$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: qxF65mWGwdLVHyDIC8Pxi8vIwExTeck/E+E2qCg7ICU= Subject key identifier: 5D:1B:D7:D9:BC:F5:05:EF:38:9D:0E:FF:52:85:4C:45:97:81:03:DC Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 41D94705D730D4F82384987573A9CC613D9DD052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 0198 Signing time: Fri 22 Aug 2025 09:54:25 +0000 Manifest this update: Fri 22 Aug 2025 09:49:25 +0000 Manifest next update: Mon 25 Aug 2025 21:44:25 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: 4V9atjyBaiXNeTxowOnUMM3MUWJsHeuFhv8Kmj00UGI=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d9:47:05:d7:30:d4:f8:23:84:98:75:73:a9:cc:61:3d:9d:d0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Aug 22 09:49:25 2025 GMT Not After : Aug 25 21:44:25 2025 GMT Subject: CN=5D1BD7D9BCF505EF389D0EFF52854C45978103DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:47:a0:6e:0f:01:03:5b:27:b8:7b:c0:30: 46:15:bb:4b:00:df:de:53:75:dc:ec:3c:92:0d:1f: e4:7d:f2:b1:42:31:e6:2d:8a:8d:df:34:6a:0d:15: 83:3f:f9:0b:b3:dd:9d:32:62:0f:94:94:3a:4d:ea: 75:7c:91:d7:af:6d:14:6c:f8:ee:ab:24:84:91:09: 0b:cc:25:5a:06:8e:93:cc:fd:67:36:0f:92:b7:f6: bd:25:ab:27:c8:9e:fc:2e:85:f7:32:05:55:04:9d: 6b:79:cf:f6:6a:8e:ee:f7:79:6a:13:73:25:3d:d9: 3e:67:3d:08:ff:13:f2:2c:3f:5a:9c:80:06:ab:70: a7:26:92:f4:08:b0:c1:6a:ee:d9:71:c2:6a:f9:57: ea:c2:8a:da:b5:a3:12:b5:00:55:75:7a:b9:c4:fa: 0c:b9:42:0d:1c:a1:ed:f2:e2:f1:08:b0:5a:44:41: f3:ae:7e:cd:2c:4e:55:c1:70:68:fd:e9:d1:05:a8: 2b:24:80:69:27:ec:bc:04:d3:a5:6b:e5:40:ab:33: 20:2b:8c:6d:7e:f2:85:db:81:f0:ce:06:4c:a0:ee: df:ea:6c:a4:32:e0:85:ab:e4:eb:2a:22:7b:17:14: db:27:ee:b1:ad:91:d7:5a:ae:30:0a:08:a0:6e:05: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:D7:D9:BC:F5:05:EF:38:9D:0E:FF:52:85:4C:45:97:81:03:DC X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2d:75:37:7a:70:38:64:01:ea:b5:a8:19:d5:ee:05:8a:74: 20:01:b6:e2:2a:66:5a:08:9e:2f:95:1f:0e:6e:e4:0e:7d:c8: e8:d6:70:b2:6c:cc:e8:a7:cd:80:02:e4:08:84:9a:32:6b:8f: 61:65:60:c2:47:8b:6c:48:d5:74:65:29:00:4f:d6:f0:9b:46: 1c:07:23:6a:8b:d2:d9:ce:08:23:56:24:dc:6c:15:9a:0e:79: 5f:7a:db:5d:87:e9:5a:f0:8c:b3:6c:7b:22:11:8c:42:4d:2f: 72:06:b0:b8:f7:cf:f1:9a:bb:dc:00:3d:18:0e:c7:cf:dc:20: dd:3f:87:cd:57:fa:8c:7f:58:8c:4a:18:c6:89:af:0e:83:6f: f7:ef:5d:a2:e4:c2:2c:f0:df:69:ff:bd:b0:ab:5d:4f:09:ca: 98:a1:00:66:b7:46:e5:59:3e:c3:9b:52:de:39:b1:a8:6f:96: 09:4e:6e:b7:50:59:4b:1c:67:09:20:53:3a:53:81:bc:3f:85: 70:d7:7f:42:c7:e1:9d:a1:53:8f:3f:13:fc:16:86:c8:a1:2b: 49:de:9d:fe:73:39:b4:8e:5e:ef:49:c8:8b:e4:1d:87:0c:b5: 08:1e:ce:80:80:17:db:ae:a9:c7:e8:f1:12:8b:a8:31:52:da: 2c:f4:5b:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdlHBdcw1PgjhJh1c6nMYT2d0FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTA4MjIwOTQ5MjVaFw0yNTA4MjUyMTQ0MjVaMDMxMTAvBgNV BAMTKDVEMUJEN0Q5QkNGNTA1RUYzODlEMEVGRjUyODU0QzQ1OTc4MTAzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCUegbg8BA1snuHvAMEYVu0sA 395TddzsPJINH+R98rFCMeYtio3fNGoNFYM/+Quz3Z0yYg+UlDpN6nV8kdevbRRs +O6rJISRCQvMJVoGjpPM/Wc2D5K39r0lqyfInvwuhfcyBVUEnWt5z/Zqju73eWoT cyU92T5nPQj/E/IsP1qcgAarcKcmkvQIsMFq7tlxwmr5V+rCitq1oxK1AFV1ernE +gy5Qg0coe3y4vEIsFpEQfOufs0sTlXBcGj96dEFqCskgGkn7LwE06Vr5UCrMyAr jG1+8oXbgfDOBkyg7t/qbKQy4IWr5OsqInsXFNsn7rGtkddarjAKCKBuBeKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRvX2bz1Be84nQ7/UoVMRZeBA9wwHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYtdTd6cDhkAeq1qBnV7gWKdCABtuIqZloI ni+VHw5u5A59yOjWcLJszOinzYAC5AiEmjJrj2FlYMJHi2xI1XRlKQBP1vCbRhwH I2qL0tnOCCNWJNxsFZoOeV96212H6VrwjLNseyIRjEJNL3IGsLj3z/Gau9wAPRgO x8/cIN0/h81X+ox/WIxKGMaJrw6Db/fvXaLkwizw32n/vbCrXU8JypihAGa3RuVZ PsObUt45sahvlglObrdQWUscZwkgUzpTgbw/hXDXf0LH4Z2hU48/E/wWhsihK0ne nf5zObSOXu9JyIvkHYcMtQgezoCAF9uuqcfo8RKLqDFS2iz0W0E= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:00 2025 by rpki-client