$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: y+d404oDe0VEbIl7gGVk0VOBTnf8qmW8dgFJ5bP57Kk= Subject key identifier: A0:DB:28:1C:A0:77:0F:1C:6E:A1:F8:35:8A:C8:A9:C5:C6:E1:9D:E2 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 0F502C2334957E49356F6480E741C7895E9BAF65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: FB Signing time: Thu 07 Aug 2025 02:20:52 +0000 Manifest this update: Thu 07 Aug 2025 02:15:52 +0000 Manifest next update: Sun 10 Aug 2025 09:04:52 +0000 Files and hashes: 1: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) 4: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: 32nr99AeKNV0Lz38QYndy4OhH++qZiU+CpssZPbkk5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:50:2c:23:34:95:7e:49:35:6f:64:80:e7:41:c7:89:5e:9b:af:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Aug 7 02:15:52 2025 GMT Not After : Aug 10 09:04:52 2025 GMT Subject: CN=A0DB281CA0770F1C6EA1F8358AC8A9C5C6E19DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:d8:f8:4a:39:28:c3:9f:44:e4:30:01:3e: 45:8f:b9:ad:14:87:b7:ed:e6:8b:3b:d6:77:c2:6f: f7:1a:5f:76:13:1b:fb:74:a0:57:e8:5f:c8:2a:be: 2a:7e:9e:70:96:cd:17:ed:6a:a6:0e:49:32:b3:47: ab:7a:9a:d6:ee:35:38:da:60:32:fa:07:78:23:1d: 2c:ee:d6:d8:95:19:14:79:90:f0:54:a4:ae:ab:40: 3e:87:a0:4a:3c:db:b6:91:0b:e0:29:53:7f:3c:4d: 24:95:07:47:3e:10:2e:05:eb:a5:41:cc:bd:8a:be: e7:25:c8:69:dc:e1:70:cc:ed:a3:28:2f:0d:b0:86: 26:ac:7d:36:ac:9a:fa:7a:2c:cc:71:ba:b2:f3:ff: 50:39:ac:ce:72:ef:12:a3:0a:d8:22:34:77:ea:e2: c5:c9:05:78:79:20:34:cb:1d:e6:d9:6a:0e:6f:90: 2c:7b:1a:15:b8:05:2d:d5:1b:fd:ce:c7:f4:46:4b: 6d:be:97:4c:b6:29:65:d7:88:2e:b9:d4:c5:51:ea: 59:dc:da:e7:63:da:0b:59:d6:67:14:b3:c0:a0:c8: 39:19:a4:48:e9:ab:60:3a:3b:91:56:d2:ef:7f:61: 55:a2:b6:c6:87:1a:05:fe:f1:a8:72:f9:53:c0:8a: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DB:28:1C:A0:77:0F:1C:6E:A1:F8:35:8A:C8:A9:C5:C6:E1:9D:E2 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:36:ce:e1:32:95:92:83:8e:8f:5b:24:48:9b:cc:a1:6f:86: 8f:ed:7f:75:5d:3b:ec:ad:c0:b1:c4:11:dc:d8:2f:b3:df:fa: c2:15:2e:43:da:50:ae:97:6d:24:0e:de:56:68:01:ac:29:8c: c6:4a:80:31:a5:f0:81:0b:54:25:42:ff:1d:09:25:60:a1:27: 52:7e:44:13:49:b7:eb:6f:1c:24:6c:91:4e:68:95:8d:3d:6a: 24:2b:ef:d0:c1:5f:df:0f:1b:86:de:5c:a4:c2:f0:d0:f2:69: 86:ee:71:f2:33:f9:26:a2:52:b1:9f:b2:e8:eb:6d:e4:2b:2c: e9:bf:90:71:54:47:ad:28:31:78:98:db:33:87:cb:bd:eb:45: ff:9e:0c:fb:38:33:4c:ec:dc:08:cc:be:59:30:e9:71:f7:ea: b0:40:ef:ee:8a:b4:b9:47:8d:a0:71:de:5d:67:4a:01:3d:17: 63:a8:cd:97:cb:14:00:8e:34:72:14:85:9d:52:a6:4a:20:0a: ab:85:3d:ea:a5:25:13:67:9c:fe:aa:2f:c3:b7:a3:30:46:01: 94:d4:9f:98:b7:9e:71:1d:ca:00:16:2d:c6:4d:b3:05:17:76: 60:99:d4:68:cb:ce:da:ee:1c:9b:00:45:fe:f7:25:ed:7e:40: e3:d2:09:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1AsIzSVfkk1b2SA50HHiV6br2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTA4MDcwMjE1NTJaFw0yNTA4MTAwOTA0NTJaMDMxMTAvBgNV BAMTKEEwREIyODFDQTA3NzBGMUM2RUExRjgzNThBQzhBOUM1QzZFMTlERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ANj4Sjkow59E5DABPkWPua0U h7ft5os71nfCb/caX3YTG/t0oFfoX8gqvip+nnCWzRftaqYOSTKzR6t6mtbuNTja YDL6B3gjHSzu1tiVGRR5kPBUpK6rQD6HoEo827aRC+ApU388TSSVB0c+EC4F66VB zL2KvuclyGnc4XDM7aMoLw2whiasfTasmvp6LMxxurLz/1A5rM5y7xKjCtgiNHfq 4sXJBXh5IDTLHebZag5vkCx7GhW4BS3VG/3Ox/RGS22+l0y2KWXXiC651MVR6lnc 2udj2gtZ1mcUs8CgyDkZpEjpq2A6O5FW0u9/YVWitsaHGgX+8ahy+VPAioUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNsoHKB3Dxxuofg1isipxcbhneIwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGE2zuEylZKDjo9bJEibzKFvho/tf3VdO+yt wLHEEdzYL7Pf+sIVLkPaUK6XbSQO3lZoAawpjMZKgDGl8IELVCVC/x0JJWChJ1J+ RBNJt+tvHCRskU5olY09aiQr79DBX98PG4beXKTC8NDyaYbucfIz+SaiUrGfsujr beQrLOm/kHFUR60oMXiY2zOHy73rRf+eDPs4M0zs3AjMvlkw6XH36rBA7+6KtLlH jaBx3l1nSgE9F2OozZfLFACONHIUhZ1SpkogCquFPeqlJRNnnP6qL8O3ozBGAZTU n5i3nnEdygAWLcZNswUXdmCZ1GjLztruHJsARf73Je1+QOPSCUs= -----END CERTIFICATE-----Generated at Thu Aug 7 07:32:38 2025 by rpki-client