$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: cvYUmG+cFDw9vAp7hzo+k8yx/hFJmCQ++UsEl/1eV+A= Subject key identifier: 85:B6:57:9F:92:8B:9A:F6:66:3B:CC:93:E3:50:1B:0C:4B:B8:BA:2E Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 61DBE3471847F42452D10032E0E0C9E148E6397B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: EF Signing time: Fri 22 Aug 2025 04:40:02 +0000 Manifest this update: Fri 22 Aug 2025 04:35:02 +0000 Manifest next update: Mon 25 Aug 2025 06:41:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: 77/Z8SiBQgzcv22YK5y0tjr9np4BIwgOxoJeATWyQkE=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:db:e3:47:18:47:f4:24:52:d1:00:32:e0:e0:c9:e1:48:e6:39:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Aug 22 04:35:02 2025 GMT Not After : Aug 25 06:41:02 2025 GMT Subject: CN=85B6579F928B9AF6663BCC93E3501B0C4BB8BA2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:a2:11:f6:b1:90:f2:f2:a4:98:b2:c6:0e: ce:c3:e9:e6:ef:c3:a5:c4:d1:ac:c8:13:c0:cf:78: 7b:24:dc:33:00:d9:b6:fd:db:ca:d5:1e:e9:23:79: 0a:a5:8a:ab:38:f2:65:6d:fd:68:d2:be:84:ac:62: 10:44:e6:bd:03:1b:2b:0d:41:f5:c1:07:12:fa:be: 4a:03:d3:97:90:2e:9a:0a:50:93:74:95:c6:bd:cc: 04:37:cb:02:52:54:6c:4e:58:e5:30:4d:82:eb:3a: f1:88:bf:9f:88:e1:21:e5:b9:d8:41:ae:a7:00:64: 29:56:9e:cb:ed:30:e9:3b:63:75:b0:f0:c6:43:2f: a6:a2:de:1a:db:05:e4:10:82:22:db:fe:aa:ff:5e: 44:84:53:c9:04:f4:30:04:45:ee:f3:eb:3f:1d:a1: d6:72:c7:ca:08:b4:c8:83:88:82:22:88:24:47:6c: 04:6c:4d:e3:30:a3:bf:a8:0b:fd:85:e9:e1:67:dc: b5:a8:94:7f:81:0d:22:2b:8d:6c:fd:8d:41:dc:52: c5:eb:8b:f4:eb:b3:f6:60:ff:4f:9d:8f:86:d6:79: d0:95:aa:6c:f7:cb:93:21:25:11:88:1d:60:67:a8: 9b:e3:a4:fe:a8:04:0d:ed:5e:e0:53:63:9a:bf:f3: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:57:9F:92:8B:9A:F6:66:3B:CC:93:E3:50:1B:0C:4B:B8:BA:2E X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:12:a9:b5:aa:a4:6c:66:01:65:9e:e9:b9:6d:f6:20:02:81: 49:7f:d7:05:3c:2f:07:30:a9:e7:9e:d8:a5:87:f0:c7:9d:0c: 62:c7:4e:84:55:72:58:80:9d:4a:65:ff:f9:3f:ba:70:06:c7: 3e:ab:ca:9d:dc:7d:f5:25:0c:3f:b8:ad:f9:e3:5b:ae:41:82: 2e:54:c0:a4:b6:1d:aa:ff:e2:83:2e:5a:71:63:82:02:91:7b: 16:80:0a:36:2b:f5:e9:6c:15:4f:5f:cf:90:e7:d0:85:4b:44: b0:d9:3a:4c:1f:8c:1e:67:43:52:76:74:48:c0:47:d1:e9:4d: ae:da:a3:58:36:a8:ff:e9:4d:70:8e:69:8a:e4:f7:aa:bd:64: 6c:e9:15:51:53:19:a5:ae:c3:d8:61:29:08:48:1a:d4:69:77: b4:46:c2:b4:f3:e2:63:33:9a:fe:26:36:24:60:73:f7:ad:d3: 96:5b:e4:47:7a:bd:a1:95:5e:66:26:a4:4a:09:a2:ac:90:db: 75:bc:95:6f:26:be:22:c9:88:68:88:48:31:4f:12:05:91:bf: 41:b0:db:11:57:f3:c4:e9:65:fe:2f:fc:4c:bb:62:58:1c:5f: 6a:99:54:02:5c:13:ad:48:da:3e:11:29:1c:e2:66:1e:d8:45: da:58:24:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdvjRxhH9CRS0QAy4ODJ4UjmOXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTA4MjIwNDM1MDJaFw0yNTA4MjUwNjQxMDJaMDMxMTAvBgNV BAMTKDg1QjY1NzlGOTI4QjlBRjY2NjNCQ0M5M0UzNTAxQjBDNEJCOEJBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWqIR9rGQ8vKkmLLGDs7D6ebv w6XE0azIE8DPeHsk3DMA2bb928rVHukjeQqliqs48mVt/WjSvoSsYhBE5r0DGysN QfXBBxL6vkoD05eQLpoKUJN0lca9zAQ3ywJSVGxOWOUwTYLrOvGIv5+I4SHludhB rqcAZClWnsvtMOk7Y3Ww8MZDL6ai3hrbBeQQgiLb/qr/XkSEU8kE9DAERe7z6z8d odZyx8oItMiDiIIiiCRHbARsTeMwo7+oC/2F6eFn3LWolH+BDSIrjWz9jUHcUsXr i/Trs/Zg/0+dj4bWedCVqmz3y5MhJRGIHWBnqJvjpP6oBA3tXuBTY5q/86yPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbZXn5KLmvZmO8yT41AbDEu4ui4wHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYSqbWqpGxmAWWe6blt9iACgUl/1wU8Lwcw qeee2KWH8MedDGLHToRVcliAnUpl//k/unAGxz6ryp3cffUlDD+4rfnjW65Bgi5U wKS2Har/4oMuWnFjggKRexaACjYr9elsFU9fz5Dn0IVLRLDZOkwfjB5nQ1J2dEjA R9HpTa7ao1g2qP/pTXCOaYrk96q9ZGzpFVFTGaWuw9hhKQhIGtRpd7RGwrTz4mMz mv4mNiRgc/et05Zb5Ed6vaGVXmYmpEoJoqyQ23W8lW8mviLJiGiISDFPEgWRv0Gw 2xFX88TpZf4v/Ey7YlgcX2qZVAJcE61I2j4RKRziZh7YRdpYJIs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:19 2025 by rpki-client