$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: eLT/qoeFlqZBjbEwpyAUnb+JPyy0G8rpp/zfDdTgUZ8= Subject key identifier: 70:68:F6:19:37:51:1E:ED:7D:AB:82:4D:D2:DF:3F:F4:35:2A:CE:0F Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 381C0DB4FD8E9B509CE28A426517DE77C45A2E89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 01C4 Signing time: Thu 04 Sep 2025 08:50:03 +0000 Manifest this update: Thu 04 Sep 2025 08:45:03 +0000 Manifest next update: Sun 07 Sep 2025 14:24:03 +0000 Files and hashes: 1: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) 2: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: eSjW3on0dEb3HEFU38wUH/QVEMJoyogHs4mMK99x7ZI=) 3: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 5: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1c:0d:b4:fd:8e:9b:50:9c:e2:8a:42:65:17:de:77:c4:5a:2e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Sep 4 08:45:03 2025 GMT Not After : Sep 7 14:24:03 2025 GMT Subject: CN=7068F61937511EED7DAB824DD2DF3FF4352ACE0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:f9:00:95:bf:73:5a:a0:4a:dd:73:7c:73: 3c:a2:7a:93:7e:23:82:8c:0b:e0:d0:d6:7b:f6:42: e5:99:e2:5a:9f:51:03:c8:41:3f:8e:06:7d:07:d1: 9d:00:e3:70:e2:32:8a:f4:4f:82:70:8e:35:08:30: 9b:20:98:ce:49:cd:41:3e:13:fc:1c:02:b0:ff:59: 43:50:87:9e:0a:7c:1e:4a:2d:21:af:0e:f6:79:fd: 37:47:25:77:e9:cb:1d:e6:ff:09:0e:6e:36:b6:40: 49:e6:d6:d2:31:d1:46:aa:d3:27:2d:7e:76:fb:b5: b1:25:56:d2:f2:04:3c:73:9d:2d:e1:c7:35:b0:9e: a3:9d:00:2d:0f:7b:cf:4c:3f:53:32:bd:8d:c6:a7: 89:7f:89:eb:77:b0:5e:42:5e:57:82:2f:e3:38:75: 73:d5:99:0f:f7:1a:35:35:4a:cf:9a:42:82:58:0b: 06:e1:fd:41:a8:11:63:b8:eb:ba:dc:76:a5:06:ca: 2b:8a:97:fd:da:0d:86:80:6d:aa:35:a7:2f:82:f3: 08:a3:36:d3:c0:bb:21:f0:f4:66:9b:9b:67:98:5e: 6c:e2:d8:39:11:52:c2:ec:11:49:1f:fd:4e:68:4f: 5b:da:1d:b1:36:2b:18:84:22:c5:d5:de:9b:79:fe: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:68:F6:19:37:51:1E:ED:7D:AB:82:4D:D2:DF:3F:F4:35:2A:CE:0F X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:23:63:ab:2d:86:b0:5c:4c:0b:a8:05:33:54:51:ca:d4:e7: 85:ed:c2:5c:e8:fe:3d:8e:3a:00:af:2f:29:54:8d:4a:98:8c: 3e:4a:18:00:4d:76:c7:32:fe:aa:2d:ac:8a:ff:82:40:44:6b: 84:4a:d1:37:8f:6b:50:31:0c:72:b4:a1:33:2d:e5:ce:d8:7a: e9:55:8d:70:4c:59:81:cf:f8:04:26:b0:15:6d:d8:0a:7d:a4: 3e:cc:ec:48:99:4a:83:2c:07:5f:c3:da:0d:02:78:58:5c:e6: a2:e7:3c:92:2b:db:f2:0f:fd:eb:2d:5a:24:50:b2:a4:1c:b4: 92:33:dc:68:f1:53:87:44:20:00:17:0f:9c:83:ed:ab:da:86: 52:b1:70:7b:b5:3e:86:ab:9f:e9:b2:9f:7f:31:d5:fb:99:9e: 00:a2:8f:fb:6c:d8:1b:45:9a:14:c5:f2:05:79:b4:82:af:42: d6:6e:85:ef:c0:a1:b5:ce:c0:a5:82:44:67:88:c9:95:98:f1: 44:ac:bf:73:3e:9b:9c:39:c9:cf:fa:8d:8a:32:47:14:ca:22: 80:2a:39:4a:a3:1b:7b:c4:ec:f0:1a:04:b9:2a:43:c3:e9:40: b9:ba:f1:53:a7:c6:52:0f:63:21:33:58:c2:c8:df:61:88:17: c4:b6:c0:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBwNtP2Om1Cc4opCZRfed8RaLokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTA5MDQwODQ1MDNaFw0yNTA5MDcxNDI0MDNaMDMxMTAvBgNV BAMTKDcwNjhGNjE5Mzc1MTFFRUQ3REFCODI0REQyREYzRkY0MzUyQUNFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC/kAlb9zWqBK3XN8czyiepN+ I4KMC+DQ1nv2QuWZ4lqfUQPIQT+OBn0H0Z0A43DiMor0T4JwjjUIMJsgmM5JzUE+ E/wcArD/WUNQh54KfB5KLSGvDvZ5/TdHJXfpyx3m/wkObja2QEnm1tIx0Uaq0yct fnb7tbElVtLyBDxznS3hxzWwnqOdAC0Pe89MP1MyvY3Gp4l/iet3sF5CXleCL+M4 dXPVmQ/3GjU1Ss+aQoJYCwbh/UGoEWO467rcdqUGyiuKl/3aDYaAbao1py+C8wij NtPAuyHw9Gabm2eYXmzi2DkRUsLsEUkf/U5oT1vaHbE2KxiEIsXV3pt5/uvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGj2GTdRHu19q4JN0t8/9DUqzg8wHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMjY6sthrBcTAuoBTNUUcrU54Xtwlzo/j2O OgCvLylUjUqYjD5KGABNdscy/qotrIr/gkBEa4RK0TePa1AxDHK0oTMt5c7YeulV jXBMWYHP+AQmsBVt2Ap9pD7M7EiZSoMsB1/D2g0CeFhc5qLnPJIr2/IP/estWiRQ sqQctJIz3GjxU4dEIAAXD5yD7avahlKxcHu1Poarn+myn38x1fuZngCij/ts2BtF mhTF8gV5tIKvQtZuhe/AobXOwKWCRGeIyZWY8USsv3M+m5w5yc/6jYoyRxTKIoAq OUqjG3vE7PAaBLkqQ8PpQLm68VOnxlIPYyEzWMLI32GIF8S2wGk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:53 2025 by rpki-client