$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: gKjzIlvkbFGNScdqPv8EynJC1koeGy335JFTajggPEM= Subject key identifier: A1:56:0B:B7:9C:22:DF:6A:E8:7D:B4:C8:7A:FB:89:8B:4E:11:88:D7 Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 40D1A4F42F12696F797949610D56C57553FBBDD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 01A8 Signing time: Mon 21 Jul 2025 15:31:27 +0000 Manifest this update: Mon 21 Jul 2025 15:26:27 +0000 Manifest next update: Fri 25 Jul 2025 03:01:27 +0000 Files and hashes: 1: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: MBoWR2BLuljgio+GW3N8JKGDML9GK7xH/027TLW/cc8=) 2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=) 3: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d1:a4:f4:2f:12:69:6f:79:79:49:61:0d:56:c5:75:53:fb:bd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Jul 21 15:26:27 2025 GMT Not After : Jul 25 03:01:27 2025 GMT Subject: CN=A1560BB79C22DF6AE87DB4C87AFB898B4E1188D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:f9:c6:15:05:f2:c0:d3:28:88:e5:2e:47: a4:0b:d4:3a:6a:a1:34:3d:2a:0c:b2:0e:2a:32:46: 08:c0:8b:82:cf:5e:53:5f:ac:04:46:32:f2:96:b1: 54:d7:36:23:7d:ff:0d:75:2e:bb:eb:62:5f:cb:51: a6:9d:69:45:9b:4a:09:08:b3:35:57:4d:b1:4c:8b: 9d:f0:ce:94:ee:45:0f:e4:bb:15:c2:a6:a0:ac:68: 29:8c:e0:b3:18:48:a9:a0:d4:eb:ed:07:e9:be:d4: d2:0b:93:16:3b:fd:94:8c:78:b2:b6:fe:8b:90:63: 03:34:70:89:eb:aa:fb:45:9f:e0:e6:b8:d2:15:5e: b8:b4:a8:fc:94:9b:a4:34:b9:79:1a:e7:1d:34:8f: 9c:fb:fd:1e:bb:93:b0:4f:79:24:cd:7b:18:39:63: 16:d4:e8:ae:68:0c:59:e5:5c:5d:00:c0:3c:d3:87: bc:23:38:c8:b0:7f:ff:01:4e:db:d1:d9:c9:5c:ae: 44:6e:0d:34:13:b7:6b:f6:9d:7d:70:f7:8e:a5:52: e2:a6:96:45:7f:40:b6:f7:65:c1:a1:6a:eb:da:29: 66:b3:3c:ab:0f:6f:58:95:29:32:23:d3:b4:90:60: 5d:ef:1c:60:d2:56:c6:73:bd:1c:9d:40:3b:2b:77: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:0B:B7:9C:22:DF:6A:E8:7D:B4:C8:7A:FB:89:8B:4E:11:88:D7 X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4a:4b:c1:f7:6e:f4:b0:d6:6d:68:0e:5a:0e:93:fe:9a:37: 42:53:3f:44:88:98:6d:29:40:07:c3:e1:2a:f9:96:71:6d:57: 7b:bc:be:8b:65:71:0f:e9:bf:56:de:27:6a:5c:da:77:0d:26: 04:72:7d:fd:28:a8:fe:a9:b6:8a:24:37:4f:a2:f1:00:a3:d8: 99:1c:74:a5:33:5c:9e:d5:c2:03:44:48:ce:bc:d3:8f:1b:5f: 7b:f9:be:88:68:f1:da:c7:59:73:0d:a9:3f:1b:a5:6d:1a:c3: 65:d1:b4:35:dd:fc:50:01:b5:cc:04:73:30:25:03:bc:58:21: 86:9d:74:d4:50:64:28:88:ad:9d:fb:69:58:8f:33:5d:82:b7: d7:5c:a1:41:ac:b3:13:27:6f:8e:21:c3:ca:11:31:bd:c0:8f: 5a:eb:c3:72:94:1e:bc:2a:cb:9e:84:d8:8c:37:29:72:1c:38: 3d:71:fa:f9:65:47:c0:7a:b7:85:19:9a:28:c9:01:75:4f:0b: e6:90:d1:98:03:02:9c:b6:ec:5e:1c:25:3a:46:dd:f8:b4:f6: b0:a3:d7:68:a0:df:08:8c:d0:bb:6f:5b:bc:e5:e6:fa:ec:17: 67:5b:2b:a7:ef:5d:f2:36:df:d2:91:5d:df:5d:10:a2:49:a0: eb:0c:04:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNGk9C8SaW95eUlhDVbFdVP7vdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTA3MjExNTI2MjdaFw0yNTA3MjUwMzAxMjdaMDMxMTAvBgNV BAMTKEExNTYwQkI3OUMyMkRGNkFFODdEQjRDODdBRkI4OThCNEUxMTg4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaz/nGFQXywNMoiOUuR6QL1Dpq oTQ9KgyyDioyRgjAi4LPXlNfrARGMvKWsVTXNiN9/w11LrvrYl/LUaadaUWbSgkI szVXTbFMi53wzpTuRQ/kuxXCpqCsaCmM4LMYSKmg1OvtB+m+1NILkxY7/ZSMeLK2 /ouQYwM0cInrqvtFn+DmuNIVXri0qPyUm6Q0uXka5x00j5z7/R67k7BPeSTNexg5 YxbU6K5oDFnlXF0AwDzTh7wjOMiwf/8BTtvR2clcrkRuDTQTt2v2nX1w946lUuKm lkV/QLb3ZcGhauvaKWazPKsPb1iVKTIj07SQYF3vHGDSVsZzvRydQDsrdwk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVYLt5wi32rofbTIevuJi04RiNcwHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxKS8H3bvSw1m1oDloOk/6aN0JTP0SImG0p QAfD4Sr5lnFtV3u8votlcQ/pv1beJ2pc2ncNJgRyff0oqP6ptookN0+i8QCj2Jkc dKUzXJ7VwgNESM68048bX3v5voho8drHWXMNqT8bpW0aw2XRtDXd/FABtcwEczAl A7xYIYaddNRQZCiIrZ37aViPM12Ct9dcoUGssxMnb44hw8oRMb3Aj1rrw3KUHrwq y56E2Iw3KXIcOD1x+vllR8B6t4UZmijJAXVPC+aQ0ZgDApy27F4cJTpG3fi09rCj 12ig3wiM0LtvW7zl5vrsF2dbK6fvXfI239KRXd9dEKJJoOsMBEY= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:23 2025 by rpki-client