umob8+cdcClBkndzwSTY bVKvsCozHQmqUwi2ufkArqDWbeALgqJvr07UwZOPfKnbuUGlcT8= -----END CERTIFICATE-----Generated at Sun Aug 10 03:47:25 2025 by rpki-client