$ rpki-client -vvf repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft File: 782659A7F6433029248A38A1C68F2E9971161391.mft (raw, json) Hash identifier: YmNf5z8qhh4vcs1YycwqsYOMvzrlHhji10s6P/Xf9PE= Subject key identifier: 32:33:CF:EA:6C:EB:09:56:2D:FA:83:3A:22:F0:3D:B2:5D:D0:A4:62 Authority key identifier: 78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91 Certificate issuer: /CN=782659A7F6433029248A38A1C68F2E9971161391 Certificate serial: 5DD9B1F78977CF592469C91061FDD3427E80D673 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer Subject info access: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft Manifest number: 0109 Signing time: Sun 20 Jul 2025 15:10:54 +0000 Manifest this update: Sun 20 Jul 2025 15:05:54 +0000 Manifest next update: Wed 23 Jul 2025 21:22:54 +0000 Files and hashes: 1: 3130332e35352e3235322e302f32342d3234203d3e20313531353838.roa (hash: 40JRxNw6stZoA1fUKj/zKco7HRJV/HtMAMb74Ejikyo=) 2: 3130332e35352e3235332e302f32342d3234203d3e20313531353838.roa (hash: QzBzm2jTi52qCuHNFLxAMIYm8xcW8JwG11leVCtzjT8=) 3: 3130332e35352e3235322e302f32332d3233203d3e20313531353838.roa (hash: 4SzxYxsm34j+//J0Zj7fCtaaSGBPCJKKVqr4apFWEx0=) 4: 782659A7F6433029248A38A1C68F2E9971161391.crl (hash: SXcY+jQc/Cot4nWRsflNHH2DUh4Fgp0rMATWHCYCWxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d9:b1:f7:89:77:cf:59:24:69:c9:10:61:fd:d3:42:7e:80:d6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782659A7F6433029248A38A1C68F2E9971161391 Validity Not Before: Jul 20 15:05:54 2025 GMT Not After : Jul 23 21:22:54 2025 GMT Subject: CN=3233CFEA6CEB09562DFA833A22F03DB25DD0A462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:c3:a0:90:e8:53:93:ab:34:b2:cd:a8:95: c7:e7:6c:e6:a4:cb:28:da:48:73:13:02:56:9e:f3: 39:de:25:3b:c1:b4:ba:66:eb:f4:ae:bb:66:63:82: 25:8b:3d:27:83:90:68:d6:35:2f:b7:50:3f:04:ef: 0a:9e:dd:ca:c7:ab:55:8c:fe:0e:14:ea:1b:ce:80: b5:a4:10:a4:f2:e0:b3:cc:d6:d5:f6:3b:42:2c:0e: 57:f2:38:3a:bd:ba:fb:2f:d6:40:db:48:4d:a8:f4: 7d:07:cc:88:66:96:ae:78:bd:8b:cd:58:4d:be:e1: 73:14:68:02:16:0d:2b:fc:db:80:15:8d:90:d1:cd: 09:43:24:8d:0e:36:a3:60:35:70:18:f9:ad:41:00: 8b:43:90:cf:db:e1:38:80:cf:6c:d1:69:80:80:f8: 6b:18:1b:4c:48:f9:c8:3b:72:48:cc:41:9f:60:59: 03:08:50:ca:08:a4:44:ff:bf:f3:20:96:50:67:1f: a4:29:41:32:0e:91:27:53:b9:4a:a9:2f:c4:d7:8b: 11:cc:ff:3d:9b:ba:c0:64:77:cf:80:50:7a:1c:4d: 58:55:44:c3:67:8d:c0:cc:4b:57:02:fa:d1:5d:8e: 94:cc:b2:e4:b0:8f:b0:1c:0b:2e:56:51:38:7e:e1: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:CF:EA:6C:EB:09:56:2D:FA:83:3A:22:F0:3D:B2:5D:D0:A4:62 X509v3 Authority Key Identifier: keyid:78:26:59:A7:F6:43:30:29:24:8A:38:A1:C6:8F:2E:99:71:16:13:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782659A7F6433029248A38A1C68F2E9971161391.