$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: ASlndXcuEGWSR94RA9OrYSmItxpBRmm1o3LfAjVoyco= Subject key identifier: 11:97:E4:6B:A3:50:27:36:46:26:08:94:4C:32:F3:91:5C:94:C5:12 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 7540A4F3230C9B9C4969EF9872D6C03415A9F0F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 01F8 Signing time: Fri 05 Sep 2025 17:21:09 +0000 Manifest this update: Fri 05 Sep 2025 17:16:09 +0000 Manifest next update: Tue 09 Sep 2025 01:44:09 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) 2: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: wbDj2qVwWojdiwUQq1leoVbmSXtniu4/S6z44a48QLw=) 3: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) 4: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: XSswcSPkv/hiRMK1blw1tFqbI3Bwqj4tTBYBgVQhtEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:40:a4:f3:23:0c:9b:9c:49:69:ef:98:72:d6:c0:34:15:a9:f0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Sep 5 17:16:09 2025 GMT Not After : Sep 9 01:44:09 2025 GMT Subject: CN=1197E46BA3502736462608944C32F3915C94C512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:f8:76:ea:15:29:db:88:5b:e2:e3:18:ba: c5:00:00:55:10:92:80:4b:d5:16:bc:93:36:2b:29: 75:ae:b1:ab:21:32:aa:bc:86:a0:ea:b2:c8:ec:c2: b1:a2:dc:19:9d:44:9c:03:15:d2:2e:fb:c3:40:dd: a2:40:6d:67:65:da:06:3c:e2:37:9d:6b:de:bb:78: d4:ea:13:9b:8a:bb:9d:42:9a:db:c7:68:04:c1:7d: 20:85:25:68:fc:40:b3:73:4f:76:cb:45:4c:92:4f: 66:25:fc:68:a4:ae:41:fe:61:2b:21:e3:6b:d8:e0: 69:65:e1:21:9c:5c:39:cd:6d:62:ab:e0:1f:84:84: b8:51:a0:1c:b1:9c:8a:14:0b:70:af:2f:23:3d:54: db:9c:6b:b1:fb:eb:69:13:30:31:6f:48:05:bf:fa: 9d:49:fe:12:74:d5:5f:90:0f:ad:bb:1c:26:3a:d8: 40:c2:37:b3:d0:dc:9e:03:f1:02:39:cc:11:27:61: d6:bf:89:2b:92:ff:8d:3e:7d:0a:b5:86:98:71:ac: 6f:cd:93:01:43:16:ba:11:13:ee:de:68:33:6a:60: 05:dd:5d:98:64:f7:12:55:1e:b2:96:47:51:51:a3: 31:7f:b8:73:17:02:c3:22:49:d7:d3:30:49:a8:53: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:97:E4:6B:A3:50:27:36:46:26:08:94:4C:32:F3:91:5C:94:C5:12 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e1:1e:d1:2b:d4:6d:08:e1:63:24:61:9f:e4:62:0f:88:d4: e4:b1:4e:a3:e2:b9:ad:99:82:ae:8e:54:bd:2a:b2:49:ca:ce: 16:06:d4:18:47:f2:96:7e:c6:a1:09:a1:33:44:0d:4a:16:ed: 96:8e:ac:8c:60:35:79:e7:3f:08:1d:07:77:78:2d:69:ee:66: 48:82:21:6f:3e:37:97:41:77:c9:6c:96:af:0a:da:96:bc:1d: 22:e1:bb:af:2c:ef:e5:dd:74:4e:10:f7:42:ee:59:53:96:0b: 70:46:20:44:28:ae:31:74:ba:06:ac:99:70:fe:02:10:0b:9c: 76:5f:16:f0:2d:51:0d:89:9a:e4:40:bc:12:3c:e2:66:be:5a: e6:e7:cb:24:e1:35:4e:5d:c2:e8:0f:13:be:ab:11:a4:33:ee: 17:ff:77:e3:bb:d1:88:03:ee:2c:a8:42:1f:e9:85:4a:72:95: 2a:51:33:60:6c:1d:36:a0:58:a4:61:be:2c:83:c9:35:9a:b9: 3c:f8:3a:0d:d3:b1:34:a6:7f:2a:1c:60:97:fb:96:3a:82:e5: e5:5a:51:17:c3:45:56:23:9c:43:38:75:48:50:1c:34:99:fe: 12:8a:14:0b:51:1a:90:3a:e1:5c:cb:ca:20:ca:f5:40:50:8a: 9a:97:2c:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUCk8yMMm5xJae+YctbANBWp8PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTA5MDUxNzE2MDlaFw0yNTA5MDkwMTQ0MDlaMDMxMTAvBgNV BAMTKDExOTdFNDZCQTM1MDI3MzY0NjI2MDg5NDRDMzJGMzkxNUM5NEM1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0U/h26hUp24hb4uMYusUAAFUQ koBL1Ra8kzYrKXWusashMqq8hqDqssjswrGi3BmdRJwDFdIu+8NA3aJAbWdl2gY8 4jeda967eNTqE5uKu51CmtvHaATBfSCFJWj8QLNzT3bLRUyST2Yl/GikrkH+YSsh 42vY4Gll4SGcXDnNbWKr4B+EhLhRoByxnIoUC3CvLyM9VNuca7H762kTMDFvSAW/ +p1J/hJ01V+QD627HCY62EDCN7PQ3J4D8QI5zBEnYda/iSuS/40+fQq1hphxrG/N kwFDFroRE+7eaDNqYAXdXZhk9xJVHrKWR1FRozF/uHMXAsMiSdfTMEmoU7GzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZfka6NQJzZGJgiUTDLzkVyUxRIwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLhHtEr1G0I4WMkYZ/kYg+I1OSxTqPiua2Z gq6OVL0qsknKzhYG1BhH8pZ+xqEJoTNEDUoW7ZaOrIxgNXnnPwgdB3d4LWnuZkiC IW8+N5dBd8lslq8K2pa8HSLhu68s7+XddE4Q90LuWVOWC3BGIEQorjF0ugasmXD+ AhALnHZfFvAtUQ2JmuRAvBI84ma+WubnyyThNU5dwugPE76rEaQz7hf/d+O70YgD 7iyoQh/phUpylSpRM2BsHTagWKRhviyDyTWauTz4Og3TsTSmfyocYJf7ljqC5eVa URfDRVYjnEM4dUhQHDSZ/hKKFAtRGpA64VzLyiDK9UBQipqXLBw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:46 2025 by rpki-client