$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: TV/cKCrqiGCNQTqHRlCAP0TbVdU+GLbkiZ+00iZ3SZs= Subject key identifier: 03:99:BE:56:07:C9:F5:BB:73:08:1A:D8:F6:FF:07:01:04:DF:B8:42 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 23A0588EA6599380F66AC8E4D8D7368D943F671B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0254 Signing time: Sat 19 Jul 2025 15:31:06 +0000 Manifest this update: Sat 19 Jul 2025 15:26:06 +0000 Manifest next update: Wed 23 Jul 2025 00:01:06 +0000 Files and hashes: 1: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=) 2: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: 4v8kcGV3xe4uOcGgR5vZotbyvY6w0IbmkHsygb6aE3c=) 3: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a0:58:8e:a6:59:93:80:f6:6a:c8:e4:d8:d7:36:8d:94:3f:67:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Jul 19 15:26:06 2025 GMT Not After : Jul 23 00:01:06 2025 GMT Subject: CN=0399BE5607C9F5BB73081AD8F6FF070104DFB842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:88:89:57:8e:90:9c:4e:29:89:0e:35:36: ce:fa:16:5f:55:8d:49:72:f6:b9:8e:0d:e4:66:44: a4:7a:d7:b5:df:77:42:53:31:3a:81:f4:dc:29:59: ef:49:c8:87:0b:1b:f0:6d:86:90:4d:e3:ae:d2:61: 00:1e:7a:be:05:8c:7b:ea:bc:59:0f:7f:6b:df:46: 82:60:a7:06:9a:69:9b:42:ca:d8:b6:10:b7:9f:ad: 24:e7:d4:c5:33:d7:14:9b:1f:82:b3:e1:60:38:9b: 2c:c7:9c:f9:f1:ed:bd:dd:d7:e5:14:7b:d0:df:e7: 51:d6:6b:d5:cf:66:48:a4:39:78:02:2d:c6:d2:bc: 32:55:d2:f8:0e:f9:26:9e:de:d4:7b:e1:a6:fe:6d: 6a:5d:6c:46:af:47:bb:86:45:98:21:ac:29:07:41: 80:b2:8e:f0:78:12:c3:92:f6:c0:a4:9e:b6:56:bf: 90:63:2e:fc:3d:20:65:0a:6e:54:c3:07:21:05:34: 98:30:9c:fd:5b:fa:46:3b:c3:a3:cc:3b:f7:5f:58: cc:51:f3:81:f8:eb:ab:36:32:24:87:17:d9:4e:e6: a1:ba:ee:71:78:85:5a:5f:a4:e5:96:3e:9f:9f:d5: 81:fd:a9:88:86:fe:00:07:57:ff:fe:3a:82:5d:d3: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:BE:56:07:C9:F5:BB:73:08:1A:D8:F6:FF:07:01:04:DF:B8:42 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:01:a1:1b:8a:1d:ad:d5:27:cc:88:aa:d9:d0:b5:c7:2c:e1: 8f:01:c3:5a:01:ac:fb:65:b1:23:bc:95:2e:5c:7f:75:d6:d5: c6:7f:62:b1:24:8c:93:91:7b:11:8c:f7:99:5e:af:e9:08:9d: d7:63:97:79:96:a9:94:16:01:3f:1e:45:9e:1e:49:e4:cb:86: 11:e9:03:96:6e:8d:8f:0f:b9:b5:6d:49:9f:c7:49:71:bd:80: 1a:b4:b7:46:3d:35:5b:fc:85:61:b9:b9:85:76:bc:0a:54:d1: 28:21:e4:38:81:ff:5e:8e:f0:4d:c8:df:9f:a5:ee:50:3d:37: ea:9e:10:d1:40:7e:ce:2a:b3:b6:53:5c:dc:e1:fc:e3:7c:c0: a4:d2:3e:1e:0b:4c:0b:9e:de:ac:0a:76:fe:81:31:85:24:04: 87:5b:d3:fc:af:17:9e:ca:89:7d:09:f3:5c:72:e8:24:8d:41: 6c:fb:7f:f7:b6:60:5a:41:b3:bd:41:5b:2b:25:a3:a0:ab:28: 19:40:b2:6e:61:f4:3a:4b:56:5d:df:3e:fd:02:4a:1d:0d:ee: 6b:dd:47:9e:ea:da:48:de:fc:de:18:07:cd:a2:2c:a6:d3:4b: 11:f2:4f:24:fa:e4:a1:a7:9f:72:8b:e9:06:10:7f:17:bd:bb: 60:89:3c:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6BYjqZZk4D2asjk2Nc2jZQ/ZxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTA3MTkxNTI2MDZaFw0yNTA3MjMwMDAxMDZaMDMxMTAvBgNV BAMTKDAzOTlCRTU2MDdDOUY1QkI3MzA4MUFEOEY2RkYwNzAxMDRERkI4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5O4iJV46QnE4piQ41Ns76Fl9V jUly9rmODeRmRKR617Xfd0JTMTqB9NwpWe9JyIcLG/BthpBN467SYQAeer4FjHvq vFkPf2vfRoJgpwaaaZtCyti2ELefrSTn1MUz1xSbH4Kz4WA4myzHnPnx7b3d1+UU e9Df51HWa9XPZkikOXgCLcbSvDJV0vgO+Sae3tR74ab+bWpdbEavR7uGRZghrCkH QYCyjvB4EsOS9sCknrZWv5BjLvw9IGUKblTDByEFNJgwnP1b+kY7w6PMO/dfWMxR 84H466s2MiSHF9lO5qG67nF4hVpfpOWWPp+f1YH9qYiG/gAHV//+OoJd0zBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5m+VgfJ9btzCBrY9v8HAQTfuEIwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMBoRuKHa3VJ8yIqtnQtccs4Y8Bw1oBrPtl sSO8lS5cf3XW1cZ/YrEkjJORexGM95ler+kInddjl3mWqZQWAT8eRZ4eSeTLhhHp A5ZujY8PubVtSZ/HSXG9gBq0t0Y9NVv8hWG5uYV2vApU0Sgh5DiB/16O8E3I35+l 7lA9N+qeENFAfs4qs7ZTXNzh/ON8wKTSPh4LTAue3qwKdv6BMYUkBIdb0/yvF57K iX0J81xy6CSNQWz7f/e2YFpBs71BWyslo6CrKBlAsm5h9DpLVl3fPv0CSh0N7mvd R57q2kje/N4YB82iLKbTSxHyTyT65KGnn3KL6QYQfxe9u2CJPKo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:14:18 2025 by rpki-client