$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: 16opo/6jew4YpiKUHobWc0Us7X11eJfsX2tKjC+zpYg= Subject key identifier: 47:15:61:4E:3D:8D:8A:F5:31:9F:8A:54:61:8E:09:43:CC:56:2F:41 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 59F8D06A850401940796EE897AE64867AAFE0CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 0200 Signing time: Fri 22 Aug 2025 18:11:15 +0000 Manifest this update: Fri 22 Aug 2025 18:06:15 +0000 Manifest next update: Tue 26 Aug 2025 05:27:15 +0000 Files and hashes: 1: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) 2: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: CMJN3oRxuoghFuRxuD0oztam4mzlsfRWNyCVAUttpJw=) 3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:d0:6a:85:04:01:94:07:96:ee:89:7a:e6:48:67:aa:fe:0c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Aug 22 18:06:15 2025 GMT Not After : Aug 26 05:27:15 2025 GMT Subject: CN=4715614E3D8D8AF5319F8A54618E0943CC562F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:ca:e6:52:5a:22:0f:7f:23:60:a4:65:ec: af:77:8a:24:96:5b:69:13:6b:8b:aa:1d:a7:1c:1a: e6:49:9d:15:0a:b6:96:36:44:08:ed:b9:b6:fc:eb: df:5e:aa:83:24:99:ba:1d:49:1b:b3:5e:cc:bd:33: 6d:d6:7f:f8:11:ca:a0:88:2a:aa:bf:63:58:8a:87: e0:54:da:02:b3:5e:33:8e:1d:7b:b4:2a:bc:fc:ed: 90:4c:5a:e7:a9:0c:0b:6e:55:32:f1:3d:26:49:e7: 56:10:d9:38:7b:a2:4e:e2:ce:94:93:28:57:0f:7f: 34:30:06:73:eb:f1:62:bd:20:37:3f:82:f7:c3:e2: 27:bd:5d:be:f2:b3:b9:6f:c5:6c:a7:40:b1:2a:a6: e7:b8:42:16:f9:0c:84:44:53:b7:1b:15:78:ed:e4: 0f:3a:37:28:ef:5e:7f:29:00:0f:3a:b0:81:72:01: 97:46:ba:a9:df:c9:fd:dc:c7:fa:bd:88:63:d0:20: 1f:a1:24:db:f1:84:ed:58:dd:d0:ea:99:4a:c6:01: 3b:af:7a:97:4d:f0:6b:e0:15:4f:4e:d5:6d:49:48: e2:84:54:c0:66:ce:34:c2:a5:d6:e0:d7:02:d1:b5: 99:89:8b:dc:38:0c:e0:19:b2:fe:f4:48:a6:a9:24: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:15:61:4E:3D:8D:8A:F5:31:9F:8A:54:61:8E:09:43:CC:56:2F:41 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:8f:d8:a6:45:2f:bc:b0:8e:97:ce:67:32:87:2f:54:9b: 14:ed:51:30:d0:84:96:98:4a:57:99:cf:05:dd:61:22:2c:d4: 79:3a:a8:29:8b:7f:aa:f3:1a:d2:fa:1e:55:35:77:25:12:99: f1:e9:b4:61:17:a5:38:4f:43:4b:22:8c:00:57:ee:86:db:92: 99:7a:e9:f6:5a:f5:57:26:d9:57:9e:27:11:51:ee:04:ed:ff: b4:cd:b3:52:e9:3f:46:e7:86:e0:e5:b0:64:29:51:9d:53:ed: 4b:19:30:45:55:d8:6a:7a:89:31:6c:cd:8b:96:e0:57:ef:ea: 58:f1:63:e8:60:55:a0:54:2d:18:38:13:5b:38:c5:fa:83:af: 64:2c:45:cd:73:f8:c0:2f:38:d2:42:cd:ca:f0:f5:2c:c2:42: 0f:3a:67:5d:ab:21:a6:3b:5e:5a:bc:80:c7:d5:02:c9:ce:5e: 0a:ed:62:a7:e2:e3:2d:22:ce:e5:e8:2e:3c:ef:67:49:57:19: 1e:12:74:4b:58:c1:d2:87:43:6f:f8:ed:5f:04:c8:c9:e4:c6: 1b:86:56:0c:d7:cf:8d:c7:07:72:d0:26:2d:16:38:fd:e8:fd: 67:d5:27:34:90:6c:5c:c1:2c:65:3d:ef:63:35:4e:20:f2:35: e4:ea:9e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfjQaoUEAZQHlu6JeuZIZ6r+DMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTA4MjIxODA2MTVaFw0yNTA4MjYwNTI3MTVaMDMxMTAvBgNV BAMTKDQ3MTU2MTRFM0Q4RDhBRjUzMTlGOEE1NDYxOEUwOTQzQ0M1NjJGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAcrmUloiD38jYKRl7K93iiSW W2kTa4uqHaccGuZJnRUKtpY2RAjtubb8699eqoMkmbodSRuzXsy9M23Wf/gRyqCI Kqq/Y1iKh+BU2gKzXjOOHXu0Krz87ZBMWuepDAtuVTLxPSZJ51YQ2Th7ok7izpST KFcPfzQwBnPr8WK9IDc/gvfD4ie9Xb7ys7lvxWynQLEqpue4Qhb5DIREU7cbFXjt 5A86NyjvXn8pAA86sIFyAZdGuqnfyf3cx/q9iGPQIB+hJNvxhO1Y3dDqmUrGATuv epdN8GvgFU9O1W1JSOKEVMBmzjTCpdbg1wLRtZmJi9w4DOAZsv70SKapJEGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxVhTj2NivUxn4pUYY4JQ8xWL0EwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw3j9imRS+8sI6Xzmcyhy9UmxTtUTDQhJaY SleZzwXdYSIs1Hk6qCmLf6rzGtL6HlU1dyUSmfHptGEXpThPQ0sijABX7obbkpl6 6fZa9Vcm2VeeJxFR7gTt/7TNs1LpP0bnhuDlsGQpUZ1T7UsZMEVV2Gp6iTFszYuW 4Ffv6ljxY+hgVaBULRg4E1s4xfqDr2QsRc1z+MAvONJCzcrw9SzCQg86Z12rIaY7 Xlq8gMfVAsnOXgrtYqfi4y0izuXoLjzvZ0lXGR4SdEtYwdKHQ2/47V8EyMnkxhuG VgzXz43HB3LQJi0WOP3o/WfVJzSQbFzBLGU972M1TiDyNeTqni8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:07:04 2025 by rpki-client