$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: 3vj4qMR9oIgQTtLxRgOTuaHC4ga20NEJZwg9Km7ID5M= Subject key identifier: E2:99:53:F2:90:44:33:89:3E:A0:74:8D:79:19:CB:A5:DE:A6:C1:59 Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 7F1D5A80BC91EE1DEF561452263E1BBA1D2711E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 0206 Signing time: Thu 04 Sep 2025 13:31:09 +0000 Manifest this update: Thu 04 Sep 2025 13:26:09 +0000 Manifest next update: Sun 07 Sep 2025 15:36:09 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: T1r9hoWR3XCHnMkKPv5N0kDi+24m/k9X3ArCS/Es5e8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:5a:80:bc:91:ee:1d:ef:56:14:52:26:3e:1b:ba:1d:27:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Sep 4 13:26:09 2025 GMT Not After : Sep 7 15:36:09 2025 GMT Subject: CN=E29953F2904433893EA0748D7919CBA5DEA6C159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:f9:76:1d:7f:86:94:c2:43:e7:c0:cd:b0: 6e:b5:b9:94:46:2c:5e:a5:ce:c4:90:4f:58:e9:2a: de:92:2f:9b:5c:33:8e:4f:82:b2:7c:36:83:46:30: c1:71:53:a4:90:93:3a:21:90:22:fd:dd:9d:b2:81: 39:fc:41:b2:f9:64:06:6d:90:1c:5a:f2:96:a7:9a: 2a:2e:46:1a:2d:79:3f:17:78:7c:31:9e:5a:fb:cf: ab:dd:9b:de:06:12:e6:5b:49:f2:4f:54:c6:bb:a4: 14:43:d6:e1:5e:a8:3f:f2:d7:0a:5d:97:c3:25:a9: 4b:ea:b9:80:6a:29:0c:9f:74:24:44:cd:72:85:fc: d8:55:fb:57:35:a4:72:67:5b:2d:15:9f:b5:82:6c: 7b:ad:8b:3d:cb:18:d7:22:00:eb:6d:7e:b6:81:cf: c7:5d:1e:4d:d3:48:35:9e:6d:2a:ff:8e:1e:93:27: 89:4e:83:77:4c:7a:26:87:80:cc:8f:ca:bd:09:06: 26:32:17:a1:9a:ae:71:eb:72:26:4f:f0:d7:38:05: c9:74:db:0a:d2:d6:43:eb:cd:21:30:45:88:20:15: 99:62:6f:98:d2:a4:af:67:cf:1b:d3:28:1c:11:d3: ed:04:1c:bc:22:0c:ed:bb:51:da:3a:51:3e:78:6a: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:99:53:F2:90:44:33:89:3E:A0:74:8D:79:19:CB:A5:DE:A6:C1:59 X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f5:52:37:13:2d:99:64:b1:fb:01:8b:0e:75:c5:39:8e:ce: 8f:be:75:ce:ca:e9:bd:11:3b:4d:50:19:c4:bb:4c:4a:74:63: 19:96:97:1e:4b:b3:3f:76:d0:c0:39:cb:8d:6c:68:d3:cd:9c: 9b:36:4f:43:02:ed:d6:69:29:99:45:cd:3b:c6:9d:88:25:f8: 44:d1:78:8f:dd:4e:3e:97:08:f9:65:0b:97:b4:d4:a4:36:e8: 90:9a:e1:fe:79:b0:44:10:85:05:c0:b4:d0:2c:ec:bf:ce:2c: 29:3b:5a:b0:65:ac:fd:30:f3:f4:9e:8d:43:d6:e9:15:62:c6: 5d:f6:c0:5c:37:48:b0:89:4d:6f:12:8f:f0:c8:b8:db:ee:d2: c9:7e:2a:f9:fd:5a:43:0b:c5:fa:4e:78:8e:2d:42:d8:43:b5: 18:b5:f2:e2:d1:d4:32:74:4a:28:22:5a:a3:4b:51:d7:84:9e: 59:ef:f7:6e:a7:cd:66:7a:4e:2a:1b:20:c8:f8:a4:cb:47:b8: a6:93:31:5c:c7:86:d5:1e:d9:7a:8b:81:0f:ea:d1:34:67:2c: e8:30:01:7c:34:65:50:4c:1e:59:d1:f6:1e:6a:c9:d1:01:1a: 3e:53:87:5c:a5:45:5f:3c:fd:2e:53:57:c3:7d:fd:9e:15:74: 9b:25:a4:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfx1agLyR7h3vVhRSJj4buh0nEeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTA5MDQxMzI2MDlaFw0yNTA5MDcxNTM2MDlaMDMxMTAvBgNV BAMTKEUyOTk1M0YyOTA0NDMzODkzRUEwNzQ4RDc5MTlDQkE1REVBNkMxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/m/l2HX+GlMJD58DNsG61uZRG LF6lzsSQT1jpKt6SL5tcM45PgrJ8NoNGMMFxU6SQkzohkCL93Z2ygTn8QbL5ZAZt kBxa8panmiouRhoteT8XeHwxnlr7z6vdm94GEuZbSfJPVMa7pBRD1uFeqD/y1wpd l8MlqUvquYBqKQyfdCREzXKF/NhV+1c1pHJnWy0Vn7WCbHutiz3LGNciAOttfraB z8ddHk3TSDWebSr/jh6TJ4lOg3dMeiaHgMyPyr0JBiYyF6GarnHrciZP8Nc4Bcl0 2wrS1kPrzSEwRYggFZlib5jSpK9nzxvTKBwR0+0EHLwiDO27Udo6UT54aiAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4plT8pBEM4k+oHSNeRnLpd6mwVkwHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr1UjcTLZlksfsBiw51xTmOzo++dc7K6b0R O01QGcS7TEp0YxmWlx5Lsz920MA5y41saNPNnJs2T0MC7dZpKZlFzTvGnYgl+ETR eI/dTj6XCPllC5e01KQ26JCa4f55sEQQhQXAtNAs7L/OLCk7WrBlrP0w8/SejUPW 6RVixl32wFw3SLCJTW8Sj/DIuNvu0sl+Kvn9WkMLxfpOeI4tQthDtRi18uLR1DJ0 SigiWqNLUdeEnlnv926nzWZ6TiobIMj4pMtHuKaTMVzHhtUe2XqLgQ/q0TRnLOgw AXw0ZVBMHlnR9h5qydEBGj5Th1ylRV88/S5TV8N9/Z4VdJslpKM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:35 2025 by rpki-client