$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: +aKL+9GVDGG8O0dBDFfnZ21YbOFi3NdF7FGjcxFtvQ0= Subject key identifier: 3E:3B:31:2A:E3:20:E9:4C:0D:81:37:F6:92:16:74:83:21:A7:EF:91 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 3309A9C4E41A62F6394A11770B348E2573AF6BC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 01FA Signing time: Thu 21 Aug 2025 06:51:13 +0000 Manifest this update: Thu 21 Aug 2025 06:46:13 +0000 Manifest next update: Sun 24 Aug 2025 13:25:13 +0000 Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: 6chJkq7PgYONu1+iVuiPbG2q8gMUBzhvb/uSNn4g1DA=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:09:a9:c4:e4:1a:62:f6:39:4a:11:77:0b:34:8e:25:73:af:6b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Aug 21 06:46:13 2025 GMT Not After : Aug 24 13:25:13 2025 GMT Subject: CN=3E3B312AE320E94C0D8137F69216748321A7EF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:d3:67:49:f7:c5:93:f1:57:60:99:46:83: 42:d0:05:e1:5b:e6:26:9d:31:75:10:70:1c:e5:fb: 85:ab:fe:34:9b:d3:cb:e8:9b:1e:4c:63:0b:cc:f3: 58:33:e5:85:82:5b:4e:34:1b:ef:98:75:e5:04:2e: d7:44:5c:3f:86:82:dc:6d:99:eb:c9:63:8a:59:2d: e0:d8:f5:74:c6:22:d4:a1:67:76:0f:47:e4:be:b5: 97:98:00:9a:4f:d1:41:96:53:ed:41:18:86:89:45: dc:ee:e0:2e:25:d7:60:ae:bc:4d:9e:55:67:f1:16: 4b:2b:8c:b7:43:a5:45:ed:d9:f2:fc:3f:49:cc:11: bb:1b:fc:67:c7:f5:08:5d:d8:c9:81:34:c0:55:cf: 84:29:fc:6f:36:c7:08:a3:d8:44:0a:ec:a8:db:6e: bf:98:29:38:2d:9d:90:55:8c:e6:9d:e9:6b:69:aa: 74:6e:ad:37:da:41:64:4d:88:7d:b9:26:98:2f:63: e0:b3:36:76:ad:1b:fb:a2:4d:0f:97:9a:08:b0:26: 5a:78:a2:cf:29:b4:df:0d:f5:40:5a:c1:27:b0:2f: d9:71:da:4e:c8:79:10:e5:68:8c:52:f7:db:91:90: 3b:2e:68:b9:1a:a7:a1:d7:aa:86:8d:7f:a9:38:97: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:31:2A:E3:20:E9:4C:0D:81:37:F6:92:16:74:83:21:A7:EF:91 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c1:2d:22:fe:de:ba:d4:c6:7f:fa:eb:66:af:7f:25:21:cd: 7b:67:e3:0b:1d:00:89:27:75:ba:ab:9a:0e:6b:7b:bf:57:a9: a2:25:9c:9e:16:fc:ae:11:1a:dc:a2:2e:e2:c3:39:56:89:f9: 08:31:d7:09:91:98:15:87:63:ab:7f:be:eb:fb:68:fc:72:ea: ca:af:9b:f4:0f:f6:67:db:bf:f5:0e:76:54:93:73:d3:d5:74: 6f:fc:8c:d3:50:81:7b:31:de:26:21:79:28:d2:ad:fc:36:67: d1:5e:68:f9:f6:57:fd:03:51:15:19:2c:ef:3c:c6:50:df:80: 1c:59:32:fd:e7:8e:41:90:fb:c2:db:0f:bc:3d:a1:a4:05:ff: b8:b3:00:cb:af:ca:c1:b8:be:ad:ee:e8:a9:19:94:9b:b3:2f: 63:7b:43:86:af:57:c0:0d:24:48:1a:0f:91:c2:37:d5:a7:45: b4:a9:5a:e3:23:e8:d2:b6:33:8f:11:b4:2b:bc:44:4a:00:04: 9a:6f:7a:da:eb:19:78:3b:81:ae:6f:f0:5f:2f:ce:37:df:53: 98:6b:06:38:69:86:45:df:e0:75:38:c5:ef:78:a5:01:92:86: cf:33:ee:60:ff:f7:71:47:41:ab:ea:62:c5:f1:13:b0:1a:55: 84:a4:a0:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwmpxOQaYvY5ShF3CzSOJXOva8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTA4MjEwNjQ2MTNaFw0yNTA4MjQxMzI1MTNaMDMxMTAvBgNV BAMTKDNFM0IzMTJBRTMyMEU5NEMwRDgxMzdGNjkyMTY3NDgzMjFBN0VGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0tNnSffFk/FXYJlGg0LQBeFb 5iadMXUQcBzl+4Wr/jSb08vomx5MYwvM81gz5YWCW040G++YdeUELtdEXD+Ggtxt mevJY4pZLeDY9XTGItShZ3YPR+S+tZeYAJpP0UGWU+1BGIaJRdzu4C4l12CuvE2e VWfxFksrjLdDpUXt2fL8P0nMEbsb/GfH9Qhd2MmBNMBVz4Qp/G82xwij2EQK7Kjb br+YKTgtnZBVjOad6WtpqnRurTfaQWRNiH25JpgvY+CzNnatG/uiTQ+XmgiwJlp4 os8ptN8N9UBawSewL9lx2k7IeRDlaIxS99uRkDsuaLkap6HXqoaNf6k4l4snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjsxKuMg6UwNgTf2khZ0gyGn75EwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnBLSL+3rrUxn/662avfyUhzXtn4wsdAIkn dbqrmg5re79XqaIlnJ4W/K4RGtyiLuLDOVaJ+Qgx1wmRmBWHY6t/vuv7aPxy6sqv m/QP9mfbv/UOdlSTc9PVdG/8jNNQgXsx3iYheSjSrfw2Z9FeaPn2V/0DURUZLO88 xlDfgBxZMv3njkGQ+8LbD7w9oaQF/7izAMuvysG4vq3u6KkZlJuzL2N7Q4avV8AN JEgaD5HCN9WnRbSpWuMj6NK2M48RtCu8REoABJpvetrrGXg7ga5v8F8vzjffU5hr BjhphkXf4HU4xe94pQGShs8z7mD/93FHQavqYsXxE7AaVYSkoIo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:26 2025 by rpki-client