$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: yBtfEvu/q2rkwD1boTYSV/Sz0vzzo2FkGASSUz6ZuVk= Subject key identifier: 32:1E:FF:2F:DA:9D:4B:1D:1C:1B:52:A4:B4:2C:80:C8:75:B6:AE:3D Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 051B9894EE2C77DCCEA0670F7C67A98FCB6F30D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 0340 Signing time: Sat 06 Sep 2025 00:40:37 +0000 Manifest this update: Sat 06 Sep 2025 00:35:37 +0000 Manifest next update: Tue 09 Sep 2025 05:01:37 +0000 Files and hashes: 1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=) 2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: YbJYQdeVvkBhe9+itPOEo9zrZPNJ196QhqfmYdcHxJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1b:98:94:ee:2c:77:dc:ce:a0:67:0f:7c:67:a9:8f:cb:6f:30:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Sep 6 00:35:37 2025 GMT Not After : Sep 9 05:01:37 2025 GMT Subject: CN=321EFF2FDA9D4B1D1C1B52A4B42C80C875B6AE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:de:bb:ba:28:33:37:2e:68:89:10:a3:6d: 73:df:84:9e:e4:a3:90:1d:ed:ba:0c:8e:02:3e:25: 9a:e1:42:b4:66:b5:73:0c:54:f5:f6:6b:ad:a5:79: 3c:81:ce:66:a7:04:18:41:5a:15:e4:29:b1:ac:92: 0c:1d:f0:96:17:b3:64:20:09:ca:fc:50:66:bc:10: 3d:53:e9:2c:3c:47:43:61:a4:a2:a1:d0:e9:1d:8d: 26:84:26:47:69:73:ac:ec:6d:32:9c:e1:b8:38:0b: 7e:1a:25:c4:5e:9a:3e:59:77:7d:cc:14:c8:ec:6f: db:19:b5:95:8b:82:42:f2:80:5a:99:5b:3b:b3:5f: 34:fc:0a:40:b0:5a:14:38:2e:37:7d:dd:58:7b:3e: e6:3e:b1:6e:d0:a3:1d:2f:8c:83:80:11:c2:29:71: b1:6a:3b:02:af:8e:8a:54:22:c3:f4:f4:8d:47:7f: f3:fb:98:d8:77:24:11:80:7a:ce:43:8d:df:64:c3: 56:98:58:c6:ac:13:b0:cb:0a:40:6c:8a:6e:a7:cb: 5d:b6:e6:48:a9:99:ff:48:7a:8c:70:4a:a1:4f:83: a9:3e:86:f1:b2:db:a2:99:9d:94:d2:71:44:b4:dc: 6f:36:4e:1b:58:d9:b1:7a:96:65:b3:23:6e:a7:a7: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:FF:2F:DA:9D:4B:1D:1C:1B:52:A4:B4:2C:80:C8:75:B6:AE:3D X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2d:9e:03:37:0a:cf:d4:9f:0e:40:12:0b:ca:58:6e:28:c6: 75:df:da:37:c2:8b:11:60:6b:30:74:b6:f8:e3:ec:1c:28:80: 3c:5d:80:ed:8f:ef:96:f8:79:cf:9b:19:25:fe:95:31:1e:a7: d6:9a:d8:0c:63:32:8a:a2:01:f2:ec:3a:df:65:08:50:1f:a5: 1b:1c:a6:60:7e:6e:03:df:e4:51:b0:94:5b:38:d5:4a:5f:e4: e9:86:83:f4:9e:19:1f:f7:ba:41:04:4c:32:76:43:dc:96:d0: ab:31:be:96:6b:a0:3f:98:ec:c9:cf:45:d2:f4:37:aa:78:f6: d1:44:62:0f:90:6b:c8:45:b5:62:4e:67:08:ba:c1:4e:76:c7: c3:49:8b:2b:ba:3f:aa:95:dd:43:df:b2:d1:d5:62:55:2c:65: 5b:b7:29:51:34:03:31:fa:93:d4:6d:20:db:4f:09:f3:08:c5: 14:d0:f9:76:03:95:c3:6a:d0:19:c3:d4:b9:4c:0a:7d:e3:b9: c4:2d:9e:b3:c1:c6:e3:1e:ea:14:0b:e5:9c:56:00:c2:98:4f: de:23:86:74:e8:5f:83:08:4f:72:f7:df:66:be:7e:40:16:fe: 5e:cd:5e:81:e9:4d:a3:63:28:04:00:71:13:48:27:a0:cb:88: c2:ea:99:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRuYlO4sd9zOoGcPfGepj8tvMNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTA5MDYwMDM1MzdaFw0yNTA5MDkwNTAxMzdaMDMxMTAvBgNV BAMTKDMyMUVGRjJGREE5RDRCMUQxQzFCNTJBNEI0MkM4MEM4NzVCNkFFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDd67uigzNy5oiRCjbXPfhJ7k o5Ad7boMjgI+JZrhQrRmtXMMVPX2a62leTyBzmanBBhBWhXkKbGskgwd8JYXs2Qg Ccr8UGa8ED1T6Sw8R0NhpKKh0OkdjSaEJkdpc6zsbTKc4bg4C34aJcRemj5Zd33M FMjsb9sZtZWLgkLygFqZWzuzXzT8CkCwWhQ4Ljd93Vh7PuY+sW7Qox0vjIOAEcIp cbFqOwKvjopUIsP09I1Hf/P7mNh3JBGAes5Djd9kw1aYWMasE7DLCkBsim6ny122 5kipmf9IeoxwSqFPg6k+hvGy26KZnZTScUS03G82ThtY2bF6lmWzI26np54bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMh7/L9qdSx0cG1KktCyAyHW2rj0wHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUtngM3Cs/Unw5AEgvKWG4oxnXf2jfCixFg azB0tvjj7BwogDxdgO2P75b4ec+bGSX+lTEep9aa2AxjMoqiAfLsOt9lCFAfpRsc pmB+bgPf5FGwlFs41Upf5OmGg/SeGR/3ukEETDJ2Q9yW0KsxvpZroD+Y7MnPRdL0 N6p49tFEYg+Qa8hFtWJOZwi6wU52x8NJiyu6P6qV3UPfstHVYlUsZVu3KVE0AzH6 k9RtINtPCfMIxRTQ+XYDlcNq0BnD1LlMCn3jucQtnrPBxuMe6hQL5ZxWAMKYT94j hnToX4MIT3L332a+fkAW/l7NXoHpTaNjKAQAcRNIJ6DLiMLqmS8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client