$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: jbirvylPqyTpJ4/Dms6HSTHTSxpKO1VYLZrMIP5U7G0= Subject key identifier: 84:36:CF:F6:F0:65:EB:08:D4:0E:D3:7A:B3:08:2C:28:BA:69:A2:3B Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 2DA4C563709CBAFE1B9999267E4E5D4A8C4DE423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0263 Signing time: Fri 22 Aug 2025 05:41:10 +0000 Manifest this update: Fri 22 Aug 2025 05:36:10 +0000 Manifest next update: Mon 25 Aug 2025 11:35:10 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=) 2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=) 3: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: JbSoNBA1OQ1Ks5JqwDRebFYsRGumpXANbObAVa+oGjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a4:c5:63:70:9c:ba:fe:1b:99:99:26:7e:4e:5d:4a:8c:4d:e4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Aug 22 05:36:10 2025 GMT Not After : Aug 25 11:35:10 2025 GMT Subject: CN=8436CFF6F065EB08D40ED37AB3082C28BA69A23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:0c:2e:66:7e:39:0f:51:05:1a:94:02:8a: 62:a8:f6:b4:58:bd:3a:ec:b3:64:ed:a0:3d:dc:cc: 85:19:06:e5:f9:68:2f:20:71:72:6b:f7:ee:c3:ac: d9:7f:a9:15:f2:72:eb:30:74:8f:d2:47:54:36:03: a8:82:84:a8:d3:50:b5:05:3a:2b:ce:d8:40:d4:99: 28:22:00:50:1f:cd:e8:24:60:a9:18:5d:ad:15:0c: 26:79:bc:48:28:56:fd:f9:1e:d8:c8:40:66:6f:d8: 08:63:03:cf:e9:4d:c8:63:e9:37:6e:28:08:4c:a3: 2a:63:dd:ec:83:70:2b:3c:28:87:9d:5d:ac:47:68: c0:cd:ac:74:54:a4:8c:80:f8:ea:18:77:e9:fe:93: 23:d0:4b:68:f9:ff:a1:33:db:65:0c:c8:ee:9c:82: 8d:f0:7a:85:29:79:16:7f:20:85:37:64:8d:00:b0: 20:28:8a:66:d8:f6:df:25:6d:4a:8d:b5:a5:b6:e9: 34:0f:f8:c1:c2:04:ed:0f:1a:58:b8:4e:1e:b8:7e: 75:16:10:c3:b6:85:26:5b:10:49:b4:fa:c0:13:0c: c6:08:55:e2:13:66:90:39:3b:fe:c9:02:9f:b9:28: 7c:96:23:dd:8e:bd:cf:44:3b:15:93:84:f6:bd:99: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:36:CF:F6:F0:65:EB:08:D4:0E:D3:7A:B3:08:2C:28:BA:69:A2:3B X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3c:15:13:d5:c1:61:13:f5:af:0d:98:c3:99:d7:70:4b:c0: 1e:8b:6b:11:bd:84:7d:a8:9d:50:01:a4:4c:97:af:a3:ce:24: f8:b7:8b:50:0b:b7:31:2e:e1:c3:a2:7a:51:d3:9c:06:69:43: 6c:38:ce:80:19:66:24:35:af:62:43:99:05:7b:aa:7f:66:39: ba:d1:83:d9:30:28:1b:d5:d4:17:89:77:bd:20:3e:ac:fd:75: e8:4d:e3:ef:26:06:b8:cd:08:ec:60:f9:a0:1e:a6:70:d5:31: 42:e8:eb:60:4f:04:15:03:84:25:ec:e1:29:ef:69:e7:c2:79: 8e:fc:b6:c4:9f:ee:9d:85:1b:23:86:60:51:1b:d1:1b:10:34: fc:e5:9d:e1:90:a3:1c:6e:98:89:cb:2b:59:ba:f3:5a:a4:83: ab:58:e6:a9:ca:5f:74:78:ee:2c:8d:17:ba:73:d0:69:57:58: f1:ee:51:5e:4a:44:df:94:72:62:b5:89:19:5b:07:c6:91:5b: 33:12:7f:f9:03:2d:c6:23:fc:a5:cc:ae:b1:3f:e5:76:56:67: 80:21:2b:6d:70:f4:ab:59:2f:ce:f1:44:73:7c:eb:10:c4:2b: cd:3d:81:be:91:53:db:eb:79:e3:bf:7d:d4:48:b4:5c:0f:4a: 76:54:20:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaTFY3Ccuv4bmZkmfk5dSoxN5CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTA4MjIwNTM2MTBaFw0yNTA4MjUxMTM1MTBaMDMxMTAvBgNV BAMTKDg0MzZDRkY2RjA2NUVCMDhENDBFRDM3QUIzMDgyQzI4QkE2OUEyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEQwuZn45D1EFGpQCimKo9rRY vTrss2TtoD3czIUZBuX5aC8gcXJr9+7DrNl/qRXycuswdI/SR1Q2A6iChKjTULUF OivO2EDUmSgiAFAfzegkYKkYXa0VDCZ5vEgoVv35HtjIQGZv2AhjA8/pTchj6Tdu KAhMoypj3eyDcCs8KIedXaxHaMDNrHRUpIyA+OoYd+n+kyPQS2j5/6Ez22UMyO6c go3weoUpeRZ/IIU3ZI0AsCAoimbY9t8lbUqNtaW26TQP+MHCBO0PGli4Th64fnUW EMO2hSZbEEm0+sATDMYIVeITZpA5O/7JAp+5KHyWI92Ovc9EOxWThPa9mZ05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDbP9vBl6wjUDtN6swgsKLppojswHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ8FRPVwWET9a8NmMOZ13BLwB6LaxG9hH2o nVABpEyXr6POJPi3i1ALtzEu4cOielHTnAZpQ2w4zoAZZiQ1r2JDmQV7qn9mObrR g9kwKBvV1BeJd70gPqz9dehN4+8mBrjNCOxg+aAepnDVMULo62BPBBUDhCXs4Snv aefCeY78tsSf7p2FGyOGYFEb0RsQNPzlneGQoxxumInLK1m681qkg6tY5qnKX3R4 7iyNF7pz0GlXWPHuUV5KRN+UcmK1iRlbB8aRWzMSf/kDLcYj/KXMrrE/5XZWZ4Ah K21w9KtZL87xRHN86xDEK809gb6RU9vreeO/fdRItFwPSnZUID0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:03:27 2025 by rpki-client