$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: x/JDFS+3Xdyh9KTmUWaRbs1dRq0SXGBNTEPt2v3+YBg= Subject key identifier: C2:A3:E6:FC:07:2D:FD:51:FF:77:0B:EA:66:44:72:E8:08:A3:52:63 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 70B0DB2DADB264CFDD7728DBFEFDF19F1F838C89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: EC Signing time: Fri 22 Aug 2025 23:00:44 +0000 Manifest this update: Fri 22 Aug 2025 22:55:44 +0000 Manifest next update: Tue 26 Aug 2025 08:02:44 +0000 Files and hashes: 1: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) 2: 08435803278DC5796EE67697996454D656195D4C.crl (hash: cyU8BrXj9pt4HUqZxiBDy+Yg2wntsHSrKPb3fvC9JqE=) 3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b0:db:2d:ad:b2:64:cf:dd:77:28:db:fe:fd:f1:9f:1f:83:8c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Aug 22 22:55:44 2025 GMT Not After : Aug 26 08:02:44 2025 GMT Subject: CN=C2A3E6FC072DFD51FF770BEA664472E808A35263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:c0:cf:a5:2e:3a:03:c9:cc:f9:5a:f3:70: 01:51:4f:00:ca:dd:74:a3:e1:5d:e8:2c:47:36:42: d6:da:c2:37:93:e5:4e:4c:ed:7e:c0:50:f9:24:e1: 0c:bb:f6:4e:e7:2f:94:7e:53:3b:54:50:43:d2:60: fa:8f:b4:8b:b0:d1:2d:3e:47:f1:87:34:4c:c1:7d: 81:ad:91:ec:a8:17:5f:d4:d0:73:eb:98:92:38:71: bb:93:a4:9e:c1:c2:63:7b:cd:86:da:1e:13:cb:18: 99:64:4e:94:84:d6:11:46:94:9a:4f:71:33:4b:ff: 11:a9:8c:57:ee:bc:82:e1:ff:8c:0a:ea:71:c2:8d: 79:da:60:8a:a3:d1:8c:58:4d:6e:56:e1:b4:b6:04: 68:93:23:96:34:e7:9e:e3:48:5f:9f:84:d2:f0:11: 41:8d:dc:9b:ed:c7:ac:9c:cc:12:86:31:2b:e7:37: b5:28:80:4c:59:bf:39:d5:77:bb:7a:dd:05:49:b0: b4:e8:40:77:bf:9c:75:cc:fa:d0:79:d8:28:34:13: 8e:37:ee:f7:f4:10:97:48:5d:cf:2e:40:09:8a:1a: b6:54:79:8c:e9:e5:7c:7d:76:7f:6b:9d:f6:2d:93: ec:d9:0d:eb:a8:ed:21:01:bf:2d:36:1a:d8:25:d1: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:E6:FC:07:2D:FD:51:FF:77:0B:EA:66:44:72:E8:08:A3:52:63 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:88:b9:f6:b4:a1:0c:77:08:39:37:94:8d:b3:ca:27:0c:a4: d6:8b:46:1a:8d:2f:b4:2c:a9:25:96:bb:d0:74:88:70:4a:ce: 95:81:d5:61:5b:de:e9:83:25:ba:c4:b6:0f:c6:ca:1b:a7:20: 5f:28:f1:9f:af:53:4f:05:5c:4c:00:0e:03:78:85:f2:63:e4: a1:55:82:8c:2f:10:ef:e8:89:40:0d:a2:78:ea:ce:4b:64:00: d3:b2:60:ba:61:9a:72:af:93:52:d6:6c:20:58:ba:80:d1:a5: f4:18:47:7d:f2:40:3c:6f:d3:d5:88:43:b4:f2:7e:7e:dd:86: d6:bd:0b:85:38:cc:74:83:54:d8:06:ee:4b:2a:94:78:9d:ee: 18:39:72:28:1b:6e:15:d3:c0:74:d9:5b:e3:34:d5:a3:c7:cb: 31:b2:41:58:aa:4d:4b:a6:1b:e4:11:b1:51:95:b8:91:db:d1: 37:1d:7e:1c:53:b6:82:54:91:24:cb:49:a5:34:74:ff:24:66: 7c:db:a9:70:2b:3e:23:e9:89:28:86:46:62:a0:d6:df:07:2e: cf:a2:1b:0a:df:47:83:fb:16:1f:dc:23:9c:d4:a6:b7:ca:5c: 6d:bb:00:13:23:83:e7:16:c1:5e:ad:47:27:0f:91:02:79:3d: fd:5a:e3:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLDbLa2yZM/ddyjb/v3xnx+DjIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTA4MjIyMjU1NDRaFw0yNTA4MjYwODAyNDRaMDMxMTAvBgNV BAMTKEMyQTNFNkZDMDcyREZENTFGRjc3MEJFQTY2NDQ3MkU4MDhBMzUyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYcDPpS46A8nM+VrzcAFRTwDK 3XSj4V3oLEc2QtbawjeT5U5M7X7AUPkk4Qy79k7nL5R+UztUUEPSYPqPtIuw0S0+ R/GHNEzBfYGtkeyoF1/U0HPrmJI4cbuTpJ7BwmN7zYbaHhPLGJlkTpSE1hFGlJpP cTNL/xGpjFfuvILh/4wK6nHCjXnaYIqj0YxYTW5W4bS2BGiTI5Y0557jSF+fhNLw EUGN3Jvtx6yczBKGMSvnN7UogExZvznVd7t63QVJsLToQHe/nHXM+tB52Cg0E443 7vf0EJdIXc8uQAmKGrZUeYzp5Xx9dn9rnfYtk+zZDeuo7SEBvy02Gtgl0aFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqPm/Act/VH/dwvqZkRy6AijUmMwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSIufa0oQx3CDk3lI2zyicMpNaLRhqNL7Qs qSWWu9B0iHBKzpWB1WFb3umDJbrEtg/GyhunIF8o8Z+vU08FXEwADgN4hfJj5KFV gowvEO/oiUANonjqzktkANOyYLphmnKvk1LWbCBYuoDRpfQYR33yQDxv09WIQ7Ty fn7dhta9C4U4zHSDVNgG7ksqlHid7hg5cigbbhXTwHTZW+M01aPHyzGyQViqTUum G+QRsVGVuJHb0TcdfhxTtoJUkSTLSaU0dP8kZnzbqXArPiPpiSiGRmKg1t8HLs+i GwrfR4P7Fh/cI5zUprfKXG27ABMjg+cWwV6tRycPkQJ5Pf1a49g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:43 2025 by rpki-client