$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: ovGMkONQ9yWPq2663cL4DtcPurqGBb8ZuNAya0f18Rk= Subject key identifier: 0C:CC:AB:09:5C:0B:44:73:51:71:6A:0E:E8:F5:D7:8F:72:A6:57:E6 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 2C3EFF7C6E6DAF7BF421A936F478977E915BC335 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: 0109 Signing time: Sun 07 Sep 2025 06:00:51 +0000 Manifest this update: Sun 07 Sep 2025 05:55:51 +0000 Manifest next update: Wed 10 Sep 2025 07:51:51 +0000 Files and hashes: 1: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: Nw2AJHlrBr839TSKKKaJYVED+bstTkIsTH1cLhcGQ98=) 2: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) 3: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) 4: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3e:ff:7c:6e:6d:af:7b:f4:21:a9:36:f4:78:97:7e:91:5b:c3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Sep 7 05:55:51 2025 GMT Not After : Sep 10 07:51:51 2025 GMT Subject: CN=0CCCAB095C0B447351716A0EE8F5D78F72A657E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:f6:a3:d9:93:21:a8:e3:d1:57:1e:2c:b0: 27:db:20:23:1a:99:56:82:fe:03:9b:e9:30:3e:12: 8a:79:60:f7:b5:ea:de:21:dd:a2:35:62:55:8c:8d: f5:8f:d5:a7:45:81:f7:4a:86:79:e3:7e:09:56:8b: 42:ae:b2:af:a9:6d:d4:60:1c:eb:e9:25:d3:61:0b: e3:4f:0e:15:f3:7d:42:d3:c4:d5:52:e1:a9:6e:e9: 35:d0:42:fa:e4:ac:70:62:8f:1e:f6:0e:17:72:26: a0:0f:13:51:2b:2c:8d:d8:a5:cb:98:3b:6b:ae:24: 2d:46:3e:e6:15:d9:a3:aa:c8:32:8c:99:23:09:1f: 3d:b8:a4:8e:c6:bb:d3:d3:2a:97:21:3f:2a:31:08: 58:3a:f7:84:b6:5b:c3:a1:b7:7c:6d:9e:91:c4:8f: 53:0b:35:ae:5b:6a:f2:81:d7:c6:46:5a:82:ad:d8: 32:0d:46:1c:24:af:3a:cb:15:34:10:2c:f1:9a:b7: 64:01:c5:4a:1e:e8:96:d7:d9:4d:1c:e2:c0:4d:41: 19:ad:f6:4b:ea:d5:bb:14:d0:b7:b8:7a:2a:08:d4: 78:51:ae:dc:5a:3f:37:c6:e6:ea:3f:f3:23:17:a6: 34:5d:d8:cb:25:af:f4:fa:4e:28:da:4d:af:0f:09: ca:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CC:AB:09:5C:0B:44:73:51:71:6A:0E:E8:F5:D7:8F:72:A6:57:E6 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:92:e5:b0:45:c2:d1:71:70:6b:28:b4:4d:d8:ef:f1:2d:c5: 77:c0:82:05:dd:77:b8:dd:2d:ee:60:e4:ad:82:1f:a2:ed:2e: 9e:a6:bc:5f:8f:5f:87:d0:91:04:3e:f0:93:2e:9b:8b:b3:12: ab:27:3a:32:26:2f:9e:8a:46:7e:27:fb:c6:15:38:9c:e6:ec: db:05:69:ba:90:39:18:89:19:aa:fd:29:25:b9:1f:87:9f:4b: b6:65:69:94:da:6f:50:46:17:b4:26:6d:63:a3:a7:09:5c:44: 69:b0:49:d3:66:f5:f3:3e:2c:c0:d3:57:2e:6d:ff:6f:dc:cf: 18:06:9c:3f:f6:63:27:0d:ac:d3:77:b9:db:92:7d:7f:a5:f4: 62:fe:91:05:87:b3:88:0b:e7:10:9d:c2:bf:27:0b:00:6d:95: dc:5a:12:8b:45:16:65:2f:3b:fd:ac:7b:4d:38:cb:14:a1:bc: a2:6c:06:5d:a5:7d:74:84:cb:67:6f:f5:3c:c0:08:25:ad:65: d5:58:e0:9c:95:55:49:39:c4:bb:84:f7:8a:bf:44:1c:84:aa: 6e:f8:1e:cc:68:9d:c9:cf:c3:ef:1a:bf:e5:4d:89:24:25:a6: f0:c2:6a:ed:30:f4:be:b2:87:e0:4c:96:a4:a8:5d:2d:6d:69: d5:92:38:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULD7/fG5tr3v0Iak29HiXfpFbwzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTA5MDcwNTU1NTFaFw0yNTA5MTAwNzUxNTFaMDMxMTAvBgNV BAMTKDBDQ0NBQjA5NUMwQjQ0NzM1MTcxNkEwRUU4RjVENzhGNzJBNjU3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3vaj2ZMhqOPRVx4ssCfbICMa mVaC/gOb6TA+Eop5YPe16t4h3aI1YlWMjfWP1adFgfdKhnnjfglWi0Kusq+pbdRg HOvpJdNhC+NPDhXzfULTxNVS4alu6TXQQvrkrHBijx72DhdyJqAPE1ErLI3YpcuY O2uuJC1GPuYV2aOqyDKMmSMJHz24pI7Gu9PTKpchPyoxCFg694S2W8Oht3xtnpHE j1MLNa5bavKB18ZGWoKt2DINRhwkrzrLFTQQLPGat2QBxUoe6JbX2U0c4sBNQRmt 9kvq1bsU0Le4eioI1HhRrtxaPzfG5uo/8yMXpjRd2Mslr/T6TijaTa8PCcpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMyrCVwLRHNRcWoO6PXXj3KmV+YwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWS5bBFwtFxcGsotE3Y7/EtxXfAggXdd7jd Le5g5K2CH6LtLp6mvF+PX4fQkQQ+8JMum4uzEqsnOjImL56KRn4n+8YVOJzm7NsF abqQORiJGar9KSW5H4efS7ZlaZTab1BGF7QmbWOjpwlcRGmwSdNm9fM+LMDTVy5t /2/czxgGnD/2YycNrNN3uduSfX+l9GL+kQWHs4gL5xCdwr8nCwBtldxaEotFFmUv O/2se004yxShvKJsBl2lfXSEy2dv9TzACCWtZdVY4JyVVUk5xLuE94q/RByEqm74 HsxoncnPw+8av+VNiSQlpvDCau0w9L6yh+BMlqSoXS1tadWSOJ4= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:42 2025 by rpki-client