$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: nctn3EUl4mJY50CJ+gYsUf54U9+e2fr001Lag7zMDYo= Subject key identifier: F6:C2:B9:01:FA:B7:51:BA:3E:86:5D:1B:EB:8F:DB:2A:22:41:71:A4 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 0E1183E95CCF95683B549AEB3773515C188CE073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: A5 Signing time: Thu 21 Aug 2025 08:20:57 +0000 Manifest this update: Thu 21 Aug 2025 08:15:57 +0000 Manifest next update: Sun 24 Aug 2025 10:15:57 +0000 Files and hashes: 1: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: +42UxCwRKILWAOZHtC1cYAW7IywCy2Px+DbSFExtJQs=) 2: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:11:83:e9:5c:cf:95:68:3b:54:9a:eb:37:73:51:5c:18:8c:e0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Aug 21 08:15:57 2025 GMT Not After : Aug 24 10:15:57 2025 GMT Subject: CN=F6C2B901FAB751BA3E865D1BEB8FDB2A224171A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2b:98:71:b9:84:86:46:68:90:74:89:88:2a: 07:3a:1c:c4:fe:b2:22:ba:dc:70:59:45:48:ee:23: 47:4f:9b:ea:13:87:48:13:56:7d:3f:cf:99:d8:da: 47:c2:99:f0:c4:da:24:bb:f7:1e:f9:74:5a:9b:3b: fb:21:8c:55:dd:e6:1f:3e:f6:b2:0f:5e:06:a8:f5: f6:fe:8a:6f:69:6c:8f:03:15:20:34:e3:1a:3c:88: 7f:75:64:ce:30:fc:8c:f5:e0:83:18:7d:23:ee:4a: 21:a5:a8:1b:dd:db:b3:69:4f:6a:95:ee:14:ed:5b: 7b:6c:9d:10:b5:cc:c8:29:dd:ef:6a:de:fb:f7:7b: bb:7b:04:f1:17:20:33:ea:dc:55:35:2f:20:d8:26: cb:2c:41:82:06:32:40:87:26:cc:08:3e:08:c9:64: 87:b6:67:af:8a:e1:31:aa:12:af:39:f4:93:65:6f: a3:d5:1e:d6:e4:b4:14:6d:46:11:ea:24:f3:8f:e4: cb:a5:6f:13:48:a2:4d:b9:7c:a3:e8:67:71:f9:d5: 40:89:98:3a:cb:3e:8c:39:dd:e7:c5:e2:07:d8:11: 85:37:bc:ad:0b:6b:3f:e3:5e:0f:7a:ee:19:6c:1c: 0f:42:83:26:33:0f:7b:7e:c1:2f:dc:b5:99:a0:a8: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C2:B9:01:FA:B7:51:BA:3E:86:5D:1B:EB:8F:DB:2A:22:41:71:A4 X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e7:c3:c4:80:fe:73:31:6d:c9:08:f9:ac:3d:c1:55:d3:e8: 47:7f:19:fb:bd:b8:e2:54:d6:89:8d:61:05:2e:d9:b2:ef:d8: 03:99:01:36:fd:f9:cf:a6:32:a7:a2:fa:59:ad:24:f2:91:c4: 7b:ff:21:39:1d:c3:62:99:93:e6:13:bd:08:09:ac:9d:94:72: 64:92:16:4d:0d:e1:6a:27:e7:98:9f:5d:ea:78:5f:60:f2:09: 72:54:4c:2d:35:25:e0:01:41:d8:ab:70:18:5c:1c:dc:fa:cd: dc:bd:ba:1b:e7:dc:79:3e:38:f3:7c:1b:93:ce:25:e3:63:70: c7:39:17:98:24:78:e0:85:d9:1e:6a:c8:81:89:bb:03:7f:b1: 47:5b:cb:8b:f9:3f:99:71:a5:f9:a7:c7:4d:82:88:99:18:0e: 08:ca:86:c3:56:40:d9:ae:fc:5a:fb:50:ac:68:c7:d9:8f:c8: 18:a3:97:43:4c:23:5e:da:69:08:8c:ad:d8:6b:cf:a8:60:70: 30:b4:34:67:ba:27:36:43:c6:ac:59:da:4d:10:24:f8:92:c1: 3b:b4:ea:7d:23:d5:25:1b:97:eb:9d:26:65:21:a0:72:d8:9a: c9:6d:d8:63:6e:61:48:1f:28:20:08:cd:de:41:1a:37:0e:af: 5f:e9:1f:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhGD6VzPlWg7VJrrN3NRXBiM4HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTA4MjEwODE1NTdaFw0yNTA4MjQxMDE1NTdaMDMxMTAvBgNV BAMTKEY2QzJCOTAxRkFCNzUxQkEzRTg2NUQxQkVCOEZEQjJBMjI0MTcxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbK5hxuYSGRmiQdImIKgc6HMT+ siK63HBZRUjuI0dPm+oTh0gTVn0/z5nY2kfCmfDE2iS79x75dFqbO/shjFXd5h8+ 9rIPXgao9fb+im9pbI8DFSA04xo8iH91ZM4w/Iz14IMYfSPuSiGlqBvd27NpT2qV 7hTtW3tsnRC1zMgp3e9q3vv3e7t7BPEXIDPq3FU1LyDYJsssQYIGMkCHJswIPgjJ ZIe2Z6+K4TGqEq859JNlb6PVHtbktBRtRhHqJPOP5MulbxNIok25fKPoZ3H51UCJ mDrLPow53efF4gfYEYU3vK0Laz/jXg967hlsHA9CgyYzD3t+wS/ctZmgqL+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sK5Afq3Ubo+hl0b64/bKiJBcaQwHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLnw8SA/nMxbckI+aw9wVXT6Ed/Gfu9uOJU 1omNYQUu2bLv2AOZATb9+c+mMqei+lmtJPKRxHv/ITkdw2KZk+YTvQgJrJ2UcmSS Fk0N4Won55ifXep4X2DyCXJUTC01JeABQdircBhcHNz6zdy9uhvn3Hk+OPN8G5PO JeNjcMc5F5gkeOCF2R5qyIGJuwN/sUdby4v5P5lxpfmnx02CiJkYDgjKhsNWQNmu /Fr7UKxox9mPyBijl0NMI17aaQiMrdhrz6hgcDC0NGe6JzZDxqxZ2k0QJPiSwTu0 6n0j1SUbl+udJmUhoHLYmslt2GNuYUgfKCAIzd5BGjcOr1/pH9U= -----END CERTIFICATE-----Generated at Sat Aug 23 10:14:58 2025 by rpki-client