$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft File: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft (raw, json) Hash identifier: lH8tWqQSJ1b8RPTcLWq8ZpP612Txh7Xf9RWwvdI6P5o= Subject key identifier: 7C:59:D2:7E:9D:84:C9:C6:75:CC:D6:1B:B0:C6:90:30:9F:C5:7D:71 Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB Certificate issuer: /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB Certificate serial: 10F8E531E4576358209675C898ABC0D65A396553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft Manifest number: 04CD Signing time: Sat 06 Sep 2025 21:20:49 +0000 Manifest this update: Sat 06 Sep 2025 21:15:49 +0000 Manifest next update: Wed 10 Sep 2025 00:48:49 +0000 Files and hashes: 1: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: /RTTrDt1roX5iqnN5YmyZ+CyR+tqtyybCHqOwLYwxXI=) 2: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: hmq0uoHwUsEo+oTXEtyTpYYQCEB74jpeYd9ceOhWLKI=) 3: 3130332e3139352e38392e302f32342d3234203d3e203538343034.roa (hash: 8vEqnPeXr9755NhRmkDVV3kvpgE2wfzA2jlzpFzSE/0=) 4: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl (hash: 32JGQHki3EgbyDbMU5ZQNTxAGu4n7plql9nTN8dXwtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f8:e5:31:e4:57:63:58:20:96:75:c8:98:ab:c0:d6:5a:39:65:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB Validity Not Before: Sep 6 21:15:49 2025 GMT Not After : Sep 10 00:48:49 2025 GMT Subject: CN=7C59D27E9D84C9C675CCD61BB0C690309FC57D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:40:3e:8e:0b:5b:bf:f2:c4:3c:78:c8:ea: 9d:87:bc:14:c1:b5:bf:f5:26:a5:3b:54:ba:79:06: 18:8d:cb:d6:af:a3:f0:a0:5b:8a:38:93:e4:15:94: f3:72:16:a2:0f:72:55:24:21:a7:45:71:ae:49:57: 9f:e2:19:1a:70:14:31:77:04:a0:ad:8f:d5:29:a0: 19:52:dd:b6:5e:dc:76:42:80:73:fb:16:6a:9b:32: 1c:f9:77:1a:91:9d:23:13:87:20:b7:1f:5a:80:6e: 34:46:3c:97:cb:4f:53:49:c1:f6:74:34:f6:b7:dd: 81:20:af:c4:bb:8c:ee:61:ab:a1:21:53:db:35:f8: 09:c0:c4:5b:5e:eb:91:5f:04:9d:b6:52:ce:23:ba: 00:b6:76:d7:6e:a7:08:57:eb:3d:ac:61:3f:7e:6c: 8c:b8:bf:85:e1:9a:3a:66:73:70:b9:b2:e5:92:c4: 63:06:15:1e:4e:b8:23:57:e2:a2:bb:6b:f0:a2:8a: 9c:3c:3a:03:dc:f4:76:6b:57:53:fe:cd:c0:56:a0: f6:24:f8:f0:23:f7:46:ca:f0:e5:15:dc:10:a4:6d: 06:6b:7c:28:aa:ee:8d:47:83:08:2e:6f:8c:36:53: 1b:8f:45:8f:97:c4:92:a0:93:1f:c3:ef:f1:64:6f: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:59:D2:7E:9D:84:C9:C6:75:CC:D6:1B:B0:C6:90:30:9F:C5:7D:71 X509v3 Authority Key Identifier: keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:66:8e:fc:63:8b:4b:b4:a6:b0:23:80:8f:35:55:b4:29:25: b6:45:61:10:3f:c5:1f:0e:0c:7a:5e:e7:67:8a:87:1b:8b:02: fa:eb:c8:f2:22:90:fd:96:5a:2b:00:24:19:04:b2:57:16:bd: 76:43:f8:8e:ba:83:cf:07:79:ad:51:7a:6b:96:6a:36:76:e3: 0c:77:b7:5c:dd:c3:80:00:61:99:14:ec:e5:c5:b0:f5:25:05: 4b:d1:27:73:6d:ac:2e:66:17:61:91:f3:ed:e2:d9:d5:2b:8b: 02:68:76:ba:c2:45:3b:07:d5:38:65:c9:8f:89:10:cb:5e:39: 2d:f2:9f:ee:16:a4:e0:99:c5:5d:0d:8e:bf:c5:8b:1f:6c:9c: 0d:56:0f:ff:e7:38:9c:8d:55:2f:6a:6f:e1:02:b8:f1:56:f0: 01:32:8c:cf:49:25:f1:18:7f:bc:3e:57:c5:f6:82:b1:ba:05: 57:a2:06:75:f6:89:7b:14:6a:fe:6d:3b:a5:90:29:4e:22:bd: 40:4a:d8:4e:e5:b8:93:ee:60:d1:0d:c8:c7:92:dd:56:5e:fb: 27:d3:14:07:84:62:79:92:74:d9:33:9c:cc:be:f9:4a:8a:d0: 59:fe:f2:a7:25:a1:75:43:5a:07:ce:ae:2c:5c:47:86:a5:13: c3:f2:62:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPjlMeRXY1gglnXImKvA1lo5ZVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQz QTBFRDVCQjAeFw0yNTA5MDYyMTE1NDlaFw0yNTA5MTAwMDQ4NDlaMDMxMTAvBgNV BAMTKDdDNTlEMjdFOUQ4NEM5QzY3NUNDRDYxQkIwQzY5MDMwOUZDNTdENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxUA+jgtbv/LEPHjI6p2HvBTB tb/1JqU7VLp5BhiNy9avo/CgW4o4k+QVlPNyFqIPclUkIadFca5JV5/iGRpwFDF3 BKCtj9UpoBlS3bZe3HZCgHP7FmqbMhz5dxqRnSMThyC3H1qAbjRGPJfLT1NJwfZ0 NPa33YEgr8S7jO5hq6EhU9s1+AnAxFte65FfBJ22Us4jugC2dtdupwhX6z2sYT9+ bIy4v4Xhmjpmc3C5suWSxGMGFR5OuCNX4qK7a/Ciipw8OgPc9HZrV1P+zcBWoPYk +PAj90bK8OUV3BCkbQZrfCiq7o1Hgwgub4w2UxuPRY+XxJKgkx/D7/FkbzB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFnSfp2EycZ1zNYbsMaQMJ/FfXEwHwYDVR0j BBgwFoAUUop5npS9UFL29YrP3Z9N7ToO1bswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OThmMTljMy1lNGUxLTQxYTEtYWFmMC1kNjEzYWNhNDkzMGMvMC81MjhBNzk5RTk0 QkQ1MDUyRjZGNThBQ0ZERDlGNERFRDNBMEVENUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQzQTBF RDVCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk4ZjE5YzMtZTRlMS00MWExLWFh ZjAtZDYxM2FjYTQ5MzBjLzAvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRE RUQzQTBFRDVCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhmjvxji0u0prAjgI81VbQpJbZFYRA/xR8O DHpe52eKhxuLAvrryPIikP2WWisAJBkEslcWvXZD+I66g88Hea1RemuWajZ24wx3 t1zdw4AAYZkU7OXFsPUlBUvRJ3NtrC5mF2GR8+3i2dUriwJodrrCRTsH1ThlyY+J EMteOS3yn+4WpOCZxV0Njr/Fix9snA1WD//nOJyNVS9qb+ECuPFW8AEyjM9JJfEY f7w+V8X2grG6BVeiBnX2iXsUav5tO6WQKU4ivUBK2E7luJPuYNENyMeS3VZe+yfT FAeEYnmSdNkznMy++UqK0Fn+8qcloXVDWgfOrixcR4alE8PyYiw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:30 2025 by rpki-client