$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: KfOqdBnupBoOcu3lYBhKnHsM3ko/zqz0kdX+zf1teVA= Subject key identifier: E9:90:CD:06:E5:0E:E0:64:AE:50:99:E4:12:C9:AC:4F:8C:FD:98:B4 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 299641491EB99879E119EFA5292B7E7BD6CC3B78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01C8 Signing time: Fri 22 Aug 2025 11:30:57 +0000 Manifest this update: Fri 22 Aug 2025 11:25:57 +0000 Manifest next update: Mon 25 Aug 2025 21:29:57 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) 2: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: 1NARDi94S3SnJFqV8+lrujUYlozKWD6g7vl40Gx1DuM=) 3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: G08Zsb0m7nLFy8P1hWnzM0k+V4xtFf95Ynj7WmJyU4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:96:41:49:1e:b9:98:79:e1:19:ef:a5:29:2b:7e:7b:d6:cc:3b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Aug 22 11:25:57 2025 GMT Not After : Aug 25 21:29:57 2025 GMT Subject: CN=E990CD06E50EE064AE5099E412C9AC4F8CFD98B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:a0:92:5c:a6:01:d4:93:dd:81:63:2a:ac: a9:d7:64:3e:45:22:7b:39:db:27:a5:c3:2c:0e:21: 39:b4:df:e0:85:8f:8c:e2:48:44:a9:80:07:de:68: a1:a5:df:51:31:57:28:5d:ed:1a:98:f3:c0:e3:25: 98:78:f1:0a:28:41:89:9d:2e:33:0b:cd:0d:a9:df: 22:e4:7e:ad:c4:24:9a:8a:bb:fc:ec:c6:41:db:b8: d9:3a:2f:84:96:3f:ef:4c:bd:f0:65:03:64:fc:a2: 31:10:e5:92:b0:ab:b7:b4:a2:c5:2d:01:4b:63:77: 0d:26:22:f6:80:ef:9f:be:09:b8:be:a7:30:be:a2: 31:a5:43:c9:c8:fb:a4:0c:a1:ff:9a:90:b7:7f:a2: f4:18:de:16:95:90:b1:d0:d3:6d:c9:61:2b:08:c7: ce:85:43:69:6e:b9:2b:c5:dc:ff:cf:a1:92:ed:d2: 7f:7f:0a:8f:54:44:83:ff:23:ed:f3:bb:00:4f:be: 21:31:92:62:fc:7d:01:f7:3a:66:a9:76:99:39:d5: c6:e3:ba:49:64:7f:04:22:47:0e:25:a9:22:ef:a5: 47:c2:6e:b3:0e:93:e7:59:d0:ec:a8:44:72:7f:0a: 4a:77:62:6b:1e:f1:3d:2b:49:d8:d2:2a:2c:d8:c8: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:CD:06:E5:0E:E0:64:AE:50:99:E4:12:C9:AC:4F:8C:FD:98:B4 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:17:21:5e:e8:37:0f:d6:2a:8e:95:ac:37:6c:66:61:de: e1:8e:2c:39:26:c5:e4:b6:9a:79:50:80:a5:25:38:36:a1:aa: 3a:11:06:40:ab:8f:e3:c6:17:e0:e6:7d:63:5a:25:3f:58:88: ba:74:1a:8e:68:c5:53:5c:a3:89:3a:79:0b:38:eb:56:44:95: 99:ac:4d:c5:68:45:1e:3e:b0:18:c5:6d:ac:33:ad:4c:75:67: 8b:5b:cb:fd:e1:0c:39:2e:fb:48:ad:62:40:6f:9f:4e:46:87: 49:4b:5b:13:18:e0:76:6c:36:3c:65:24:0d:73:f1:e2:be:9a: 92:c4:b3:92:dc:30:cf:d9:44:22:50:53:f5:82:f4:de:e2:86: 31:45:35:00:dc:4f:ee:1e:02:df:ad:a1:ff:1f:c9:95:45:7e: 5f:a0:d9:b1:3f:c8:6e:37:34:40:f8:00:18:28:cc:e0:df:7a: c5:05:a5:94:ad:4f:2b:43:70:b2:be:52:b2:48:4b:3e:04:a3: d1:8a:15:95:ff:c1:7b:93:2e:08:2b:43:5c:ca:bd:1a:82:90: 43:13:94:c5:45:bf:91:be:f1:a9:f0:55:ac:6c:c8:69:11:17: 96:f6:45:27:cf:49:4f:fd:d0:1c:1e:e0:41:27:94:31:4d:0a: 74:a8:15:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZZBSR65mHnhGe+lKSt+e9bMO3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTA4MjIxMTI1NTdaFw0yNTA4MjUyMTI5NTdaMDMxMTAvBgNV BAMTKEU5OTBDRDA2RTUwRUUwNjRBRTUwOTlFNDEyQzlBQzRGOENGRDk4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe46CSXKYB1JPdgWMqrKnXZD5F Ins52yelwywOITm03+CFj4ziSESpgAfeaKGl31ExVyhd7RqY88DjJZh48QooQYmd LjMLzQ2p3yLkfq3EJJqKu/zsxkHbuNk6L4SWP+9MvfBlA2T8ojEQ5ZKwq7e0osUt AUtjdw0mIvaA75++Cbi+pzC+ojGlQ8nI+6QMof+akLd/ovQY3haVkLHQ023JYSsI x86FQ2luuSvF3P/PoZLt0n9/Co9URIP/I+3zuwBPviExkmL8fQH3Omapdpk51cbj uklkfwQiRw4lqSLvpUfCbrMOk+dZ0OyoRHJ/Ckp3Ymse8T0rSdjSKizYyHXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ZDNBuUO4GSuUJnkEsmsT4z9mLQwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7YFyFe6DcP1iqOlaw3bGZh3uGOLDkmxeS2 mnlQgKUlODahqjoRBkCrj+PGF+DmfWNaJT9YiLp0Go5oxVNco4k6eQs461ZElZms TcVoRR4+sBjFbawzrUx1Z4tby/3hDDku+0itYkBvn05Gh0lLWxMY4HZsNjxlJA1z 8eK+mpLEs5LcMM/ZRCJQU/WC9N7ihjFFNQDcT+4eAt+tof8fyZVFfl+g2bE/yG43 NED4ABgozODfesUFpZStTytDcLK+UrJISz4Eo9GKFZX/wXuTLggrQ1zKvRqCkEMT lMVFv5G+8anwVaxsyGkRF5b2RSfPSU/90Bwe4EEnlDFNCnSoFQU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:16 2025 by rpki-client