$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: 4dMwxFNVZEmaPbByyllSMODuZH6oHRpdc1aoY/lAVJQ= Subject key identifier: 22:6C:1D:CB:25:44:2B:88:5F:04:3E:0B:65:21:96:E8:19:82:93:EB Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 26C6EED55ACDD602D1BD776D5A45B5283352C80A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: B3 Signing time: Thu 21 Aug 2025 12:00:51 +0000 Manifest this update: Thu 21 Aug 2025 11:55:51 +0000 Manifest next update: Sun 24 Aug 2025 12:53:51 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: obqA3nw5E73zW6y9xQVvlXsIEjO876Xnd+wktk6SJjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c6:ee:d5:5a:cd:d6:02:d1:bd:77:6d:5a:45:b5:28:33:52:c8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Aug 21 11:55:51 2025 GMT Not After : Aug 24 12:53:51 2025 GMT Subject: CN=226C1DCB25442B885F043E0B652196E8198293EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:16:af:ae:67:5a:0e:f1:5e:ff:6f:ed:97: f7:f6:c0:b7:fa:73:37:18:26:7d:6e:01:2b:33:43: 33:0c:fc:bc:e9:4d:06:40:00:2e:1b:7a:84:f4:c7: 8c:4f:b8:14:fc:6e:72:18:b4:d9:29:f4:28:85:06: 62:8c:8c:60:cf:8e:df:0d:38:c6:90:c2:76:ae:2c: e7:31:45:fa:e9:12:0e:7f:b2:40:55:5d:8c:53:5a: ad:64:34:fa:49:3f:26:9e:84:7e:99:a3:24:d9:0e: 6d:bd:e2:c1:fb:29:68:02:a2:35:a8:46:c2:a6:8a: 77:46:bc:47:79:0a:d8:5d:54:42:1a:01:05:65:b5: 8a:c2:5b:9b:38:98:cc:d8:e3:7c:01:36:5b:ce:66: 6c:e5:55:be:a9:02:16:58:af:9d:20:32:6d:83:4c: 69:a6:f3:cd:2e:ef:67:d8:6e:d0:47:2c:ef:7a:fc: 87:76:52:02:22:08:a6:9b:e2:df:27:4d:6b:f1:2d: 7a:45:73:e4:f4:bb:43:67:5c:fe:17:c0:75:1f:68: 04:aa:2c:5a:55:37:24:63:55:1d:f8:49:85:08:d3: 3d:47:9b:79:3d:bf:18:d0:d9:0e:46:57:a6:54:08: 53:dc:a5:22:16:ab:1e:b1:d4:f9:e0:8e:e5:1e:92: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6C:1D:CB:25:44:2B:88:5F:04:3E:0B:65:21:96:E8:19:82:93:EB X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2e:00:d2:5a:74:35:50:fa:60:d0:a3:fa:90:dd:d3:c5:0f: 4c:43:26:72:2e:f8:20:6f:d2:0e:5f:38:d9:6f:95:52:db:9b: 62:ea:07:26:74:8c:ec:7b:0e:58:e8:97:96:a6:d7:aa:b6:51: 41:21:d0:7c:44:8b:d8:47:ed:55:81:2e:c1:4a:40:4f:a8:da: e7:15:e8:5e:92:7f:b2:69:6e:e1:e5:f5:84:96:b7:21:54:be: 8c:81:fa:df:14:d2:80:16:6b:dd:7f:c4:18:93:bd:ed:cd:7d: fe:98:aa:d3:d5:59:96:a5:17:67:1a:eb:7c:d6:e9:87:23:5d: f7:ac:87:ff:ca:9a:20:28:86:6f:62:98:2a:35:d1:c2:81:f0: ba:49:99:d6:4d:e0:c6:e5:ef:f7:fa:b5:8f:4e:1f:0d:06:95: 1b:ee:9a:ed:6f:c1:3d:ed:c4:d1:bc:ef:43:95:7a:e3:a4:05: 60:0f:3e:ed:87:6c:f7:a4:8b:4f:74:a6:f8:b9:aa:97:d2:90: 9d:dd:b3:a3:5b:76:82:63:d2:e7:23:fc:b9:82:53:8c:ef:12: 8e:66:af:20:50:96:b8:bd:be:26:57:04:4c:06:7c:03:ba:c8: 5d:3f:90:91:42:fc:78:72:fa:9b:3f:20:43:f2:7d:93:6c:2a: 3e:c8:fa:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsbu1VrN1gLRvXdtWkW1KDNSyAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA4MjExMTU1NTFaFw0yNTA4MjQxMjUzNTFaMDMxMTAvBgNV BAMTKDIyNkMxRENCMjU0NDJCODg1RjA0M0UwQjY1MjE5NkU4MTk4MjkzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5RavrmdaDvFe/2/tl/f2wLf6 czcYJn1uASszQzMM/LzpTQZAAC4beoT0x4xPuBT8bnIYtNkp9CiFBmKMjGDPjt8N OMaQwnauLOcxRfrpEg5/skBVXYxTWq1kNPpJPyaehH6ZoyTZDm294sH7KWgCojWo RsKmindGvEd5CthdVEIaAQVltYrCW5s4mMzY43wBNlvOZmzlVb6pAhZYr50gMm2D TGmm880u72fYbtBHLO96/Id2UgIiCKab4t8nTWvxLXpFc+T0u0NnXP4XwHUfaASq LFpVNyRjVR34SYUI0z1Hm3k9vxjQ2Q5GV6ZUCFPcpSIWqx6x1PngjuUekvUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUImwdyyVEK4hfBD4LZSGW6BmCk+swHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKguANJadDVQ+mDQo/qQ3dPFD0xDJnIu+CBv 0g5fONlvlVLbm2LqByZ0jOx7Dljol5am16q2UUEh0HxEi9hH7VWBLsFKQE+o2ucV 6F6Sf7JpbuHl9YSWtyFUvoyB+t8U0oAWa91/xBiTve3Nff6YqtPVWZalF2ca63zW 6YcjXfesh//KmiAohm9imCo10cKB8LpJmdZN4Mbl7/f6tY9OHw0GlRvumu1vwT3t xNG870OVeuOkBWAPPu2HbPeki090pvi5qpfSkJ3ds6NbdoJj0ucj/LmCU4zvEo5m ryBQlri9viZXBEwGfAO6yF0/kJFC/Hhy+ps/IEPyfZNsKj7I+jI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:27 2025 by rpki-client