$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: 4r+5Cm9xHrs5UX8gyh6Jok3JJMPcLte4JJyMTaWA+W4= Subject key identifier: 71:82:C3:78:0F:C8:23:E5:D6:52:B9:71:07:33:55:23:44:3E:FD:85 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 57BBC60E4FD6EB9EB7A7BE3489D3ABF7C5F2AE8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 025D Signing time: Fri 08 Aug 2025 22:41:06 +0000 Manifest this update: Fri 08 Aug 2025 22:36:06 +0000 Manifest next update: Tue 12 Aug 2025 08:24:06 +0000 Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: Z9U+dM0w8o56wGrP2WrZEP6+q5MsgiLLHbm/nR5MRJs=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bb:c6:0e:4f:d6:eb:9e:b7:a7:be:34:89:d3:ab:f7:c5:f2:ae:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Aug 8 22:36:06 2025 GMT Not After : Aug 12 08:24:06 2025 GMT Subject: CN=7182C3780FC823E5D652B97107335523443EFD85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:33:25:81:ed:21:fa:40:e6:a1:f5:16:3c: 05:60:0e:32:3c:d3:e7:78:b6:e1:b5:87:64:c5:d3: fc:e0:c3:14:5e:0d:23:86:ca:53:a9:5f:b7:fd:1e: 60:86:f2:36:c5:8e:c0:44:06:57:87:3e:de:33:c8: 6a:58:a2:11:27:2b:50:38:1d:19:cb:c4:4e:a5:a9: f2:3f:50:3f:a0:0f:03:4c:17:3e:19:ec:2d:4b:52: c0:c6:18:2c:68:33:7c:a3:4c:99:45:15:a5:31:7b: c6:7b:b7:fc:3f:e6:3e:a4:85:f1:66:d5:9e:c4:8d: 69:1c:9e:28:f1:47:68:e2:c2:69:b6:ec:37:5b:81: 0f:be:8b:94:20:c1:1f:1e:6f:83:52:e8:c9:bf:10: f0:ed:7a:7b:d5:1f:c0:a7:77:57:a8:4f:36:d0:57: cf:cf:b0:23:41:fd:53:43:a2:72:89:a4:4b:06:78: 41:33:96:5b:fc:20:c9:9a:d2:90:b4:8d:7e:56:17: 27:2a:b4:e5:13:b7:38:4b:fe:69:3a:51:9f:2b:37: 4c:26:a3:fa:27:af:99:e1:6c:cf:47:5c:4d:8f:de: 47:80:a3:d4:26:19:7b:2e:44:a7:b1:c0:7b:fb:a8: a8:72:96:c4:60:6e:aa:a7:99:25:68:bc:7f:b7:27: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:C3:78:0F:C8:23:E5:D6:52:B9:71:07:33:55:23:44:3E:FD:85 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:89:bc:2c:81:71:87:3f:16:b3:09:21:05:e9:b4:a2:ba:5a: 7b:21:8e:4e:f8:d2:00:21:5e:99:b4:3a:db:7e:52:f9:16:ec: 54:0b:9a:85:22:61:f3:73:ee:45:dc:fd:e5:8f:c8:07:26:cf: 62:8e:01:0d:7c:06:81:4e:55:b1:23:e0:11:66:f4:06:7f:cb: ab:bc:5a:39:b7:f2:08:9b:f0:d8:75:14:43:83:0d:ea:6c:c6: b0:81:59:55:78:53:94:3c:89:d9:b6:5b:79:aa:04:c5:20:c9: b5:27:e0:5b:96:1b:45:30:f1:0b:ab:d0:be:44:c2:0b:9f:71: 70:24:62:64:dd:ab:da:0d:18:20:5b:58:da:cd:a4:2e:24:40: a4:46:41:de:27:62:29:60:65:6f:dd:9e:9a:86:a7:fb:ba:53: 01:0a:e5:f3:f0:e0:ef:ad:e1:92:af:67:e8:fc:6f:0c:2a:c8: 27:09:88:0e:85:b3:20:91:da:00:e3:03:65:7a:24:7b:e2:75: 45:2a:b1:aa:7e:cd:4c:b9:2a:25:39:5f:15:ab:2a:2f:b3:17: 53:be:12:62:c3:c1:5d:0c:52:bd:a6:df:60:e6:52:04:a8:62: 0d:ae:aa:43:d9:a4:6f:18:e8:0f:a8:7b:d3:5f:03:91:5e:e8: 25:7d:4d:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7vGDk/W6563p740idOr98XyroswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTA4MDgyMjM2MDZaFw0yNTA4MTIwODI0MDZaMDMxMTAvBgNV BAMTKDcxODJDMzc4MEZDODIzRTVENjUyQjk3MTA3MzM1NTIzNDQzRUZEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWzMlge0h+kDmofUWPAVgDjI8 0+d4tuG1h2TF0/zgwxReDSOGylOpX7f9HmCG8jbFjsBEBleHPt4zyGpYohEnK1A4 HRnLxE6lqfI/UD+gDwNMFz4Z7C1LUsDGGCxoM3yjTJlFFaUxe8Z7t/w/5j6khfFm 1Z7EjWkcnijxR2jiwmm27DdbgQ++i5QgwR8eb4NS6Mm/EPDtenvVH8Cnd1eoTzbQ V8/PsCNB/VNDonKJpEsGeEEzllv8IMma0pC0jX5WFycqtOUTtzhL/mk6UZ8rN0wm o/onr5nhbM9HXE2P3keAo9QmGXsuRKexwHv7qKhylsRgbqqnmSVovH+3J5XXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcYLDeA/II+XWUrlxBzNVI0Q+/YUwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCJvCyBcYc/FrMJIQXptKK6Wnshjk740gAh Xpm0Ott+UvkW7FQLmoUiYfNz7kXc/eWPyAcmz2KOAQ18BoFOVbEj4BFm9AZ/y6u8 Wjm38gib8Nh1FEODDepsxrCBWVV4U5Q8idm2W3mqBMUgybUn4FuWG0Uw8Qur0L5E wgufcXAkYmTdq9oNGCBbWNrNpC4kQKRGQd4nYilgZW/dnpqGp/u6UwEK5fPw4O+t 4ZKvZ+j8bwwqyCcJiA6FsyCR2gDjA2V6JHvidUUqsap+zUy5KiU5XxWrKi+zF1O+ EmLDwV0MUr2m32DmUgSoYg2uqkPZpG8Y6A+oe9NfA5Fe6CV9TSE= -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:32 2025 by rpki-client