$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: bqf7J81s1UWOde69FxWOkEIV8eZymTi34rSH4Gb2+y4= Subject key identifier: E8:A4:1A:04:F5:C0:5B:2B:E9:AF:0E:E1:3A:C5:EA:B9:82:16:35:3A Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 0F236A31A4B6E80B1AEC259F8398E28BC39D4F14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 01B8 Signing time: Fri 08 Aug 2025 10:30:03 +0000 Manifest this update: Fri 08 Aug 2025 10:25:03 +0000 Manifest next update: Mon 11 Aug 2025 17:59:03 +0000 Files and hashes: 1: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) 2: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: zPVsHF5YzrSwVlzXGrkULfxovOymWBjA/LreYnfW+L4=) 3: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 5: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:23:6a:31:a4:b6:e8:0b:1a:ec:25:9f:83:98:e2:8b:c3:9d:4f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Aug 8 10:25:03 2025 GMT Not After : Aug 11 17:59:03 2025 GMT Subject: CN=E8A41A04F5C05B2BE9AF0EE13AC5EAB98216353A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:53:fd:5b:1a:00:41:57:c9:0b:ea:e5:79: 8f:b0:80:c6:60:e7:3d:e8:e8:ae:0f:bc:66:2b:9d: 74:ce:91:43:53:c7:35:86:47:e6:58:2c:71:d8:da: e7:b4:44:ea:6f:cc:ce:49:d6:49:eb:3e:c2:50:8b: e3:ea:a0:f5:64:00:1d:81:1c:96:2c:5d:ab:44:1a: 29:c1:be:f4:53:15:2e:11:87:13:8e:32:68:ac:e7: 0a:c1:e5:af:df:fb:cf:b5:7d:b7:2d:74:d0:8d:27: 6a:c6:63:6a:12:c2:cc:08:ec:f4:ba:68:bd:93:6d: 05:22:63:b4:d8:bc:54:b5:5d:8a:43:6b:69:50:5d: 98:2b:3f:61:a6:89:15:b3:29:43:ae:9f:c1:58:f4: ed:cc:34:3d:34:49:1a:f0:4b:34:ef:a8:50:d0:0b: 5a:6a:4b:75:a9:08:69:43:f5:b8:62:9b:e0:2d:02: 15:48:f4:aa:d1:c4:ae:e6:27:30:7a:c8:aa:ba:ad: ba:cf:01:e1:e2:ab:05:8d:5a:42:9a:88:41:b9:47: 84:b7:b6:77:ac:75:0d:4f:66:a6:7e:f2:49:ff:d1: 2d:d8:47:e0:65:6d:4d:d2:ad:e2:a5:00:b9:f7:9f: f9:9b:df:5c:fe:6b:7b:9a:59:f8:56:93:cc:07:6a: e7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A4:1A:04:F5:C0:5B:2B:E9:AF:0E:E1:3A:C5:EA:B9:82:16:35:3A X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:7f:8f:b9:16:1a:e3:d5:6d:05:20:da:fb:6a:1a:3a:83: dd:32:67:49:ad:4c:4a:97:3f:09:a6:a7:8e:2a:1d:8f:41:a9: 33:1b:ef:86:29:36:a2:52:e6:48:a7:2b:65:07:33:5e:ae:44: 0d:ef:5d:08:c3:24:7f:eb:2d:7e:b0:d5:a7:f0:04:fb:e4:1d: 6f:72:e4:6d:91:1d:a1:b6:31:0b:6d:7a:fa:42:ba:37:d9:3f: 76:ab:4f:08:cb:17:a7:b6:5f:df:90:2b:b4:49:b2:95:05:63: ee:ba:77:c2:ea:2f:00:a8:41:e2:5f:e3:f7:de:ab:98:ad:6a: 01:72:58:00:bb:04:7e:3a:73:e6:ab:9a:53:2f:5c:69:d0:70: bf:cc:52:b2:bb:d7:9c:b1:66:62:c1:a5:16:c7:64:60:f2:16: 78:14:c6:c4:8d:6b:e2:00:d8:6e:02:bf:dc:7f:f4:6d:c1:d8: 79:bb:1b:12:7a:22:7d:23:0e:fb:1b:73:86:c8:38:3f:9b:a3: 92:40:77:b1:ec:d9:70:76:d5:57:2c:8d:c9:1b:12:0b:02:87: 10:fb:30:7b:73:93:58:4c:76:81:d4:5c:e3:70:8a:74:99:81: a8:5a:2a:4b:40:8c:6c:0b:b0:69:9d:c8:ed:8a:aa:bf:80:85: 0e:4a:8c:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyNqMaS26Asa7CWfg5jii8OdTxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTA4MDgxMDI1MDNaFw0yNTA4MTExNzU5MDNaMDMxMTAvBgNV BAMTKEU4QTQxQTA0RjVDMDVCMkJFOUFGMEVFMTNBQzVFQUI5ODIxNjM1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k1P9WxoAQVfJC+rleY+wgMZg 5z3o6K4PvGYrnXTOkUNTxzWGR+ZYLHHY2ue0ROpvzM5J1knrPsJQi+PqoPVkAB2B HJYsXatEGinBvvRTFS4RhxOOMmis5wrB5a/f+8+1fbctdNCNJ2rGY2oSwswI7PS6 aL2TbQUiY7TYvFS1XYpDa2lQXZgrP2GmiRWzKUOun8FY9O3MND00SRrwSzTvqFDQ C1pqS3WpCGlD9bhim+AtAhVI9KrRxK7mJzB6yKq6rbrPAeHiqwWNWkKaiEG5R4S3 tnesdQ1PZqZ+8kn/0S3YR+BlbU3SreKlALn3n/mb31z+a3uaWfhWk8wHauczAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KQaBPXAWyvprw7hOsXquYIWNTowHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxwf4+5Fhrj1W0FINr7aho6g90yZ0mtTEqX Pwmmp44qHY9BqTMb74YpNqJS5kinK2UHM16uRA3vXQjDJH/rLX6w1afwBPvkHW9y 5G2RHaG2MQttevpCujfZP3arTwjLF6e2X9+QK7RJspUFY+66d8LqLwCoQeJf4/fe q5itagFyWAC7BH46c+armlMvXGnQcL/MUrK715yxZmLBpRbHZGDyFngUxsSNa+IA 2G4Cv9x/9G3B2Hm7GxJ6In0jDvsbc4bIOD+bo5JAd7Hs2XB21VcsjckbEgsChxD7 MHtzk1hMdoHUXONwinSZgahaKktAjGwLsGmdyO2Kqr+AhQ5KjPg= -----END CERTIFICATE-----Generated at Sun Aug 10 13:44:03 2025 by rpki-client