$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: s6ckoqMHXIMinDLcYCsnFw6fOLJu9oZEzzQgxA1D+OM= Subject key identifier: 08:8E:0E:D1:18:0B:3E:B0:F1:1A:6C:13:61:24:C9:41:0A:CD:49:22 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 2BDD6BB05A145DE8EEB525EF93894963019481A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: AD Signing time: Fri 08 Aug 2025 05:00:52 +0000 Manifest this update: Fri 08 Aug 2025 04:55:52 +0000 Manifest next update: Mon 11 Aug 2025 10:37:52 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: Jq5xfkELnOi2/eS0PRDFCzR/P/btnHohEzf2k0qFiIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 10:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:dd:6b:b0:5a:14:5d:e8:ee:b5:25:ef:93:89:49:63:01:94:81:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Aug 8 04:55:52 2025 GMT Not After : Aug 11 10:37:52 2025 GMT Subject: CN=088E0ED1180B3EB0F11A6C136124C9410ACD4922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:52:2e:48:cb:13:6f:af:e7:32:b4:5a:fe: d9:6c:1d:68:fb:38:70:19:5b:e1:a8:4d:a5:b2:43: 0b:a9:e7:8c:34:9d:0d:16:ef:e4:d5:ac:7c:a3:25: 95:9f:52:f9:3a:53:f2:55:87:ca:6e:3c:b8:47:04: b5:12:e5:3d:c8:cf:2b:d3:cf:56:d1:95:50:c1:46: ea:34:70:ac:bc:4c:e2:98:85:8b:59:5a:9c:a0:7f: 27:af:46:33:1e:66:3c:ec:b4:78:71:52:4a:a8:5a: cb:1a:ba:bd:de:28:9f:36:39:69:9e:0b:c3:8d:ae: e8:ff:13:db:89:80:e4:ee:44:bc:93:60:b0:ad:fb: e7:c6:68:23:c0:13:a6:ec:96:a9:67:50:4e:41:2a: 33:df:53:12:cb:cb:ac:be:3d:73:71:98:ac:2f:91: 07:71:d5:60:79:cb:9a:31:9a:ed:44:62:e1:d7:64: cf:d5:54:2d:58:9a:6b:fa:79:60:5f:b5:d4:74:71: 34:46:56:d2:6c:6a:fa:30:85:73:02:02:e7:30:df: a9:d3:82:66:66:09:34:02:be:7c:66:26:f4:7f:51: b5:1d:80:a4:e5:7d:c4:17:b8:5d:00:7f:c7:4d:ab: 36:b4:ae:0d:de:10:d7:52:78:33:df:30:c3:d9:1d: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8E:0E:D1:18:0B:3E:B0:F1:1A:6C:13:61:24:C9:41:0A:CD:49:22 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:cf:82:5b:da:3e:02:f3:e1:44:79:d7:dc:dc:fa:7c:a3:74: 41:4c:cc:7d:0d:e4:52:e4:b7:28:b1:71:74:4b:27:40:57:60: 83:5d:69:0c:37:d8:1f:c6:de:8c:3b:8c:94:cb:4d:f6:78:e6: e2:de:dc:39:ea:f2:2f:78:32:ba:44:24:39:99:05:45:b1:ef: 18:eb:88:04:68:14:93:24:13:4f:e4:a4:20:a7:af:ea:2a:5e: b9:ca:df:a0:59:d2:32:0f:84:0b:65:47:0b:3d:09:1d:ba:fc: 97:30:7c:c6:98:7b:26:0b:d0:61:cd:65:c7:65:1c:c4:d9:d2: 47:82:20:f5:47:fe:8c:82:1f:c3:2b:04:52:e9:88:2d:6a:ff: 99:e0:ab:73:6a:84:5a:fc:8e:87:bf:11:4f:e3:94:d1:29:84: 53:b5:4d:85:fc:19:97:e1:8a:a0:e9:c0:b1:28:da:a0:41:cb: 17:30:59:ce:d3:92:51:a2:f8:d4:f3:8e:89:3c:39:68:1a:87: 23:20:d5:c8:fe:bd:f9:84:59:04:f2:f8:7a:fe:49:4f:d5:76: 28:13:5d:77:1b:75:f0:b4:bc:87:bf:df:c4:32:5e:27:4c:f7: 1a:20:a3:4b:44:57:aa:26:9d:35:97:78:3d:fc:ed:55:ac:0b: 80:ba:b8:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK91rsFoUXejutSXvk4lJYwGUgakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA4MDgwNDU1NTJaFw0yNTA4MTExMDM3NTJaMDMxMTAvBgNV BAMTKDA4OEUwRUQxMTgwQjNFQjBGMTFBNkMxMzYxMjRDOTQxMEFDRDQ5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkVIuSMsTb6/nMrRa/tlsHWj7 OHAZW+GoTaWyQwup54w0nQ0W7+TVrHyjJZWfUvk6U/JVh8puPLhHBLUS5T3IzyvT z1bRlVDBRuo0cKy8TOKYhYtZWpygfyevRjMeZjzstHhxUkqoWssaur3eKJ82OWme C8ONruj/E9uJgOTuRLyTYLCt++fGaCPAE6bslqlnUE5BKjPfUxLLy6y+PXNxmKwv kQdx1WB5y5oxmu1EYuHXZM/VVC1Ymmv6eWBftdR0cTRGVtJsavowhXMCAucw36nT gmZmCTQCvnxmJvR/UbUdgKTlfcQXuF0Af8dNqza0rg3eENdSeDPfMMPZHRgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCI4O0RgLPrDxGmwTYSTJQQrNSSIwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfPglvaPgLz4UR519zc+nyjdEFMzH0N5FLk tyixcXRLJ0BXYINdaQw32B/G3ow7jJTLTfZ45uLe3Dnq8i94MrpEJDmZBUWx7xjr iARoFJMkE0/kpCCnr+oqXrnK36BZ0jIPhAtlRws9CR26/JcwfMaYeyYL0GHNZcdl HMTZ0keCIPVH/oyCH8MrBFLpiC1q/5ngq3NqhFr8joe/EU/jlNEphFO1TYX8GZfh iqDpwLEo2qBByxcwWc7TklGi+NTzjok8OWgahyMg1cj+vfmEWQTy+Hr+SU/VdigT XXcbdfC0vIe/38QyXidM9xogo0tEV6omnTWXeD387VWsC4C6uMw= -----END CERTIFICATE-----Generated at Sun Aug 10 05:34:20 2025 by rpki-client