$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: YMpZau3jwANeMNV7sdrhjYSseLaooh4MH9xRYPQlIXI= Subject key identifier: 3E:9C:81:E8:74:3E:57:E8:21:86:C9:A3:99:3F:B1:91:87:B9:6F:5E Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 22388A1166749DB7FAD87AFAD7F29AFA0CD498D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01E2 Signing time: Thu 21 Aug 2025 12:52:22 +0000 Manifest this update: Thu 21 Aug 2025 12:47:22 +0000 Manifest next update: Sun 24 Aug 2025 15:26:22 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 2: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 3: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) 4: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: 7OL2OI9VzZfeC4TCErl0ITrZ0p635HP6qLYNnfHaeDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:38:8a:11:66:74:9d:b7:fa:d8:7a:fa:d7:f2:9a:fa:0c:d4:98:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Aug 21 12:47:22 2025 GMT Not After : Aug 24 15:26:22 2025 GMT Subject: CN=3E9C81E8743E57E82186C9A3993FB19187B96F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:bf:c6:e9:2a:68:48:46:ea:66:bb:f3:f5: 32:90:36:ae:f9:ce:b6:53:c9:a3:2a:0e:9f:79:58: c2:cf:f4:2f:b3:90:38:13:0b:af:bc:b0:4b:26:1b: 0e:cc:1b:44:0e:d7:20:65:5b:f8:87:2e:4b:78:16: 96:a9:f3:92:af:aa:80:eb:f6:d0:4b:ed:70:c3:1f: 68:e3:8a:51:20:8f:c8:fc:d9:14:86:52:67:b8:44: f2:8c:69:43:2d:c4:dc:be:23:75:c3:43:6e:12:25: 10:73:71:64:b6:9d:84:35:22:c5:10:07:82:e4:a2: 82:4e:f9:c7:09:cc:a0:45:85:bd:0d:d8:fa:08:9c: bb:80:0b:56:60:41:1a:29:5d:5c:8e:9b:bc:36:e2: 50:3d:68:20:c3:26:6b:c4:b7:1c:51:eb:40:01:4c: 49:be:59:08:c8:3c:44:99:ef:ed:0f:a7:88:39:58: bf:02:91:7b:49:5b:44:48:11:92:a3:ab:c0:9b:96: 32:07:3b:33:51:27:d0:a5:5f:fc:5a:f6:dd:29:2b: b2:c0:20:81:ea:36:99:49:de:1a:4b:f5:48:f5:0c: c3:c1:2d:a6:82:f7:b3:1b:c5:68:de:8e:3a:ad:bc: d9:0a:1a:c9:bf:a1:32:72:95:64:d1:8d:bb:81:6f: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:81:E8:74:3E:57:E8:21:86:C9:A3:99:3F:B1:91:87:B9:6F:5E X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:56:7c:45:d2:52:ff:20:0a:24:60:e1:4c:fa:08:22:b3:86: 89:3b:d9:1b:49:0d:58:cf:82:ea:e3:7e:af:e1:eb:62:2a:c7: 38:a4:5e:e8:b6:21:79:04:62:01:99:a0:54:f4:5a:d1:96:e2: 4e:93:57:e1:de:3b:9b:d3:11:4e:df:5b:54:30:e7:a5:61:e7: 29:01:0a:57:69:d9:c3:2d:68:c4:7d:64:ef:43:c1:c6:b5:bf: 59:35:81:3a:55:7d:43:da:1a:b5:7b:c0:fb:94:4a:66:5a:79: f0:e8:cc:2f:48:3a:1b:33:fc:93:90:5f:32:4e:82:1b:49:4a: 36:31:8d:74:cc:c3:37:7d:6f:23:00:80:e0:22:d5:9d:67:50: 4c:c0:f3:97:ea:f6:93:ec:05:fa:a6:3c:35:cc:12:f7:b4:26: ef:ff:5e:6e:db:e3:a9:12:f5:f8:3d:96:ab:f5:48:70:30:fe: fb:b2:b0:bb:3f:38:61:ef:2d:32:48:4a:9d:cd:29:67:3b:73: 63:73:c3:b7:f9:e6:8e:00:6e:1c:51:37:6a:ce:5f:df:97:c7: cb:80:19:3b:14:d8:72:58:80:11:d0:56:a4:37:36:6f:6d:1b: 64:d7:5d:d8:13:d4:c0:54:5d:92:bd:f6:c5:b9:05:7f:68:85: ad:9d:99:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjiKEWZ0nbf62Hr61/Ka+gzUmNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA4MjExMjQ3MjJaFw0yNTA4MjQxNTI2MjJaMDMxMTAvBgNV BAMTKDNFOUM4MUU4NzQzRTU3RTgyMTg2QzlBMzk5M0ZCMTkxODdCOTZGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAL/G6SpoSEbqZrvz9TKQNq75 zrZTyaMqDp95WMLP9C+zkDgTC6+8sEsmGw7MG0QO1yBlW/iHLkt4Fpap85KvqoDr 9tBL7XDDH2jjilEgj8j82RSGUme4RPKMaUMtxNy+I3XDQ24SJRBzcWS2nYQ1IsUQ B4LkooJO+ccJzKBFhb0N2PoInLuAC1ZgQRopXVyOm7w24lA9aCDDJmvEtxxR60AB TEm+WQjIPESZ7+0Pp4g5WL8CkXtJW0RIEZKjq8CbljIHOzNRJ9ClX/xa9t0pK7LA IIHqNplJ3hpL9Uj1DMPBLaaC97MbxWjejjqtvNkKGsm/oTJylWTRjbuBbxmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpyB6HQ+V+ghhsmjmT+xkYe5b14wHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJWfEXSUv8gCiRg4Uz6CCKzhok72RtJDVjP gurjfq/h62IqxzikXui2IXkEYgGZoFT0WtGW4k6TV+HeO5vTEU7fW1Qw56Vh5ykB Cldp2cMtaMR9ZO9Dwca1v1k1gTpVfUPaGrV7wPuUSmZaefDozC9IOhsz/JOQXzJO ghtJSjYxjXTMwzd9byMAgOAi1Z1nUEzA85fq9pPsBfqmPDXMEve0Ju//Xm7b46kS 9fg9lqv1SHAw/vuysLs/OGHvLTJISp3NKWc7c2Nzw7f55o4AbhxRN2rOX9+Xx8uA GTsU2HJYgBHQVqQ3Nm9tG2TXXdgT1MBUXZK99sW5BX9oha2dme8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:31 2025 by rpki-client