$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: KpUcXEl+6ce3oyKqioYYykNCzZ1gsdIAVjUMcg6qFk0= Subject key identifier: FD:C2:A2:83:87:E2:0F:65:40:5D:04:B3:DD:F6:01:E5:79:4A:A9:AF Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 18DEC11B37CD09BC4A1D0DBDA3D8A73DB4566B61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 15:32:11 +0000 Manifest this update: Fri 22 Aug 2025 15:27:11 +0000 Manifest next update: Tue 26 Aug 2025 01:00:11 +0000 Files and hashes: 1: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: lbTb1rXEv5NcHVx3RiwbOGXFSvagYmA2pemVQvhQbBw=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) 3: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:de:c1:1b:37:cd:09:bc:4a:1d:0d:bd:a3:d8:a7:3d:b4:56:6b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Aug 22 15:27:11 2025 GMT Not After : Aug 26 01:00:11 2025 GMT Subject: CN=FDC2A28387E20F65405D04B3DDF601E5794AA9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:58:53:96:9e:4e:4a:e8:e5:a4:cc:98:dc: 8e:91:96:99:08:4d:d1:fa:eb:5d:3c:2c:a3:a0:b0: 5a:ab:6b:75:c2:9a:f3:16:70:cf:e1:9f:6d:33:90: 9e:77:b2:3b:e7:5f:69:56:61:61:5c:46:7d:9a:bc: 29:39:fa:a4:c9:8c:95:99:09:1d:4c:77:84:4e:ad: e7:82:48:8a:f0:ab:ff:e8:84:f4:fe:83:80:ec:eb: 58:0e:b2:dc:2c:3a:58:4c:1b:a8:e8:3a:f7:be:31: 6e:df:d9:07:f6:52:3a:52:6e:31:0a:f8:ed:72:ba: 8b:3e:61:3a:64:13:2e:ee:87:b4:5f:2d:ba:2f:5b: ad:68:c1:3c:ff:fa:5f:71:5f:16:9e:6f:0e:2f:12: 6f:e8:4c:a0:69:01:77:7a:3d:c7:fe:79:c1:21:58: f0:89:51:3f:04:f4:c6:f6:a5:66:37:58:f6:7f:66: 07:4e:da:46:ac:48:57:23:49:db:fe:6e:15:5f:a7: 17:05:f6:6f:1f:10:ad:1d:03:bb:56:51:de:bf:75: ac:67:7a:4e:98:ba:d4:f9:16:59:56:84:59:26:e9: 5f:58:05:c2:a6:74:3d:b9:f8:54:90:5f:04:63:1e: 2b:14:48:99:25:c4:51:0e:6e:8d:2b:79:ea:ad:a2: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C2:A2:83:87:E2:0F:65:40:5D:04:B3:DD:F6:01:E5:79:4A:A9:AF X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:74:36:93:ee:7a:0d:28:51:f6:1b:1c:96:30:0c:10:f2:47: dd:66:b6:be:15:a2:60:df:ba:78:dd:05:f4:d8:26:ab:15:a4: 30:60:72:97:f0:83:78:31:95:12:ab:66:04:ed:31:98:f6:21: 25:78:f8:16:c2:41:0d:72:43:7c:b1:90:8b:53:64:a0:90:4f: 56:79:66:9c:06:26:bd:58:d8:ea:24:bc:24:82:04:4b:d8:f5: 44:fa:62:9b:ca:14:24:c5:74:38:b1:7e:d4:4a:54:33:2b:47: 4e:5c:2d:16:82:07:ea:ec:83:6b:37:c7:b2:82:46:11:ca:35: a3:45:de:d5:f4:43:38:4a:de:f8:8e:c8:b0:77:27:1d:cf:8e: c6:ca:90:0b:7a:ab:e0:db:54:70:55:b3:78:dd:0d:6e:fe:92: 9a:f1:a6:4f:8c:e1:69:f7:a3:59:ad:48:d3:cd:aa:6a:1b:58: 9d:2d:63:58:5a:7c:17:73:0f:ea:f4:a0:a1:a1:3b:c6:1d:29: 98:83:ae:54:fa:10:d9:7a:69:ad:c7:50:98:10:30:ee:d0:ec: f1:6b:1e:fe:62:cf:a0:27:be:62:bc:6a:35:ad:7d:45:ca:6a: 47:fb:0f:08:8c:20:f5:9e:05:86:44:f1:1a:ff:07:0a:3d:f5: e0:6e:03:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGN7BGzfNCbxKHQ29o9inPbRWa2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTA4MjIxNTI3MTFaFw0yNTA4MjYwMTAwMTFaMDMxMTAvBgNV BAMTKEZEQzJBMjgzODdFMjBGNjU0MDVEMDRCM0RERjYwMUU1Nzk0QUE5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYVhTlp5OSujlpMyY3I6RlpkI TdH66108LKOgsFqra3XCmvMWcM/hn20zkJ53sjvnX2lWYWFcRn2avCk5+qTJjJWZ CR1Md4ROreeCSIrwq//ohPT+g4Ds61gOstwsOlhMG6joOve+MW7f2Qf2UjpSbjEK +O1yuos+YTpkEy7uh7RfLbovW61owTz/+l9xXxaebw4vEm/oTKBpAXd6Pcf+ecEh WPCJUT8E9Mb2pWY3WPZ/ZgdO2kasSFcjSdv+bhVfpxcF9m8fEK0dA7tWUd6/daxn ek6YutT5FllWhFkm6V9YBcKmdD25+FSQXwRjHisUSJklxFEObo0reeqtonCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/cKig4fiD2VAXQSz3fYB5XlKqa8wHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp0NpPueg0oUfYbHJYwDBDyR91mtr4VomDf unjdBfTYJqsVpDBgcpfwg3gxlRKrZgTtMZj2ISV4+BbCQQ1yQ3yxkItTZKCQT1Z5 ZpwGJr1Y2OokvCSCBEvY9UT6YpvKFCTFdDixftRKVDMrR05cLRaCB+rsg2s3x7KC RhHKNaNF3tX0QzhK3viOyLB3Jx3PjsbKkAt6q+DbVHBVs3jdDW7+kprxpk+M4Wn3 o1mtSNPNqmobWJ0tY1hafBdzD+r0oKGhO8YdKZiDrlT6ENl6aa3HUJgQMO7Q7PFr Hv5iz6AnvmK8ajWtfUXKakf7DwiMIPWeBYZE8Rr/Bwo99eBuA6s= -----END CERTIFICATE-----Generated at Sun Aug 24 00:38:51 2025 by rpki-client