$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: iEGVtgkAdyeAFFnHBfXYw4vEXmsJCVLvcNxXIKBtF4M= Subject key identifier: 89:30:39:FD:3B:6A:88:7F:C5:FE:A4:96:F3:8B:68:C2:A1:FF:EC:7E Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 5F8A72D116F5FCFEAD7D6D50A9B133F2A8B5E659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 0191 Signing time: Wed 06 Aug 2025 07:04:28 +0000 Manifest this update: Wed 06 Aug 2025 06:59:28 +0000 Manifest next update: Sat 09 Aug 2025 11:49:28 +0000 Files and hashes: 1: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) 2: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: g5JvVAsp22wyYAWIqIU7T0poRacJUiNAVoYZjNI3pyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:72:d1:16:f5:fc:fe:ad:7d:6d:50:a9:b1:33:f2:a8:b5:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Aug 6 06:59:28 2025 GMT Not After : Aug 9 11:49:28 2025 GMT Subject: CN=893039FD3B6A887FC5FEA496F38B68C2A1FFEC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:13:b0:43:39:27:b3:68:4b:50:92:a3:e6: 01:77:c6:ab:72:d9:eb:b2:f7:08:1e:f9:5b:d6:9f: bf:35:b2:96:ac:4b:d6:2e:ad:10:27:77:68:7b:36: c3:2d:74:d3:73:df:9e:34:17:2e:30:c3:d6:15:46: 8a:e0:87:a0:ac:45:19:d5:08:fb:95:7f:46:36:87: da:a3:b2:7a:ba:ae:f3:f4:fb:56:a2:97:fa:95:e4: d6:64:5f:e0:96:23:88:bc:ef:83:d9:ae:52:cd:5c: f3:a7:62:11:9a:d9:d5:c6:2a:4e:a1:5d:9d:eb:47: cb:d9:13:fc:8c:9a:88:3a:70:b2:76:79:5d:8e:09: 03:ad:6c:e5:8e:2c:91:00:34:c7:41:af:df:be:27: 4b:97:0e:d2:73:01:19:66:e1:21:eb:01:63:b8:32: f0:1d:fc:12:9e:b9:22:70:e2:88:35:df:4c:cc:b1: 48:b3:f8:68:9a:fb:2c:0a:6d:2e:24:f4:a0:bf:d4: f0:3a:5f:80:a0:a6:8c:68:02:30:bf:6f:63:74:79: 34:2f:42:0b:07:9b:d3:a9:85:21:07:89:7e:12:14: 1a:b9:21:bc:0a:c4:e1:e5:89:ae:53:4c:cf:b9:42: c1:c4:b2:a8:3f:d0:5c:a5:e6:6d:68:30:d4:15:7c: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:30:39:FD:3B:6A:88:7F:C5:FE:A4:96:F3:8B:68:C2:A1:FF:EC:7E X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:56:62:ff:06:d8:dc:f4:23:25:68:bf:25:e6:83:77:c1:51: ab:d3:58:3f:f6:7d:8e:7b:76:88:02:e3:46:33:b2:2a:4b:ed: 6a:eb:10:be:e1:77:ae:2d:a7:67:f0:46:d2:b9:a7:58:12:12: 48:b9:a4:e4:b4:54:a4:48:57:69:33:e2:50:50:c4:a6:92:9d: 25:de:e4:74:76:81:9e:21:01:7d:61:38:ef:b6:d3:65:51:bf: ed:3e:fd:3d:79:7f:b6:c3:6a:16:fb:e1:ff:f3:f2:e5:ec:23: 79:d9:c9:22:d9:67:42:e7:cc:31:36:9a:a5:a1:a9:7c:6e:2f: db:8f:4c:c4:51:16:1a:48:0f:94:51:75:e7:2a:31:f3:22:67: 37:60:a2:8f:6d:2b:be:ac:5c:97:66:86:50:a8:94:79:be:7b: d9:ec:87:48:50:9a:14:02:ff:50:0c:b4:20:76:69:8f:07:bf: e2:39:6b:b0:92:70:c1:90:81:df:2e:98:2b:a6:bf:f7:3d:51: 4a:ee:bc:1b:0e:2e:07:93:c1:26:f5:a7:7d:4b:e7:22:d4:86: 63:92:25:c9:8e:1d:c0:65:63:f5:6d:6f:aa:1f:47:8f:ee:28: 92:63:a3:f7:1a:7d:dd:45:45:e4:e6:90:5c:bc:7d:0d:39:07: bf:09:bf:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4py0Rb1/P6tfW1QqbEz8qi15lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTA4MDYwNjU5MjhaFw0yNTA4MDkxMTQ5MjhaMDMxMTAvBgNV BAMTKDg5MzAzOUZEM0I2QTg4N0ZDNUZFQTQ5NkYzOEI2OEMyQTFGRkVDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRxOwQzkns2hLUJKj5gF3xqty 2euy9wge+VvWn781spasS9YurRAnd2h7NsMtdNNz3540Fy4ww9YVRorgh6CsRRnV CPuVf0Y2h9qjsnq6rvP0+1ail/qV5NZkX+CWI4i874PZrlLNXPOnYhGa2dXGKk6h XZ3rR8vZE/yMmog6cLJ2eV2OCQOtbOWOLJEANMdBr9++J0uXDtJzARlm4SHrAWO4 MvAd/BKeuSJw4og130zMsUiz+Gia+ywKbS4k9KC/1PA6X4CgpoxoAjC/b2N0eTQv QgsHm9OphSEHiX4SFBq5IbwKxOHlia5TTM+5QsHEsqg/0Fyl5m1oMNQVfFb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTA5/TtqiH/F/qSW84towqH/7H4wHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFWYv8G2Nz0IyVovyXmg3fBUavTWD/2fY57 dogC40YzsipL7WrrEL7hd64tp2fwRtK5p1gSEki5pOS0VKRIV2kz4lBQxKaSnSXe 5HR2gZ4hAX1hOO+202VRv+0+/T15f7bDahb74f/z8uXsI3nZySLZZ0LnzDE2mqWh qXxuL9uPTMRRFhpID5RRdecqMfMiZzdgoo9tK76sXJdmhlColHm+e9nsh0hQmhQC /1AMtCB2aY8Hv+I5a7CScMGQgd8umCumv/c9UUruvBsOLgeTwSb1p31L5yLUhmOS JcmOHcBlY/Vtb6ofR4/uKJJjo/cafd1FReTmkFy8fQ05B78Jv1Y= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:39 2025 by rpki-client