$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: QPRUm2nDwJBQXutKUK3xAhh+FoUvbuB2qqFiDDNnPuY= Subject key identifier: 4F:D9:31:1F:D6:60:ED:FC:08:BB:5F:EF:B5:E1:BC:12:BC:45:CF:C1 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 62407B7761209705F57086C8B2EF4AF6E0304824 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0304 Signing time: Thu 07 Aug 2025 16:12:01 +0000 Manifest this update: Thu 07 Aug 2025 16:07:01 +0000 Manifest next update: Mon 11 Aug 2025 02:46:01 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 3: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: LluutOKBzIZ7BnKV6X9GmK7GTPjV8ILk10l79mbyx8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 02:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:40:7b:77:61:20:97:05:f5:70:86:c8:b2:ef:4a:f6:e0:30:48:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Aug 7 16:07:01 2025 GMT Not After : Aug 11 02:46:01 2025 GMT Subject: CN=4FD9311FD660EDFC08BB5FEFB5E1BC12BC45CFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:69:cd:a0:ab:9c:46:18:98:2d:d7:a4:10: 10:20:91:b6:cb:b7:11:c1:b5:bf:d4:01:3f:49:e8: 37:78:d8:f2:0c:1a:64:52:58:72:ec:7b:fc:63:a2: 43:dd:69:b3:e3:d3:de:47:b5:e2:26:ad:4e:4e:a0: b6:98:f6:4c:c3:b7:49:a2:a1:9f:39:94:f4:1e:43: 89:66:1a:1f:6f:92:57:04:d6:d1:cf:c2:fc:7d:5b: 66:2e:19:3d:44:9b:91:91:83:4e:c6:0c:7a:90:87: 24:e5:0c:0c:8f:c3:e8:bd:1f:13:8d:93:c7:3a:2a: 1b:cf:30:08:56:95:13:75:a7:fa:4a:6d:2f:4f:0a: f2:c8:e5:e7:43:64:7a:a8:bc:57:bd:f8:12:60:e0: fb:9d:b6:d8:ff:4f:58:62:b3:64:99:5f:5d:94:0c: d6:94:3b:74:6d:ee:39:ea:f7:36:96:ce:28:57:2f: 89:b1:df:60:05:9f:20:9c:b8:42:d1:e1:54:69:0c: a7:a8:b4:ce:80:59:d6:30:d8:9a:85:97:06:46:5b: d4:b7:cf:91:80:5c:c0:ba:1b:d8:8b:02:ef:57:9e: 61:32:20:da:6e:9b:d9:20:7b:36:01:f4:19:5d:1c: 82:fa:ad:89:f0:29:2e:c4:28:65:5d:12:1d:7c:f1: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D9:31:1F:D6:60:ED:FC:08:BB:5F:EF:B5:E1:BC:12:BC:45:CF:C1 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:f5:48:d5:87:d7:8e:04:bd:27:1e:49:6a:52:6b:51:09: 2c:0a:45:02:bb:ae:5c:99:fb:a3:57:7c:91:f3:74:c1:c6:0f: 67:be:81:a2:0e:c9:53:57:40:bf:8a:ae:1d:da:04:a5:cb:35: dd:59:89:2d:74:fa:53:46:71:27:0d:57:73:79:70:3b:41:2f: ac:8d:7b:10:38:40:79:96:2f:2c:34:92:87:a0:a7:8e:83:ef: c2:8a:ae:c5:f3:ad:b2:09:5d:2d:10:a4:95:6a:81:d2:1f:5a: 6d:b1:3b:05:41:fd:70:b3:b7:c6:4e:d8:60:08:a2:90:d5:fa: 01:ea:08:ac:c1:f9:00:e4:b8:c8:67:30:d7:c8:32:3c:8f:83: b1:8c:2c:5f:c0:ac:16:42:a5:dc:c7:ce:f3:fd:41:07:3c:6e: c4:4e:aa:0e:f9:d9:04:9b:35:e4:44:85:bb:92:74:ee:4e:5b: ad:d8:a7:18:70:a0:fd:5d:0e:1e:72:c8:27:f2:dd:04:cd:7d: c2:99:8b:42:a8:6b:2a:50:c2:2c:a6:7b:6d:8f:4e:0c:23:5d: e4:7a:19:8e:dd:1d:b8:6d:ef:0e:fd:4f:9d:2e:11:74:ad:69: 71:41:41:1a:f1:8c:92:36:88:e3:80:c7:ac:e0:2e:a1:61:39: 38:35:79:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkB7d2EglwX1cIbIsu9K9uAwSCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA4MDcxNjA3MDFaFw0yNTA4MTEwMjQ2MDFaMDMxMTAvBgNV BAMTKDRGRDkzMTFGRDY2MEVERkMwOEJCNUZFRkI1RTFCQzEyQkM0NUNGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BWnNoKucRhiYLdekEBAgkbbL txHBtb/UAT9J6Dd42PIMGmRSWHLse/xjokPdabPj095HteImrU5OoLaY9kzDt0mi oZ85lPQeQ4lmGh9vklcE1tHPwvx9W2YuGT1Em5GRg07GDHqQhyTlDAyPw+i9HxON k8c6KhvPMAhWlRN1p/pKbS9PCvLI5edDZHqovFe9+BJg4Pudttj/T1his2SZX12U DNaUO3Rt7jnq9zaWzihXL4mx32AFnyCcuELR4VRpDKeotM6AWdYw2JqFlwZGW9S3 z5GAXMC6G9iLAu9XnmEyINpum9kgezYB9BldHIL6rYnwKS7EKGVdEh188dndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9kxH9Zg7fwIu1/vteG8ErxFz8EwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzt9UjVh9eOBL0nHklqUmtRCSwKRQK7rlyZ +6NXfJHzdMHGD2e+gaIOyVNXQL+Krh3aBKXLNd1ZiS10+lNGcScNV3N5cDtBL6yN exA4QHmWLyw0koegp46D78KKrsXzrbIJXS0QpJVqgdIfWm2xOwVB/XCzt8ZO2GAI opDV+gHqCKzB+QDkuMhnMNfIMjyPg7GMLF/ArBZCpdzHzvP9QQc8bsROqg752QSb NeREhbuSdO5OW63YpxhwoP1dDh5yyCfy3QTNfcKZi0KoaypQwiyme22PTgwjXeR6 GY7dHbht7w79T50uEXStaXFBQRrxjJI2iOOAx6zgLqFhOTg1ecY= -----END CERTIFICATE-----Generated at Sat Aug 9 14:30:55 2025 by rpki-client