$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft File: 781285AE1A8C595D354913D0B93F6982FCDFD898.mft (raw, json) Hash identifier: VLlz5//Maqb7mNwStLlgZlFPj+zcPAas7MzBCOmWNIg= Subject key identifier: DF:0A:F0:9C:DB:20:69:52:DB:7F:D4:9D:73:C1:33:B0:C4:2C:45:F5 Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 Certificate issuer: /CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Certificate serial: 3CDBC6132F2356D1E29749B91CF77B430528693D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft Manifest number: 0192 Signing time: Tue 05 Aug 2025 15:01:11 +0000 Manifest this update: Tue 05 Aug 2025 14:56:11 +0000 Manifest next update: Fri 08 Aug 2025 17:17:11 +0000 Files and hashes: 1: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=) 2: 781285AE1A8C595D354913D0B93F6982FCDFD898.crl (hash: jsQLlCc1TXLeYZDiVRe1lZxqVbmIdcHqwygfVtSyd94=) 3: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: 2BdVqKJM7wkCXb7z3xWM42z8nq2M+ZXCEKBrPXEyNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:db:c6:13:2f:23:56:d1:e2:97:49:b9:1c:f7:7b:43:05:28:69:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Validity Not Before: Aug 5 14:56:11 2025 GMT Not After : Aug 8 17:17:11 2025 GMT Subject: CN=DF0AF09CDB206952DB7FD49D73C133B0C42C45F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:8f:0b:07:ff:a3:e9:d4:b9:01:9c:ff:f3: b0:4b:bd:31:d3:83:cf:32:6a:d6:bb:df:0d:9a:84: d0:28:3b:48:b8:c7:55:07:ad:22:db:17:05:5a:b8: 97:39:e1:77:6c:84:71:ed:ac:73:e6:60:46:06:3f: 63:10:0d:5f:b0:e5:33:0e:30:d5:c6:fb:28:db:ff: 71:fd:12:da:27:0d:90:70:0a:a9:dc:80:37:14:bb: d1:47:aa:be:84:d1:0d:8f:f1:64:2e:6d:3a:2a:dc: 5b:b1:b9:ea:02:d1:f5:dc:01:45:97:5c:f7:99:fa: ae:70:34:03:3b:02:4f:c1:ee:45:a9:fb:de:7e:7e: 87:a5:41:92:40:dc:f0:b8:4b:95:d0:64:29:09:e6: ac:92:df:04:b6:04:c3:9c:e2:44:ad:b5:cd:e5:2e: c1:56:6c:81:93:4b:00:74:82:1b:bf:49:18:07:00: eb:24:89:13:ad:eb:f1:b2:a8:3a:d8:fc:52:be:41: cb:30:0f:75:cf:4b:ca:58:74:2f:81:42:2a:46:71: af:1e:c8:2d:46:df:61:67:05:95:16:4a:ef:3d:44: 16:ea:08:87:e8:6c:b0:58:61:2e:81:50:34:40:7c: ac:75:93:77:d0:ad:a3:6a:07:9b:73:3d:38:cf:6c: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0A:F0:9C:DB:20:69:52:DB:7F:D4:9D:73:C1:33:B0:C4:2C:45:F5 X509v3 Authority Key Identifier: keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:27:64:59:ef:ea:d7:5d:c6:04:88:0b:48:8d:bf:b9:15:d6: fc:a6:16:a4:a6:6a:22:95:63:99:64:c3:3a:35:12:50:df:97: a8:32:1f:5c:64:5b:3e:ce:ff:34:d4:e4:ec:e4:ca:bf:78:5c: 02:bb:5b:8d:e9:1f:a3:e7:5d:6c:f5:87:14:7b:48:b1:90:54: f5:21:24:d2:83:b5:17:81:bb:59:87:9d:9e:28:15:47:de:e5: 13:26:b9:b2:78:3f:46:09:0c:3d:66:10:1b:d6:e7:83:8f:0b: 2c:bd:fc:8d:5c:d3:dc:4a:4a:4d:c2:e0:ae:b3:36:b8:8d:2f: b2:d1:68:ba:be:2c:11:84:44:d4:86:fd:5a:5d:17:ae:07:c4: 7c:c3:34:66:1b:5d:aa:76:d5:45:05:c2:9d:34:10:3a:a8:5a: 0a:8f:23:37:be:d1:9e:4f:3a:9e:14:d1:8a:22:a6:da:e6:f6: e0:56:01:81:6f:8e:00:23:c5:69:3f:bc:9d:a7:c5:b3:15:4d: 56:8c:b2:22:14:98:07:20:e9:d3:a7:b0:3f:5b:3d:40:cf:f6: 74:ee:67:47:c5:ec:de:b0:33:84:0d:5c:36:27:2e:bc:8a:d7: b8:5b:b9:d0:aa:ac:fa:a6:bb:37:50:92:20:52:90:82:a9:46: 0c:63:2f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNvGEy8jVtHil0m5HPd7QwUoaT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJG Q0RGRDg5ODAeFw0yNTA4MDUxNDU2MTFaFw0yNTA4MDgxNzE3MTFaMDMxMTAvBgNV BAMTKERGMEFGMDlDREIyMDY5NTJEQjdGRDQ5RDczQzEzM0IwQzQyQzQ1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpI8LB/+j6dS5AZz/87BLvTHT g88yata73w2ahNAoO0i4x1UHrSLbFwVauJc54XdshHHtrHPmYEYGP2MQDV+w5TMO MNXG+yjb/3H9EtonDZBwCqncgDcUu9FHqr6E0Q2P8WQubToq3FuxueoC0fXcAUWX XPeZ+q5wNAM7Ak/B7kWp+95+foelQZJA3PC4S5XQZCkJ5qyS3wS2BMOc4kSttc3l LsFWbIGTSwB0ghu/SRgHAOskiROt6/GyqDrY/FK+QcswD3XPS8pYdC+BQipGca8e yC1G32FnBZUWSu89RBbqCIfobLBYYS6BUDRAfKx1k3fQraNqB5tzPTjPbLTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wrwnNsgaVLbf9Sdc8EzsMQsRfUwHwYDVR0j BBgwFoAUeBKFrhqMWV01SRPQuT9pgvzf2JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mjc1ZmQ3Ni1lOGVlLTQ2YzgtOWQ4Mi1iNzM1YjlmNzA0MzEvMC83ODEyODVBRTFB OEM1OTVEMzU0OTEzRDBCOTNGNjk4MkZDREZEODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJGQ0RG RDg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk ODItYjczNWI5ZjcwNDMxLzAvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5 ODJGQ0RGRDg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQnZFnv6tddxgSIC0iNv7kV1vymFqSmaiKV Y5lkwzo1ElDfl6gyH1xkWz7O/zTU5Ozkyr94XAK7W43pH6PnXWz1hxR7SLGQVPUh JNKDtReBu1mHnZ4oFUfe5RMmubJ4P0YJDD1mEBvW54OPCyy9/I1c09xKSk3C4K6z NriNL7LRaLq+LBGERNSG/VpdF64HxHzDNGYbXap21UUFwp00EDqoWgqPIze+0Z5P Op4U0Yoiptrm9uBWAYFvjgAjxWk/vJ2nxbMVTVaMsiIUmAcg6dOnsD9bPUDP9nTu Z0fF7N6wM4QNXDYnLryK17hbudCqrPqmuzdQkiBSkIKpRgxjLyQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:13 2025 by rpki-client