$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: Y9p/rwoF/Ko5+h6OrxzmtEZSrcZhaWASNAom8bEgt2E= Subject key identifier: F1:44:DB:FE:D5:89:75:9E:7E:7B:31:BB:05:B8:88:9D:EE:DD:17:4B Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 29B594C26D5C3C09A885A2B32E3D88D3B9869160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: AB Signing time: Wed 03 Sep 2025 13:10:56 +0000 Manifest this update: Wed 03 Sep 2025 13:05:56 +0000 Manifest next update: Sat 06 Sep 2025 18:03:56 +0000 Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) 2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: m3KMrkq7UnEXGqWpMr8uU5GJ2IfG/i3JraYDVhCaZvw=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:94:c2:6d:5c:3c:09:a8:85:a2:b3:2e:3d:88:d3:b9:86:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Sep 3 13:05:56 2025 GMT Not After : Sep 6 18:03:56 2025 GMT Subject: CN=F144DBFED589759E7E7B31BB05B8889DEEDD174B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f8:cf:d9:3a:40:d8:70:46:99:34:aa:be:00: 43:81:af:9a:0a:51:b4:6b:d1:45:4a:45:8e:32:7f: 00:9f:b6:0f:6a:c1:5a:15:52:41:ca:7d:c8:d0:63: aa:2e:7e:6b:98:ea:7f:06:1c:f5:28:77:a9:f7:c4: 51:c9:fe:d9:a9:5f:70:ac:1f:d5:b9:c7:dc:64:e7: 05:d2:e9:c1:d0:aa:7d:85:06:e0:de:fa:65:8c:56: b8:e2:93:c3:50:e2:5a:83:ec:48:ec:57:6a:23:a7: 0a:53:90:5b:82:3a:36:2b:c8:db:0d:e4:ef:28:f7: ba:fc:b5:ca:01:a3:84:12:ba:9f:cd:f9:5a:65:48: 5e:9f:38:88:e8:4d:9e:0c:9e:58:b8:4b:d0:fa:16: e1:9f:a4:14:6b:9d:5c:a6:6e:3f:60:9b:eb:c1:31: 34:05:86:30:37:4f:9f:6c:5b:59:d8:e8:95:c4:db: 2c:f0:86:08:e8:7e:0c:c5:67:d9:c7:70:5a:68:3b: c6:80:e9:24:89:c2:a1:70:23:5a:d7:7b:bf:9c:7d: c3:de:71:db:d4:ea:12:a5:67:f4:3c:7b:7c:cb:89: 57:78:6a:5d:9d:ef:52:51:fb:f8:a4:4a:ba:ee:0f: ff:6d:1a:87:37:0b:2a:da:ab:6e:db:e0:34:c3:c2: a5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:DB:FE:D5:89:75:9E:7E:7B:31:BB:05:B8:88:9D:EE:DD:17:4B X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ef:2f:f1:ca:7a:d5:d1:c8:c9:ac:d6:8d:a2:ab:af:9d:97: 08:1c:1e:b0:9f:18:ed:1b:47:9a:c0:d7:e4:69:ed:8e:33:dd: 76:7d:07:5a:10:cc:49:8a:f8:8e:5e:29:b9:a2:3d:a4:64:5a: 7a:93:80:24:44:52:a0:de:22:ef:e8:1d:f3:2d:1a:cb:49:13: 4e:54:14:31:47:ee:81:de:d1:fe:74:d1:cf:ec:7c:fc:aa:37: 4e:22:35:46:cc:0a:8e:96:99:46:93:76:ea:62:80:70:26:19: 97:2d:be:19:5a:cb:36:31:06:c4:05:4e:94:8b:b4:8c:a2:9e: eb:a4:c7:89:34:3f:b4:71:9b:89:75:61:23:b6:31:15:67:a6: 58:74:32:10:7d:cc:5d:25:ce:96:2c:8b:39:c3:0e:9a:f4:f8: ea:f0:b5:bd:35:f6:8c:6e:11:14:70:7a:f9:e5:6b:d4:22:c8: 39:7b:42:53:ee:d2:e9:88:67:32:98:95:f2:89:7e:5e:d6:62: 05:3f:4b:d5:69:8f:0a:22:ad:af:91:77:dd:11:dc:ca:41:b6: 7e:0e:ee:83:4c:d3:ad:01:88:73:3d:db:dd:36:ae:e9:15:84: 83:d0:e1:49:aa:35:49:0f:69:7c:3f:4c:61:c1:5c:8b:bc:e4: 3c:ad:2a:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbWUwm1cPAmohaKzLj2I07mGkWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTA5MDMxMzA1NTZaFw0yNTA5MDYxODAzNTZaMDMxMTAvBgNV BAMTKEYxNDREQkZFRDU4OTc1OUU3RTdCMzFCQjA1Qjg4ODlERUVERDE3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+M/ZOkDYcEaZNKq+AEOBr5oK UbRr0UVKRY4yfwCftg9qwVoVUkHKfcjQY6oufmuY6n8GHPUod6n3xFHJ/tmpX3Cs H9W5x9xk5wXS6cHQqn2FBuDe+mWMVrjik8NQ4lqD7EjsV2ojpwpTkFuCOjYryNsN 5O8o97r8tcoBo4QSup/N+VplSF6fOIjoTZ4Mnli4S9D6FuGfpBRrnVymbj9gm+vB MTQFhjA3T59sW1nY6JXE2yzwhgjofgzFZ9nHcFpoO8aA6SSJwqFwI1rXe7+cfcPe cdvU6hKlZ/Q8e3zLiVd4al2d71JR+/ikSrruD/9tGoc3Cyraq27b4DTDwqWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8UTb/tWJdZ5+ezG7BbiIne7dF0swHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPvL/HKetXRyMms1o2iq6+dlwgcHrCfGO0b R5rA1+Rp7Y4z3XZ9B1oQzEmK+I5eKbmiPaRkWnqTgCREUqDeIu/oHfMtGstJE05U FDFH7oHe0f500c/sfPyqN04iNUbMCo6WmUaTdupigHAmGZctvhlayzYxBsQFTpSL tIyinuukx4k0P7Rxm4l1YSO2MRVnplh0MhB9zF0lzpYsiznDDpr0+Orwtb019oxu ERRwevnla9QiyDl7QlPu0umIZzKYlfKJfl7WYgU/S9Vpjwoira+Rd90R3MpBtn4O 7oNM060BiHM92902rukVhIPQ4UmqNUkPaXw/TGHBXIu85DytKmo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:07 2025 by rpki-client