$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: PWaxGR5ZtXUUsGeklVGV/NAr62ieH2wS+awp7fCi0U8= Subject key identifier: DF:21:E9:D4:A3:1E:26:7A:F8:59:04:9D:F8:C7:2D:DA:31:FC:CC:E1 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 55C006D6E5B0E7F17823D8F95E6118FD903D0130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: B7 Signing time: Sat 23 Aug 2025 06:12:04 +0000 Manifest this update: Sat 23 Aug 2025 06:07:04 +0000 Manifest next update: Tue 26 Aug 2025 10:57:04 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: LrhckaKllEUhuxro2dGlN9i/oAPvkLlxz4oJ+P5F7aY=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c0:06:d6:e5:b0:e7:f1:78:23:d8:f9:5e:61:18:fd:90:3d:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Aug 23 06:07:04 2025 GMT Not After : Aug 26 10:57:04 2025 GMT Subject: CN=DF21E9D4A31E267AF859049DF8C72DDA31FCCCE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9a:12:97:fc:b5:d3:71:28:2e:30:69:95:22: 8f:38:97:d4:2c:8f:64:7d:d7:3a:d6:ff:ea:d1:3b: d3:b2:13:b2:05:c4:b3:3a:a2:f1:d5:72:a8:58:fe: a1:89:3f:d4:8c:59:46:79:9b:86:cd:bd:fc:83:18: ab:22:09:60:e3:c5:46:f9:29:f2:4a:33:33:8f:cf: 1e:8b:53:e0:4e:5b:fb:02:46:5d:c6:96:4a:19:8e: 62:e2:b6:65:4f:cf:61:70:6e:81:67:f4:3d:ea:d3: 6e:3a:26:62:b7:f1:b8:ff:6d:f5:4b:7b:89:ac:c9: 36:d2:b5:56:13:7b:3d:c0:d0:ec:c3:b3:0b:b1:2d: f1:94:ce:eb:0a:bf:10:04:16:fc:4a:98:82:00:28: ff:dc:66:96:fd:4e:f2:c4:82:42:42:3c:b9:07:a8: 2d:fb:06:dd:7e:a0:68:a5:f7:51:5b:bf:6e:ed:80: 9f:6c:22:d3:76:dc:ad:cf:de:0a:52:b6:be:8e:a7: 91:bd:ac:48:ec:1a:e2:9b:d5:3b:21:49:a0:d9:64: 80:04:07:93:63:e3:3c:f3:f0:96:5f:d3:d0:5e:13: 1f:6c:52:7e:83:74:f9:03:db:bd:80:aa:1e:44:e4: dd:70:3a:4d:cc:e5:d5:3d:8b:3a:b5:78:35:94:c4: d2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:E9:D4:A3:1E:26:7A:F8:59:04:9D:F8:C7:2D:DA:31:FC:CC:E1 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:aa:49:4e:9b:d7:30:f6:d2:07:f4:bb:3e:01:3d:ca:93:65: ed:73:e0:19:30:92:a6:da:8f:0a:ab:5b:c2:42:4c:44:42:d9: d3:7c:c7:11:51:26:b7:ee:2f:7e:ab:00:53:f9:58:18:05:ac: 6b:12:64:8d:9e:45:b1:28:38:28:b0:2c:ec:ae:8e:07:4c:8d: 32:1d:74:ae:75:18:52:8e:2d:48:5c:ea:3b:f0:84:33:6d:41: 0e:62:53:c2:b5:b9:87:45:36:cb:ff:f7:75:5a:98:5b:fc:2e: d1:7f:48:4e:9f:e5:70:01:77:42:0c:2f:5f:97:55:73:c8:66: 5c:16:63:12:9f:d6:67:e3:a6:c9:88:b3:4a:4a:ec:18:af:23: 98:d4:5f:3f:b6:72:c7:27:24:28:3f:75:34:2e:57:e4:65:06: 0b:3b:bc:4c:46:67:33:78:ef:d0:27:26:32:b2:82:d9:4d:02: 72:b6:43:e4:c5:7f:3e:2b:93:c8:70:57:e1:fb:b4:4f:72:27: de:80:91:60:28:89:59:39:f1:43:e1:9f:fe:4a:bb:b1:85:28: 0c:77:45:df:db:ab:fe:63:be:ac:fc:91:3d:68:1c:dc:1f:c5: c4:0a:f9:fb:88:00:8f:f6:e2:64:b3:d8:d3:5a:fc:54:54:98: e8:e2:f6:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcAG1uWw5/F4I9j5XmEY/ZA9ATAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTA4MjMwNjA3MDRaFw0yNTA4MjYxMDU3MDRaMDMxMTAvBgNV BAMTKERGMjFFOUQ0QTMxRTI2N0FGODU5MDQ5REY4QzcyRERBMzFGQ0NDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmhKX/LXTcSguMGmVIo84l9Qs j2R91zrW/+rRO9OyE7IFxLM6ovHVcqhY/qGJP9SMWUZ5m4bNvfyDGKsiCWDjxUb5 KfJKMzOPzx6LU+BOW/sCRl3GlkoZjmLitmVPz2FwboFn9D3q0246JmK38bj/bfVL e4msyTbStVYTez3A0OzDswuxLfGUzusKvxAEFvxKmIIAKP/cZpb9TvLEgkJCPLkH qC37Bt1+oGil91Fbv27tgJ9sItN23K3P3gpStr6Op5G9rEjsGuKb1TshSaDZZIAE B5Nj4zzz8JZf09BeEx9sUn6DdPkD272Aqh5E5N1wOk3M5dU9izq1eDWUxNJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yHp1KMeJnr4WQSd+Mct2jH8zOEwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyqSU6b1zD20gf0uz4BPcqTZe1z4Bkwkqba jwqrW8JCTERC2dN8xxFRJrfuL36rAFP5WBgFrGsSZI2eRbEoOCiwLOyujgdMjTId dK51GFKOLUhc6jvwhDNtQQ5iU8K1uYdFNsv/93VamFv8LtF/SE6f5XABd0IML1+X VXPIZlwWYxKf1mfjpsmIs0pK7BivI5jUXz+2cscnJCg/dTQuV+RlBgs7vExGZzN4 79AnJjKygtlNAnK2Q+TFfz4rk8hwV+H7tE9yJ96AkWAoiVk58UPhn/5Ku7GFKAx3 Rd/bq/5jvqz8kT1oHNwfxcQK+fuIAI/24mSz2NNa/FRUmOji9sg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:32:02 2025 by rpki-client