$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: czGenO/hv+QFXM2UVIj8xbVLGLwuQvg+aIuIh5U9ioE= Subject key identifier: 78:E6:2F:55:B9:83:DE:CA:21:4C:10:90:70:7D:C2:95:EC:05:F8:F6 Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 6A9F009E557BB2EBCBA6C1B9AD4B53D12D77E3F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: 9A Signing time: Tue 22 Jul 2025 06:30:42 +0000 Manifest this update: Tue 22 Jul 2025 06:25:42 +0000 Manifest next update: Fri 25 Jul 2025 18:07:42 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: ec5sdbiCYb236xhAcV4b3FnW84w0MnLjUjVvBSp6Fp8=) 2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9f:00:9e:55:7b:b2:eb:cb:a6:c1:b9:ad:4b:53:d1:2d:77:e3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Jul 22 06:25:42 2025 GMT Not After : Jul 25 18:07:42 2025 GMT Subject: CN=78E62F55B983DECA214C1090707DC295EC05F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:19:35:44:83:bf:c0:5b:0a:1c:ee:aa:ef: 1d:a8:62:68:01:7d:66:37:a6:4d:a8:7e:c2:a5:f9: 47:0c:27:a9:24:3b:d6:70:a2:73:42:b0:55:39:5c: 19:25:b6:c8:1d:b7:1b:15:e5:62:09:4e:b3:94:27: 9c:79:db:c9:dd:35:32:24:88:08:9f:c0:b5:67:58: a8:44:a0:ae:d6:07:c9:4e:e6:5b:61:c4:af:ce:4e: e1:0f:9c:e1:f0:5c:9e:35:1a:ac:70:59:c5:40:76: f4:49:59:2b:c3:72:71:2d:c2:e7:2d:bc:9a:bd:99: 4d:4a:85:51:a8:79:62:0a:f7:47:88:c9:91:a9:3a: 59:cf:70:45:35:21:42:fc:2c:9f:e7:dd:30:76:0a: 0a:68:0d:94:63:fc:13:ad:30:47:34:3a:dd:28:70: 58:0a:3e:f9:64:39:1e:52:f6:09:85:fb:82:04:f4: f6:c0:b8:e8:73:87:f4:43:23:7c:34:14:4c:55:ea: 69:fe:10:ce:58:a7:af:92:fd:0e:7f:d0:6e:fd:33: c1:23:5c:23:26:4d:ba:80:d9:6f:dc:8c:64:56:fa: 1c:bb:12:5a:35:45:b9:e0:76:e8:df:71:7a:1d:3b: 99:29:2f:a9:dc:a4:36:9f:ef:36:65:f4:d9:d8:5d: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E6:2F:55:B9:83:DE:CA:21:4C:10:90:70:7D:C2:95:EC:05:F8:F6 X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:63:8d:41:15:49:90:a1:a7:fa:54:cc:7b:90:47:98:4f:7e: 92:47:21:76:80:45:12:ed:61:77:65:1c:3b:b4:6e:f9:4a:e0: 5e:7a:07:ea:be:3d:8f:af:d6:22:2b:6b:92:f5:db:b2:a3:d2: 5e:51:f7:09:0a:f1:63:55:48:17:60:83:3b:b2:39:91:94:e6: 02:47:90:19:c2:9c:16:64:33:95:20:b0:ac:ea:18:8d:4f:08: a3:29:09:e5:0d:dd:98:73:60:65:45:c8:a3:ed:81:42:2d:bd: 68:94:32:22:9f:2e:78:c5:2d:c8:0d:a3:4c:23:03:5b:e2:4e: 83:e4:76:b1:d4:6d:20:68:07:a0:4b:c0:2d:9a:6c:4c:8e:bf: fb:81:6b:6f:ea:dc:93:dd:a0:37:b8:ac:e1:58:e7:6e:3f:b2: b9:ee:b1:9d:99:fe:59:6d:cd:87:dd:32:40:87:c6:e4:3f:57: 4d:16:8c:f4:61:2f:fe:ee:4d:7b:8f:7e:9f:b4:f9:a6:a1:93: a3:b8:6b:30:09:61:55:98:7f:e6:58:e0:92:fe:0d:79:c6:8c: 5f:56:91:3b:1d:64:78:e5:53:26:31:89:b4:79:07:01:b2:3a: 39:13:71:c0:f0:af:ce:bc:b9:ea:8f:1a:88:15:e0:b7:f4:1d: bf:3f:2d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUap8AnlV7suvLpsG5rUtT0S134/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNTA3MjIwNjI1NDJaFw0yNTA3MjUxODA3NDJaMDMxMTAvBgNV BAMTKDc4RTYyRjU1Qjk4M0RFQ0EyMTRDMTA5MDcwN0RDMjk1RUMwNUY4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lxk1RIO/wFsKHO6q7x2oYmgB fWY3pk2ofsKl+UcMJ6kkO9ZwonNCsFU5XBkltsgdtxsV5WIJTrOUJ5x528ndNTIk iAifwLVnWKhEoK7WB8lO5lthxK/OTuEPnOHwXJ41GqxwWcVAdvRJWSvDcnEtwuct vJq9mU1KhVGoeWIK90eIyZGpOlnPcEU1IUL8LJ/n3TB2CgpoDZRj/BOtMEc0Ot0o cFgKPvlkOR5S9gmF+4IE9PbAuOhzh/RDI3w0FExV6mn+EM5Yp6+S/Q5/0G79M8Ej XCMmTbqA2W/cjGRW+hy7Elo1RbngdujfcXodO5kpL6ncpDaf7zZl9NnYXfTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeOYvVbmD3sohTBCQcH3ClewF+PYwHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZjjUEVSZChp/pUzHuQR5hPfpJHIXaARRLt YXdlHDu0bvlK4F56B+q+PY+v1iIra5L127Kj0l5R9wkK8WNVSBdggzuyOZGU5gJH kBnCnBZkM5UgsKzqGI1PCKMpCeUN3ZhzYGVFyKPtgUItvWiUMiKfLnjFLcgNo0wj A1viToPkdrHUbSBoB6BLwC2abEyOv/uBa2/q3JPdoDe4rOFY524/srnusZ2Z/llt zYfdMkCHxuQ/V00WjPRhL/7uTXuPfp+0+aahk6O4azAJYVWYf+ZY4JL+DXnGjF9W kTsdZHjlUyYxibR5BwGyOjkTccDwr868ueqPGogV4Lf0Hb8/LVQ= -----END CERTIFICATE-----Generated at Wed Jul 23 12:18:41 2025 by rpki-client