$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: AQDY0d5GMNrzrgNCnM27gzv9RdniMUu5bq9N0YfKNu0= Subject key identifier: 52:EB:E0:2D:DE:C2:6D:56:2D:BA:C0:A3:A3:42:5F:7A:80:14:DC:F7 Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 04557EFE451550A924F4D532CC429CB1E9551DED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 01B0 Signing time: Fri 05 Sep 2025 07:02:07 +0000 Manifest this update: Fri 05 Sep 2025 06:57:07 +0000 Manifest next update: Mon 08 Sep 2025 14:25:07 +0000 Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: xveCnOqbOdYdqI60jkSIqPF1G5XDnxZSAoXEjOxzyEw=) 2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: 71RKMRkCzf+dsSgq8Q8+9kiI589hG8/JWQHbUqhmZBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:55:7e:fe:45:15:50:a9:24:f4:d5:32:cc:42:9c:b1:e9:55:1d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Sep 5 06:57:07 2025 GMT Not After : Sep 8 14:25:07 2025 GMT Subject: CN=52EBE02DDEC26D562DBAC0A3A3425F7A8014DCF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:d6:a2:64:25:59:97:32:c6:4e:f9:83:c6: db:4d:89:61:ef:ad:7c:41:9e:79:80:7d:08:7a:97: 61:9a:7c:c5:a9:aa:e1:81:21:7b:58:79:1b:fd:d6: 19:a9:99:61:17:ec:74:49:1b:44:c4:51:d6:54:5b: 4f:44:24:92:79:c6:1f:85:1a:e0:e4:f6:87:32:39: 06:89:0d:a7:ef:88:ca:04:30:e9:58:4e:98:fe:a0: 22:e5:51:3b:c1:10:48:b3:67:ca:9b:1d:96:9c:a2: ed:e7:07:1a:f1:26:4a:49:3a:79:4a:73:ba:09:b2: 0f:50:34:a1:5e:df:a1:8e:ba:b3:54:56:95:9e:b7: d8:64:da:42:54:e5:ab:7a:46:c8:c1:f8:15:4f:22: 5d:2b:16:73:d6:05:96:a7:6d:2c:68:8e:21:db:7a: 1e:81:86:77:e2:9f:b8:f0:d0:59:5f:65:d2:61:0e: 6e:bc:31:d0:24:fe:84:38:97:69:d4:99:2c:d4:10: b7:6e:c1:92:10:b3:96:58:25:db:1b:d9:f5:58:5f: 20:b0:8b:f9:00:73:b5:59:e6:a9:6f:e4:ee:a4:23: 90:de:ce:bf:05:69:3d:7e:51:0e:9a:5d:5d:4e:e1: 4d:19:12:a9:b8:76:50:60:3c:d0:11:63:28:1b:ce: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EB:E0:2D:DE:C2:6D:56:2D:BA:C0:A3:A3:42:5F:7A:80:14:DC:F7 X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6c:04:d2:f8:08:65:3f:45:58:db:90:81:5d:00:26:9d:78: 70:22:e5:28:e1:1d:b1:b4:3d:88:cc:30:56:fc:0e:b5:76:4b: 52:61:f5:a5:ea:73:35:bf:07:39:8b:e5:1e:7a:aa:97:b0:cd: 1c:fd:91:ec:db:cc:61:7c:b6:a4:bb:8b:d2:2f:7b:51:b8:82: 5d:1a:29:de:9f:30:1e:0a:00:78:90:81:58:1c:84:31:a4:90: 11:ed:13:4a:dd:14:ad:a9:3a:00:78:35:b9:7d:bc:35:2b:4a: 57:18:b2:a4:ee:25:d5:cc:90:5a:d6:0f:b1:f7:0e:06:fe:41: f8:74:0c:6e:46:d9:aa:aa:a6:7c:b2:11:ea:7b:a3:3d:b0:14: 9b:42:37:0c:aa:39:17:54:58:04:5d:90:88:1c:fc:f2:f6:a2: f0:e9:9b:58:18:ca:5c:6d:1b:d5:b6:87:2e:a4:23:e4:fa:62: db:70:ae:4a:e8:b5:99:e1:bf:37:b7:95:d8:f1:2b:c2:6c:86: bf:e6:48:1b:9d:e7:53:01:7d:69:ae:a3:ce:da:17:cd:e5:2f: 5a:ca:4f:b5:f3:73:02:1d:4d:e2:70:ca:1a:79:86:36:72:65: 65:f1:33:5d:71:96:19:e7:67:e9:b3:43:4a:99:31:58:79:ab: d7:ec:35:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFV+/kUVUKkk9NUyzEKcselVHe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTA5MDUwNjU3MDdaFw0yNTA5MDgxNDI1MDdaMDMxMTAvBgNV BAMTKDUyRUJFMDJEREVDMjZENTYyREJBQzBBM0EzNDI1RjdBODAxNERDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykNaiZCVZlzLGTvmDxttNiWHv rXxBnnmAfQh6l2GafMWpquGBIXtYeRv91hmpmWEX7HRJG0TEUdZUW09EJJJ5xh+F GuDk9ocyOQaJDafviMoEMOlYTpj+oCLlUTvBEEizZ8qbHZacou3nBxrxJkpJOnlK c7oJsg9QNKFe36GOurNUVpWet9hk2kJU5at6RsjB+BVPIl0rFnPWBZanbSxojiHb eh6Bhnfin7jw0FlfZdJhDm68MdAk/oQ4l2nUmSzUELduwZIQs5ZYJdsb2fVYXyCw i/kAc7VZ5qlv5O6kI5Dezr8FaT1+UQ6aXV1O4U0ZEqm4dlBgPNARYygbztMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuvgLd7CbVYtusCjo0JfeoAU3PcwHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARsBNL4CGU/RVjbkIFdACadeHAi5SjhHbG0 PYjMMFb8DrV2S1Jh9aXqczW/BzmL5R56qpewzRz9kezbzGF8tqS7i9Ive1G4gl0a Kd6fMB4KAHiQgVgchDGkkBHtE0rdFK2pOgB4Nbl9vDUrSlcYsqTuJdXMkFrWD7H3 Dgb+Qfh0DG5G2aqqpnyyEep7oz2wFJtCNwyqORdUWARdkIgc/PL2ovDpm1gYylxt G9W2hy6kI+T6YttwrkrotZnhvze3ldjxK8Jshr/mSBud51MBfWmuo87aF83lL1rK T7XzcwIdTeJwyhp5hjZyZWXxM11xlhnnZ+mzQ0qZMVh5q9fsNcY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:20 2025 by rpki-client