$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: XLJ6unjHmvmjx68TG/P/+s241r1kKgA+1eZx8PqfAdM= Subject key identifier: F2:23:78:2B:AC:FB:FC:3B:B9:7B:BE:18:2B:F3:BA:0C:F4:7F:49:46 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 2DB70B4F6E91D5E5B9154762895033C542287940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: A5 Signing time: Mon 21 Jul 2025 08:00:49 +0000 Manifest this update: Mon 21 Jul 2025 07:55:49 +0000 Manifest next update: Thu 24 Jul 2025 13:44:49 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: JYjUTD0Ep1xG3VsKx0IrnS7aezVjKe2yrNFMrSpH9sU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:0b:4f:6e:91:d5:e5:b9:15:47:62:89:50:33:c5:42:28:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Jul 21 07:55:49 2025 GMT Not After : Jul 24 13:44:49 2025 GMT Subject: CN=F223782BACFBFC3BB97BBE182BF3BA0CF47F4946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:07:90:cc:48:96:cc:52:2c:75:0d:a7:55: a3:2d:53:20:ec:de:06:75:73:4b:bb:c3:e0:5f:81: 52:55:9d:d8:dc:42:bc:c2:a9:1e:b3:cb:d5:94:36: 86:49:b8:87:e2:36:87:65:0c:80:46:b3:aa:3c:57: 99:09:b4:3f:40:ed:4f:a3:95:09:c9:1f:3b:64:9b: 32:de:6a:20:03:3c:29:a6:5e:b7:bd:8a:8a:9c:92: e2:55:83:c8:26:be:48:09:be:41:d3:b2:b2:7b:f3: ef:79:5e:e2:7d:d1:c5:06:d5:4c:e1:1f:2f:97:54: 4f:12:aa:65:0e:59:db:85:f0:2b:28:f0:03:f0:9c: 7c:f9:9e:0c:fd:4d:72:40:fa:bc:e3:14:a5:44:b1: ae:f5:a1:09:00:e1:1d:91:83:93:f6:db:c8:10:f8: 98:69:18:84:ec:f1:e8:aa:a6:cc:b9:c1:41:74:9f: b7:3b:4b:d8:43:b6:4c:3a:29:62:e9:87:c7:33:fb: 15:4d:e1:40:d0:34:4c:51:91:15:4f:a6:05:53:47: 3b:a0:2b:4d:cc:e1:2a:28:05:a8:49:a3:2a:d9:08: ab:d6:52:60:90:61:72:51:11:f7:6a:e2:59:c5:93: e6:06:74:df:39:ea:1a:7a:be:2e:81:0b:37:09:3d: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:23:78:2B:AC:FB:FC:3B:B9:7B:BE:18:2B:F3:BA:0C:F4:7F:49:46 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:cd:a1:a0:aa:59:47:bf:80:b7:2b:cf:5a:03:ae:45:ee: da:06:39:62:55:c5:a9:05:ee:6f:d4:4f:ce:e3:39:6c:57:52: 8c:ac:60:b3:75:01:e6:79:f8:bd:e3:e4:16:01:62:e2:82:a4: 43:83:0d:6d:4a:f2:dd:29:56:c2:65:c6:e6:a2:f7:44:16:d7: 2e:d7:f6:22:c5:45:64:d8:0c:15:c6:34:b1:2b:32:83:c5:64: ee:81:c6:a4:a6:9e:e7:28:bb:ca:1a:6f:98:d1:94:41:7b:67: 7c:28:76:ae:80:48:94:ce:61:48:83:ee:d1:11:51:10:15:b1: d3:30:e6:ee:d1:92:39:22:47:a5:2e:1e:76:35:d7:94:13:6b: 99:1f:45:9d:5d:e2:4a:62:01:66:8e:40:68:b0:86:39:07:d2: 39:74:ce:7f:5c:fd:6b:66:b7:c5:2a:02:33:97:46:22:38:bb: d9:69:f2:a7:de:dd:eb:64:03:35:2b:88:08:29:8b:b8:ae:7c: e9:11:11:1a:ca:87:7a:dd:aa:50:ff:e8:6c:45:a7:ea:2f:70: 8e:09:d9:bf:7d:3e:a5:32:80:f5:62:ad:0c:5c:46:20:c8:19: 5c:a9:fc:cf:c0:22:f5:33:e6:d6:7e:27:df:80:e3:ad:7b:d8: b4:1e:2a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbcLT26R1eW5FUdiiVAzxUIoeUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA3MjEwNzU1NDlaFw0yNTA3MjQxMzQ0NDlaMDMxMTAvBgNV BAMTKEYyMjM3ODJCQUNGQkZDM0JCOTdCQkUxODJCRjNCQTBDRjQ3RjQ5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbgeQzEiWzFIsdQ2nVaMtUyDs 3gZ1c0u7w+BfgVJVndjcQrzCqR6zy9WUNoZJuIfiNodlDIBGs6o8V5kJtD9A7U+j lQnJHztkmzLeaiADPCmmXre9ioqckuJVg8gmvkgJvkHTsrJ78+95XuJ90cUG1Uzh Hy+XVE8SqmUOWduF8Cso8APwnHz5ngz9TXJA+rzjFKVEsa71oQkA4R2Rg5P228gQ +JhpGITs8eiqpsy5wUF0n7c7S9hDtkw6KWLph8cz+xVN4UDQNExRkRVPpgVTRzug K03M4SooBahJoyrZCKvWUmCQYXJREfdq4lnFk+YGdN856hp6vi6BCzcJPfCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8iN4K6z7/Du5e74YK/O6DPR/SUYwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxGzaGgqllHv4C3K89aA65F7toGOWJVxakF 7m/UT87jOWxXUoysYLN1AeZ5+L3j5BYBYuKCpEODDW1K8t0pVsJlxuai90QW1y7X 9iLFRWTYDBXGNLErMoPFZO6BxqSmnucou8oab5jRlEF7Z3wodq6ASJTOYUiD7tER URAVsdMw5u7RkjkiR6UuHnY115QTa5kfRZ1d4kpiAWaOQGiwhjkH0jl0zn9c/Wtm t8UqAjOXRiI4u9lp8qfe3etkAzUriAgpi7iufOkRERrKh3rdqlD/6GxFp+ovcI4J 2b99PqUygPVirQxcRiDIGVyp/M/AIvUz5tZ+J9+A46172LQeKmY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:55 2025 by rpki-client