$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: eVhXKZsjxw41qc9ou6Or6MsGl+P4LA1fLSibFM6Fo3U= Subject key identifier: 98:4B:D0:E2:72:C6:BD:06:1D:4F:95:98:11:1C:E5:D6:6C:C7:EA:54 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: A3A3FE09830583C919F6C3B20DC2CC83DA4A50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 17:10:44 +0000 Manifest this update: Sat 23 Aug 2025 17:05:44 +0000 Manifest next update: Wed 27 Aug 2025 01:08:44 +0000 Files and hashes: 1: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) 2: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: xoVEDXNDV7r1eYfQuxEhnaQME4k+nSzAsbaZczoe7b4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 01:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:a3:fe:09:83:05:83:c9:19:f6:c3:b2:0d:c2:cc:83:da:4a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Aug 23 17:05:44 2025 GMT Not After : Aug 27 01:08:44 2025 GMT Subject: CN=984BD0E272C6BD061D4F9598111CE5D66CC7EA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:9e:a2:a6:64:c0:ca:b3:a8:ca:16:cb:a0: 20:cd:78:18:bb:fe:b8:b0:f0:6d:db:70:c0:94:ea: 1c:d0:09:43:10:57:77:1a:11:dc:b7:71:d3:f5:5d: 64:a8:98:d2:26:f2:b3:62:f7:2e:4d:10:3f:c6:3b: 1f:1c:de:35:bf:24:21:55:7e:67:3e:a5:1a:a6:17: 2f:9a:40:c6:13:ab:a7:71:93:76:87:38:27:ed:b3: c1:0f:66:5d:8e:88:ea:38:19:12:1c:2e:56:59:5d: 51:08:44:de:96:14:c0:ab:b5:83:92:69:c1:cd:76: 5b:a3:85:ce:f0:d5:91:17:f2:3b:43:eb:0e:0c:88: 8b:5c:88:24:cb:07:e9:14:91:70:66:09:35:67:c1: b2:1d:0e:ad:c6:c1:9b:20:93:74:53:6c:08:b0:6a: ff:64:cd:44:f1:4b:fe:1a:e1:1b:5e:81:48:32:92: 47:a6:02:e8:5f:21:ce:3e:1d:46:fe:96:40:37:68: 74:a8:b8:af:8a:7a:1e:98:14:84:e4:20:89:7d:1a: ff:a3:64:aa:2b:29:93:df:1c:7c:5a:ab:f6:ad:f2: 7b:e7:ba:93:05:a3:d1:4f:5e:b9:4c:db:f4:22:b2: 0f:58:fe:e4:96:a9:59:4c:aa:86:5b:e2:ef:94:a3: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:D0:E2:72:C6:BD:06:1D:4F:95:98:11:1C:E5:D6:6C:C7:EA:54 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:18:f8:1a:4e:55:01:d8:93:22:62:ac:03:36:61:75:a6:5c: b3:e4:e2:fa:d9:c8:2a:62:5c:9f:fd:4a:01:5e:6e:18:c0:5a: 97:49:32:d9:88:2c:7d:34:ec:69:64:35:51:4d:1e:8c:06:24: 99:b0:5c:60:a8:4a:c1:cc:28:a5:fb:81:ff:7a:07:ab:8d:b2: aa:07:10:bd:a8:02:41:f9:6d:fb:e3:0d:19:7e:04:e4:0d:6a: 1b:6a:98:3a:fb:4a:7e:9a:17:be:89:da:dc:ec:8e:b0:ca:bd: af:c6:17:06:12:d4:51:45:67:d8:73:dc:7d:a1:b1:2f:0a:74: 6e:b0:e1:4f:ea:a1:30:19:4d:bb:cf:0a:54:0e:38:3f:e5:6b: 4f:f1:df:32:12:0f:f8:98:0a:be:c7:bc:c6:fb:ba:ed:1c:d9: 00:c0:a4:fd:de:d4:3c:df:3b:7a:19:56:8b:18:cc:b4:3d:12: 39:c8:4c:7b:81:de:f2:2c:e5:6a:66:3f:c6:bf:56:f9:51:eb: 82:e3:6d:6b:32:81:22:7c:54:62:41:39:60:08:2c:0b:b7:f9: ed:d6:a5:98:0c:3e:33:84:fa:fb:e7:ed:ef:a5:fe:4c:5f:2c: 40:25:af:ae:bc:6b:51:d8:0c:63:9b:8f:75:de:43:90:f7:ff: 71:5a:de:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKOj/gmDBYPJGfbDsg3CzIPaSlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNTA4MjMxNzA1NDRaFw0yNTA4MjcwMTA4NDRaMDMxMTAvBgNV BAMTKDk4NEJEMEUyNzJDNkJEMDYxRDRGOTU5ODExMUNFNUQ2NkNDN0VBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKp6ipmTAyrOoyhbLoCDNeBi7 /riw8G3bcMCU6hzQCUMQV3caEdy3cdP1XWSomNIm8rNi9y5NED/GOx8c3jW/JCFV fmc+pRqmFy+aQMYTq6dxk3aHOCfts8EPZl2OiOo4GRIcLlZZXVEIRN6WFMCrtYOS acHNdlujhc7w1ZEX8jtD6w4MiItciCTLB+kUkXBmCTVnwbIdDq3GwZsgk3RTbAiw av9kzUTxS/4a4RtegUgykkemAuhfIc4+HUb+lkA3aHSouK+Keh6YFITkIIl9Gv+j ZKorKZPfHHxaq/at8nvnupMFo9FPXrlM2/Qisg9Y/uSWqVlMqoZb4u+Uo7mDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEvQ4nLGvQYdT5WYERzl1mzH6lQwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMY+BpOVQHYkyJirAM2YXWmXLPk4vrZyCpi XJ/9SgFebhjAWpdJMtmILH007GlkNVFNHowGJJmwXGCoSsHMKKX7gf96B6uNsqoH EL2oAkH5bfvjDRl+BOQNahtqmDr7Sn6aF76J2tzsjrDKva/GFwYS1FFFZ9hz3H2h sS8KdG6w4U/qoTAZTbvPClQOOD/la0/x3zISD/iYCr7HvMb7uu0c2QDApP3e1Dzf O3oZVosYzLQ9EjnITHuB3vIs5WpmP8a/VvlR64LjbWsygSJ8VGJBOWAILAu3+e3W pZgMPjOE+vvn7e+l/kxfLEAlr668a1HYDGObj3XeQ5D3/3Fa3kw= -----END CERTIFICATE-----Generated at Sun Aug 24 06:32:17 2025 by rpki-client