$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: UOueyBlt/zjSyf1Nkv3h7IY0w54kkdJNBbytnDVj3QU= Subject key identifier: 48:E2:17:FA:1F:AF:C5:A1:CB:35:03:D3:EB:23:39:28:06:3E:28:F1 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 70265AE1B9017FBC9ACC9C41FC9059B58ACDEE4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 01F1 Signing time: Sat 19 Jul 2025 02:11:12 +0000 Manifest this update: Sat 19 Jul 2025 02:06:12 +0000 Manifest next update: Tue 22 Jul 2025 08:41:12 +0000 Files and hashes: 1: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) 2: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) 3: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: nNNBQdUFBK3yLYiSD7d6rYHenw2knbyWLvTh6iNiQRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:26:5a:e1:b9:01:7f:bc:9a:cc:9c:41:fc:90:59:b5:8a:cd:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Jul 19 02:06:12 2025 GMT Not After : Jul 22 08:41:12 2025 GMT Subject: CN=48E217FA1FAFC5A1CB3503D3EB233928063E28F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:05:70:3a:d1:c1:f2:53:a5:03:f9:f6:95: d5:2d:12:9e:ee:c0:5f:19:52:50:6a:92:70:ab:dc: 4f:2e:d9:05:7a:e8:e5:5b:2a:4c:10:3e:dc:e1:62: 8d:00:e7:5d:3e:fd:8a:3a:69:a6:4d:81:80:34:ff: ab:b6:e1:3f:50:d7:a7:a5:6b:cd:1b:23:b2:7e:c3: ce:1e:f7:ae:ad:ab:7d:08:27:fb:08:8a:ef:1f:90: 71:e4:65:f3:56:c0:73:1b:cc:07:d8:a7:a9:0c:ce: 6b:ef:95:c4:87:6b:f5:71:2d:bc:3f:82:1b:c6:9f: 84:62:26:82:e6:20:e7:49:36:71:40:8a:81:aa:91: ae:ed:af:c3:18:fc:4c:98:ab:94:5b:ff:46:94:b1: ce:09:40:8b:ea:93:f5:5e:4a:b9:b1:ca:29:78:aa: 4f:28:e9:01:b6:ec:6f:7e:00:ff:47:85:a1:88:c3: a9:bb:3e:42:45:97:15:a8:2b:e2:a5:b5:7e:48:27: 42:32:03:e2:e7:ac:83:b6:1a:5e:15:c1:ba:1f:63: e8:0a:09:94:83:36:c2:3c:f0:c8:ff:b6:88:40:80: f0:a4:18:d1:c8:d5:60:1e:93:01:e6:c3:3e:2a:f1: 10:63:77:cf:5d:e6:12:4a:96:49:36:f4:cd:06:a5: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E2:17:FA:1F:AF:C5:A1:CB:35:03:D3:EB:23:39:28:06:3E:28:F1 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ac:06:43:4c:d4:be:4b:ca:7b:fb:fd:c6:2e:5b:bc:db:d7: 0e:2d:6d:96:94:b2:de:09:2f:7f:e3:bf:ab:16:03:09:89:33: 7d:4c:14:6d:69:6d:16:c5:12:52:0a:50:12:97:e2:45:08:64: ff:df:b6:76:f5:55:3f:15:7d:98:fe:b5:54:d9:07:af:2b:ed: 31:2f:3b:5c:7b:28:80:dc:da:e2:c9:d8:b3:f2:cf:f5:51:86: b6:bb:6d:26:35:7e:a4:d9:7a:3b:5c:7e:6f:4f:c9:85:3f:cd: fa:a7:d4:08:5d:67:fc:2b:2a:d2:14:f5:49:f0:c2:a4:fe:4b: fe:ec:cf:13:be:78:57:b6:aa:16:23:ef:b2:ff:35:58:81:08: 86:40:8a:8d:30:ea:f2:e8:b4:3a:3e:0a:5c:73:32:89:c5:fa: 89:71:e4:a8:bc:86:45:43:b6:43:1d:99:48:46:49:c2:d5:53: b6:c0:58:13:f6:16:6e:20:00:b8:c4:14:87:44:fd:06:c2:30: a5:de:03:c6:19:2e:a7:e3:59:7e:8e:7b:07:dd:24:fb:56:e1: b9:b1:f9:aa:93:d2:72:ce:27:27:4c:79:81:f2:cc:4c:04:58: af:fc:9a:ff:a8:48:26:12:c3:20:52:dc:a4:c1:d0:d6:f7:e6: c0:76:8a:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCZa4bkBf7yazJxB/JBZtYrN7k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNTA3MTkwMjA2MTJaFw0yNTA3MjIwODQxMTJaMDMxMTAvBgNV BAMTKDQ4RTIxN0ZBMUZBRkM1QTFDQjM1MDNEM0VCMjMzOTI4MDYzRTI4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhQVwOtHB8lOlA/n2ldUtEp7u wF8ZUlBqknCr3E8u2QV66OVbKkwQPtzhYo0A510+/Yo6aaZNgYA0/6u24T9Q16el a80bI7J+w84e966tq30IJ/sIiu8fkHHkZfNWwHMbzAfYp6kMzmvvlcSHa/VxLbw/ ghvGn4RiJoLmIOdJNnFAioGqka7tr8MY/EyYq5Rb/0aUsc4JQIvqk/VeSrmxyil4 qk8o6QG27G9+AP9HhaGIw6m7PkJFlxWoK+KltX5IJ0IyA+LnrIO2Gl4VwbofY+gK CZSDNsI88Mj/tohAgPCkGNHI1WAekwHmwz4q8RBjd89d5hJKlkk29M0GpVabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOIX+h+vxaHLNQPT6yM5KAY+KPEwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSsBkNM1L5Lynv7/cYuW7zb1w4tbZaUst4J L3/jv6sWAwmJM31MFG1pbRbFElIKUBKX4kUIZP/ftnb1VT8VfZj+tVTZB68r7TEv O1x7KIDc2uLJ2LPyz/VRhra7bSY1fqTZejtcfm9PyYU/zfqn1AhdZ/wrKtIU9Unw wqT+S/7szxO+eFe2qhYj77L/NViBCIZAio0w6vLotDo+ClxzMonF+olx5Ki8hkVD tkMdmUhGScLVU7bAWBP2Fm4gALjEFIdE/QbCMKXeA8YZLqfjWX6OewfdJPtW4bmx +aqT0nLOJydMeYHyzEwEWK/8mv+oSCYSwyBS3KTB0Nb35sB2igQ= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:23 2025 by rpki-client