$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: 1icGLU4GsInUvK1WF3LM8FfP320i2TF2QnKF8NINBwE= Subject key identifier: 59:6B:EF:0C:0F:73:88:94:EB:5C:76:8E:D3:43:A4:2E:3D:BD:EE:FF Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 730E9ED7C02939A578FF2537AD7C75515178335A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 05 Signing time: Tue 05 Aug 2025 10:01:24 +0000 Manifest this update: Tue 05 Aug 2025 09:56:24 +0000 Manifest next update: Fri 08 Aug 2025 13:32:24 +0000 Files and hashes: 1: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: 1EcKWFXO5Xyw/j0g3GZX4FJjPqXmbosvMA7djN7y9IA=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0e:9e:d7:c0:29:39:a5:78:ff:25:37:ad:7c:75:51:51:78:33:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Aug 5 09:56:24 2025 GMT Not After : Aug 8 13:32:24 2025 GMT Subject: CN=596BEF0C0F738894EB5C768ED343A42E3DBDEEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:63:38:de:e3:ae:4b:9a:4b:e3:dc:5e:4c: 2f:09:a1:0e:3d:05:af:3f:86:b4:ac:17:f0:fc:6b: f6:03:f8:a7:d2:41:8b:d4:ee:c6:e8:fe:ef:3d:01: 10:49:6e:7c:48:a1:42:76:c0:1b:2d:b7:1e:43:e0: 0b:d7:38:2d:47:d4:8e:c5:af:96:90:c3:68:f6:8e: b4:2f:93:4d:40:0d:6b:ed:4f:28:c4:48:87:d3:59: 15:54:c0:fe:b8:fc:08:2f:ab:ac:c2:cd:d8:3f:23: 5f:8e:ef:82:73:22:c2:74:1f:e8:23:2f:77:1d:49: 69:90:b0:7c:70:34:73:5c:56:1f:43:12:5a:eb:e7: 95:b9:cb:18:10:ab:8e:a0:79:7a:94:25:69:c2:96: 21:1f:fa:c1:49:7f:a9:fd:9f:83:72:a2:af:ec:42: d0:a5:f4:fd:38:b5:eb:b7:e9:ae:1e:06:9f:bf:20: 3c:de:d1:ae:b1:f0:50:32:59:b3:01:de:f1:38:02: 5c:2d:46:3a:1e:df:eb:77:6b:bb:63:ea:e6:8e:3e: 99:6a:bc:93:80:2b:70:63:03:29:93:54:6f:07:43: 12:15:58:19:f0:1a:e3:45:7c:3c:66:ec:ce:59:a1: b0:5f:db:e4:00:9e:b1:86:3f:62:3b:8a:da:a5:c0: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:EF:0C:0F:73:88:94:EB:5C:76:8E:D3:43:A4:2E:3D:BD:EE:FF X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2a:ff:1b:f4:ab:04:d8:37:23:73:f0:2c:60:9d:11:8d:cc: 70:ee:0e:a7:0e:95:45:93:b5:b6:d3:d2:d9:09:1e:a5:ec:96: fd:19:b0:41:f9:ef:98:a1:6e:5f:33:23:5b:a6:7c:cf:f8:4a: 23:f1:ec:2a:ce:5d:73:8f:0d:bd:d3:67:71:be:af:ac:d2:b4: 72:b7:f4:d5:99:b3:ba:e0:83:48:7e:1e:6b:18:71:19:87:76: 79:ac:c1:dd:64:49:7f:a2:6a:66:26:57:80:28:a4:4f:75:5e: 26:89:33:58:40:47:1d:5b:48:c7:94:32:8f:9b:c4:bb:04:6c: 17:05:0c:4a:a1:c0:68:ac:b3:fd:43:2d:2d:9f:04:5a:22:42: 5e:49:91:0e:4b:0e:e7:dc:af:db:ee:8c:2b:2f:de:0b:9e:2e: 2b:26:b0:cb:d8:a5:5d:31:79:7f:0c:de:85:b2:f9:0b:48:9b: 89:cf:ed:c6:5c:91:59:85:58:ad:95:fe:73:ea:70:bf:2c:3f: d6:86:4f:61:55:45:53:4d:94:ed:d9:4b:47:b5:1b:ca:6c:5c: 6f:f4:3b:09:86:b5:6b:80:13:79:02:77:09:b0:59:a3:dc:a4: e3:b1:7b:d3:54:28:c3:a6:d5:a8:52:10:8a:a8:a2:06:87:86: 54:7d:2a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcw6e18ApOaV4/yU3rXx1UVF4M1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNTA4MDUwOTU2MjRaFw0yNTA4MDgxMzMyMjRaMDMxMTAvBgNV BAMTKDU5NkJFRjBDMEY3Mzg4OTRFQjVDNzY4RUQzNDNBNDJFM0RCREVFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQGM43uOuS5pL49xeTC8JoQ49 Ba8/hrSsF/D8a/YD+KfSQYvU7sbo/u89ARBJbnxIoUJ2wBsttx5D4AvXOC1H1I7F r5aQw2j2jrQvk01ADWvtTyjESIfTWRVUwP64/Agvq6zCzdg/I1+O74JzIsJ0H+gj L3cdSWmQsHxwNHNcVh9DElrr55W5yxgQq46geXqUJWnCliEf+sFJf6n9n4Nyoq/s QtCl9P04teu36a4eBp+/IDze0a6x8FAyWbMB3vE4AlwtRjoe3+t3a7tj6uaOPplq vJOAK3BjAymTVG8HQxIVWBnwGuNFfDxm7M5ZobBf2+QAnrGGP2I7itqlwK/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWWvvDA9ziJTrXHaO00OkLj297v8wHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcq/xv0qwTYNyNz8CxgnRGNzHDuDqcOlUWT tbbT0tkJHqXslv0ZsEH575ihbl8zI1umfM/4SiPx7CrOXXOPDb3TZ3G+r6zStHK3 9NWZs7rgg0h+HmsYcRmHdnmswd1kSX+iamYmV4AopE91XiaJM1hARx1bSMeUMo+b xLsEbBcFDEqhwGiss/1DLS2fBFoiQl5JkQ5LDufcr9vujCsv3gueLismsMvYpV0x eX8M3oWy+QtIm4nP7cZckVmFWK2V/nPqcL8sP9aGT2FVRVNNlO3ZS0e1G8psXG/0 OwmGtWuAE3kCdwmwWaPcpOOxe9NUKMOm1ahSEIqoogaHhlR9KnI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:45:54 2025 by rpki-client