$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: ykdcgIi8NVxf2dmsZn6jyenMlKBdwi57vnlfYHBBrXk= Subject key identifier: 73:82:DD:8D:A4:28:13:34:C7:00:2B:30:56:A5:77:6D:6E:FF:9E:7C Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 7D2DD7FDD98D149289EBE40879266D90CC6B62B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 030E Signing time: Sun 31 Aug 2025 01:42:01 +0000 Manifest this update: Sun 31 Aug 2025 01:37:01 +0000 Manifest next update: Wed 03 Sep 2025 11:17:01 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 3: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: LIvrw2xdNkQLm/9LWjOlb7Yy8WIrFOXEndnVg1fcE1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Sep 2025 11:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2d:d7:fd:d9:8d:14:92:89:eb:e4:08:79:26:6d:90:cc:6b:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Aug 31 01:37:01 2025 GMT Not After : Sep 3 11:17:01 2025 GMT Subject: CN=7382DD8DA4281334C7002B3056A5776D6EFF9E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:87:f1:72:22:db:19:c8:2a:30:55:b4:14: b1:12:a1:00:3b:0d:8c:03:6a:68:c4:ba:05:64:21: 8d:a2:f3:e2:1c:6c:86:32:12:a7:f9:2f:13:8f:36: 34:7b:fc:3f:20:d3:6f:4d:08:f0:1b:4a:51:4e:46: b4:ee:1a:08:6d:68:8a:30:f2:18:38:cf:b3:a3:21: 3e:70:3a:53:6a:c9:1c:dc:02:ca:28:84:c4:a5:25: ad:61:7c:41:9b:45:d5:a2:f6:9c:ac:62:e9:af:3e: a9:2c:48:0b:fa:25:bb:05:cf:5d:28:bd:67:01:c2: 9a:4b:25:25:f7:39:91:d9:4e:38:1b:f2:7e:65:61: bc:ce:aa:f8:d5:d1:1f:3d:c4:76:02:76:e9:e2:83: bb:07:61:52:24:21:61:c2:d3:43:a7:26:b1:48:57: 29:d9:aa:c8:c5:f2:c0:f6:38:8a:07:b1:7f:07:f6: 25:24:7f:c9:bc:9f:97:54:c0:62:e2:f0:2e:31:ae: ee:93:99:c9:e8:76:e2:7d:2a:d6:24:b0:75:01:53: af:12:1b:33:d6:2e:5d:9a:34:e5:cf:be:07:77:07: b8:29:7c:d8:e2:b4:b3:aa:fb:af:46:85:3d:95:bc: 4a:3b:dd:6c:55:7a:2a:1b:f4:9b:ca:f7:66:c6:97: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:82:DD:8D:A4:28:13:34:C7:00:2B:30:56:A5:77:6D:6E:FF:9E:7C X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:14:f3:fa:92:7e:92:19:76:83:e0:2f:fc:08:4b:ec:c9:63: 40:0d:b6:7b:fc:ed:8e:df:06:39:26:59:a7:38:99:0a:4a:f4: 27:c8:a2:7d:7a:f8:a2:df:80:90:5c:a0:0a:88:fc:ff:17:f2: a5:aa:68:18:09:b3:df:ce:f5:a2:ce:27:31:6b:f3:51:5e:1d: c4:b5:06:ef:ce:e5:ff:10:4c:b2:2a:eb:c4:39:79:5a:ad:94: 7b:0c:16:26:58:9b:f7:40:f7:ec:f2:97:0a:07:67:df:e1:35: f8:23:f9:db:28:8d:27:f1:2d:4f:63:8f:6e:e9:3e:4d:71:7b: 05:3d:f6:e5:0d:78:29:92:59:05:b8:17:5c:c5:3b:de:ce:6a: 13:46:ac:20:ce:36:58:8b:3a:41:d2:60:5c:ee:e2:72:9a:77: a5:1b:15:60:59:8d:37:2d:26:8b:a4:84:68:a8:7c:09:95:e3: cf:72:6a:cf:8f:05:a9:64:ef:26:6f:38:62:0c:aa:fc:60:12: 79:9f:01:14:62:7d:23:c7:c8:94:ca:7f:32:ce:13:64:e3:eb: 7f:d3:fa:76:69:16:f1:dd:7a:3b:5d:25:3c:c7:9f:c2:7e:27: 66:f8:20:08:e0:b1:3b:23:6e:3c:21:a8:2c:f2:c0:f3:be:d6: d0:4b:cd:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfS3X/dmNFJKJ6+QIeSZtkMxrYrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA4MzEwMTM3MDFaFw0yNTA5MDMxMTE3MDFaMDMxMTAvBgNV BAMTKDczODJERDhEQTQyODEzMzRDNzAwMkIzMDU2QTU3NzZENkVGRjlFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC174fxciLbGcgqMFW0FLESoQA7 DYwDamjEugVkIY2i8+IcbIYyEqf5LxOPNjR7/D8g029NCPAbSlFORrTuGghtaIow 8hg4z7OjIT5wOlNqyRzcAsoohMSlJa1hfEGbRdWi9pysYumvPqksSAv6JbsFz10o vWcBwppLJSX3OZHZTjgb8n5lYbzOqvjV0R89xHYCdunig7sHYVIkIWHC00OnJrFI VynZqsjF8sD2OIoHsX8H9iUkf8m8n5dUwGLi8C4xru6TmcnoduJ9KtYksHUBU68S GzPWLl2aNOXPvgd3B7gpfNjitLOq+69GhT2VvEo73WxVeiob9JvK92bGl1yRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4LdjaQoEzTHACswVqV3bW7/nnwwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUU8/qSfpIZdoPgL/wIS+zJY0ANtnv87Y7f BjkmWac4mQpK9CfIon16+KLfgJBcoAqI/P8X8qWqaBgJs9/O9aLOJzFr81FeHcS1 Bu/O5f8QTLIq68Q5eVqtlHsMFiZYm/dA9+zylwoHZ9/hNfgj+dsojSfxLU9jj27p Pk1xewU99uUNeCmSWQW4F1zFO97OahNGrCDONliLOkHSYFzu4nKad6UbFWBZjTct JoukhGiofAmV489yas+PBalk7yZvOGIMqvxgEnmfARRifSPHyJTKfzLOE2Tj63/T +nZpFvHdejtdJTzHn8J+J2b4IAjgsTsjbjwhqCzywPO+1tBLzbc= -----END CERTIFICATE-----Generated at Sun Aug 31 21:46:36 2025 by rpki-client