$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: 0+syWfTOCdmmGgMWDtPuspDcGhZXwAEckqeBGPn1syE= Subject key identifier: B8:EA:FC:CB:F7:46:16:87:05:97:BE:6C:DB:BE:6C:65:8C:8C:AC:ED Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 4572F79CEFD4BFA7219CD8640F5CC2FC1617ADA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: DC Signing time: Mon 04 Aug 2025 02:42:19 +0000 Manifest this update: Mon 04 Aug 2025 02:37:19 +0000 Manifest next update: Thu 07 Aug 2025 05:33:19 +0000 Files and hashes: 1: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: N70H6awi5HroGYdKizkF/zZDl5sQUsx255N6A60zHmk=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 4: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 05:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:72:f7:9c:ef:d4:bf:a7:21:9c:d8:64:0f:5c:c2:fc:16:17:ad:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Aug 4 02:37:19 2025 GMT Not After : Aug 7 05:33:19 2025 GMT Subject: CN=B8EAFCCBF74616870597BE6CDBBE6C658C8CACED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:6e:39:e9:76:65:f2:cd:78:be:cb:a7:1e: 59:6b:ce:a5:5a:92:11:8c:81:d3:0e:35:da:dc:71: 8a:be:e5:f3:38:ec:eb:56:17:89:d7:4a:e0:d6:9b: 1c:16:8a:3f:6c:03:32:a9:0f:6c:0e:3f:5e:bd:ba: 2a:78:aa:e5:00:d6:65:7c:6f:90:8a:a4:f7:da:41: b8:ca:7a:b5:47:72:fd:74:4a:93:b0:9d:57:8c:e2: 94:7d:33:6c:63:c5:09:a7:14:67:29:1c:f6:8e:ad: c9:3c:8d:c7:22:b4:89:cb:af:58:50:78:ff:6f:a2: 60:98:f5:7c:af:af:e1:8c:7a:ad:17:19:16:3c:94: bc:90:1e:05:8b:3c:7a:4d:fa:5a:89:fd:d8:2f:27: 67:1d:7f:ba:4b:3f:b3:ee:11:bf:4a:c0:e3:20:72: 40:31:10:05:33:af:86:90:8f:0c:ef:46:4d:a2:93: 25:81:38:00:0d:c2:83:a2:55:9d:d7:13:b2:96:8b: 86:90:bf:27:d7:0d:eb:77:d5:e9:73:fc:2d:35:10: ab:2d:e7:40:8a:f9:57:9d:96:b1:f5:7e:a7:b2:94: f8:0e:a7:eb:17:5d:4c:18:0e:9b:64:88:85:bb:71: fe:88:4d:a9:4d:59:59:29:3f:63:4e:fc:81:84:26: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:FC:CB:F7:46:16:87:05:97:BE:6C:DB:BE:6C:65:8C:8C:AC:ED X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:02:86:7a:cc:3d:13:b6:41:11:7d:be:ef:12:cc:b2:1e:38: ae:88:e2:ed:d8:0d:7a:fd:50:74:72:ca:4f:22:cf:6c:5b:cf: a0:18:a7:fd:ef:27:5d:89:34:03:78:e6:ad:3e:f8:bf:e4:45: 34:9c:93:f2:d9:93:ed:3f:42:85:f6:dc:eb:62:5c:51:80:08: a1:f2:b7:b0:ea:ab:54:26:e7:c3:44:81:9b:47:6c:14:75:16: 49:9d:81:49:95:fb:cd:f1:24:91:13:bf:c1:04:68:48:49:c8: 62:b9:0e:39:20:2f:d9:ed:97:32:b5:9f:89:dd:f1:fd:9c:9d: 88:fa:12:55:08:ff:00:53:10:fe:58:c6:78:72:30:d5:48:c0: 51:05:e4:3b:21:1e:1e:6d:57:5e:86:77:dd:dc:f3:3b:8d:fc: 37:65:aa:86:b0:f2:6f:00:a5:30:27:c6:93:b0:39:29:92:1d: fb:66:21:d2:e5:03:ca:56:0c:b8:1d:20:1a:54:9b:95:56:29: 53:d7:e5:1a:06:12:b8:fa:c9:c5:15:37:b5:f8:21:2d:94:9b: dd:ca:31:41:09:ea:79:36:58:7a:00:6e:f5:69:de:75:59:d7: a2:93:54:6b:2e:6b:96:98:f6:98:d5:1d:4b:ca:a3:6c:1b:b4: 7a:01:db:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXL3nO/Uv6chnNhkD1zC/BYXraQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTA4MDQwMjM3MTlaFw0yNTA4MDcwNTMzMTlaMDMxMTAvBgNV BAMTKEI4RUFGQ0NCRjc0NjE2ODcwNTk3QkU2Q0RCQkU2QzY1OEM4Q0FDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflW456XZl8s14vsunHllrzqVa khGMgdMONdrccYq+5fM47OtWF4nXSuDWmxwWij9sAzKpD2wOP169uip4quUA1mV8 b5CKpPfaQbjKerVHcv10SpOwnVeM4pR9M2xjxQmnFGcpHPaOrck8jccitInLr1hQ eP9vomCY9Xyvr+GMeq0XGRY8lLyQHgWLPHpN+lqJ/dgvJ2cdf7pLP7PuEb9KwOMg ckAxEAUzr4aQjwzvRk2ikyWBOAANwoOiVZ3XE7KWi4aQvyfXDet31elz/C01EKst 50CK+VedlrH1fqeylPgOp+sXXUwYDptkiIW7cf6ITalNWVkpP2NO/IGEJvA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOr8y/dGFocFl75s275sZYyMrO0wHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAChnrMPRO2QRF9vu8SzLIeOK6I4u3YDXr9 UHRyyk8iz2xbz6AYp/3vJ12JNAN45q0++L/kRTSck/LZk+0/QoX23OtiXFGACKHy t7Dqq1Qm58NEgZtHbBR1FkmdgUmV+83xJJETv8EEaEhJyGK5DjkgL9ntlzK1n4nd 8f2cnYj6ElUI/wBTEP5YxnhyMNVIwFEF5DshHh5tV16Gd93c8zuN/Ddlqoaw8m8A pTAnxpOwOSmSHftmIdLlA8pWDLgdIBpUm5VWKVPX5RoGErj6ycUVN7X4IS2Um93K MUEJ6nk2WHoAbvVp3nVZ16KTVGsua5aY9pjVHUvKo2wbtHoB2zM= -----END CERTIFICATE-----Generated at Mon Aug 4 18:10:20 2025 by rpki-client