$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: 4Lp0Rg/MwPUt0wMbHm9v9o3lZFmwk7thqkaT0G20W0k= Subject key identifier: 5D:37:89:7F:09:D6:A0:BC:A7:5E:1A:D6:D1:79:0B:FD:4F:1B:4B:89 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 05DCD61F3E6E4CE26E5FE5065B5654BBC99A1879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: 7A Signing time: Mon 21 Jul 2025 05:41:15 +0000 Manifest this update: Mon 21 Jul 2025 05:36:15 +0000 Manifest next update: Thu 24 Jul 2025 10:47:15 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: sdFf65pWHqDguzQodheeefSyOGT0g0gjcknsFa81ar4=) 2: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: eX28dJiZRJ88TpGAv/LsMIPjNNZ1/+Idk+AoW5GZd/w=) 3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: TxTC2v3sBGuNzD/7pAwJq8+hVg6iPYD1W71+E9F+XzU=) 4: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:dc:d6:1f:3e:6e:4c:e2:6e:5f:e5:06:5b:56:54:bb:c9:9a:18:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Jul 21 05:36:15 2025 GMT Not After : Jul 24 10:47:15 2025 GMT Subject: CN=5D37897F09D6A0BCA75E1AD6D1790BFD4F1B4B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:95:72:65:1c:d1:e6:b9:5e:bc:60:18:35: 15:b9:ef:b9:39:91:d0:17:8d:dd:7c:70:a6:75:f9: d0:e0:55:23:f2:a4:94:02:4e:2a:1f:e4:ce:46:34: 59:0b:6d:5f:ed:5b:98:b4:b9:dc:f5:e0:aa:8d:1e: 88:ba:84:6d:34:78:8b:48:43:98:57:7d:a4:19:4d: 65:65:cc:df:21:b1:ad:47:d8:dd:7f:ae:66:e3:db: 6a:9c:be:60:b4:01:b7:e1:b2:09:63:5a:97:3b:0d: 96:2d:21:83:b2:10:99:ee:7c:58:fb:2e:1d:74:f6: c8:e5:4b:7a:b0:f9:df:f3:8c:ec:d7:37:c1:79:cf: 21:98:74:84:14:12:31:5d:90:21:ca:d5:84:2b:c4: e4:2e:7e:42:d3:41:1d:56:cc:63:5b:08:87:36:b9: 45:8e:6d:5b:05:1c:4e:ad:82:54:b0:20:17:1f:32: 0b:44:b0:e7:cd:64:dd:72:39:1f:0d:bd:aa:72:69: f4:c4:13:5f:3a:eb:20:02:65:a7:8b:bf:30:a2:65: e7:d6:7e:83:74:17:3b:c3:76:98:0d:b0:05:53:c7: 62:a6:fe:9f:5d:9f:15:b6:bc:75:88:68:98:0f:6a: 50:ee:3d:41:ab:8a:f4:5d:34:3f:a9:1a:17:85:12: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:37:89:7F:09:D6:A0:BC:A7:5E:1A:D6:D1:79:0B:FD:4F:1B:4B:89 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:00:b5:29:45:d0:0d:f3:3d:7e:9c:ba:da:fb:57:9b:39:97: 93:e2:d0:2c:c3:39:88:28:e6:c7:e9:19:7d:f0:c9:6a:25:fc: 93:18:b9:16:e3:ee:a2:8b:5b:fc:bd:a4:7f:7c:d5:e2:a0:70: 61:50:cb:1d:95:8f:c7:c1:cf:63:c9:45:37:16:29:83:96:bc: 45:9e:5a:00:10:5a:62:a0:4e:33:10:74:d8:3f:29:2c:c1:5f: ef:b4:03:5f:10:03:6f:58:b0:3f:ee:96:a7:68:46:49:5c:07: f1:12:03:1e:b8:85:1c:6b:ed:d0:b0:0a:01:d9:3d:25:47:1b: 87:08:ce:29:31:d6:c7:65:e7:21:43:37:ca:63:33:7a:87:a9: 14:06:5d:b2:8c:9c:4a:84:9e:0d:80:cc:64:de:30:32:6c:30: 1e:08:26:8f:95:50:28:7b:b7:dd:27:7b:34:3d:f1:08:bc:bc: 28:a5:f9:83:34:5e:65:3b:c0:15:32:b1:bd:f9:7a:1d:86:40: 5a:bd:11:cd:74:6d:21:37:ad:8f:d8:22:a5:eb:35:e6:2c:50: 60:8b:b1:ab:f6:0d:c6:78:e0:46:26:72:a6:28:68:2e:d1:2c: 88:02:03:29:72:14:c0:0c:5c:95:e4:0f:ab:98:c1:cd:fb:d1: 8f:62:08:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdzWHz5uTOJuX+UGW1ZUu8maGHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTA3MjEwNTM2MTVaFw0yNTA3MjQxMDQ3MTVaMDMxMTAvBgNV BAMTKDVEMzc4OTdGMDlENkEwQkNBNzVFMUFENkQxNzkwQkZENEYxQjRCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97JVyZRzR5rlevGAYNRW577k5 kdAXjd18cKZ1+dDgVSPypJQCTiof5M5GNFkLbV/tW5i0udz14KqNHoi6hG00eItI Q5hXfaQZTWVlzN8hsa1H2N1/rmbj22qcvmC0AbfhsgljWpc7DZYtIYOyEJnufFj7 Lh109sjlS3qw+d/zjOzXN8F5zyGYdIQUEjFdkCHK1YQrxOQufkLTQR1WzGNbCIc2 uUWObVsFHE6tglSwIBcfMgtEsOfNZN1yOR8NvapyafTEE1866yACZaeLvzCiZefW foN0FzvDdpgNsAVTx2Km/p9dnxW2vHWIaJgPalDuPUGrivRdND+pGheFEtuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTeJfwnWoLynXhrW0XkL/U8bS4kwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANoAtSlF0A3zPX6cutr7V5s5l5Pi0CzDOYgo 5sfpGX3wyWol/JMYuRbj7qKLW/y9pH981eKgcGFQyx2Vj8fBz2PJRTcWKYOWvEWe WgAQWmKgTjMQdNg/KSzBX++0A18QA29YsD/ulqdoRklcB/ESAx64hRxr7dCwCgHZ PSVHG4cIzikx1sdl5yFDN8pjM3qHqRQGXbKMnEqEng2AzGTeMDJsMB4IJo+VUCh7 t90nezQ98Qi8vCil+YM0XmU7wBUysb35eh2GQFq9Ec10bSE3rY/YIqXrNeYsUGCL sav2DcZ44EYmcqYoaC7RLIgCAylyFMAMXJXkD6uYwc370Y9iCJ4= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:58 2025 by rpki-client