$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: MrXNzS438kn+eEQTQjJSQO7Fmq4nkqxSe/P0AeyaHK0= Subject key identifier: 75:82:E8:A5:5C:0F:17:29:36:D6:86:3C:C4:35:D4:E9:76:49:09:B1 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 415D5EBC28F6659ACC3A701D22291E1387EC81C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 0189 Signing time: Sat 06 Sep 2025 11:41:36 +0000 Manifest this update: Sat 06 Sep 2025 11:36:36 +0000 Manifest next update: Tue 09 Sep 2025 17:47:36 +0000 Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: CNVnZ2TUoMruR0CciJnHAsxtNJFnXHRpSlzJLr83i/A=) 2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5d:5e:bc:28:f6:65:9a:cc:3a:70:1d:22:29:1e:13:87:ec:81:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Sep 6 11:36:36 2025 GMT Not After : Sep 9 17:47:36 2025 GMT Subject: CN=7582E8A55C0F172936D6863CC435D4E9764909B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:70:2a:d5:1a:21:ba:1d:a7:6d:2e:f9:0e: b5:3c:c2:21:3c:e1:12:c8:21:4c:15:20:04:ad:1e: eb:f7:83:a6:81:e6:66:69:62:59:6c:98:17:9b:75: 4f:7e:e8:2e:ef:63:1c:fb:d2:74:0a:8b:34:eb:45: 43:e2:d3:72:ac:8d:b8:24:48:b5:6d:80:72:65:dc: 66:c5:38:c1:b3:77:10:4b:3a:c9:29:2b:41:4c:66: 92:8a:bc:07:93:a1:a8:c3:d9:bf:8d:a1:ac:ee:54: e6:b9:2e:a9:6f:05:31:2b:d7:1b:b1:79:0d:c7:ff: 4a:9b:f9:ab:f3:a9:9a:34:91:79:ac:e8:75:d8:12: e1:48:22:ba:16:b2:0d:3f:30:6b:3a:5d:4f:c4:25: 78:90:aa:22:c4:c3:b6:f2:f9:65:98:de:b5:fa:13: c4:fa:af:90:6d:22:12:5c:2a:15:ff:52:1f:cb:43: 39:d2:ca:d8:a7:9c:9d:4a:a5:cd:e5:72:59:0d:da: 63:f8:0f:e2:f9:46:03:c5:0c:67:58:24:f0:96:3f: d3:f4:13:ad:dd:3f:a7:a5:1c:32:d2:14:d0:6a:c5: e4:b4:85:ea:9c:e9:14:89:63:4f:b5:95:23:c1:90: 2b:04:c5:9f:97:ed:41:93:ae:dc:d3:62:40:4d:d1: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:E8:A5:5C:0F:17:29:36:D6:86:3C:C4:35:D4:E9:76:49:09:B1 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0d:eb:6e:96:92:f6:8e:85:78:af:29:23:8e:e4:63:ff:48: 4c:28:ff:5e:b5:75:d8:1a:71:d5:0d:64:45:33:b3:4c:7f:fb: 4f:94:51:a9:4a:3d:4c:0b:e2:2b:4f:b7:52:24:09:da:a7:c5: 9d:56:73:08:18:ff:70:8d:1c:72:9a:f1:ae:6d:17:10:7e:2c: d3:72:6f:18:48:48:e9:e0:ba:74:22:f9:9d:fe:2f:b0:fe:65: ff:e3:81:9c:d2:cb:5a:b6:0e:ec:b9:f1:60:a6:6b:89:0b:bc: be:c5:1f:b5:c0:dd:7f:88:a4:b4:c9:6f:17:37:a2:df:05:93: 01:c8:54:ba:39:ee:cb:e1:cb:85:90:92:9b:8e:b1:58:89:b4: d9:10:33:da:1c:66:63:bf:5c:7c:c9:a7:f2:96:15:1a:df:d6: ea:bc:14:24:8a:ec:be:14:1d:43:02:2b:d5:47:89:a8:9a:e3: da:27:96:e2:c8:58:c7:c2:86:df:6f:56:17:66:c7:22:9d:56: 24:89:98:21:e7:64:a2:9b:26:c6:26:8c:1e:68:7a:72:4d:84: 08:46:1c:57:ae:d6:22:28:70:6a:87:ff:ef:21:00:f9:98:e4: 3a:60:0a:1f:c0:59:32:52:7e:25:63:62:bc:be:9a:4b:3f:0e: a4:db:10:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQV1evCj2ZZrMOnAdIikeE4fsgcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTA5MDYxMTM2MzZaFw0yNTA5MDkxNzQ3MzZaMDMxMTAvBgNV BAMTKDc1ODJFOEE1NUMwRjE3MjkzNkQ2ODYzQ0M0MzVENEU5NzY0OTA5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3t3Aq1Rohuh2nbS75DrU8wiE8 4RLIIUwVIAStHuv3g6aB5mZpYllsmBebdU9+6C7vYxz70nQKizTrRUPi03Ksjbgk SLVtgHJl3GbFOMGzdxBLOskpK0FMZpKKvAeToajD2b+NoazuVOa5LqlvBTEr1xux eQ3H/0qb+avzqZo0kXms6HXYEuFIIroWsg0/MGs6XU/EJXiQqiLEw7by+WWY3rX6 E8T6r5BtIhJcKhX/Uh/LQznSytinnJ1Kpc3lclkN2mP4D+L5RgPFDGdYJPCWP9P0 E63dP6elHDLSFNBqxeS0heqc6RSJY0+1lSPBkCsExZ+X7UGTrtzTYkBN0aMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdYLopVwPFyk21oY8xDXU6XZJCbEwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoN626WkvaOhXivKSOO5GP/SEwo/161ddga cdUNZEUzs0x/+0+UUalKPUwL4itPt1IkCdqnxZ1WcwgY/3CNHHKa8a5tFxB+LNNy bxhISOngunQi+Z3+L7D+Zf/jgZzSy1q2Duy58WCma4kLvL7FH7XA3X+IpLTJbxc3 ot8FkwHIVLo57svhy4WQkpuOsViJtNkQM9ocZmO/XHzJp/KWFRrf1uq8FCSK7L4U HUMCK9VHiaia49onluLIWMfCht9vVhdmxyKdViSJmCHnZKKbJsYmjB5oenJNhAhG HFeu1iIocGqH/+8hAPmY5DpgCh/AWTJSfiVjYry+mks/DqTbELI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:42 2025 by rpki-client