$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: 69civDH7sRSobKTZsWaueOuTWepJ3oiVFjHiXaJL3JQ= Subject key identifier: 6B:4F:FB:35:4F:88:16:0C:87:71:D8:7D:94:4A:BA:03:D7:7F:2C:44 Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 0DB2FC68C19DEFAF53D6DDB32B55F8AF9605531D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 0160 Signing time: Thu 21 Aug 2025 14:32:22 +0000 Manifest this update: Thu 21 Aug 2025 14:27:22 +0000 Manifest next update: Sun 24 Aug 2025 20:18:22 +0000 Files and hashes: 1: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: ad9s7ckUOJKYd6ZBrA82qSNzB2BsKp3GWiw+2A1MZ+8=) 3: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) 4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b2:fc:68:c1:9d:ef:af:53:d6:dd:b3:2b:55:f8:af:96:05:53:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Aug 21 14:27:22 2025 GMT Not After : Aug 24 20:18:22 2025 GMT Subject: CN=6B4FFB354F88160C8771D87D944ABA03D77F2C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:bc:25:d0:01:11:5c:47:30:87:34:43:2c: 57:15:f3:b4:b1:2d:f5:80:bc:04:dd:3f:37:95:2d: 1f:de:0e:62:41:ff:21:f1:88:f2:31:2a:03:87:65: 50:a9:0c:ba:22:32:8c:1c:8f:aa:ad:d3:b3:b1:ab: f4:48:1e:f5:5c:e9:83:da:22:44:22:4d:31:29:f9: 70:a8:f1:75:9b:19:9b:64:b8:4b:82:19:5e:45:de: 06:81:04:29:be:27:33:cd:10:56:97:75:a9:26:04: 14:6e:5a:35:9f:3b:02:5f:dc:e2:f3:33:83:df:2c: 8a:da:eb:6c:56:b1:05:7e:0c:9a:33:60:f1:03:4e: 08:eb:5a:ac:1b:53:2a:67:43:4d:1c:0a:df:74:30: a9:ff:33:42:af:aa:25:ae:ec:53:39:27:ae:10:11: 35:a3:b0:a8:d8:d0:19:7e:77:d9:ef:7c:b5:b1:65: ab:64:48:d6:79:85:07:d3:d7:1f:67:cd:c8:4c:86: 7e:cb:1e:d1:b8:9b:39:f5:db:25:c9:11:29:d2:23: 9f:38:81:56:e0:90:69:5a:ee:39:76:44:be:d6:f5: 5e:b3:de:69:a2:72:05:17:e1:e7:66:06:88:f5:bb: bc:08:ab:ef:58:6a:98:36:74:fb:81:d6:58:7a:7f: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4F:FB:35:4F:88:16:0C:87:71:D8:7D:94:4A:BA:03:D7:7F:2C:44 X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:82:99:bd:62:9b:6a:a8:e4:99:6e:96:28:d3:20:db:58:ab: ef:c3:ff:b1:bf:d8:8c:c2:42:bb:e6:84:9b:f2:ff:47:19:81: 1d:33:14:f7:1e:4b:56:80:a6:33:be:24:15:a2:36:18:86:0f: 31:8e:1e:81:16:f8:54:cf:12:15:eb:12:5f:e9:c6:9f:3e:f8: f5:10:6f:be:31:a0:2b:f0:a3:af:51:3a:7a:19:cf:2c:ab:a1: 0f:f4:ef:80:39:46:b7:49:4b:3d:40:e1:6b:fa:32:c0:09:e5: 13:7a:c3:c0:38:d3:0e:94:c7:14:42:3e:2a:bc:25:60:ba:8d: ed:8d:64:75:1c:79:d1:a6:dd:ff:b7:72:6b:da:09:dd:71:73: 10:68:ed:38:84:3b:24:f3:d6:20:4a:11:f0:82:93:38:79:32: 02:2a:9b:a9:35:f8:75:a6:81:f3:05:34:0d:d0:f6:12:5a:47: 30:b5:54:24:b6:70:05:d0:09:a1:85:82:33:76:3c:c9:fd:50: fd:f5:ed:7c:e2:05:bb:e4:7c:d2:1f:3c:27:22:ef:b1:b4:5c: e7:59:10:3d:0b:21:72:63:aa:e8:e1:62:39:42:9b:ef:cd:8f: 3d:70:f9:78:cf:62:0b:ab:c0:97:f0:0c:0f:a4:25:34:2e:28: 20:d4:e3:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbL8aMGd769T1t2zK1X4r5YFUx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNTA4MjExNDI3MjJaFw0yNTA4MjQyMDE4MjJaMDMxMTAvBgNV BAMTKDZCNEZGQjM1NEY4ODE2MEM4NzcxRDg3RDk0NEFCQTAzRDc3RjJDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8Lwl0AERXEcwhzRDLFcV87Sx LfWAvATdPzeVLR/eDmJB/yHxiPIxKgOHZVCpDLoiMowcj6qt07Oxq/RIHvVc6YPa IkQiTTEp+XCo8XWbGZtkuEuCGV5F3gaBBCm+JzPNEFaXdakmBBRuWjWfOwJf3OLz M4PfLIra62xWsQV+DJozYPEDTgjrWqwbUypnQ00cCt90MKn/M0KvqiWu7FM5J64Q ETWjsKjY0Bl+d9nvfLWxZatkSNZ5hQfT1x9nzchMhn7LHtG4mzn12yXJESnSI584 gVbgkGla7jl2RL7W9V6z3mmicgUX4edmBoj1u7wIq+9Yapg2dPuB1lh6f/JbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa0/7NU+IFgyHcdh9lEq6A9d/LEQwHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyCmb1im2qo5JlulijTINtYq+/D/7G/2IzC QrvmhJvy/0cZgR0zFPceS1aApjO+JBWiNhiGDzGOHoEW+FTPEhXrEl/pxp8++PUQ b74xoCvwo69ROnoZzyyroQ/074A5RrdJSz1A4Wv6MsAJ5RN6w8A40w6UxxRCPiq8 JWC6je2NZHUcedGm3f+3cmvaCd1xcxBo7TiEOyTz1iBKEfCCkzh5MgIqm6k1+HWm gfMFNA3Q9hJaRzC1VCS2cAXQCaGFgjN2PMn9UP317XziBbvkfNIfPCci77G0XOdZ ED0LIXJjqujhYjlCm+/Njz1w+XjPYgurwJfwDA+kJTQuKCDU45M= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:28 2025 by rpki-client