$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: ByhaO6TPxr7BKE5JRartRoCH61qWddzTsexzF9wOteY= Subject key identifier: 96:AB:B8:3E:00:94:25:5A:21:DF:D2:3A:2A:CB:0A:C3:9A:E2:FE:40 Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 562426D2D5877910FC21FCAF472E06925C3F083C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 01D3 Signing time: Sat 19 Jul 2025 10:22:24 +0000 Manifest this update: Sat 19 Jul 2025 10:17:24 +0000 Manifest next update: Tue 22 Jul 2025 19:32:24 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: dpR36V3KPfk02c1iHY5ChFBof0Ng6nNhRoTYbMpHl/A=) 3: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:24:26:d2:d5:87:79:10:fc:21:fc:af:47:2e:06:92:5c:3f:08:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Jul 19 10:17:24 2025 GMT Not After : Jul 22 19:32:24 2025 GMT Subject: CN=96ABB83E0094255A21DFD23A2ACB0AC39AE2FE40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:de:0e:79:37:ee:6b:09:f0:87:50:ef:e0: a4:5a:a7:89:e3:aa:dd:e5:5f:b5:02:2c:e8:47:9a: 7e:81:02:91:c4:6b:b7:ce:01:4e:2e:1f:c3:49:2b: 40:23:57:a2:a1:59:58:61:bf:04:82:c6:7c:81:6e: 27:16:44:6e:57:c6:79:28:0c:c1:5c:b7:26:97:15: 8a:84:31:1b:98:4f:80:52:15:56:29:2a:7a:3e:91: 4e:95:5a:e2:4b:35:6f:66:36:9a:14:09:dc:c6:24: fd:39:5f:ee:3d:d5:32:f1:ef:5c:69:4b:9c:42:da: 43:aa:2e:b1:0b:ee:5b:06:52:c0:48:14:f2:60:b7: 19:25:5e:b5:6e:49:32:a0:88:13:c9:23:e4:7c:d7: 22:a9:63:c4:be:51:da:a1:72:9b:a3:67:75:e1:47: 1b:85:fc:77:f1:24:38:14:8b:e5:11:f3:c2:04:d3: 13:57:5d:89:3a:34:d2:82:26:aa:5e:6b:51:13:b9: b1:fb:1f:06:ba:96:b0:32:bc:f1:38:90:cc:ff:7e: a4:44:2c:44:2d:a6:ea:cb:c2:c7:db:bc:d1:89:b3: 3a:d2:38:c9:f3:32:45:91:3a:7a:c2:1a:08:62:af: 79:d1:21:bd:74:69:5e:3b:3e:6e:79:bb:f5:c7:e2: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AB:B8:3E:00:94:25:5A:21:DF:D2:3A:2A:CB:0A:C3:9A:E2:FE:40 X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8e:50:1c:34:cf:4f:f0:57:e2:ef:27:50:96:bc:19:86:ff: 10:97:48:91:8a:02:b5:20:a8:3a:63:95:8a:c9:1b:84:48:5d: be:6d:9c:b1:b1:80:37:37:d6:26:b8:15:f2:55:66:89:23:72: b3:db:c1:ae:f0:a7:ee:1e:56:31:5b:5a:1a:ca:1c:db:9e:ff: 10:b4:78:6b:a8:2d:ed:90:04:3f:00:65:f3:07:5b:40:c9:a5: 17:4c:f4:c8:ea:f4:57:84:7a:95:47:95:ef:42:10:af:d5:32: 64:56:d1:15:1d:20:c2:c3:85:c7:d4:a9:45:8d:84:e6:4f:21: 0a:7c:f2:4c:25:d7:2e:58:11:2a:78:bd:5e:cf:51:ba:f0:86: 5c:af:d2:57:d0:ab:66:66:18:6e:8a:4a:7c:0a:f6:5f:14:00: 6c:b8:8e:72:cd:e0:1d:cc:dd:19:d6:03:a1:c5:0f:eb:72:27: d9:d3:63:fe:c6:6e:2b:07:3f:76:ac:a1:a0:e1:81:a3:3e:02: f7:fc:99:64:bd:9f:f0:c7:17:5b:86:a8:0d:a0:62:11:22:5b: ce:26:98:f3:43:26:99:ae:c0:c1:61:47:e6:5c:88:b3:0b:4e: c4:a7:9c:bf:bd:69:0f:ce:c6:f0:a4:a8:d2:c3:41:8e:cf:c4: dc:3a:f7:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViQm0tWHeRD8IfyvRy4Gklw/CDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTA3MTkxMDE3MjRaFw0yNTA3MjIxOTMyMjRaMDMxMTAvBgNV BAMTKDk2QUJCODNFMDA5NDI1NUEyMURGRDIzQTJBQ0IwQUMzOUFFMkZFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBd4OeTfuawnwh1Dv4KRap4nj qt3lX7UCLOhHmn6BApHEa7fOAU4uH8NJK0AjV6KhWVhhvwSCxnyBbicWRG5Xxnko DMFctyaXFYqEMRuYT4BSFVYpKno+kU6VWuJLNW9mNpoUCdzGJP05X+491TLx71xp S5xC2kOqLrEL7lsGUsBIFPJgtxklXrVuSTKgiBPJI+R81yKpY8S+UdqhcpujZ3Xh RxuF/HfxJDgUi+UR88IE0xNXXYk6NNKCJqpea1ETubH7Hwa6lrAyvPE4kMz/fqRE LEQtpurLwsfbvNGJszrSOMnzMkWROnrCGghir3nRIb10aV47Pm55u/XH4s8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlqu4PgCUJVoh39I6KssKw5ri/kAwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyOUBw0z0/wV+LvJ1CWvBmG/xCXSJGKArUg qDpjlYrJG4RIXb5tnLGxgDc31ia4FfJVZokjcrPbwa7wp+4eVjFbWhrKHNue/xC0 eGuoLe2QBD8AZfMHW0DJpRdM9Mjq9FeEepVHle9CEK/VMmRW0RUdIMLDhcfUqUWN hOZPIQp88kwl1y5YESp4vV7PUbrwhlyv0lfQq2ZmGG6KSnwK9l8UAGy4jnLN4B3M 3RnWA6HFD+tyJ9nTY/7GbisHP3asoaDhgaM+Avf8mWS9n/DHF1uGqA2gYhEiW84m mPNDJpmuwMFhR+ZciLMLTsSnnL+9aQ/OxvCkqNLDQY7PxNw69/0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:14 2025 by rpki-client