$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: SA9o9wgqCRBdhSJB/WCYTWlPokn5cAteOP5x68Pl6qM= Subject key identifier: 7D:B6:39:6D:B0:83:DD:1D:25:86:3B:92:00:9F:29:85:EE:EF:80:29 Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 02CD1A8788D90BD03EE689D8E6CC3B5E2285E31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 032A Signing time: Sat 19 Jul 2025 07:20:37 +0000 Manifest this update: Sat 19 Jul 2025 07:15:37 +0000 Manifest next update: Tue 22 Jul 2025 12:08:37 +0000 Files and hashes: 1: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: P9NOuBWROUNQL/9KXi/V/RmLcLX5/g99NqxuoQf4mOQ=) 2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cd:1a:87:88:d9:0b:d0:3e:e6:89:d8:e6:cc:3b:5e:22:85:e3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Jul 19 07:15:37 2025 GMT Not After : Jul 22 12:08:37 2025 GMT Subject: CN=7DB6396DB083DD1D25863B92009F2985EEEF8029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:e8:74:a7:8c:9a:70:e2:52:7b:6a:f8:b3: ce:98:73:a2:80:4d:34:d0:31:45:cf:ce:40:69:32: 0d:46:e7:5a:37:4e:60:0d:dc:89:dd:7f:77:39:d8: 80:9a:85:d4:8d:c8:90:11:b9:ea:80:d1:4e:72:b4: 07:10:7e:76:91:1c:d5:c4:70:9e:6d:55:89:c5:29: 23:61:69:62:05:dc:9d:05:c6:d4:d2:f0:a2:c5:0b: 28:1b:46:1c:15:a8:35:f9:dd:24:dc:33:41:78:6b: c0:f1:b5:f9:7e:d7:3c:c2:3e:92:06:c7:f6:b1:3f: 68:f1:92:aa:c0:60:63:bf:15:b5:91:81:32:01:be: 34:60:0a:16:8d:da:5b:78:bd:f2:29:0e:10:6a:02: 6a:85:33:12:e2:aa:d8:65:56:2b:bb:09:91:fa:d9: ec:54:36:43:76:b5:a2:30:08:f9:c4:09:a2:5d:c5: 3f:40:6f:8a:0c:e9:fb:7b:4f:12:1b:40:f3:d2:47: bf:6c:06:ec:3d:21:ae:d5:21:3b:98:7f:96:2e:11: dc:e7:36:b5:a2:bb:35:37:c3:63:d2:65:00:c5:9c: c1:00:67:c4:d7:c6:ba:d4:57:0e:f5:53:e7:bb:e9: f7:e8:cb:e8:2d:c0:f9:7f:7a:40:71:aa:24:6d:4b: f8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:39:6D:B0:83:DD:1D:25:86:3B:92:00:9F:29:85:EE:EF:80:29 X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b1:7f:95:2d:a6:db:9e:0b:b5:9a:6c:21:da:e4:b1:dd:f5: b8:02:ef:53:be:c1:7c:5c:74:70:f8:8b:39:6a:d4:d5:60:ec: eb:28:72:02:e0:5f:bb:ff:e6:d9:3c:d2:eb:f1:67:06:a9:1e: 9c:ef:2d:46:b4:3c:91:8e:c4:5a:20:82:1c:d2:bf:44:9c:bf: 6f:e9:a0:8d:44:1c:b4:a6:e0:bb:2f:fb:46:2f:35:0b:e6:cd: 25:25:22:c9:e0:92:5d:a9:9b:0e:9a:83:3b:5b:70:cc:5f:8f: f0:38:dd:76:60:b6:c7:2d:2a:c6:10:d5:a7:ee:84:20:b6:b0: 1d:45:04:c3:c1:91:90:90:b1:89:65:cf:1f:ce:fd:fb:8f:f2: 59:f5:84:41:0c:d5:71:c2:8c:c3:bf:d2:93:f7:06:a8:9a:7b: 13:f6:1c:42:c4:86:5b:85:c2:4f:9d:8c:85:2e:de:f3:2b:5a: a8:61:5e:32:cc:53:4b:64:34:83:8e:ea:a9:4a:a1:78:ae:7d: 38:31:1e:1d:87:ee:89:50:63:e9:98:f1:30:13:6a:52:f4:37: 37:bd:39:22:87:5c:bd:ed:07:a3:70:1e:f1:bc:1c:3a:d8:bc: 3e:af:fb:f8:f1:3b:43:3b:db:d5:6c:0c:67:8e:76:5d:d1:cf: ee:ea:6d:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAs0ah4jZC9A+5onY5sw7XiKF4x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTA3MTkwNzE1MzdaFw0yNTA3MjIxMjA4MzdaMDMxMTAvBgNV BAMTKDdEQjYzOTZEQjA4M0REMUQyNTg2M0I5MjAwOUYyOTg1RUVFRjgwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSeh0p4yacOJSe2r4s86Yc6KA TTTQMUXPzkBpMg1G51o3TmAN3Indf3c52ICahdSNyJARueqA0U5ytAcQfnaRHNXE cJ5tVYnFKSNhaWIF3J0FxtTS8KLFCygbRhwVqDX53STcM0F4a8Dxtfl+1zzCPpIG x/axP2jxkqrAYGO/FbWRgTIBvjRgChaN2lt4vfIpDhBqAmqFMxLiqthlViu7CZH6 2exUNkN2taIwCPnECaJdxT9Ab4oM6ft7TxIbQPPSR79sBuw9Ia7VITuYf5YuEdzn NrWiuzU3w2PSZQDFnMEAZ8TXxrrUVw71U+e76ffoy+gtwPl/ekBxqiRtS/h9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbY5bbCD3R0lhjuSAJ8phe7vgCkwHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuxf5UtptueC7WabCHa5LHd9bgC71O+wXxc dHD4izlq1NVg7OsocgLgX7v/5tk80uvxZwapHpzvLUa0PJGOxFogghzSv0Scv2/p oI1EHLSm4Lsv+0YvNQvmzSUlIsngkl2pmw6agztbcMxfj/A43XZgtsctKsYQ1afu hCC2sB1FBMPBkZCQsYllzx/O/fuP8ln1hEEM1XHCjMO/0pP3BqiaexP2HELEhluF wk+djIUu3vMrWqhhXjLMU0tkNIOO6qlKoXiufTgxHh2H7olQY+mY8TATalL0Nze9 OSKHXL3tB6NwHvG8HDrYvD6v+/jxO0M729VsDGeOdl3Rz+7qbR8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:04 2025 by rpki-client