$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: 6tukMBaZ582qiTB/WQ4ifDlTJgLibmlkcnGrhdVN7zM= Subject key identifier: 43:0F:01:FA:0C:41:7E:B6:D3:86:6C:13:D9:2A:D9:88:86:17:1D:1E Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 5209DDDACBFBE0E1B5624BBDCE6235F2266CCA5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: CE Signing time: Fri 22 Aug 2025 08:41:57 +0000 Manifest this update: Fri 22 Aug 2025 08:36:57 +0000 Manifest next update: Mon 25 Aug 2025 15:29:57 +0000 Files and hashes: 1: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: JMTxKO8YGboUC5/dVS3MzM9Xido8whGT6DJb/SRrtbY=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:09:dd:da:cb:fb:e0:e1:b5:62:4b:bd:ce:62:35:f2:26:6c:ca:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Aug 22 08:36:57 2025 GMT Not After : Aug 25 15:29:57 2025 GMT Subject: CN=430F01FA0C417EB6D3866C13D92AD98886171D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f8:8e:ad:07:47:c4:a7:44:c0:4f:82:ec:09: b4:8d:92:06:92:b8:1d:9f:5d:32:bd:74:6c:79:c3: 22:d3:2b:36:f1:21:96:91:6d:6c:95:8b:bf:9e:5c: 09:9e:45:e7:0e:a1:8e:53:19:ce:fb:3d:3a:8f:4c: 77:43:da:2c:27:52:7d:38:e7:64:bf:da:dc:fb:28: 95:99:46:9b:cd:f5:45:f9:f3:26:3f:21:32:32:5a: 9b:65:e7:61:a8:d0:df:71:6f:63:fe:db:03:94:b1: 6d:b0:85:b4:35:18:f4:42:30:b1:f8:fb:55:f7:22: 59:81:53:a0:d4:fd:bc:0e:54:8e:be:96:35:f5:87: 1d:64:00:7d:c3:c6:61:80:e8:db:cd:25:fc:15:1e: 63:3b:0d:4f:9d:f7:36:3a:04:81:7f:4e:62:69:d9: 8a:d3:ef:fd:a3:21:aa:4c:a7:01:87:5c:9d:76:f5: 88:9f:fb:f2:7f:4c:ca:57:2f:df:d8:5d:b4:32:db: 8e:9d:a6:1a:45:1c:61:f5:be:4d:0a:61:68:ab:ed: 1d:1a:56:87:ea:30:90:d5:0d:5e:ea:8a:5f:5e:8f: 0d:74:57:1e:e4:df:ca:bb:99:52:07:62:ff:d8:20: ee:f6:45:02:96:44:6d:6e:13:e2:19:88:c7:b4:d8: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0F:01:FA:0C:41:7E:B6:D3:86:6C:13:D9:2A:D9:88:86:17:1D:1E X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f8:94:e2:8e:b2:2c:81:e3:04:ae:ad:4d:c2:8a:d2:92:aa: 6a:48:81:96:70:be:93:5c:af:ed:96:e4:43:cb:63:c5:c5:b0: d7:be:89:41:6b:99:7a:47:50:45:46:42:3b:72:8f:c7:e5:b2: a6:73:ac:a6:9f:29:84:ca:ca:0d:55:5c:e9:a3:ff:d2:37:2e: 2d:d6:7c:20:d3:c9:f8:97:8e:95:af:5b:cf:4f:d8:31:26:56: 88:c6:27:86:1f:51:a9:77:45:6f:ad:38:cb:44:8d:10:f6:72: 95:80:9d:a9:11:a3:ea:3f:e6:43:65:2e:33:5a:b6:8f:c2:31: 6d:fa:b0:98:87:a1:88:aa:3a:36:d3:bc:88:11:c1:fe:2b:c7: b1:14:a4:21:ed:7b:97:0d:40:c1:89:b7:75:80:2f:aa:cb:e3: d0:65:b0:b7:37:78:a0:97:6d:f0:99:06:6e:56:d6:d8:b3:68: dd:d8:0d:ea:d8:f5:45:aa:4a:9e:ad:e1:98:30:c1:b0:4d:e2: 6a:60:b0:81:bb:67:9d:f1:34:e2:0e:e7:84:a8:cb:1e:6d:3a: ae:85:e0:43:72:84:94:7d:f0:4e:41:fc:f3:13:6b:32:84:3f: 81:92:95:4c:da:6c:0f:38:af:49:a0:14:19:99:dd:08:4a:a0: 72:7f:07:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgnd2sv74OG1Yku9zmI18iZsyl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTA4MjIwODM2NTdaFw0yNTA4MjUxNTI5NTdaMDMxMTAvBgNV BAMTKDQzMEYwMUZBMEM0MTdFQjZEMzg2NkMxM0Q5MkFEOTg4ODYxNzFEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+I6tB0fEp0TAT4LsCbSNkgaS uB2fXTK9dGx5wyLTKzbxIZaRbWyVi7+eXAmeRecOoY5TGc77PTqPTHdD2iwnUn04 52S/2tz7KJWZRpvN9UX58yY/ITIyWptl52Go0N9xb2P+2wOUsW2whbQ1GPRCMLH4 +1X3IlmBU6DU/bwOVI6+ljX1hx1kAH3DxmGA6NvNJfwVHmM7DU+d9zY6BIF/TmJp 2YrT7/2jIapMpwGHXJ129Yif+/J/TMpXL9/YXbQy246dphpFHGH1vk0KYWir7R0a VofqMJDVDV7qil9ejw10Vx7k38q7mVIHYv/YIO72RQKWRG1uE+IZiMe02EzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQw8B+gxBfrbThmwT2SrZiIYXHR4wHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf4lOKOsiyB4wSurU3CitKSqmpIgZZwvpNc r+2W5EPLY8XFsNe+iUFrmXpHUEVGQjtyj8flsqZzrKafKYTKyg1VXOmj/9I3Li3W fCDTyfiXjpWvW89P2DEmVojGJ4YfUal3RW+tOMtEjRD2cpWAnakRo+o/5kNlLjNa to/CMW36sJiHoYiqOjbTvIgRwf4rx7EUpCHte5cNQMGJt3WAL6rL49BlsLc3eKCX bfCZBm5W1tizaN3YDerY9UWqSp6t4ZgwwbBN4mpgsIG7Z53xNOIO54Soyx5tOq6F 4ENyhJR98E5B/PMTazKEP4GSlUzabA84r0mgFBmZ3QhKoHJ/B+k= -----END CERTIFICATE-----Generated at Sat Aug 23 21:53:15 2025 by rpki-client