$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: cun199SaS/w0qpOLcq9F1hO3e9q79mxXaqW1UECEmtw= Subject key identifier: B3:EA:6B:7D:B7:99:26:D4:B5:D5:0C:D7:F8:D4:51:7C:8B:A6:0D:8A Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 30BBE478BB37320DBD51E9185ADE5B7BDAE48717 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: 0102 Signing time: Fri 22 Aug 2025 22:00:52 +0000 Manifest this update: Fri 22 Aug 2025 21:55:52 +0000 Manifest next update: Tue 26 Aug 2025 03:27:52 +0000 Files and hashes: 1: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) 3: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) 4: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: udZ/OzNz5KIMY5enxunTa/bWGy7xCawkYiFd+mRxd4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bb:e4:78:bb:37:32:0d:bd:51:e9:18:5a:de:5b:7b:da:e4:87:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Aug 22 21:55:52 2025 GMT Not After : Aug 26 03:27:52 2025 GMT Subject: CN=B3EA6B7DB79926D4B5D50CD7F8D4517C8BA60D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a7:11:53:b2:37:94:d2:82:17:ef:f5:7f:da: 00:fe:1a:34:a9:74:cc:6c:c3:22:f7:4b:54:ad:70: cc:9f:45:75:25:8b:78:4f:44:f9:d2:9f:4d:a0:25: c9:69:9e:82:2c:4b:e8:f2:a0:65:ff:14:d3:2a:85: a6:e0:9a:79:d5:ac:c5:cd:05:57:ca:d9:f1:e9:59: 34:e8:7c:25:66:6e:de:84:5e:1b:c3:53:f2:1a:22: 8a:24:2a:9f:4e:9c:28:02:3a:ad:6f:54:fc:0c:87: 1a:f4:b8:36:9c:40:41:38:34:58:38:a3:ab:88:40: 32:17:6b:68:c2:84:28:0c:dd:2b:e0:f2:9d:76:b2: 0c:e4:30:cf:fd:59:36:55:c9:19:d9:2a:89:ca:2f: 56:30:e0:e7:7d:a4:c4:be:2b:f6:d0:b9:d3:64:46: 74:0f:b6:82:07:12:04:20:6f:ca:c1:ee:21:0c:ad: e0:f9:c4:13:31:fc:3a:f0:f5:2f:00:11:17:c1:30: 04:41:6c:21:15:34:48:87:71:aa:d2:14:20:e5:69: 28:2f:b2:d9:07:af:73:b6:2a:9f:d8:be:7a:ec:d5: d4:26:e0:d9:f3:5e:7a:25:bb:46:1e:29:27:17:f4: be:bc:06:42:46:29:7c:76:a8:5b:a2:96:94:9b:6b: 03:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:6B:7D:B7:99:26:D4:B5:D5:0C:D7:F8:D4:51:7C:8B:A6:0D:8A X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e3:62:0f:93:57:ac:a1:d5:55:78:09:af:da:15:95:90:e8: da:00:55:3b:0d:56:b3:b8:37:1b:10:71:bb:26:5c:21:64:b8: cb:40:1b:71:d5:41:4f:d8:67:d1:02:34:81:cc:f6:82:3f:19: ed:f9:14:72:51:ef:f8:f1:07:a4:f5:b5:89:d7:45:73:a9:aa: d2:ed:bd:b9:16:fb:e2:07:84:57:c5:65:42:bc:2a:c8:6c:46: 30:6d:f3:2f:13:4d:b3:32:c9:86:64:c2:e7:c5:55:ed:14:90: 18:de:14:ff:3a:3d:35:a7:93:3d:74:9c:96:ae:75:06:cb:a0: 7e:c6:c8:81:0a:e0:e3:8f:58:46:06:dd:0c:75:8e:c0:cc:c0: 26:9e:f8:cd:fb:2c:5b:b2:41:b0:59:ee:da:ec:87:af:08:f0: 3a:c5:03:ef:17:8f:1b:6b:c0:52:49:10:5f:40:2c:61:92:74: 9e:fb:8b:ff:9a:22:65:93:dc:ce:f6:35:e7:c7:6e:3b:e4:c0: 0d:77:4f:0c:f8:65:62:bd:0f:a6:05:45:eb:9a:21:3e:fa:db: e8:90:ba:64:32:a7:7f:22:64:a0:ac:20:33:b2:ea:fd:7c:f1: a4:a3:07:08:84:da:d0:e6:8c:01:97:f6:12:05:23:20:0e:c3: a6:ac:93:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLvkeLs3Mg29UekYWt5be9rkhxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTA4MjIyMTU1NTJaFw0yNTA4MjYwMzI3NTJaMDMxMTAvBgNV BAMTKEIzRUE2QjdEQjc5OTI2RDRCNUQ1MENEN0Y4RDQ1MTdDOEJBNjBEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmpxFTsjeU0oIX7/V/2gD+GjSp dMxswyL3S1StcMyfRXUli3hPRPnSn02gJclpnoIsS+jyoGX/FNMqhabgmnnVrMXN BVfK2fHpWTTofCVmbt6EXhvDU/IaIookKp9OnCgCOq1vVPwMhxr0uDacQEE4NFg4 o6uIQDIXa2jChCgM3Svg8p12sgzkMM/9WTZVyRnZKonKL1Yw4Od9pMS+K/bQudNk RnQPtoIHEgQgb8rB7iEMreD5xBMx/Drw9S8AERfBMARBbCEVNEiHcarSFCDlaSgv stkHr3O2Kp/Yvnrs1dQm4NnzXnolu0YeKScX9L68BkJGKXx2qFuilpSbawPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+prfbeZJtS11QzX+NRRfIumDYowHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjjYg+TV6yh1VV4Ca/aFZWQ6NoAVTsNVrO4 NxsQcbsmXCFkuMtAG3HVQU/YZ9ECNIHM9oI/Ge35FHJR7/jxB6T1tYnXRXOpqtLt vbkW++IHhFfFZUK8KshsRjBt8y8TTbMyyYZkwufFVe0UkBjeFP86PTWnkz10nJau dQbLoH7GyIEK4OOPWEYG3Qx1jsDMwCae+M37LFuyQbBZ7trsh68I8DrFA+8Xjxtr wFJJEF9ALGGSdJ77i/+aImWT3M72NefHbjvkwA13Twz4ZWK9D6YFReuaIT762+iQ umQyp38iZKCsIDOy6v188aSjBwiE2tDmjAGX9hIFIyAOw6askwM= -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:50 2025 by rpki-client