$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: JG4sTXsnJvSIxfBnlI+zySYbGbYEkXAl1CRqcUXdD30= Subject key identifier: EF:14:09:B0:DE:FE:2F:77:CF:2D:07:B7:DC:D3:42:80:D2:11:E9:79 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 5EF5787E3BDB53550746AE4EDF36477D3A3B4E24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: A1 Signing time: Thu 07 Aug 2025 19:30:46 +0000 Manifest this update: Thu 07 Aug 2025 19:25:46 +0000 Manifest next update: Mon 11 Aug 2025 05:11:46 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: pMalUaLdjLeltOBW5w9q90yq7rVOPP6kdfG4Ff9JwxQ=) 2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f5:78:7e:3b:db:53:55:07:46:ae:4e:df:36:47:7d:3a:3b:4e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Aug 7 19:25:46 2025 GMT Not After : Aug 11 05:11:46 2025 GMT Subject: CN=EF1409B0DEFE2F77CF2D07B7DCD34280D211E979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:67:22:45:3e:95:b6:3d:b5:8c:67:c7:5f: 7f:1a:8d:6f:3a:06:02:fb:ce:b4:a1:66:4e:3e:81: 25:71:23:9f:63:0d:63:4b:26:af:a0:92:73:21:1c: dc:12:c3:4b:b9:8a:db:76:40:81:bb:22:87:91:fb: 4e:65:13:04:09:47:4c:82:b7:9d:bc:da:9d:64:b8: 96:1f:d2:04:5e:bd:4b:25:40:c1:74:c9:ec:49:d4: 3c:84:ce:69:5b:35:a3:bc:c7:ab:53:68:e1:1f:f5: c3:d5:15:8e:c2:f8:b4:2d:9d:fb:f1:d6:39:27:3d: 06:d6:8a:b6:6e:3e:d5:24:f9:17:90:47:7b:9b:60: dc:e8:50:9b:6b:4f:43:06:13:a1:f6:80:71:ad:88: a8:6b:57:8c:2a:2a:5b:df:f9:40:14:18:76:35:bf: c0:36:40:9b:f8:27:0d:b5:1a:0c:8e:8e:b1:cb:3e: 37:fc:bb:7f:14:6c:15:61:84:c7:5c:b5:e4:73:17: d9:79:cf:03:c2:cb:e8:0a:c6:7f:49:77:97:e2:78: 00:85:e8:93:a9:41:d6:ef:a6:ab:be:f8:a9:10:46: fe:2a:b8:2d:36:89:5e:6a:74:cb:d3:8f:c5:83:53: d8:be:5a:06:ac:b7:97:13:ff:7c:0b:81:36:f7:92: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:14:09:B0:DE:FE:2F:77:CF:2D:07:B7:DC:D3:42:80:D2:11:E9:79 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6f:50:25:5d:eb:37:a5:17:b8:ca:0b:52:b5:2d:21:8c:7b: fe:00:fe:86:7a:ed:96:5c:a5:c7:aa:b5:af:44:42:25:c6:28: 8a:8d:03:76:e7:22:c2:e5:b3:ad:bd:ea:94:ca:ba:ae:f5:a3: a6:98:98:f1:31:eb:e6:c9:c2:f2:91:89:d9:d0:db:09:9a:0f: 47:43:21:af:11:8b:b9:83:d0:dd:59:4f:12:5d:35:fd:e1:e5: d3:ba:54:85:cf:2f:20:bd:0e:3d:5c:3d:84:c3:e7:a3:36:a2: f7:cd:74:e8:ce:51:58:1f:17:ad:8f:e0:2b:8b:7a:ce:cc:62: 3d:82:cd:15:41:d4:0b:d4:75:c4:1f:99:f5:66:51:6f:28:33: 84:c3:ca:b6:80:05:88:ff:70:bf:a7:13:f6:fa:09:fe:a5:ec: c1:5d:2f:67:e8:46:1a:75:f3:1f:2d:44:66:60:b9:c7:a9:59: 14:f6:17:c7:36:46:01:37:d1:04:4a:0f:57:bb:fe:38:24:d6: 73:51:61:c1:8a:5a:37:fc:13:bd:7b:59:a5:27:76:fe:b1:eb: 6e:35:b9:35:a7:68:67:20:64:84:b4:30:0a:09:16:0d:ad:ee: 07:91:78:1a:75:23:4c:a8:97:26:6d:f1:f8:e4:d2:3f:34:20: e9:9d:5a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvV4fjvbU1UHRq5O3zZHfTo7TiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNTA4MDcxOTI1NDZaFw0yNTA4MTEwNTExNDZaMDMxMTAvBgNV BAMTKEVGMTQwOUIwREVGRTJGNzdDRjJEMDdCN0RDRDM0MjgwRDIxMUU5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOV2ciRT6Vtj21jGfHX38ajW86 BgL7zrShZk4+gSVxI59jDWNLJq+gknMhHNwSw0u5itt2QIG7IoeR+05lEwQJR0yC t5282p1kuJYf0gRevUslQMF0yexJ1DyEzmlbNaO8x6tTaOEf9cPVFY7C+LQtnfvx 1jknPQbWirZuPtUk+ReQR3ubYNzoUJtrT0MGE6H2gHGtiKhrV4wqKlvf+UAUGHY1 v8A2QJv4Jw21GgyOjrHLPjf8u38UbBVhhMdcteRzF9l5zwPCy+gKxn9Jd5fieACF 6JOpQdbvpqu++KkQRv4quC02iV5qdMvTj8WDU9i+Wgast5cT/3wLgTb3kh4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7xQJsN7+L3fPLQe33NNCgNIR6XkwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVvUCVd6zelF7jKC1K1LSGMe/4A/oZ67ZZc pceqta9EQiXGKIqNA3bnIsLls6296pTKuq71o6aYmPEx6+bJwvKRidnQ2wmaD0dD Ia8Ri7mD0N1ZTxJdNf3h5dO6VIXPLyC9Dj1cPYTD56M2ovfNdOjOUVgfF62P4CuL es7MYj2CzRVB1AvUdcQfmfVmUW8oM4TDyraABYj/cL+nE/b6Cf6l7MFdL2foRhp1 8x8tRGZgucepWRT2F8c2RgE30QRKD1e7/jgk1nNRYcGKWjf8E717WaUndv6x6241 uTWnaGcgZIS0MAoJFg2t7geReBp1I0yolyZt8fjk0j80IOmdWug= -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:12 2025 by rpki-client