$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: 6fvTck7lksqnTqtA5lR0/PBXrLHKCO40YCqPNlHeXtk= Subject key identifier: 71:27:28:A9:EF:12:EA:C6:6F:8B:48:98:BD:28:84:6F:EF:BF:6C:E0 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 3B46E2E78588ECC39B107224F76397DC4F1A44E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01E2 Signing time: Sat 18 Oct 2025 15:41:43 +0000 Manifest this update: Sat 18 Oct 2025 15:36:43 +0000 Manifest next update: Tue 21 Oct 2025 21:55:43 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) 3: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: YYIj/pCnId1TVIkQ9+v0d54r/R4H89tqnEmsfvynw4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:46:e2:e7:85:88:ec:c3:9b:10:72:24:f7:63:97:dc:4f:1a:44:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Oct 18 15:36:43 2025 GMT Not After : Oct 21 21:55:43 2025 GMT Subject: CN=712728A9EF12EAC66F8B4898BD28846FEFBF6CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:a9:65:02:ff:2a:9b:b6:f4:89:eb:95:b6: f2:d8:4a:db:77:01:4e:25:d6:0e:28:76:c9:b2:57: e6:34:c2:56:34:f8:f1:be:b3:4d:bf:45:57:f4:e2: 68:3e:93:72:1f:5b:f4:9b:76:8a:f2:89:20:cd:4c: ac:92:ea:77:6a:bf:61:f2:d2:92:31:2c:d9:35:c5: 08:0b:c5:16:0d:45:5a:b8:c6:0f:fc:a4:76:21:58: cf:aa:84:e7:a7:71:8a:50:26:48:95:fe:17:04:5f: 6e:4b:a1:24:de:ec:bb:40:b7:3c:eb:22:30:33:94: 09:c8:37:69:af:66:b0:03:43:16:90:7f:61:37:cb: a7:25:76:0a:b0:4e:c2:15:43:0a:85:ed:8e:23:15: 7b:36:8f:26:76:22:b9:bb:e6:53:fb:0e:bb:0e:21: 36:fb:a9:64:00:3d:d1:87:5c:03:19:48:a6:f6:cd: c8:9e:a5:78:c0:d2:23:e0:26:8d:64:68:dc:b6:15: 88:c2:31:df:cc:ce:81:51:7a:2b:bb:d6:3d:ff:60: 3d:a3:43:65:e9:ca:07:94:bb:78:e7:17:1f:14:09: ca:dc:a6:e2:3f:cd:bf:49:a1:6b:1a:77:fa:b7:a8: f8:76:42:1b:d9:d1:3f:d6:d7:a4:ff:8c:cf:59:8e: e5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:28:A9:EF:12:EA:C6:6F:8B:48:98:BD:28:84:6F:EF:BF:6C:E0 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2f:2a:b6:6f:d3:c4:c9:1b:88:d1:19:cd:c5:b8:7a:81:7e: 03:06:a8:cc:e5:65:55:65:e2:36:4b:37:77:6a:25:98:d1:55: 7f:91:94:7b:b0:dc:f5:aa:78:03:b5:24:57:10:8b:e9:40:a9: 46:89:ce:05:92:6c:c6:ce:64:e3:d1:00:c9:16:17:5e:86:06: 04:9d:60:81:9b:89:37:4f:d8:e5:2e:a8:9c:32:5a:18:7d:86: 75:25:dd:8d:77:f7:c6:5c:55:fb:5c:4c:4c:05:a0:ab:f2:76: 44:f5:a5:a9:ca:7d:bc:14:2b:d1:4f:a0:fe:c1:97:d3:73:50: 54:92:2c:4c:0b:d4:2b:39:51:3e:13:1b:f4:a9:0f:99:2c:0e: 25:01:02:a4:7d:9f:ed:ab:a7:e4:c7:c1:7f:f8:07:73:85:01: f6:1e:3c:f9:b6:50:70:cd:17:94:cd:1c:73:66:66:42:3c:b9: 93:f9:af:d7:b3:45:a6:52:33:ae:fa:b7:2b:5c:89:eb:ec:3d: 4b:df:30:d4:1e:94:c6:22:f2:a0:6d:2e:cf:56:01:d2:26:01: 16:95:05:09:88:b5:50:fa:9d:5b:7d:9e:5a:c8:90:4d:23:3a: f3:29:bd:ac:62:e5:36:4e:9a:1b:d0:42:b0:88:25:4a:74:99: d3:76:c1:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0bi54WI7MObEHIk92OX3E8aROIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTEwMTgxNTM2NDNaFw0yNTEwMjEyMTU1NDNaMDMxMTAvBgNV BAMTKDcxMjcyOEE5RUYxMkVBQzY2RjhCNDg5OEJEMjg4NDZGRUZCRjZDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4KllAv8qm7b0ieuVtvLYStt3 AU4l1g4odsmyV+Y0wlY0+PG+s02/RVf04mg+k3IfW/SbdoryiSDNTKyS6ndqv2Hy 0pIxLNk1xQgLxRYNRVq4xg/8pHYhWM+qhOencYpQJkiV/hcEX25LoSTe7LtAtzzr IjAzlAnIN2mvZrADQxaQf2E3y6cldgqwTsIVQwqF7Y4jFXs2jyZ2Irm75lP7DrsO ITb7qWQAPdGHXAMZSKb2zciepXjA0iPgJo1kaNy2FYjCMd/MzoFReiu71j3/YD2j Q2XpygeUu3jnFx8UCcrcpuI/zb9JoWsad/q3qPh2QhvZ0T/W16T/jM9ZjuXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcScoqe8S6sZvi0iYvSiEb++/bOAwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcvKrZv08TJG4jRGc3FuHqBfgMGqMzlZVVl 4jZLN3dqJZjRVX+RlHuw3PWqeAO1JFcQi+lAqUaJzgWSbMbOZOPRAMkWF16GBgSd YIGbiTdP2OUuqJwyWhh9hnUl3Y1398ZcVftcTEwFoKvydkT1panKfbwUK9FPoP7B l9NzUFSSLEwL1Cs5UT4TG/SpD5ksDiUBAqR9n+2rp+THwX/4B3OFAfYePPm2UHDN F5TNHHNmZkI8uZP5r9ezRaZSM676tytcievsPUvfMNQelMYi8qBtLs9WAdImARaV BQmItVD6nVt9nlrIkE0jOvMpvaxi5TZOmhvQQrCIJUp0mdN2wdI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:40 2025 by rpki-client