$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: pSaR64HlOP5juku79Ip+iaau53UNLPetdrRx/nIWrqc= Subject key identifier: 8A:90:9A:E8:C2:4B:1D:FC:8E:38:50:08:68:5F:3C:1A:47:93:E2:03 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 29F89A17C3AE6EBE1F4F27604392FB448ED7FF9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 028E Signing time: Tue 22 Jul 2025 13:12:19 +0000 Manifest this update: Tue 22 Jul 2025 13:07:19 +0000 Manifest next update: Fri 25 Jul 2025 14:25:19 +0000 Files and hashes: 1: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: kAauF/HlAgPNriR9wxnctjG3Ld5vn5V+ZGpY/D7Mwgo=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K58hS10IRX+zau5OGGRyu9JQqy2xuB39owD+O8xQ0hc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f8:9a:17:c3:ae:6e:be:1f:4f:27:60:43:92:fb:44:8e:d7:ff:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Jul 22 13:07:19 2025 GMT Not After : Jul 25 14:25:19 2025 GMT Subject: CN=8A909AE8C24B1DFC8E385008685F3C1A4793E203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:ad:c4:41:ed:46:57:af:8d:8e:27:8e:6a: d6:a7:87:fa:d5:ca:0f:52:e0:67:de:89:31:76:25: 81:c1:80:7d:e3:45:dc:9c:1d:6f:99:d2:83:7c:68: 19:84:01:42:d3:c1:93:4c:f6:de:aa:ab:80:57:af: 3c:a3:42:12:5e:fe:46:79:4b:05:34:d2:23:17:d1: 16:91:b7:9b:2a:7f:2d:60:74:23:0d:93:14:5b:bf: 42:71:15:20:2c:48:c1:11:af:d5:a1:89:1b:a3:cf: 3a:8d:2e:c7:d2:c4:56:71:80:5a:24:94:3c:96:bc: dc:9b:8c:22:5c:2c:0d:c3:73:2a:63:30:4f:28:e0: 8c:e1:86:d6:97:9f:03:82:61:a2:da:04:ed:88:98: c2:c0:ab:3c:11:f7:6d:b4:a2:30:41:ff:40:28:0d: 23:79:82:81:be:17:19:6e:dd:e4:d2:cc:f6:a7:d5: c8:31:d9:7d:3d:3e:c9:21:5f:fd:86:70:78:dc:7f: 1c:a4:4a:a7:28:c3:71:6e:f3:75:81:dc:69:65:89: 27:3a:ea:86:45:79:7d:e2:f0:49:ce:f3:24:f0:6f: 9b:e6:df:90:dd:ca:dc:b1:98:fe:a0:4e:78:17:0c: 5e:46:6f:1a:d5:e4:01:6d:a6:fe:77:62:f8:8c:aa: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:90:9A:E8:C2:4B:1D:FC:8E:38:50:08:68:5F:3C:1A:47:93:E2:03 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7c:f2:c4:c3:0d:2c:5e:7a:d2:ec:a2:03:50:a1:89:8f:1f: 47:db:91:aa:3f:65:98:c7:bf:0f:93:00:a9:7c:d2:f7:0b:37: eb:1f:8f:2d:fc:b6:fb:6f:71:06:54:2b:c9:f3:c8:23:1b:1d: 71:e4:67:7e:33:07:ea:c6:32:35:f2:a5:e9:6a:5b:34:45:af: 21:77:62:99:80:db:73:8c:6b:18:c0:66:78:f6:9a:af:ea:75: b1:0d:95:c9:32:21:b7:d9:04:e1:31:bd:97:82:34:54:b7:90: 3b:5b:be:47:76:33:fb:47:98:9c:f5:d0:6e:ac:cc:ce:41:5f: b9:ff:b3:ac:fc:af:45:fa:29:25:45:a9:47:81:e9:29:9e:77: 16:40:c5:f2:64:55:f6:78:a6:97:37:f9:47:e6:78:16:0e:ca: c5:cd:01:d7:7f:49:af:46:34:be:55:ef:86:95:51:fe:b6:c7: d8:10:e2:ed:25:1f:37:df:82:3f:60:84:03:47:3a:6a:f7:2a: 6c:06:91:0d:08:5e:7f:1a:37:a4:2d:ad:cf:62:1c:31:d4:77: 4b:9d:5a:da:71:2e:e4:e5:75:64:c3:2d:40:77:df:ac:58:19: 81:95:81:49:7c:d1:3b:5b:25:83:df:7f:6e:97:67:8d:3a:3e: 72:20:12:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfiaF8Oubr4fTydgQ5L7RI7X/54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTA3MjIxMzA3MTlaFw0yNTA3MjUxNDI1MTlaMDMxMTAvBgNV BAMTKDhBOTA5QUU4QzI0QjFERkM4RTM4NTAwODY4NUYzQzFBNDc5M0UyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSq3EQe1GV6+NjieOatanh/rV yg9S4GfeiTF2JYHBgH3jRdycHW+Z0oN8aBmEAULTwZNM9t6qq4BXrzyjQhJe/kZ5 SwU00iMX0RaRt5sqfy1gdCMNkxRbv0JxFSAsSMERr9WhiRujzzqNLsfSxFZxgFok lDyWvNybjCJcLA3DcypjME8o4IzhhtaXnwOCYaLaBO2ImMLAqzwR9220ojBB/0Ao DSN5goG+Fxlu3eTSzPan1cgx2X09PskhX/2GcHjcfxykSqcow3Fu83WB3GlliSc6 6oZFeX3i8EnO8yTwb5vm35DdytyxmP6gTngXDF5GbxrV5AFtpv53YviMqljFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipCa6MJLHfyOOFAIaF88GkeT4gMwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK588sTDDSxeetLsogNQoYmPH0fbkao/ZZjH vw+TAKl80vcLN+sfjy38tvtvcQZUK8nzyCMbHXHkZ34zB+rGMjXypelqWzRFryF3 YpmA23OMaxjAZnj2mq/qdbENlckyIbfZBOExvZeCNFS3kDtbvkd2M/tHmJz10G6s zM5BX7n/s6z8r0X6KSVFqUeB6SmedxZAxfJkVfZ4ppc3+UfmeBYOysXNAdd/Sa9G NL5V74aVUf62x9gQ4u0lHzffgj9ghANHOmr3KmwGkQ0IXn8aN6Qtrc9iHDHUd0ud WtpxLuTldWTDLUB336xYGYGVgUl80TtbJYPff26XZ406PnIgEus= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:41 2025 by rpki-client