$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: tMCNzuh4LsbjhHFp6C9ZIgt8HIbk8hiip11xLVXgTSE= Subject key identifier: 53:6A:F0:B9:61:F9:44:09:02:94:9D:D1:47:86:0A:C4:6A:4A:53:2A Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 058D7C1363960BDDB03FAF0783EE1395028020C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 0200 Signing time: Thu 21 Aug 2025 17:01:13 +0000 Manifest this update: Thu 21 Aug 2025 16:56:13 +0000 Manifest next update: Mon 25 Aug 2025 01:15:13 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: 9JBZBVPZouGhAHemyiI4rMIr+6OA9DGcxOvDGzv9mNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8d:7c:13:63:96:0b:dd:b0:3f:af:07:83:ee:13:95:02:80:20:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Aug 21 16:56:13 2025 GMT Not After : Aug 25 01:15:13 2025 GMT Subject: CN=536AF0B961F9440902949DD147860AC46A4A532A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ea:cb:bd:31:90:d2:12:33:86:14:d9:6b:95: 1d:f2:fa:93:da:d5:39:68:29:c6:64:27:4e:81:af: 1a:0f:7a:d9:9b:94:a3:1b:4c:84:6b:64:8e:f3:55: fa:3c:7f:ef:90:3b:8d:8b:c5:76:5b:9d:29:1b:75: 71:3e:4a:3f:75:83:4a:69:92:00:09:d1:3a:bb:cb: bc:d7:2a:c8:d6:c4:a6:a2:d1:e8:8c:fe:66:b9:c9: db:ab:df:d0:23:2b:87:af:58:d4:5a:7d:8b:be:c5: fb:a5:bd:d8:b8:a1:6a:8b:c3:af:f3:a0:9b:9f:d5: b8:54:a5:72:0b:17:be:41:4a:cf:fa:dd:0e:01:9e: 08:7f:17:ca:5f:8b:97:bd:ed:1a:f1:32:35:2c:17: ce:6b:02:da:a8:00:e2:8e:5f:70:95:ca:dd:dd:b2: 68:2b:8c:9a:c9:ff:d2:09:bc:f0:13:63:5a:20:0b: 30:3b:42:ad:cf:78:39:90:a6:11:1b:1c:dc:ce:63: e8:c9:27:17:7c:15:07:8e:79:53:58:89:84:70:6c: ae:f9:4d:c4:43:d6:1e:83:59:93:ac:ee:6e:ba:4d: 96:a4:9e:31:9a:8a:2b:3d:44:1e:26:2e:e2:da:13: 5e:10:fc:4a:11:43:2b:58:ea:9f:f5:58:6f:60:a1: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:F0:B9:61:F9:44:09:02:94:9D:D1:47:86:0A:C4:6A:4A:53:2A X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:43:7d:e0:0d:f0:f6:44:ec:91:53:71:b3:73:0d:17:64:b6: 34:6a:a7:41:83:f6:c9:99:2e:33:09:72:b5:d3:62:cb:bb:97: e0:2a:8d:29:9e:0f:19:6d:4f:05:2e:c6:c0:e3:84:0d:e7:41: 6b:d9:9b:d1:ba:36:dd:0c:c0:e6:e0:ea:17:49:37:c0:6f:91: d1:11:7c:cd:29:6b:aa:99:b5:e2:7f:9d:55:09:86:f9:d4:e0: 1c:7c:55:e3:a4:ae:7f:e3:a8:6a:82:82:00:ff:4c:f6:2a:6a: 0f:49:5a:4d:c8:0d:1b:2c:f0:f9:41:39:cd:59:8c:ca:56:4b: 3c:16:19:30:bf:2d:ad:b4:88:ec:c7:d7:0c:31:10:e8:0a:f1: e6:87:99:6b:77:00:8e:81:b8:81:db:cb:38:b3:eb:7e:e8:aa: ba:e2:2e:3a:2d:fd:ce:c4:99:47:91:2c:dc:0b:76:ce:5e:0a: 5b:55:60:b2:a8:e8:cf:b4:a1:b0:38:a0:d7:f0:59:65:40:2d: 28:aa:b5:f8:75:27:23:32:81:3a:47:93:b9:75:eb:fc:11:a1: 76:ee:dc:0a:fe:54:23:4d:b9:17:e7:db:60:c7:72:39:79:d8: 9a:54:70:9b:49:38:a2:9c:b3:30:d1:66:19:6f:00:bb:be:6d: 22:25:c5:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBY18E2OWC92wP68Hg+4TlQKAIMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTA4MjExNjU2MTNaFw0yNTA4MjUwMTE1MTNaMDMxMTAvBgNV BAMTKDUzNkFGMEI5NjFGOTQ0MDkwMjk0OUREMTQ3ODYwQUM0NkE0QTUzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6su9MZDSEjOGFNlrlR3y+pPa 1TloKcZkJ06BrxoPetmblKMbTIRrZI7zVfo8f++QO42LxXZbnSkbdXE+Sj91g0pp kgAJ0Tq7y7zXKsjWxKai0eiM/ma5ydur39AjK4evWNRafYu+xfulvdi4oWqLw6/z oJuf1bhUpXILF75BSs/63Q4Bngh/F8pfi5e97RrxMjUsF85rAtqoAOKOX3CVyt3d smgrjJrJ/9IJvPATY1ogCzA7Qq3PeDmQphEbHNzOY+jJJxd8FQeOeVNYiYRwbK75 TcRD1h6DWZOs7m66TZaknjGaiis9RB4mLuLaE14Q/EoRQytY6p/1WG9goV3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU2rwuWH5RAkClJ3RR4YKxGpKUyowHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxDfeAN8PZE7JFTcbNzDRdktjRqp0GD9smZ LjMJcrXTYsu7l+AqjSmeDxltTwUuxsDjhA3nQWvZm9G6Nt0MwObg6hdJN8BvkdER fM0pa6qZteJ/nVUJhvnU4Bx8VeOkrn/jqGqCggD/TPYqag9JWk3IDRss8PlBOc1Z jMpWSzwWGTC/La20iOzH1wwxEOgK8eaHmWt3AI6BuIHbyziz637oqrriLjot/c7E mUeRLNwLds5eCltVYLKo6M+0obA4oNfwWWVALSiqtfh1JyMygTpHk7l16/wRoXbu 3Ar+VCNNuRfn22DHcjl52JpUcJtJOKKcszDRZhlvALu+bSIlxQo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:16 2025 by rpki-client