$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: 0GK65IFaxO6F5hSY6gXoqNn8vTgYFwDE2fhIwGT+7jE= Subject key identifier: 61:6D:97:8E:46:AD:FF:BD:74:16:23:4C:30:76:00:6F:14:D5:F1:83 Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 4FA0B8CC0E949195E5C96FAFF91DC379C999A866 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 0321 Signing time: Sun 29 Jun 2025 09:10:36 +0000 Manifest this update: Sun 29 Jun 2025 09:05:36 +0000 Manifest next update: Wed 02 Jul 2025 09:10:36 +0000 Files and hashes: 1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=) 2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: by07ad615l2dH+yDJqu+rGTjehIqte9UpIX/VKzh7v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a0:b8:cc:0e:94:91:95:e5:c9:6f:af:f9:1d:c3:79:c9:99:a8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Jun 29 09:05:36 2025 GMT Not After : Jul 2 09:10:36 2025 GMT Subject: CN=616D978E46ADFFBD7416234C3076006F14D5F183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:f2:85:4e:d6:c5:bb:a2:52:af:a1:23:4f: 20:66:a7:66:fd:94:df:94:e3:df:91:16:8f:09:55: da:2f:e2:69:f5:b1:93:34:9a:18:02:45:d0:e1:7c: 1f:5a:c0:a6:67:16:59:b3:35:18:03:68:84:01:fe: 8c:50:0b:20:e7:2f:14:6e:c4:8a:79:e7:3b:2b:c6: 8e:6a:d6:79:ca:47:ac:10:40:d5:bf:3e:d5:20:49: 24:63:ad:2b:65:be:cd:78:99:02:7f:b1:b7:eb:5f: 7f:1b:29:b3:43:98:64:c3:4c:7b:5f:67:73:1c:b5: e3:c1:b6:e8:95:58:78:9b:d4:25:b3:de:29:c3:89: 14:04:49:a0:59:4d:3b:db:b5:ef:18:b9:36:85:a4: cd:6e:dd:eb:25:7d:ba:d5:40:4a:6c:ac:1b:ac:c0: 1f:97:22:16:ce:0d:79:11:00:29:87:23:e4:5e:0d: 53:55:2f:89:3b:6b:9b:4d:85:1a:5b:41:2d:3b:ab: 28:b3:ae:06:0b:a0:ec:02:04:d7:4a:d5:7b:dc:7c: 72:ec:2b:27:b8:35:81:62:6c:4b:84:1f:23:a1:1b: fe:be:06:13:6e:68:08:e0:6a:13:e6:69:be:1f:e2: 79:f9:ac:d6:6f:00:ec:d2:54:d1:f4:39:05:ca:d4: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6D:97:8E:46:AD:FF:BD:74:16:23:4C:30:76:00:6F:14:D5:F1:83 X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ca:3a:d9:9c:e2:88:da:b7:7c:89:c1:54:b1:6e:a9:f4:80: aa:8e:99:08:53:df:f8:c4:ed:d7:04:30:0a:c9:99:a4:63:3b: 28:2f:a8:03:2e:40:6d:0a:fb:19:a5:5c:32:ae:9e:d6:57:86: 46:28:dc:53:93:ab:e1:61:43:26:a3:d7:9f:f8:45:83:e9:c3: ed:b1:03:cc:d8:06:57:33:e9:06:78:9a:ea:fe:07:8a:73:f1: 70:50:41:3f:33:43:df:a3:da:56:ad:6d:a2:29:1b:db:d8:53: ec:d2:a4:26:a0:7f:c5:23:8a:7d:ff:1b:8f:01:be:71:0e:b9: a9:71:63:53:be:be:34:53:64:88:ea:be:3d:a8:80:c1:e2:26: 22:e3:89:08:de:5f:ba:48:f3:f8:52:d7:76:5b:02:e6:fc:de: cf:94:fc:58:0a:59:76:08:40:7e:2b:db:b4:78:f2:16:5b:a0: 14:b5:8d:c2:4b:e0:ad:6d:c3:9e:9b:85:fc:73:d8:a6:c7:51: 89:43:90:3a:46:29:0c:8b:43:53:39:e7:ac:2d:ec:e1:97:7e: d3:0f:e1:b3:9e:7e:63:92:da:2d:6b:ab:37:42:5f:ba:72:41: 75:0b:8e:62:66:62:cb:da:5e:61:45:30:a7:d5:6f:65:25:7f: ff:b0:88:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6C4zA6UkZXlyW+v+R3DecmZqGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTA2MjkwOTA1MzZaFw0yNTA3MDIwOTEwMzZaMDMxMTAvBgNV BAMTKDYxNkQ5NzhFNDZBREZGQkQ3NDE2MjM0QzMwNzYwMDZGMTRENUYxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMfKFTtbFu6JSr6EjTyBmp2b9 lN+U49+RFo8JVdov4mn1sZM0mhgCRdDhfB9awKZnFlmzNRgDaIQB/oxQCyDnLxRu xIp55zsrxo5q1nnKR6wQQNW/PtUgSSRjrStlvs14mQJ/sbfrX38bKbNDmGTDTHtf Z3MctePBtuiVWHib1CWz3inDiRQESaBZTTvbte8YuTaFpM1u3eslfbrVQEpsrBus wB+XIhbODXkRACmHI+ReDVNVL4k7a5tNhRpbQS07qyizrgYLoOwCBNdK1XvcfHLs Kye4NYFibEuEHyOhG/6+BhNuaAjgahPmab4f4nn5rNZvAOzSVNH0OQXK1B9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYW2Xjkat/710FiNMMHYAbxTV8YMwHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDKOtmc4ojat3yJwVSxbqn0gKqOmQhT3/jE 7dcEMArJmaRjOygvqAMuQG0K+xmlXDKuntZXhkYo3FOTq+FhQyaj15/4RYPpw+2x A8zYBlcz6QZ4mur+B4pz8XBQQT8zQ9+j2latbaIpG9vYU+zSpCagf8Ujin3/G48B vnEOualxY1O+vjRTZIjqvj2ogMHiJiLjiQjeX7pI8/hS13ZbAub83s+U/FgKWXYI QH4r27R48hZboBS1jcJL4K1tw56bhfxz2KbHUYlDkDpGKQyLQ1M556wt7OGXftMP 4bOefmOS2i1rqzdCX7pyQXULjmJmYsvaXmFFMKfVb2Ulf/+wiEc= -----END CERTIFICATE-----Generated at Mon Jun 30 18:54:10 2025 by rpki-client