$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: V+TbLShnjCogKK2dj4GGeJ4d3I/J3fLPfQnvlxef058= Subject key identifier: 8E:B6:98:5D:06:B6:7E:A3:DE:D9:E4:A0:DD:57:D0:F8:24:18:09:9B Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 7FB38CFAA218C38A23D209D370E85DB12B0930DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 024B Signing time: Tue 22 Jul 2025 02:30:44 +0000 Manifest this update: Tue 22 Jul 2025 02:25:44 +0000 Manifest next update: Fri 25 Jul 2025 08:55:44 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=) 2: D1E28E396E82778793018513BD084854BE663886.crl (hash: asQorMeSQ+eu/kdT0QhuR23oxYFakKjSS9lrb1pASrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 08:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b3:8c:fa:a2:18:c3:8a:23:d2:09:d3:70:e8:5d:b1:2b:09:30:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Jul 22 02:25:44 2025 GMT Not After : Jul 25 08:55:44 2025 GMT Subject: CN=8EB6985D06B67EA3DED9E4A0DD57D0F82418099B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:b5:f2:02:49:55:f9:13:00:d5:ca:08:df: 96:06:d3:25:61:98:07:46:c8:33:8e:72:c7:f9:e5: 51:81:a7:73:ba:25:de:6a:7f:2d:28:f8:5f:bf:09: 52:7e:ec:2d:8d:f8:9d:38:97:1b:28:0f:a3:4e:3c: 6b:41:59:bf:af:78:59:0f:53:c4:0d:ec:43:9a:79: b7:52:4e:61:3d:25:72:d0:23:aa:14:a1:65:0f:1b: f5:48:77:fc:c2:f8:8e:6f:87:84:5d:c8:22:73:5e: fa:a8:5b:59:4f:c6:a0:b7:68:a5:ab:5a:d1:74:8b: eb:70:77:a6:98:ec:23:4c:f8:24:cf:52:17:ef:d5: 08:f2:15:ec:c4:37:da:b4:6d:3b:23:84:71:79:e5: 93:df:a9:c1:b9:7d:60:70:ec:7b:a1:65:de:10:a1: 47:4a:b4:a4:6d:d8:c5:b7:52:e3:20:97:33:aa:12: 79:7f:d1:71:98:f3:c2:f6:64:c3:cf:4a:aa:ee:1a: ca:6a:44:a6:61:31:80:6a:03:92:86:d9:b7:81:7b: d1:da:ed:d5:c4:52:04:c3:2a:f5:07:9a:5b:2e:23: f8:15:8a:8b:b5:38:11:e2:7d:eb:ff:03:66:2a:3b: e0:93:99:81:5f:5b:49:e6:38:d1:0f:87:04:a8:68: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:98:5D:06:B6:7E:A3:DE:D9:E4:A0:DD:57:D0:F8:24:18:09:9B X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0b:95:9a:9d:b5:5c:37:5b:fd:a1:aa:8a:93:cc:dd:1b:30: a9:df:a9:b2:ab:28:30:58:b2:f6:db:99:59:98:f9:ce:f2:af: 2c:db:a6:6e:7f:fe:b4:fe:cb:6f:84:39:1a:69:ef:e9:9d:2e: d9:63:dd:62:5b:86:20:dc:8b:a9:19:55:17:99:0c:14:a7:17: 10:a9:13:c5:3d:98:52:7f:d4:31:21:97:47:b0:b2:c5:0b:df: c2:7b:c7:69:4c:f2:68:5d:43:2d:9c:f1:85:83:2e:45:10:d2: 93:71:e1:be:78:c4:33:05:9f:22:98:f2:60:e1:4c:2b:17:8f: 54:e6:76:34:0d:f0:15:5d:2a:53:f0:c1:b4:62:03:79:bc:ab: 8c:a4:cb:1d:82:83:8e:a3:e2:52:42:a7:ef:85:be:c8:f4:e5: 66:52:0f:93:e5:f2:2f:91:22:e0:31:98:7d:b1:0a:70:77:f8: 8c:86:2c:6d:db:a1:4d:da:8f:b0:28:58:68:91:25:a4:03:fc: 77:3d:0d:10:85:50:dd:91:dd:34:e5:69:42:16:5c:05:a3:1e: 24:7b:1c:38:54:1f:40:66:93:b4:0f:99:a1:bc:8e:f4:4f:91: 19:75:cf:2d:24:2b:e1:ee:75:d9:bc:6d:b0:48:9d:95:53:a6: 74:61:87:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7OM+qIYw4oj0gnTcOhdsSsJMN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTA3MjIwMjI1NDRaFw0yNTA3MjUwODU1NDRaMDMxMTAvBgNV BAMTKDhFQjY5ODVEMDZCNjdFQTNERUQ5RTRBMERENTdEMEY4MjQxODA5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMrXyAklV+RMA1coI35YG0yVh mAdGyDOOcsf55VGBp3O6Jd5qfy0o+F+/CVJ+7C2N+J04lxsoD6NOPGtBWb+veFkP U8QN7EOaebdSTmE9JXLQI6oUoWUPG/VId/zC+I5vh4RdyCJzXvqoW1lPxqC3aKWr WtF0i+twd6aY7CNM+CTPUhfv1QjyFezEN9q0bTsjhHF55ZPfqcG5fWBw7HuhZd4Q oUdKtKRt2MW3UuMglzOqEnl/0XGY88L2ZMPPSqruGspqRKZhMYBqA5KG2beBe9Ha 7dXEUgTDKvUHmlsuI/gViou1OBHifev/A2YqO+CTmYFfW0nmONEPhwSoaGAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjraYXQa2fqPe2eSg3VfQ+CQYCZswHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFILlZqdtVw3W/2hqoqTzN0bMKnfqbKrKDBY svbbmVmY+c7yryzbpm5//rT+y2+EORpp7+mdLtlj3WJbhiDci6kZVReZDBSnFxCp E8U9mFJ/1DEhl0ewssUL38J7x2lM8mhdQy2c8YWDLkUQ0pNx4b54xDMFnyKY8mDh TCsXj1TmdjQN8BVdKlPwwbRiA3m8q4ykyx2Cg46j4lJCp++Fvsj05WZSD5Pl8i+R IuAxmH2xCnB3+IyGLG3boU3aj7AoWGiRJaQD/Hc9DRCFUN2R3TTlaUIWXAWjHiR7 HDhUH0Bmk7QPmaG8jvRPkRl1zy0kK+Huddm8bbBInZVTpnRhh0c= -----END CERTIFICATE-----Generated at Thu Jul 24 04:58:01 2025 by rpki-client