$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: 6rqcbh6idqwGYF4maSptHxU8mJ8VjSvKDUmg3kiBCkI= Subject key identifier: 37:C3:07:E6:3D:35:0E:A8:D0:C8:2D:90:0F:F6:9E:58:5B:C9:15:52 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 266E9F1191DFF34BCCB4B1C1E875EBC20863A3D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 01CA Signing time: Sun 20 Jul 2025 14:21:21 +0000 Manifest this update: Sun 20 Jul 2025 14:16:21 +0000 Manifest next update: Thu 24 Jul 2025 01:16:21 +0000 Files and hashes: 1: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) 2: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: F9teUtL/uYtpEJMCoN00LodxRAYOwSRBmh7dQgTvf8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6e:9f:11:91:df:f3:4b:cc:b4:b1:c1:e8:75:eb:c2:08:63:a3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Jul 20 14:16:21 2025 GMT Not After : Jul 24 01:16:21 2025 GMT Subject: CN=37C307E63D350EA8D0C82D900FF69E585BC91552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:8c:85:b8:4c:83:4a:d3:ff:41:22:62:fb: 93:53:ef:6f:a7:df:62:0f:56:68:a6:e4:f2:18:82: d2:7a:2a:32:b1:32:c4:b9:05:9f:f2:d3:ea:49:55: 5b:61:1d:1e:a2:57:f3:9d:d3:7e:7c:af:0d:5b:d3: 87:b0:ee:47:a4:3b:ff:e3:10:f6:dc:41:5c:6b:2a: d7:ad:ba:86:ec:cf:d1:fb:2d:ee:6c:ac:8a:ce:04: 48:97:e5:e1:5d:09:6e:8e:48:4c:c5:36:11:3d:33: e5:8a:8b:5c:06:9f:b5:51:34:49:1e:5f:28:d8:07: e7:81:a7:ac:07:b4:7e:fd:90:f0:65:a9:f8:43:ca: 33:51:e9:60:3a:87:da:3e:d0:58:51:f8:14:07:6d: 95:76:9f:07:9f:16:0b:ce:89:2c:3d:27:8a:7e:0b: e3:81:d2:12:eb:ac:33:91:d7:b0:73:1c:c2:67:fc: 53:63:4b:4c:ac:eb:3d:36:38:5f:c8:26:83:74:b6: d8:50:2f:67:ca:b2:90:65:1b:7c:a9:1f:95:76:0d: d0:e5:59:f6:36:c5:2c:75:ce:e0:cd:9e:4c:45:9c: fb:9b:54:53:0d:be:00:4c:f9:85:d1:e6:bf:93:5e: eb:25:5d:0f:f6:48:78:1a:b5:ab:c0:66:d6:8e:cd: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:07:E6:3D:35:0E:A8:D0:C8:2D:90:0F:F6:9E:58:5B:C9:15:52 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:66:a3:c8:9c:fd:c5:ee:8e:52:d2:4d:8c:44:05:81:cf:1e: ee:cd:52:d8:d9:14:6a:0e:a5:04:72:d6:51:e2:56:4d:59:19: e2:4f:91:e5:52:54:ff:76:2a:eb:8c:3c:f6:af:f8:90:0a:b5: 97:5b:6d:bf:79:3d:35:5c:d8:cd:b6:95:c8:39:bd:60:44:de: 9d:e4:0f:7d:89:fd:f2:59:ec:bc:a6:0f:d4:72:3e:87:1c:34: be:55:17:51:e2:10:b4:65:d1:22:5b:75:18:ad:38:66:ee:a7: 15:09:c0:cd:ee:5d:f9:fc:14:1f:a9:51:29:f5:e4:fd:15:1f: 52:79:49:c9:5e:31:51:16:be:72:b1:c9:1c:6a:c6:45:0b:1d: c7:c0:02:79:95:2e:b6:83:f6:11:31:9d:84:9a:43:42:2a:f4: 2f:4a:7d:86:e3:90:4c:c6:c6:1c:95:fd:5d:25:7e:52:cd:11: 17:72:fe:c9:6e:ca:cb:f5:a4:9c:46:00:29:78:75:19:02:b0: 3f:29:a4:da:a7:86:9a:55:5d:e0:f2:bc:1b:21:f7:87:d6:04: 0e:dd:d9:0e:b6:8c:5f:6a:a1:98:06:86:51:ad:ae:5f:12:c0: d7:81:75:79:76:45:d7:2f:cf:27:50:b7:61:fe:c0:ad:f0:d1: e4:33:58:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJm6fEZHf80vMtLHB6HXrwghjo9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNTA3MjAxNDE2MjFaFw0yNTA3MjQwMTE2MjFaMDMxMTAvBgNV BAMTKDM3QzMwN0U2M0QzNTBFQThEMEM4MkQ5MDBGRjY5RTU4NUJDOTE1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyoyFuEyDStP/QSJi+5NT72+n 32IPVmim5PIYgtJ6KjKxMsS5BZ/y0+pJVVthHR6iV/Od0358rw1b04ew7kekO//j EPbcQVxrKtetuobsz9H7Le5srIrOBEiX5eFdCW6OSEzFNhE9M+WKi1wGn7VRNEke XyjYB+eBp6wHtH79kPBlqfhDyjNR6WA6h9o+0FhR+BQHbZV2nwefFgvOiSw9J4p+ C+OB0hLrrDOR17BzHMJn/FNjS0ys6z02OF/IJoN0tthQL2fKspBlG3ypH5V2DdDl WfY2xSx1zuDNnkxFnPubVFMNvgBM+YXR5r+TXuslXQ/2SHgatavAZtaOzbU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8MH5j01DqjQyC2QD/aeWFvJFVIwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJmo8ic/cXujlLSTYxEBYHPHu7NUtjZFGoO pQRy1lHiVk1ZGeJPkeVSVP92KuuMPPav+JAKtZdbbb95PTVc2M22lcg5vWBE3p3k D32J/fJZ7LymD9RyPoccNL5VF1HiELRl0SJbdRitOGbupxUJwM3uXfn8FB+pUSn1 5P0VH1J5ScleMVEWvnKxyRxqxkULHcfAAnmVLraD9hExnYSaQ0Iq9C9KfYbjkEzG xhyV/V0lflLNERdy/sluysv1pJxGACl4dRkCsD8ppNqnhppVXeDyvBsh94fWBA7d 2Q62jF9qoZgGhlGtrl8SwNeBdXl2RdcvzydQt2H+wK3w0eQzWFY= -----END CERTIFICATE-----Generated at Tue Jul 22 06:23:01 2025 by rpki-client