$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: 2lFrTfQkJZAbyeiTkOZC6d2CRewUqzFKUaQtKiiJNmc= Subject key identifier: 10:CF:D2:69:C3:7E:5F:68:15:05:2E:CC:DE:4E:D5:F1:FC:53:41:6D Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 26CD71FCF1FFE4B4DBE1FF48FCA486708A804AA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 030A Signing time: Thu 21 Aug 2025 15:32:01 +0000 Manifest this update: Thu 21 Aug 2025 15:27:01 +0000 Manifest next update: Mon 25 Aug 2025 02:19:01 +0000 Files and hashes: 1: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: KYzbwM9o5niJMqK6eA5l01tvoybbjabs7rPKPhK6bys=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cd:71:fc:f1:ff:e4:b4:db:e1:ff:48:fc:a4:86:70:8a:80:4a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Aug 21 15:27:01 2025 GMT Not After : Aug 25 02:19:01 2025 GMT Subject: CN=10CFD269C37E5F6815052ECCDE4ED5F1FC53416D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:72:0b:26:2a:a5:f2:aa:6f:82:01:b2:8b: 14:e1:ad:43:14:f1:27:65:03:a1:a5:6b:e7:57:b2: e1:46:b2:b2:1f:f5:02:56:48:84:07:73:f5:5f:4e: 1d:cb:6e:ae:d0:6b:16:5c:fa:00:f4:5e:5d:3d:51: 8d:bd:e1:80:6b:00:12:a7:ef:77:75:a9:c2:fd:46: 5f:e2:79:20:f4:4a:59:62:af:53:6e:1e:37:6d:6d: 98:34:58:01:88:b4:31:64:32:d3:6a:65:7c:71:f3: 9d:bd:75:8d:8e:e2:b7:6e:76:2e:e2:8c:fc:db:1b: 55:81:63:46:8e:c6:f0:7a:45:52:9e:33:82:c9:0c: 4e:e6:d4:84:8a:47:4a:a5:1b:99:81:4c:68:82:9a: 7d:d2:5d:60:1b:65:1d:a1:a7:73:15:58:d1:51:e8: 7f:f0:8c:ca:cc:71:93:e6:c9:a5:d5:c6:4f:c6:31: 31:eb:de:bb:da:1c:e8:45:8a:ee:af:2f:f0:91:cf: 4b:1c:57:6c:92:48:f8:0e:2a:05:4a:e5:e2:b6:b9: 4b:37:bd:db:f4:7a:c1:69:e0:cf:e6:a2:4c:61:12: 67:7f:ec:7e:a9:a2:b7:45:b0:7c:24:a2:4b:e7:d2: 19:b8:a2:8f:e0:03:11:17:60:ac:f1:ab:8b:00:a9: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:D2:69:C3:7E:5F:68:15:05:2E:CC:DE:4E:D5:F1:FC:53:41:6D X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c9:21:1b:41:c5:d1:84:81:0c:5d:ab:77:e0:0a:1c:d2:e2: 0d:30:26:fc:33:7c:dd:a1:70:f7:7f:ea:c4:0b:42:c1:4c:22: 2d:8f:1a:d0:57:1b:17:20:3d:30:c5:10:34:b0:2e:35:2c:6c: c1:00:18:8d:8f:f4:d6:2d:98:77:75:81:ba:8a:b2:2e:62:d5: 92:79:41:0d:4b:92:8f:60:02:7f:35:1d:ec:57:88:e8:65:a2: d8:f0:43:fe:bd:0d:82:78:56:f5:8b:7d:4c:27:ee:08:fb:23: 88:69:c1:68:52:2b:ab:97:72:75:69:86:1e:71:29:84:ba:68: 45:b8:9a:7d:6c:f1:a5:4b:ff:fc:f5:3d:8e:a9:82:9e:9c:63: 05:9c:a0:84:41:97:21:5f:05:95:8e:db:50:76:85:aa:c5:89: 1f:74:02:f5:d3:83:49:ee:8d:65:bb:d7:b9:9e:2a:83:e9:fa: 2c:e8:5f:2b:b1:e8:0a:f9:73:1b:c8:9f:26:23:67:48:ef:5e: 66:d9:2e:21:ef:ea:18:a1:1e:cd:c5:3a:f3:00:30:22:d3:14: fe:7a:d7:93:67:a3:0a:3d:d7:e1:01:63:04:6c:6d:2a:b2:54: 40:0f:4e:84:a2:78:2d:8f:70:81:cf:de:70:06:46:d4:32:55: 96:55:df:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJs1x/PH/5LTb4f9I/KSGcIqASqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA4MjExNTI3MDFaFw0yNTA4MjUwMjE5MDFaMDMxMTAvBgNV BAMTKDEwQ0ZEMjY5QzM3RTVGNjgxNTA1MkVDQ0RFNEVENUYxRkM1MzQxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyHILJiql8qpvggGyixThrUMU 8SdlA6Gla+dXsuFGsrIf9QJWSIQHc/VfTh3Lbq7QaxZc+gD0Xl09UY294YBrABKn 73d1qcL9Rl/ieSD0Sllir1NuHjdtbZg0WAGItDFkMtNqZXxx8529dY2O4rdudi7i jPzbG1WBY0aOxvB6RVKeM4LJDE7m1ISKR0qlG5mBTGiCmn3SXWAbZR2hp3MVWNFR 6H/wjMrMcZPmyaXVxk/GMTHr3rvaHOhFiu6vL/CRz0scV2ySSPgOKgVK5eK2uUs3 vdv0esFp4M/mokxhEmd/7H6pordFsHwkokvn0hm4oo/gAxEXYKzxq4sAqRY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEM/SacN+X2gVBS7M3k7V8fxTQW0wHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7JIRtBxdGEgQxdq3fgChzS4g0wJvwzfN2h cPd/6sQLQsFMIi2PGtBXGxcgPTDFEDSwLjUsbMEAGI2P9NYtmHd1gbqKsi5i1ZJ5 QQ1Lko9gAn81HexXiOhlotjwQ/69DYJ4VvWLfUwn7gj7I4hpwWhSK6uXcnVphh5x KYS6aEW4mn1s8aVL//z1PY6pgp6cYwWcoIRBlyFfBZWO21B2harFiR90AvXTg0nu jWW717meKoPp+izoXyux6Ar5cxvInyYjZ0jvXmbZLiHv6hihHs3FOvMAMCLTFP56 15Nnowo91+EBYwRsbSqyVEAPToSieC2PcIHP3nAGRtQyVZZV36U= -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:52 2025 by rpki-client