$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: i+pIL1Qeg1KGD+RSU6rhzkxCnAaQzPYo77CULCDqmWA= Subject key identifier: E8:09:67:F5:07:BD:72:09:3D:28:3B:C8:DF:5D:CF:F3:B3:31:52:72 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 1B82DC231DCFB1DC5A444658224D9D3DA5C39E6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 01E3 Signing time: Sun 20 Jul 2025 15:11:08 +0000 Manifest this update: Sun 20 Jul 2025 15:06:08 +0000 Manifest next update: Wed 23 Jul 2025 20:58:08 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) 2: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: wbDj2qVwWojdiwUQq1leoVbmSXtniu4/S6z44a48QLw=) 3: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: DhHqQ3nUXBYAgW1sbmkxM9D82amvMgaNUQt5ncr2azI=) 4: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:82:dc:23:1d:cf:b1:dc:5a:44:46:58:22:4d:9d:3d:a5:c3:9e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Jul 20 15:06:08 2025 GMT Not After : Jul 23 20:58:08 2025 GMT Subject: CN=E80967F507BD72093D283BC8DF5DCFF3B3315272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:b3:ce:e8:61:ac:55:eb:2a:6f:19:2f:ff: 96:f2:79:36:87:fd:88:44:18:7b:bf:81:77:41:0c: 5b:cc:db:99:82:2d:79:43:3d:25:5c:f1:8f:e4:59: 2a:e0:84:8f:38:c8:0d:a1:f5:c0:84:f5:b7:55:aa: dc:b5:3c:b6:af:47:8c:81:a3:b4:c6:77:39:a1:81: f0:3e:fc:cc:45:10:73:b8:5f:2c:6f:a4:ea:25:75: 55:0b:d1:a3:4f:48:b9:a7:43:c7:7b:9c:9e:7b:83: 2a:ec:e4:71:02:57:c7:c2:8e:c4:79:fb:d2:09:18: a1:08:1f:14:59:f5:22:39:f0:d5:85:2f:ec:3b:40: 2d:0a:f8:de:f2:df:19:3f:c9:b5:d8:1a:64:f7:20: b3:87:46:07:13:3c:10:bd:01:b7:62:0e:74:a2:b6: 87:78:c7:2d:fb:0c:f1:b5:70:b8:61:00:2b:07:67: fa:4c:74:6c:fa:d8:58:ed:9a:e8:5c:41:53:5b:81: 21:e2:51:07:da:4a:2d:cf:68:89:5e:a9:97:34:6c: 55:e1:40:e2:4c:63:9e:bc:cb:92:ba:a7:c5:28:a8: b8:98:be:df:1e:d0:71:a5:35:8b:04:aa:78:c2:f6: f4:bb:e8:f7:d2:a4:b4:dc:f8:d9:e5:12:70:c3:8f: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:67:F5:07:BD:72:09:3D:28:3B:C8:DF:5D:CF:F3:B3:31:52:72 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fb:95:70:f6:58:d6:6d:26:7f:6e:62:b8:b2:5c:11:ae:0b: e3:41:21:35:0f:c9:33:f8:3e:b8:4c:42:1d:49:bd:52:39:4f: d3:1e:f2:e8:cb:0e:b8:c9:3e:25:f1:94:6e:ad:57:64:73:44: dc:c1:e3:7d:28:33:5c:9c:b4:e4:75:2e:19:9c:ad:db:92:fb: 15:fd:e5:06:63:e9:97:f1:c4:cb:96:37:73:f4:e6:94:71:e7: 5b:a0:33:cc:fe:d6:a7:9c:7d:f1:c5:c4:d5:6f:56:0c:ea:33: ee:d8:22:2e:62:31:5a:a4:86:ef:df:15:80:e1:f3:f7:8d:b4: 48:28:8b:67:e1:fe:d6:f4:d0:d7:24:94:0b:c3:85:fc:d9:a8: a5:a9:31:76:8b:10:71:40:08:1f:b2:2e:da:82:2a:84:e9:8f: da:e9:be:66:60:dd:4f:e5:ab:c3:cd:fe:f6:68:5a:82:43:57: 3a:55:63:a3:0e:cc:8b:48:33:5e:1f:5b:e3:48:f6:f5:62:ee: 60:27:4b:e2:4f:b8:27:c6:86:20:c1:80:46:b5:12:7a:52:fa: 8c:0a:55:fb:9f:3d:24:18:73:8f:a7:e8:fa:85:ac:1f:d8:15: 24:86:e6:29:23:15:73:8c:6f:43:62:f5:56:c9:75:c4:98:6a: d0:1b:e9:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4LcIx3PsdxaREZYIk2dPaXDnmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTA3MjAxNTA2MDhaFw0yNTA3MjMyMDU4MDhaMDMxMTAvBgNV BAMTKEU4MDk2N0Y1MDdCRDcyMDkzRDI4M0JDOERGNURDRkYzQjMzMTUyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0LPO6GGsVesqbxkv/5byeTaH /YhEGHu/gXdBDFvM25mCLXlDPSVc8Y/kWSrghI84yA2h9cCE9bdVqty1PLavR4yB o7TGdzmhgfA+/MxFEHO4XyxvpOoldVUL0aNPSLmnQ8d7nJ57gyrs5HECV8fCjsR5 +9IJGKEIHxRZ9SI58NWFL+w7QC0K+N7y3xk/ybXYGmT3ILOHRgcTPBC9AbdiDnSi tod4xy37DPG1cLhhACsHZ/pMdGz62FjtmuhcQVNbgSHiUQfaSi3PaIleqZc0bFXh QOJMY568y5K6p8UoqLiYvt8e0HGlNYsEqnjC9vS76PfSpLTc+NnlEnDDjxLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Aln9Qe9cgk9KDvI313P87MxUnIwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA77lXD2WNZtJn9uYriyXBGuC+NBITUPyTP4 PrhMQh1JvVI5T9Me8ujLDrjJPiXxlG6tV2RzRNzB430oM1yctOR1LhmcrduS+xX9 5QZj6ZfxxMuWN3P05pRx51ugM8z+1qecffHFxNVvVgzqM+7YIi5iMVqkhu/fFYDh 8/eNtEgoi2fh/tb00NcklAvDhfzZqKWpMXaLEHFACB+yLtqCKoTpj9rpvmZg3U/l q8PN/vZoWoJDVzpVY6MOzItIM14fW+NI9vVi7mAnS+JPuCfGhiDBgEa1EnpS+owK VfufPSQYc4+n6PqFrB/YFSSG5ikjFXOMb0Ni9VbJdcSYatAb6eU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:49:03 2025 by rpki-client