$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: cyKYmwO69rpfpxKVRt7hQslnqiBGNMSku4la2hMHq6Q= Subject key identifier: 92:D3:85:24:19:28:6D:53:A4:15:FC:A6:99:FA:8C:B5:29:49:07:A0 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 72EBA9B363E63BA4DB7EF89ED2D7DB1AF703E0F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 01E0 Signing time: Mon 08 Sep 2025 07:51:24 +0000 Manifest this update: Mon 08 Sep 2025 07:46:24 +0000 Manifest next update: Thu 11 Sep 2025 09:39:24 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: V6LAW2f0jdproDZ7gehsXqaXO/PHt1mbYMoN74lQyf4=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 09:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:eb:a9:b3:63:e6:3b:a4:db:7e:f8:9e:d2:d7:db:1a:f7:03:e0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Sep 8 07:46:24 2025 GMT Not After : Sep 11 09:39:24 2025 GMT Subject: CN=92D3852419286D53A415FCA699FA8CB5294907A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:52:69:49:5e:56:2f:36:51:b8:6d:c5:4e: d9:e1:18:13:cb:f2:e9:13:0d:27:a0:09:3a:4f:04: 38:d1:28:72:9a:44:c5:fe:9a:b8:ec:7a:97:a6:db: 57:2e:ad:8a:db:e7:2a:f5:8b:56:8e:9a:be:60:37: e7:ef:38:48:43:a5:57:2c:15:0b:ea:1d:9b:24:60: a9:cb:c4:02:df:7b:62:e5:e8:6d:0b:0f:ce:2a:ea: e1:1d:85:bb:a2:a1:0c:6f:55:d0:4b:00:83:46:0d: f0:81:55:f8:d8:bf:76:5e:e6:6b:8d:c9:8e:aa:93: 5a:16:f0:ef:e6:65:1a:f2:26:95:8d:c2:8b:50:f9: a6:bc:dc:d6:c8:e5:3e:29:fc:f5:92:96:9d:0c:cb: c1:f5:a2:25:47:60:b5:30:ae:ac:db:f7:9a:56:7e: e9:10:65:2d:47:bc:f8:5e:f2:f7:7e:7a:01:eb:77: bf:e8:08:d1:f0:80:48:1d:3a:f1:23:14:8a:dd:3b: a9:06:21:cc:bf:8e:e9:22:d3:d5:35:19:fd:56:e6: 8f:1d:1e:3b:64:8d:8f:66:d4:da:e5:e2:d5:26:70: f6:2e:72:34:f3:76:e4:9f:71:af:0a:79:74:22:9b: 18:a1:03:95:dd:3c:bd:0c:34:58:30:fa:5c:21:cb: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D3:85:24:19:28:6D:53:A4:15:FC:A6:99:FA:8C:B5:29:49:07:A0 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a5:99:f2:f6:7c:f2:0c:38:ba:9e:78:ac:fd:7c:fd:0d:d3: 41:cf:92:0d:0b:f8:d1:ac:9f:67:f9:f6:d4:57:47:bf:a3:2d: 8b:9f:8f:5b:4a:c4:fc:a2:ab:94:61:5f:84:7f:2c:0e:0b:88: 69:f6:0a:bb:02:b5:93:a6:e2:28:e6:4a:3d:74:b5:c6:98:55: 70:68:82:5e:9d:8d:f4:67:05:d2:e9:7a:04:74:22:d2:65:cd: ce:82:39:24:9f:34:ec:d8:17:16:c8:9b:80:57:f6:19:14:fd: 7d:4e:a6:92:2a:7a:ed:78:25:a4:1c:40:97:4f:7e:b0:e9:a8: f8:6a:1d:c0:a7:4f:81:e3:52:60:0b:63:a4:f6:21:6f:68:03: f0:f1:43:38:a3:43:ff:df:45:df:78:0d:d8:56:87:6e:3f:ef: f1:6b:72:5c:1c:18:f5:43:4c:9d:57:fd:5e:d2:72:b4:24:09: a0:2f:8b:3a:d4:8f:6b:a8:e5:9a:0a:8d:dd:a8:58:cf:fd:9f: a5:45:86:c8:c0:6a:b0:ee:27:ac:03:19:43:28:68:2f:4f:5b: 98:4d:2f:dc:4a:14:1e:21:33:0f:91:ac:16:c9:c1:d8:26:6a: 4b:d7:85:91:c0:23:c1:65:1e:64:a4:68:b8:a8:be:c2:d2:83: 53:62:38:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuups2PmO6Tbfvie0tfbGvcD4PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNTA5MDgwNzQ2MjRaFw0yNTA5MTEwOTM5MjRaMDMxMTAvBgNV BAMTKDkyRDM4NTI0MTkyODZENTNBNDE1RkNBNjk5RkE4Q0I1Mjk0OTA3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcVJpSV5WLzZRuG3FTtnhGBPL 8ukTDSegCTpPBDjRKHKaRMX+mrjsepem21curYrb5yr1i1aOmr5gN+fvOEhDpVcs FQvqHZskYKnLxALfe2Ll6G0LD84q6uEdhbuioQxvVdBLAINGDfCBVfjYv3Ze5muN yY6qk1oW8O/mZRryJpWNwotQ+aa83NbI5T4p/PWSlp0My8H1oiVHYLUwrqzb95pW fukQZS1HvPhe8vd+egHrd7/oCNHwgEgdOvEjFIrdO6kGIcy/juki09U1Gf1W5o8d HjtkjY9m1Nrl4tUmcPYucjTzduSfca8KeXQimxihA5XdPL0MNFgw+lwhyx5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUktOFJBkobVOkFfymmfqMtSlJB6AwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSlmfL2fPIMOLqeeKz9fP0N00HPkg0L+NGs n2f59tRXR7+jLYufj1tKxPyiq5RhX4R/LA4LiGn2CrsCtZOm4ijmSj10tcaYVXBo gl6djfRnBdLpegR0ItJlzc6COSSfNOzYFxbIm4BX9hkU/X1OppIqeu14JaQcQJdP frDpqPhqHcCnT4HjUmALY6T2IW9oA/DxQzijQ//fRd94DdhWh24/7/FrclwcGPVD TJ1X/V7ScrQkCaAvizrUj2uo5ZoKjd2oWM/9n6VFhsjAarDuJ6wDGUMoaC9PW5hN L9xKFB4hMw+RrBbJwdgmakvXhZHAI8FlHmSkaLiovsLSg1NiOHk= -----END CERTIFICATE-----Generated at Tue Sep 9 01:23:30 2025 by rpki-client