$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: 5IoymqXSju1bzWgp2AmmBEVJGxGnlp1EOUY7OGobLfk= Subject key identifier: 73:BC:2C:C3:A8:55:EC:BE:4A:12:8E:58:31:7B:4E:FC:8B:41:87:29 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 68BB4711960D9C2591A88651E367B38406E74A57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01B9 Signing time: Sat 19 Jul 2025 16:50:56 +0000 Manifest this update: Sat 19 Jul 2025 16:45:55 +0000 Manifest next update: Tue 22 Jul 2025 23:23:55 +0000 Files and hashes: 1: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: qNR+qf0p8FVXjqd/f4WNWCKzLq04/1UiJn+cP2gJACg=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: G08Zsb0m7nLFy8P1hWnzM0k+V4xtFf95Ynj7WmJyU4w=) 3: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bb:47:11:96:0d:9c:25:91:a8:86:51:e3:67:b3:84:06:e7:4a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Jul 19 16:45:55 2025 GMT Not After : Jul 22 23:23:55 2025 GMT Subject: CN=73BC2CC3A855ECBE4A128E58317B4EFC8B418729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:d5:6d:2b:9e:fa:be:fd:5c:55:c7:28:e1: 7f:f7:f9:46:16:0f:77:ef:cd:26:da:e4:d6:a9:86: e3:ba:0d:83:c7:ec:82:93:ab:85:34:6e:a3:d0:ea: af:ed:1d:fd:e7:f4:08:06:83:cd:8e:47:b1:e8:d1: 1c:5e:75:55:df:f6:cd:96:ba:a6:89:4a:32:0f:b5: 19:8c:78:ff:2d:2b:18:d8:ac:3f:12:6d:81:8c:a2: ce:af:80:da:e6:d0:a2:36:e1:09:95:40:36:af:9a: 02:d4:5b:4a:d5:39:13:eb:88:41:6f:0e:e1:b7:35: 12:45:3c:06:2e:1d:a7:cc:e1:0f:3e:76:14:87:21: 63:3c:3f:0e:bb:31:d8:6a:3e:77:a9:3d:a1:e2:4e: 5b:ea:33:c8:1b:25:cf:4c:be:a4:ed:df:b0:a1:d0: 90:9a:88:15:52:a8:1b:2d:47:ea:36:57:60:4a:b6: 7d:d6:66:bc:6b:fc:13:11:ee:3f:dc:ce:61:e4:96: a3:90:b8:eb:8d:47:90:ed:66:ed:66:41:d1:86:8e: 4c:9c:b1:32:f3:8e:1e:6e:04:6c:56:81:e9:68:8b: eb:e4:7a:50:66:65:a5:ee:76:02:8d:b1:04:69:bd: fe:af:a3:d9:c7:e5:58:ef:b8:04:bb:a1:13:15:9c: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BC:2C:C3:A8:55:EC:BE:4A:12:8E:58:31:7B:4E:FC:8B:41:87:29 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:49:7b:7c:2d:7f:3b:e5:de:c1:7b:8b:49:4d:c2:54:bd:d4: be:4a:dc:08:33:16:8d:17:ad:a6:ca:38:a5:ba:4a:51:46:56: b3:ba:c4:9e:8e:be:5e:ff:c9:02:3c:33:fa:ba:26:ff:c2:bd: 92:be:a9:c5:d3:11:ca:d7:86:a0:91:86:77:8a:96:d2:35:12: d0:a0:11:f2:ff:74:fd:ee:0f:f2:e2:f0:13:a1:eb:86:a5:6c: 20:c0:b6:4c:c1:b8:e7:ed:7d:a0:07:da:ad:d1:4f:67:e6:54: 34:d6:d4:6e:8e:a5:51:ae:1f:e1:20:92:32:dd:d8:3c:2b:b5: 9f:81:3e:18:3c:9e:eb:97:d9:f4:fe:f0:87:fd:24:3b:c8:b2: 8a:42:fb:38:58:8f:b7:8c:1e:5a:ba:12:5a:22:8c:e7:e4:fe: 03:81:16:f0:13:7e:dc:04:f4:55:bc:9f:49:32:01:58:92:c6: dc:c3:a9:48:dc:b1:34:2a:91:20:e7:70:34:43:95:b0:a8:85: 28:c6:59:9f:31:d8:0f:5b:64:02:42:eb:31:65:a2:38:9b:f3: f7:07:7d:ee:6f:dd:c1:7f:53:0d:5f:56:d3:c2:d2:c4:56:15: d4:56:11:2d:f6:c1:16:af:85:ed:b7:06:7d:22:bc:d8:b0:40: 98:eb:9c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLtHEZYNnCWRqIZR42ezhAbnSlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTA3MTkxNjQ1NTVaFw0yNTA3MjIyMzIzNTVaMDMxMTAvBgNV BAMTKDczQkMyQ0MzQTg1NUVDQkU0QTEyOEU1ODMxN0I0RUZDOEI0MTg3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHNVtK576vv1cVcco4X/3+UYW D3fvzSba5NaphuO6DYPH7IKTq4U0bqPQ6q/tHf3n9AgGg82OR7Ho0RxedVXf9s2W uqaJSjIPtRmMeP8tKxjYrD8SbYGMos6vgNrm0KI24QmVQDavmgLUW0rVORPriEFv DuG3NRJFPAYuHafM4Q8+dhSHIWM8Pw67MdhqPnepPaHiTlvqM8gbJc9MvqTt37Ch 0JCaiBVSqBstR+o2V2BKtn3WZrxr/BMR7j/czmHklqOQuOuNR5DtZu1mQdGGjkyc sTLzjh5uBGxWgeloi+vkelBmZaXudgKNsQRpvf6vo9nH5VjvuAS7oRMVnDltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7wsw6hV7L5KEo5YMXtO/ItBhykwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJJe3wtfzvl3sF7i0lNwlS91L5K3AgzFo0X rabKOKW6SlFGVrO6xJ6Ovl7/yQI8M/q6Jv/CvZK+qcXTEcrXhqCRhneKltI1EtCg EfL/dP3uD/Li8BOh64albCDAtkzBuOftfaAH2q3RT2fmVDTW1G6OpVGuH+EgkjLd 2DwrtZ+BPhg8nuuX2fT+8If9JDvIsopC+zhYj7eMHlq6EloijOfk/gOBFvATftwE 9FW8n0kyAViSxtzDqUjcsTQqkSDncDRDlbCohSjGWZ8x2A9bZAJC6zFlojib8/cH fe5v3cF/Uw1fVtPC0sRWFdRWES32wRavhe23Bn0ivNiwQJjrnCc= -----END CERTIFICATE-----Generated at Mon Jul 21 12:34:14 2025 by rpki-client