$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: lb9D/W0qzLceEVphJxB5uL56K8A0Fnu0d/oQhwNsMvk= Subject key identifier: 23:A5:C5:9A:A4:87:EF:FE:37:A4:F9:25:33:DB:26:4C:67:67:BF:49 Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 3801BE9B1E8E262322D7FC971D1B890977F2E087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 16 Signing time: Fri 08 Aug 2025 01:32:12 +0000 Manifest this update: Fri 08 Aug 2025 01:27:12 +0000 Manifest next update: Mon 11 Aug 2025 08:26:12 +0000 Files and hashes: 1: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: Eb2s7f7SoA7KTAvCuAYeg+WN7okPgEf8vIIh+uyAi54=) 2: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:01:be:9b:1e:8e:26:23:22:d7:fc:97:1d:1b:89:09:77:f2:e0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Aug 8 01:27:12 2025 GMT Not After : Aug 11 08:26:12 2025 GMT Subject: CN=23A5C59AA487EFFE37A4F92533DB264C6767BF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:ef:8b:43:94:86:1f:15:f2:ac:bf:53:02: 9c:fa:cf:f2:1c:df:8b:56:02:44:a0:e4:cc:d1:8e: ab:3c:ad:ab:d2:cd:b9:e7:94:cb:c4:4f:46:23:83: 71:b8:43:52:92:8b:82:2d:8c:49:a8:71:3f:26:c3: cd:54:03:87:86:eb:f2:4d:67:31:c4:40:34:d2:28: d7:da:90:e0:c3:e0:7c:73:e5:d8:5c:b1:46:73:a2: a3:22:01:92:21:a0:59:65:c4:a0:7f:e9:47:ac:cc: 5a:35:53:7a:95:79:a3:a5:25:54:75:da:0d:f4:f1: 78:0d:8a:ea:93:ad:58:a7:b0:a6:c3:3f:e6:5a:ab: 44:b6:79:fe:dd:aa:48:fe:3a:48:4c:c0:a7:3f:7c: 9e:87:a2:80:1a:5c:26:5e:eb:0f:1c:bc:e3:07:95: aa:c5:28:40:d7:9b:16:0f:fd:6f:16:0a:76:ae:11: 49:e5:bf:70:57:50:b8:cd:f5:5f:08:6c:70:34:c1: 23:30:18:b6:15:1f:da:6c:7e:fc:8f:56:1d:2f:5b: 40:d3:46:5f:5c:b8:99:54:45:eb:3d:7b:8f:12:36: 2d:9f:34:9f:6d:37:04:84:d4:0c:ef:6d:4b:72:5f: f2:1f:da:b5:92:ff:6d:08:24:81:e9:ab:58:2a:86: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A5:C5:9A:A4:87:EF:FE:37:A4:F9:25:33:DB:26:4C:67:67:BF:49 X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:08:ad:ea:f2:8d:c4:46:e0:70:45:ff:45:bb:19:b7:59:f0: 9f:80:dd:54:e2:82:0d:fc:23:93:56:f1:12:ac:d6:60:cc:9d: 20:7e:ae:1e:8c:7c:37:69:80:9f:ea:9f:de:cd:89:bc:c4:64: 46:71:29:af:f0:c7:58:18:65:34:fd:c8:f2:df:52:2c:ae:b5: ca:8f:48:cf:b5:17:cf:8c:7e:32:ee:c7:83:de:fc:9a:ea:ac: 0f:ad:5d:79:ab:69:0e:86:a9:43:75:66:e6:93:47:2d:eb:69: a4:57:af:2b:ac:63:56:0f:02:42:d7:fd:6f:70:36:3f:5f:06: 34:3f:17:6e:11:8d:01:66:58:32:c8:76:3e:79:e9:e8:84:c2: cf:8a:59:5c:fd:c0:64:21:b5:1b:54:95:32:8f:e1:92:bf:44: 27:ee:b3:d1:22:1c:d0:69:26:e8:36:80:70:b3:54:be:d2:c6: 43:8a:b2:0d:a0:e1:48:32:b9:c4:50:f2:f8:9f:f3:1f:c8:a1: 44:08:c0:f8:b9:7a:15:5f:22:6c:d0:9d:15:0b:05:20:98:0a: 00:a1:0d:02:bb:9e:86:dd:94:e1:2d:78:05:12:c8:ab:24:83: 8c:32:18:1d:4e:69:0a:7a:72:c5:f2:f7:3d:8d:50:2e:74:1a: 0c:e9:13:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAG+mx6OJiMi1/yXHRuJCXfy4IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNTA4MDgwMTI3MTJaFw0yNTA4MTEwODI2MTJaMDMxMTAvBgNV BAMTKDIzQTVDNTlBQTQ4N0VGRkUzN0E0RjkyNTMzREIyNjRDNjc2N0JGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NO+LQ5SGHxXyrL9TApz6z/Ic 34tWAkSg5MzRjqs8ravSzbnnlMvET0Yjg3G4Q1KSi4ItjEmocT8mw81UA4eG6/JN ZzHEQDTSKNfakODD4Hxz5dhcsUZzoqMiAZIhoFllxKB/6UeszFo1U3qVeaOlJVR1 2g308XgNiuqTrVinsKbDP+Zaq0S2ef7dqkj+OkhMwKc/fJ6HooAaXCZe6w8cvOMH larFKEDXmxYP/W8WCnauEUnlv3BXULjN9V8IbHA0wSMwGLYVH9psfvyPVh0vW0DT Rl9cuJlURes9e48SNi2fNJ9tNwSE1AzvbUtyX/If2rWS/20IJIHpq1gqhkjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI6XFmqSH7/43pPklM9smTGdnv0kwHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgIreryjcRG4HBF/0W7GbdZ8J+A3VTigg38 I5NW8RKs1mDMnSB+rh6MfDdpgJ/qn97NibzEZEZxKa/wx1gYZTT9yPLfUiyutcqP SM+1F8+MfjLux4Pe/JrqrA+tXXmraQ6GqUN1ZuaTRy3raaRXryusY1YPAkLX/W9w Nj9fBjQ/F24RjQFmWDLIdj556eiEws+KWVz9wGQhtRtUlTKP4ZK/RCfus9EiHNBp Jug2gHCzVL7SxkOKsg2g4UgyucRQ8vif8x/IoUQIwPi5ehVfImzQnRULBSCYCgCh DQK7nobdlOEteAUSyKskg4wyGB1OaQp6csXy9z2NUC50GgzpE/c= -----END CERTIFICATE-----Generated at Sat Aug 9 14:29:33 2025 by rpki-client