$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: VqMCsCC0cPJcJsquSsz5aVtYC7NH75nfH49UR6HN748= Subject key identifier: 2C:56:01:14:12:91:FB:AD:BC:B6:64:51:6A:3B:07:DB:75:06:E6:F6 Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 408D01CC1E551C4B072A60270B3ED7E7D813E905 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 0166 Signing time: Thu 04 Sep 2025 01:02:22 +0000 Manifest this update: Thu 04 Sep 2025 00:57:22 +0000 Manifest next update: Sun 07 Sep 2025 09:13:22 +0000 Files and hashes: 1: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: qlYti6QmA4/hZ74M8esXJ/zpdUeqsRDRF5Ukf/cXJ1o=) 3: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) 4: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8d:01:cc:1e:55:1c:4b:07:2a:60:27:0b:3e:d7:e7:d8:13:e9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Sep 4 00:57:22 2025 GMT Not After : Sep 7 09:13:22 2025 GMT Subject: CN=2C5601141291FBADBCB664516A3B07DB7506E6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:9a:f2:e7:7c:52:48:64:21:59:b5:98:8b: a3:a7:0b:60:9a:66:e9:20:0e:de:bf:59:ef:53:11: 6a:bb:1c:28:b8:f1:55:7d:07:51:18:6c:c6:13:67: dd:6f:51:fb:4e:c4:88:a0:47:0f:5d:24:bb:8e:31: cc:85:73:e9:c8:3f:fc:0f:4f:25:56:e7:95:46:0d: 0c:a5:9c:7e:08:c9:9f:ed:63:fc:58:fa:20:a5:19: f0:d9:73:50:0b:f3:82:07:5f:dc:af:80:22:1e:19: 6f:26:3a:ac:75:09:78:3b:8c:77:91:d3:c2:58:64: 81:db:fb:a9:e4:6a:da:a2:74:da:02:57:1f:ed:f8: f1:1e:ba:41:0a:ce:e8:88:14:03:26:ac:26:5e:dc: 0d:4d:11:7e:a0:9e:2c:d5:e5:95:a6:6f:87:02:c7: 3e:5a:66:05:5b:91:70:b9:39:aa:c0:36:f3:bb:62: d7:9a:fa:25:dc:0a:3c:01:ca:d8:9f:98:7d:dc:04: 6c:1e:da:6c:9a:6a:5a:8d:2a:34:f7:39:b6:8d:97: 89:06:d0:c1:05:93:8d:65:ec:dd:21:f8:15:df:46: ed:ab:cb:e6:30:27:ae:c6:f7:35:67:f2:4e:5c:44: f8:26:2a:03:cd:89:a9:ac:41:fd:c7:c9:43:26:26: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:56:01:14:12:91:FB:AD:BC:B6:64:51:6A:3B:07:DB:75:06:E6:F6 X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e0:36:e2:19:9f:c6:f7:3a:19:73:db:eb:94:b9:42:43:5f: 99:0f:af:0a:94:62:10:33:9d:bb:22:f5:c5:9a:7a:ea:68:8d: 5b:90:95:4c:71:1b:31:ba:e3:3a:7d:f9:89:5f:87:4e:b1:3b: 47:e2:a0:1c:48:a7:22:d8:41:94:ef:b6:6b:7e:cd:07:f1:f1: 0f:fe:53:24:f7:a3:bd:74:7d:d3:b3:b9:9d:c9:84:1b:70:01: 93:ec:a1:66:bb:3b:4c:27:8a:ee:b8:7d:20:dc:4f:e0:eb:65: f4:ef:c8:09:c9:b9:6b:75:8d:72:cc:02:01:60:3c:05:ce:a5: 97:b2:2d:05:a9:0f:e1:c2:a9:7a:e7:01:f3:63:0e:ae:3a:79: 68:d4:e8:75:67:7d:79:cb:ee:0b:5a:8f:a0:78:17:ef:13:f7: 6c:19:45:fd:4d:d5:d3:8a:ef:1d:8e:f7:f3:8a:31:5d:40:a4: c5:29:b2:33:d5:59:73:a6:b2:d9:6f:a4:eb:65:4f:92:ae:81: 85:3c:5d:9b:55:f1:a9:b1:60:e4:28:58:ea:fc:51:ea:0b:76: 0f:ef:48:e5:86:af:4d:48:f7:6f:2d:60:88:69:01:2f:93:00: 39:6c:3e:88:4a:9b:b4:43:ff:35:ab:2f:a3:bf:8e:09:93:ec: 10:54:91:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQI0BzB5VHEsHKmAnCz7X59gT6QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNTA5MDQwMDU3MjJaFw0yNTA5MDcwOTEzMjJaMDMxMTAvBgNV BAMTKDJDNTYwMTE0MTI5MUZCQURCQ0I2NjQ1MTZBM0IwN0RCNzUwNkU2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHpry53xSSGQhWbWYi6OnC2Ca ZukgDt6/We9TEWq7HCi48VV9B1EYbMYTZ91vUftOxIigRw9dJLuOMcyFc+nIP/wP TyVW55VGDQylnH4IyZ/tY/xY+iClGfDZc1AL84IHX9yvgCIeGW8mOqx1CXg7jHeR 08JYZIHb+6nkatqidNoCVx/t+PEeukEKzuiIFAMmrCZe3A1NEX6gnizV5ZWmb4cC xz5aZgVbkXC5OarANvO7Ytea+iXcCjwBytifmH3cBGwe2myaalqNKjT3ObaNl4kG 0MEFk41l7N0h+BXfRu2ry+YwJ67G9zVn8k5cRPgmKgPNiamsQf3HyUMmJjSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFYBFBKR+628tmRRajsH23UG5vYwHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7gNuIZn8b3Ohlz2+uUuUJDX5kPrwqUYhAz nbsi9cWaeupojVuQlUxxGzG64zp9+Ylfh06xO0fioBxIpyLYQZTvtmt+zQfx8Q/+ UyT3o710fdOzuZ3JhBtwAZPsoWa7O0wniu64fSDcT+DrZfTvyAnJuWt1jXLMAgFg PAXOpZeyLQWpD+HCqXrnAfNjDq46eWjU6HVnfXnL7gtaj6B4F+8T92wZRf1N1dOK 7x2O9/OKMV1ApMUpsjPVWXOmstlvpOtlT5KugYU8XZtV8amxYOQoWOr8UeoLdg/v SOWGr01I928tYIhpAS+TADlsPohKm7RD/zWrL6O/jgmT7BBUkR4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:16 2025 by rpki-client