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/414e04fa-7188-4f4f-81bb-330389f87015/0/782659A7F6433029248A38A1C68F2E9971161391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:55:03:d5:55:11:8c:a7:ea:88:69:37:49:e4:7c:bb:1f:9d: 66:b0:fd:7a:7a:4a:8d:46:4f:4e:f3:85:48:e6:c1:0d:9d:81: e4:66:b5:22:7f:9c:6a:41:2d:1a:0e:93:e0:32:ed:12:43:bc: 08:05:81:68:19:65:e4:53:d9:62:9c:28:81:02:ec:03:83:bb: 96:3c:57:0e:22:98:be:ea:7f:29:a5:56:1d:13:e6:59:91:ba: 07:d0:09:40:bf:3a:74:3f:53:d0:ed:e4:04:15:0c:02:ef:b8: f3:8e:9f:31:4c:a2:33:52:37:87:2f:bc:82:dd:ef:e9:8d:5a: cb:69:11:88:4b:e9:9b:8b:e0:69:c9:17:c8:76:65:a7:0f:c6: 2b:22:0b:f8:0b:4b:f1:42:38:d2:5f:65:b8:05:f1:5c:86:6c: db:a9:68:90:6b:e6:9d:60:f7:ad:00:fd:21:90:f1:da:19:f3: 99:77:4b:d5:bb:5e:fa:7c:df:18:01:fa:94:49:f0:97:fa:c5: e5:1d:60:14:83:3e:7a:b1:94:de:56:3f:77:a6:25:68:6a:bb: 92:f9:60:31:b6:e7:21:d0:25:55:e2:7d:0f:ac:0f:27:34:5e: a0:07:20:53:39:7b:52:94:8b:a0:a9:21:b0:41:88:f1:a2:45: 6f:e7:4a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdmx94l3z1kkackQYf3TQn6A1nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3 MTE2MTM5MTAeFw0yNTA3MjAxNTA1NTRaFw0yNTA3MjMyMTIyNTRaMDMxMTAvBgNV BAMTKDMyMzNDRkVBNkNFQjA5NTYyREZBODMzQTIyRjAzREIyNUREMEE0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF8OgkOhTk6s0ss2olcfnbOak yyjaSHMTAlae8zneJTvBtLpm6/Suu2ZjgiWLPSeDkGjWNS+3UD8E7wqe3crHq1WM /g4U6hvOgLWkEKTy4LPM1tX2O0IsDlfyODq9uvsv1kDbSE2o9H0HzIhmlq54vYvN WE2+4XMUaAIWDSv824AVjZDRzQlDJI0ONqNgNXAY+a1BAItDkM/b4TiAz2zRaYCA +GsYG0xI+cg7ckjMQZ9gWQMIUMoIpET/v/MgllBnH6QpQTIOkSdTuUqpL8TXixHM /z2busBkd8+AUHocTVhVRMNnjcDMS1cC+tFdjpTMsuSwj7AcCy5WUTh+4QsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjPP6mzrCVYt+oM6IvA9sl3QpGIwHwYDVR0j BBgwFoAUeCZZp/ZDMCkkijihxo8umXEWE5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTRlMDRmYS03MTg4LTRmNGYtODFiYi0zMzAzODlmODcwMTUvMC83ODI2NTlBN0Y2 NDMzMDI5MjQ4QTM4QTFDNjhGMkU5OTcxMTYxMzkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJFOTk3MTE2 MTM5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0ZTA0ZmEtNzE4OC00ZjRmLTgx YmItMzMwMzg5Zjg3MDE1LzAvNzgyNjU5QTdGNjQzMzAyOTI0OEEzOEExQzY4RjJF OTk3MTE2MTM5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNVA9VVEYyn6ohpN0nkfLsfnWaw/Xp6So1G T07zhUjmwQ2dgeRmtSJ/nGpBLRoOk+Ay7RJDvAgFgWgZZeRT2WKcKIEC7AODu5Y8 Vw4imL7qfymlVh0T5lmRugfQCUC/OnQ/U9Dt5AQVDALvuPOOnzFMojNSN4cvvILd 7+mNWstpEYhL6ZuL4GnJF8h2ZacPxisiC/gLS/FCONJfZbgF8VyGbNupaJBr5p1g 960A/SGQ8doZ85l3S9W7Xvp83xgB+pRJ8Jf6xeUdYBSDPnqxlN5WP3emJWhqu5L5 YDG25yHQJVXifQ+sDyc0XqAHIFM5e1KUi6CpIbBBiPGiRW/nSmY= -----END CERTIFICATE-----Generated at Sun Jul 20 22:56:44 2025 by rpki-client