$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: 9rShQmr4aKclecqDImZqzKa09MHP5F92yCpvqzSv+D4= Subject key identifier: B0:F5:44:B1:F5:94:3F:34:A5:B3:44:C9:92:F1:E7:FC:04:55:E3:1A Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 5C9A22DDDC3F6228907C358B9093A11B0015B7EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 0F Signing time: Wed 23 Jul 2025 12:22:10 +0000 Manifest this update: Wed 23 Jul 2025 12:17:10 +0000 Manifest next update: Sat 26 Jul 2025 17:47:10 +0000 Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) 2: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: ew0iNKyaSEB1q+G4558UtIv/XXCx2b1Beo1E0yCPVAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 17:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:9a:22:dd:dc:3f:62:28:90:7c:35:8b:90:93:a1:1b:00:15:b7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Jul 23 12:17:10 2025 GMT Not After : Jul 26 17:47:10 2025 GMT Subject: CN=B0F544B1F5943F34A5B344C992F1E7FC0455E31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:77:c8:2d:f3:2b:07:64:1e:2f:27:7b:45:1d: 12:0d:77:70:8a:07:80:a2:71:d9:3e:db:ec:18:d6: 7d:31:05:53:15:46:5f:e0:da:ab:5e:5c:7c:f7:b5: 43:7d:a1:59:f7:ba:fd:1b:4f:5a:b8:6e:64:ae:e0: 22:0f:f2:e4:2a:70:89:c6:ec:a1:78:bc:4f:7b:5a: 0a:19:7d:08:02:7c:6c:7d:77:91:d2:59:4a:92:0c: 7c:ab:57:f6:f6:19:d1:24:bf:7d:da:80:bf:df:b2: 3d:a7:4a:f8:d5:0c:15:28:3a:35:de:dc:05:94:d5: 5d:e8:14:15:dd:51:67:c6:65:ef:0c:43:99:b9:8a: f3:37:84:ec:17:92:c9:b0:25:a8:83:7b:c1:4f:e1: af:cd:b6:56:4f:a8:57:44:93:f7:e0:0d:66:4d:36: b6:00:73:67:7c:68:ff:fd:84:09:54:bf:75:bd:55: 8a:31:d1:0d:8e:58:0e:e7:67:76:82:3f:41:2a:e0: 0c:db:8e:dc:90:d9:89:59:10:bb:fa:2f:40:9c:94: 4c:cc:3c:a6:85:8b:4a:e3:d3:94:f3:9c:d2:2b:cb: 2a:f1:b4:f3:14:b9:97:05:ae:38:6b:79:fa:66:81: a9:7e:86:b8:04:d9:12:51:13:12:17:d0:69:5f:5b: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:44:B1:F5:94:3F:34:A5:B3:44:C9:92:F1:E7:FC:04:55:E3:1A X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f6:6d:e7:0c:5f:f9:c9:b4:39:b7:0f:67:f1:2e:28:79:7e: 8c:6c:43:37:f7:db:a8:88:0c:11:59:68:45:33:4a:52:a7:f3: 27:db:a4:a4:6e:b3:49:ad:3c:46:8a:69:b6:87:a4:7f:83:22: bd:f7:66:2f:bf:d0:61:23:d2:d7:2b:47:d5:85:1e:2a:44:67: 0a:10:8c:67:31:dc:d5:9f:b2:16:62:a2:a1:72:ad:91:c0:72: 5e:24:05:d4:85:09:82:cb:23:07:d5:3c:1f:6c:33:fd:00:3a: ee:82:39:4d:f7:ae:f7:6b:6c:dc:7e:24:4f:66:36:fa:ba:85: 96:72:c3:d6:f9:b8:2b:6e:54:37:c9:b5:00:02:48:37:db:87: dd:aa:37:7d:8d:de:4a:15:4e:53:26:26:cc:45:d4:f6:ba:0b: 48:31:70:7a:3d:95:5d:2b:b2:0c:1c:25:54:1c:f5:43:e6:89: 79:2b:e7:d4:5c:79:50:5f:45:a1:d2:95:7d:74:15:cd:8b:d2: 35:c6:6a:6f:0e:8f:96:0b:7b:e6:7f:38:ef:d3:54:7a:86:d6: cf:0b:1d:8f:62:34:ce:f7:41:24:db:4c:64:19:7b:09:7f:a0: f0:1d:e2:f1:94:7d:96:1d:70:00:17:dd:00:18:42:86:87:2e: b7:67:4b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXJoi3dw/YiiQfDWLkJOhGwAVt+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNTA3MjMxMjE3MTBaFw0yNTA3MjYxNzQ3MTBaMDMxMTAvBgNV BAMTKEIwRjU0NEIxRjU5NDNGMzRBNUIzNDRDOTkyRjFFN0ZDMDQ1NUUzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwd8gt8ysHZB4vJ3tFHRINd3CK B4Cicdk+2+wY1n0xBVMVRl/g2qteXHz3tUN9oVn3uv0bT1q4bmSu4CIP8uQqcInG 7KF4vE97WgoZfQgCfGx9d5HSWUqSDHyrV/b2GdEkv33agL/fsj2nSvjVDBUoOjXe 3AWU1V3oFBXdUWfGZe8MQ5m5ivM3hOwXksmwJaiDe8FP4a/NtlZPqFdEk/fgDWZN NrYAc2d8aP/9hAlUv3W9VYox0Q2OWA7nZ3aCP0Eq4AzbjtyQ2YlZELv6L0CclEzM PKaFi0rj05TznNIryyrxtPMUuZcFrjhrefpmgal+hrgE2RJRExIX0GlfW30DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPVEsfWUPzSls0TJkvHn/ARV4xowHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX2becMX/nJtDm3D2fxLih5foxsQzf326iI DBFZaEUzSlKn8yfbpKRus0mtPEaKabaHpH+DIr33Zi+/0GEj0tcrR9WFHipEZwoQ jGcx3NWfshZioqFyrZHAcl4kBdSFCYLLIwfVPB9sM/0AOu6COU33rvdrbNx+JE9m Nvq6hZZyw9b5uCtuVDfJtQACSDfbh92qN32N3koVTlMmJsxF1Pa6C0gxcHo9lV0r sgwcJVQc9UPmiXkr59RceVBfRaHSlX10Fc2L0jXGam8Oj5YLe+Z/OO/TVHqG1s8L HY9iNM73QSTbTGQZewl/oPAd4vGUfZYdcAAX3QAYQoaHLrdnS8A= -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:41 2025 by rpki-client