$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: jWokAd5JClTIxoX6uelpwUplR1vcf1XSg/Fxqvg9HU4= Subject key identifier: 98:8B:EB:58:B5:F6:89:F4:2A:AA:A2:C2:A5:F1:94:E8:9A:05:3A:74 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 452DCA2D9A1F524E8AC1961824E42800E50E4B18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: F3 Signing time: Sat 19 Jul 2025 13:40:50 +0000 Manifest this update: Sat 19 Jul 2025 13:35:50 +0000 Manifest next update: Tue 22 Jul 2025 22:10:50 +0000 Files and hashes: 1: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) 3: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: hNFGCh+O2wVbggvwlKrbtDK9XeyAa26Svulr+bId9n8=) 4: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2d:ca:2d:9a:1f:52:4e:8a:c1:96:18:24:e4:28:00:e5:0e:4b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Jul 19 13:35:50 2025 GMT Not After : Jul 22 22:10:50 2025 GMT Subject: CN=988BEB58B5F689F42AAAA2C2A5F194E89A053A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:aa:75:a8:92:44:bb:83:57:8b:83:8d:a3:4a: ed:bb:f0:29:4f:2f:02:e0:68:39:ee:f5:6a:d3:f9: 3f:6f:e2:d9:6d:0c:ff:80:df:29:95:a4:ea:ac:e4: 35:fe:02:1f:45:9a:58:f3:2b:2c:76:94:af:51:9c: 37:85:c9:34:72:9f:10:00:ef:8a:fc:b5:63:08:1d: ce:2c:06:67:61:0e:39:1d:01:00:7d:59:64:5e:11: dc:92:19:82:2b:c8:20:06:a9:c6:60:64:70:46:21: 31:33:29:6a:7d:31:ec:3a:5e:78:a1:ad:14:3a:95: 50:3c:be:f9:09:a0:89:da:37:43:7d:30:42:75:96: 2f:c1:61:2f:e3:ea:eb:68:96:05:ab:9e:d7:04:ea: c1:e7:a4:cf:c7:b1:74:bc:d3:81:3d:78:83:62:d6: 49:08:57:2f:82:17:71:df:dd:77:dd:8e:1e:a2:76: 76:6e:06:ed:c4:c5:c6:51:48:9c:47:4a:c5:0f:64: 17:0d:3c:d1:0c:ba:19:04:56:71:71:2b:cb:8c:cd: ab:26:a0:7f:5d:4a:2e:3a:95:71:1c:40:62:7c:65: 82:61:67:bd:21:c3:52:51:38:5a:ea:ee:d0:55:81: e0:ad:ce:17:78:e2:86:ee:ed:3a:2c:f9:9a:76:6f: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8B:EB:58:B5:F6:89:F4:2A:AA:A2:C2:A5:F1:94:E8:9A:05:3A:74 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:78:39:5e:54:e3:37:18:1f:65:19:98:8e:69:f4:d7:66:4b: 52:ad:06:a9:fd:0e:ee:87:43:f4:50:2f:19:97:c9:74:b4:d8: 41:55:af:7d:f3:c0:77:6a:2b:9d:7f:e6:63:df:df:59:1a:70: 4b:17:97:08:46:f1:0a:e4:1b:35:7d:70:dd:6c:1a:af:9f:03: c9:d7:08:73:15:52:2f:2e:d5:f8:0c:d4:0b:ac:d1:c0:92:8b: 5e:73:c9:0f:71:5b:39:bc:eb:23:86:75:f4:eb:fd:df:bc:8c: d4:02:1f:f6:bb:6a:1b:f4:21:a8:3a:38:d4:e4:97:7c:25:33: 71:98:53:67:0d:54:0b:5c:51:b5:71:fd:53:fd:c0:de:a1:f1: 3b:fc:16:f5:0b:24:64:e4:4a:9c:47:bb:66:4b:3a:eb:2d:e1: 59:75:9b:2f:d1:9a:7c:a5:a9:74:30:df:2d:ab:8c:4b:81:ed: 17:bf:cb:d7:5d:e9:f9:e9:ef:74:9a:12:c0:67:84:24:c1:d6: 73:99:58:8c:25:28:99:36:f1:2f:2d:c9:51:a4:f7:11:1e:49: 33:4b:5c:0b:a5:82:1e:08:98:a8:0f:1a:6b:00:3e:46:ce:3d: 4b:18:4d:40:31:b3:39:50:5e:2e:0a:b1:9a:fc:00:bc:81:48: 4d:b7:86:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURS3KLZofUk6KwZYYJOQoAOUOSxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTA3MTkxMzM1NTBaFw0yNTA3MjIyMjEwNTBaMDMxMTAvBgNV BAMTKDk4OEJFQjU4QjVGNjg5RjQyQUFBQTJDMkE1RjE5NEU4OUEwNTNBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3qnWokkS7g1eLg42jSu278ClP LwLgaDnu9WrT+T9v4tltDP+A3ymVpOqs5DX+Ah9FmljzKyx2lK9RnDeFyTRynxAA 74r8tWMIHc4sBmdhDjkdAQB9WWReEdySGYIryCAGqcZgZHBGITEzKWp9Mew6Xnih rRQ6lVA8vvkJoInaN0N9MEJ1li/BYS/j6utolgWrntcE6sHnpM/HsXS804E9eINi 1kkIVy+CF3Hf3Xfdjh6idnZuBu3ExcZRSJxHSsUPZBcNPNEMuhkEVnFxK8uMzasm oH9dSi46lXEcQGJ8ZYJhZ70hw1JROFrq7tBVgeCtzhd44obu7Tos+Zp2b/aPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIvrWLX2ifQqqqLCpfGU6JoFOnQwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh4OV5U4zcYH2UZmI5p9NdmS1KtBqn9Du6H Q/RQLxmXyXS02EFVr33zwHdqK51/5mPf31kacEsXlwhG8QrkGzV9cN1sGq+fA8nX CHMVUi8u1fgM1Aus0cCSi15zyQ9xWzm86yOGdfTr/d+8jNQCH/a7ahv0Iag6ONTk l3wlM3GYU2cNVAtcUbVx/VP9wN6h8Tv8FvULJGTkSpxHu2ZLOust4Vl1my/Rmnyl qXQw3y2rjEuB7Re/y9dd6fnp73SaEsBnhCTB1nOZWIwlKJk28S8tyVGk9xEeSTNL XAulgh4ImKgPGmsAPkbOPUsYTUAxszlQXi4KsZr8ALyBSE23htY= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:52 2025 by rpki-client