$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: EVnQOtMBnfcfjnIckhVpXlqEM0G9v3q35r+q9gTEpQU= Subject key identifier: 95:92:3C:61:1D:2F:5C:22:76:63:77:80:EC:EA:0A:62:08:47:A0:FD Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 3968B1E0066982D4337ED9D3CF906D60C5FC3063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0269 Signing time: Fri 05 Sep 2025 04:11:05 +0000 Manifest this update: Fri 05 Sep 2025 04:06:05 +0000 Manifest next update: Mon 08 Sep 2025 14:33:05 +0000 Files and hashes: 1: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=) 2: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: IvwF0Cz7e1Hln3QOcPgxOtQpspMGTfxcwVGMigLFoSs=) 3: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:68:b1:e0:06:69:82:d4:33:7e:d9:d3:cf:90:6d:60:c5:fc:30:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Sep 5 04:06:05 2025 GMT Not After : Sep 8 14:33:05 2025 GMT Subject: CN=95923C611D2F5C2276637780ECEA0A620847A0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c2:70:49:7e:fc:13:c0:3b:43:6b:50:d7:83: 57:c6:ec:89:34:20:f1:4d:24:df:c3:55:71:d7:4d: 6e:92:d4:cd:5e:9b:01:f3:14:d4:13:02:2d:fd:bb: 6e:9e:f2:98:f3:8d:04:52:2c:3d:b4:cc:be:4a:a0: 47:d2:d4:da:ce:25:01:0b:c5:6c:19:a0:2d:21:f7: 12:31:75:0a:12:92:7f:06:64:42:d9:04:d2:59:f3: 5a:16:37:03:f7:0f:78:1b:f8:9b:75:58:bc:99:14: 0c:03:c2:0d:50:6f:6f:73:fe:24:c7:6f:d3:26:5c: f0:68:71:b8:1c:84:e4:d2:55:2b:c5:ee:e5:a2:e4: ca:21:4c:e3:f6:69:59:e7:c2:0e:92:63:a8:4f:38: 29:98:48:00:b3:06:15:53:45:d9:b6:e5:18:bb:de: 0d:4e:a3:7c:0e:4e:8c:7f:52:b4:87:f2:bb:42:3e: 65:53:30:de:0d:18:be:53:88:82:02:51:68:08:0e: fd:4b:3b:09:43:f8:15:16:4a:71:d8:bc:d5:62:c8: 23:72:f0:96:34:44:bf:de:1a:68:67:8e:f9:6f:f8: e0:51:81:f0:92:1b:7c:33:4d:a2:cf:5f:7c:d8:e3: 03:18:9c:82:7d:8d:2f:a8:51:38:5d:1f:5f:f6:5d: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:92:3C:61:1D:2F:5C:22:76:63:77:80:EC:EA:0A:62:08:47:A0:FD X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e8:a3:11:f5:44:5b:2e:a6:a0:6a:22:38:9a:36:fd:e0:2e: 7a:14:28:7a:4a:4d:1f:98:de:0c:f8:95:32:d2:5d:f1:d4:56: f7:dd:4b:7b:84:ce:63:e7:c3:70:40:5d:d9:20:6c:e6:71:95: 07:1a:0d:12:cc:3f:f8:2c:4a:ab:1d:71:96:1a:c2:5f:8b:84: 53:f2:7b:f8:9c:65:b2:b9:f7:bb:44:63:e7:e2:58:60:06:e5: a4:17:fe:c3:da:f9:c8:77:4d:71:d0:cf:d9:82:ca:4e:5f:e8: 9e:79:11:05:04:2c:54:d3:05:78:88:19:6b:2a:a9:5c:c2:b7: 6e:fc:f3:60:ee:36:41:45:c2:c3:b8:8f:1b:2e:66:de:b5:1a: 9e:e5:50:a0:70:b1:04:0a:a5:ed:2e:d0:83:be:31:12:0f:a2: 0a:2b:9a:f4:2c:e4:32:54:83:9d:eb:25:98:f9:2a:55:59:99: 23:bb:4b:d7:fc:44:fa:7c:f1:ae:c2:a2:a4:cf:93:64:5d:74: b9:c8:91:20:5f:90:ea:c4:d8:b9:40:f1:5d:bc:fa:c4:99:79: 8c:4a:06:c7:ec:f7:cd:1e:71:01:6f:2c:aa:ad:ee:cd:6c:5f: b8:28:a4:d8:51:93:63:0f:20:bf:cd:f1:69:60:3d:65:c4:97: 5a:3c:c4:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWix4AZpgtQzftnTz5BtYMX8MGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTA5MDUwNDA2MDVaFw0yNTA5MDgxNDMzMDVaMDMxMTAvBgNV BAMTKDk1OTIzQzYxMUQyRjVDMjI3NjYzNzc4MEVDRUEwQTYyMDg0N0EwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwwnBJfvwTwDtDa1DXg1fG7Ik0 IPFNJN/DVXHXTW6S1M1emwHzFNQTAi39u26e8pjzjQRSLD20zL5KoEfS1NrOJQEL xWwZoC0h9xIxdQoSkn8GZELZBNJZ81oWNwP3D3gb+Jt1WLyZFAwDwg1Qb29z/iTH b9MmXPBocbgchOTSVSvF7uWi5MohTOP2aVnnwg6SY6hPOCmYSACzBhVTRdm25Ri7 3g1Oo3wOTox/UrSH8rtCPmVTMN4NGL5TiIICUWgIDv1LOwlD+BUWSnHYvNViyCNy 8JY0RL/eGmhnjvlv+OBRgfCSG3wzTaLPX3zY4wMYnIJ9jS+oUThdH1/2XTeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlZI8YR0vXCJ2Y3eA7OoKYghHoP0wHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnooxH1RFsupqBqIjiaNv3gLnoUKHpKTR+Y 3gz4lTLSXfHUVvfdS3uEzmPnw3BAXdkgbOZxlQcaDRLMP/gsSqsdcZYawl+LhFPy e/icZbK597tEY+fiWGAG5aQX/sPa+ch3TXHQz9mCyk5f6J55EQUELFTTBXiIGWsq qVzCt27882DuNkFFwsO4jxsuZt61Gp7lUKBwsQQKpe0u0IO+MRIPogormvQs5DJU g53rJZj5KlVZmSO7S9f8RPp88a7CoqTPk2RddLnIkSBfkOrE2LlA8V28+sSZeYxK Bsfs980ecQFvLKqt7s1sX7gopNhRk2MPIL/N8WlgPWXEl1o8xDQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:51 2025 by rpki-client