$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json) Hash identifier: GtsTpWaTKVy60V1rAYCpKNIKw8/+Egf37RB0/q9iD14= Subject key identifier: AA:4B:DC:A7:DE:3C:50:40:43:F4:A3:CC:BF:DF:4E:7E:6B:C5:EE:E7 Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Certificate serial: 43B7D9855A93DF5EA35F48606C2C583841431274 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft Manifest number: 01CF Signing time: Fri 22 Aug 2025 13:41:39 +0000 Manifest this update: Fri 22 Aug 2025 13:36:39 +0000 Manifest next update: Tue 26 Aug 2025 01:00:39 +0000 Files and hashes: 1: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: FajS5EIHEF8Ut6beQXJGMMk4JlPyluf8gkRx66641Bo=) 2: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b7:d9:85:5a:93:df:5e:a3:5f:48:60:6c:2c:58:38:41:43:12:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Validity Not Before: Aug 22 13:36:39 2025 GMT Not After : Aug 26 01:00:39 2025 GMT Subject: CN=AA4BDCA7DE3C504043F4A3CCBFDF4E7E6BC5EEE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:37:3f:8e:e1:61:6a:ec:1b:b3:dc:11:b3: 9c:1f:9e:d6:0f:03:78:e2:4d:f9:98:57:37:91:21: cc:fb:7f:bc:13:95:7c:e4:0e:d6:dc:f8:e7:76:4d: e5:8d:3f:b0:b6:5e:3f:47:0e:03:a3:60:0b:e0:28: 78:7f:d2:60:e3:9f:dc:fe:3d:99:38:f0:33:cd:9e: 21:d0:68:ea:38:37:48:6e:12:e7:f0:87:ab:c7:4d: 65:39:cc:29:71:5b:f2:65:ba:7e:e3:ce:80:50:99: 27:e9:f9:8c:cc:d7:a5:0f:32:6a:9d:30:b4:e1:a9: f1:54:5b:1f:91:53:fa:95:50:c0:4d:21:73:36:11: 88:b5:8e:92:d2:b2:19:3b:5f:15:df:c0:33:1c:74: 57:ff:cb:54:1d:de:ca:2a:e1:69:90:98:07:82:2e: 40:f3:e6:7e:bb:ab:37:dd:0f:b8:ea:af:13:fe:1c: d2:11:d9:7b:dc:16:6b:44:e1:6d:99:24:1d:0f:c7: ca:90:c5:69:98:f5:df:0f:9c:08:65:ad:70:30:fa: 91:61:72:bb:5a:40:70:0b:cf:1a:79:95:98:8a:ec: c3:c5:65:38:99:50:20:fe:10:54:07:27:87:16:fa: fd:d0:9e:1d:03:70:d9:bd:d2:36:d9:1a:22:4b:d7: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4B:DC:A7:DE:3C:50:40:43:F4:A3:CC:BF:DF:4E:7E:6B:C5:EE:E7 X509v3 Authority Key Identifier: keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:db:c0:f8:7a:ba:ef:3a:bd:7f:f1:f5:a9:7e:34:e1:f5:03: 7a:5c:c6:69:76:3d:85:d0:03:67:29:54:21:c9:d6:8b:14:f8: ea:67:ed:c7:e2:97:1a:11:ae:04:a8:a9:ff:dc:d5:a2:1b:87: c7:3c:b8:06:15:3d:22:63:6d:d0:30:f6:2d:e9:24:9e:31:f5: b2:11:b9:da:8c:d7:b1:cb:ba:63:cf:23:ad:84:09:9b:c2:a5: 08:c3:4a:9f:f7:01:39:c2:80:c6:72:0d:5f:2c:1d:49:7e:e7: 6f:6c:f3:aa:0f:14:59:0d:45:db:57:f8:94:9d:cb:66:79:87: 50:ae:d8:2b:b8:2c:61:79:7f:39:82:ba:dc:84:11:16:94:41: 25:af:de:2a:80:be:16:2b:8e:18:25:da:ba:bb:d2:7a:bc:50: 5e:a8:da:8f:a0:0c:7b:9a:b6:f0:a0:ea:b8:cd:9d:e6:55:f5: b6:4d:49:c9:02:c6:6d:3c:39:0e:fb:e9:de:47:89:60:95:69: 17:9d:30:23:72:a4:ea:2d:df:f2:77:f9:30:c7:13:ff:25:0e: bb:7c:7f:3a:35:9a:ec:11:fd:b9:cb:b7:77:4d:a3:43:6a:58: 8a:00:4d:a7:90:04:ee:26:5a:80:cd:5f:ae:25:23:07:3f:ad: 1e:c2:a5:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7fZhVqT316jX0hgbCxYOEFDEnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE OTFEQkY5QzAeFw0yNTA4MjIxMzM2MzlaFw0yNTA4MjYwMTAwMzlaMDMxMTAvBgNV BAMTKEFBNEJEQ0E3REUzQzUwNDA0M0Y0QTNDQ0JGREY0RTdFNkJDNUVFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpjc/juFhauwbs9wRs5wfntYP A3jiTfmYVzeRIcz7f7wTlXzkDtbc+Od2TeWNP7C2Xj9HDgOjYAvgKHh/0mDjn9z+ PZk48DPNniHQaOo4N0huEufwh6vHTWU5zClxW/Jlun7jzoBQmSfp+YzM16UPMmqd MLThqfFUWx+RU/qVUMBNIXM2EYi1jpLSshk7XxXfwDMcdFf/y1Qd3soq4WmQmAeC LkDz5n67qzfdD7jqrxP+HNIR2XvcFmtE4W2ZJB0Px8qQxWmY9d8PnAhlrXAw+pFh crtaQHALzxp5lZiK7MPFZTiZUCD+EFQHJ4cW+v3Qnh0DcNm90jbZGiJL1+PBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqkvcp948UEBD9KPMv99OfmvF7ucwHwYDVR0j BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4 NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/bwPh6uu86vX/x9al+NOH1A3pcxml2PYXQ A2cpVCHJ1osU+Opn7cfilxoRrgSoqf/c1aIbh8c8uAYVPSJjbdAw9i3pJJ4x9bIR udqM17HLumPPI62ECZvCpQjDSp/3ATnCgMZyDV8sHUl+529s86oPFFkNRdtX+JSd y2Z5h1Cu2Cu4LGF5fzmCutyEERaUQSWv3iqAvhYrjhgl2rq70nq8UF6o2o+gDHua tvCg6rjNneZV9bZNSckCxm08OQ776d5HiWCVaRedMCNypOot3/J3+TDHE/8lDrt8 fzo1muwR/bnLt3dNo0NqWIoATaeQBO4mWoDNX64lIwc/rR7CpT8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:36 2025 by rpki-client