$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: 8+eo69utbpQhEDSRo+ge6N5wv02tyxNdbDUdr9MRYWw= Subject key identifier: 96:9E:45:29:60:4B:37:09:25:E7:EC:41:25:48:88:31:9C:EA:87:02 Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 53699AFDAA15B07F06ED63CFF3DBB64CD8892A50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01DB Signing time: Wed 06 Aug 2025 08:32:21 +0000 Manifest this update: Wed 06 Aug 2025 08:27:21 +0000 Manifest next update: Sat 09 Aug 2025 11:44:21 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: Toi485dBjo2TS1OBZaIa8w8AUGVh6zz2hOlTF8bW1/I=) 3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 4: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:69:9a:fd:aa:15:b0:7f:06:ed:63:cf:f3:db:b6:4c:d8:89:2a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Aug 6 08:27:21 2025 GMT Not After : Aug 9 11:44:21 2025 GMT Subject: CN=969E4529604B370925E7EC41254888319CEA8702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4b:ec:79:f9:66:7b:d9:6f:81:13:10:82:de: b5:1f:5d:20:22:9c:2e:37:9f:d1:95:a4:5b:58:41: eb:c4:52:da:ad:26:ff:22:0f:a9:4b:70:82:5e:f0: 7d:20:a4:66:60:68:9f:48:af:aa:a7:71:14:5d:66: 72:e9:d8:f6:d3:0d:98:f2:5a:df:48:bb:5e:0e:f5: 0b:97:bf:18:7b:67:88:aa:cb:54:4c:6d:27:fa:20: c3:08:f8:9a:21:e0:85:d1:57:22:d1:ab:fb:9f:c2: e8:79:d7:4d:0e:b7:d8:3a:78:25:85:b1:65:f0:67: cd:4f:83:0b:e5:27:7a:98:7c:05:05:44:1a:cf:86: db:48:7e:67:9c:ff:eb:71:02:c0:65:db:57:87:52: a7:72:b5:b9:b0:f0:a7:06:61:ca:53:77:e2:0b:4f: 92:a1:20:3e:23:f0:3c:d8:ab:07:4f:5d:18:0c:77: e1:c2:fd:91:26:6c:3e:66:8a:df:bf:15:b3:c5:2a: 1b:42:12:de:0f:6e:d8:0f:00:af:54:d4:1f:d3:09: c9:13:d2:6f:55:41:62:1b:f5:cf:17:6f:08:31:b0: a1:f9:f4:09:7f:70:2d:13:6e:da:34:57:d8:75:32: 74:bb:b0:0a:a8:e1:55:77:31:ec:81:c7:e1:1e:2a: 64:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9E:45:29:60:4B:37:09:25:E7:EC:41:25:48:88:31:9C:EA:87:02 X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c2:55:9d:e7:87:73:8b:d9:60:df:2d:ac:d6:ca:6a:32:cd: f8:d5:de:3c:f3:07:07:cc:2b:39:79:1b:c2:8b:3d:16:9a:10: 4a:b3:ab:df:44:f1:ce:8c:13:2e:ae:92:71:c4:6b:72:a6:47: ec:b7:73:44:18:d5:33:44:99:ab:e3:da:fb:e0:83:41:29:87: b0:ba:c7:34:84:8a:b1:47:b8:20:76:91:30:fb:37:79:17:3f: b0:fd:f6:f6:79:fe:da:0f:47:1f:63:8c:86:fb:22:c8:2c:5c: b4:b3:79:c2:97:a7:3f:d0:5d:fd:51:19:93:2d:e5:7e:cc:e9: 2b:54:d7:f4:1c:3e:1d:e0:0e:7e:2c:da:19:04:06:4b:b3:88: 3a:c8:48:ae:20:45:92:34:3f:57:c4:3a:31:2a:78:be:23:e2: 44:7a:e0:17:fa:c6:6a:45:6d:0d:c3:84:f9:85:df:b9:c2:b9: 56:47:ef:c8:9a:78:f3:7c:07:5b:3f:04:94:a2:66:c0:8c:4e: 08:b1:d5:e6:31:36:72:44:75:67:f4:7f:9e:40:cf:1b:2e:41: 2e:bf:78:5e:ea:a9:a8:78:99:fa:b3:ba:27:3c:36:5d:8f:98: 67:78:d3:c8:d0:3e:84:2b:ec:9b:7d:e4:34:4a:3a:d4:0c:3a: ac:37:2b:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2ma/aoVsH8G7WPP89u2TNiJKlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA4MDYwODI3MjFaFw0yNTA4MDkxMTQ0MjFaMDMxMTAvBgNV BAMTKDk2OUU0NTI5NjA0QjM3MDkyNUU3RUM0MTI1NDg4ODMxOUNFQTg3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtS+x5+WZ72W+BExCC3rUfXSAi nC43n9GVpFtYQevEUtqtJv8iD6lLcIJe8H0gpGZgaJ9Ir6qncRRdZnLp2PbTDZjy Wt9Iu14O9QuXvxh7Z4iqy1RMbSf6IMMI+Joh4IXRVyLRq/ufwuh5100Ot9g6eCWF sWXwZ81PgwvlJ3qYfAUFRBrPhttIfmec/+txAsBl21eHUqdytbmw8KcGYcpTd+IL T5KhID4j8DzYqwdPXRgMd+HC/ZEmbD5mit+/FbPFKhtCEt4PbtgPAK9U1B/TCckT 0m9VQWIb9c8XbwgxsKH59Al/cC0Tbto0V9h1MnS7sAqo4VV3MeyBx+EeKmStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlp5FKWBLNwkl5+xBJUiIMZzqhwIwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXCVZ3nh3OL2WDfLazWymoyzfjV3jzzBwfM Kzl5G8KLPRaaEEqzq99E8c6MEy6uknHEa3KmR+y3c0QY1TNEmavj2vvgg0Eph7C6 xzSEirFHuCB2kTD7N3kXP7D99vZ5/toPRx9jjIb7IsgsXLSzecKXpz/QXf1RGZMt 5X7M6StU1/QcPh3gDn4s2hkEBkuziDrISK4gRZI0P1fEOjEqeL4j4kR64Bf6xmpF bQ3DhPmF37nCuVZH78iaePN8B1s/BJSiZsCMTgix1eYxNnJEdWf0f55AzxsuQS6/ eF7qqah4mfqzuic8Nl2PmGd408jQPoQr7Jt95DRKOtQMOqw3K/o= -----END CERTIFICATE-----Generated at Fri Aug 8 12:49:31 2025 by rpki-client