$ rpki-client -vvf repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft File: D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft (raw, json) Hash identifier: LUB0FT8MxGYNUvPxnH+yAEpUYLvcJ7jdmb+rE+cygSk= Subject key identifier: 05:14:8D:84:B9:E8:D7:27:A6:4A:0F:77:04:04:C7:69:BF:CD:2F:52 Authority key identifier: D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 Certificate issuer: /CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Certificate serial: 08A61372DA9288DFD3AAEB9A324ACDF31E23C5B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft Manifest number: 01ED Signing time: Fri 22 Aug 2025 18:51:14 +0000 Manifest this update: Fri 22 Aug 2025 18:46:14 +0000 Manifest next update: Tue 26 Aug 2025 05:40:14 +0000 Files and hashes: 1: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6UhOGV8DI7PfyTejWhCSmpLpe0trLgn56lREPd3WDVA=) 2: D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl (hash: AQ0Y6dj8CWQXHTPE35QVmfOfcN0uFuTiNXvSTDIYkFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a6:13:72:da:92:88:df:d3:aa:eb:9a:32:4a:cd:f3:1e:23:c5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Validity Not Before: Aug 22 18:46:14 2025 GMT Not After : Aug 26 05:40:14 2025 GMT Subject: CN=05148D84B9E8D727A64A0F770404C769BFCD2F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:6f:84:f8:0b:55:bb:76:47:8a:ea:17:fb: a8:c2:c2:5f:5d:56:9c:aa:21:bd:46:1b:cd:6a:95: dd:09:d0:03:27:09:37:cb:5f:fc:dc:a8:24:3c:65: f0:d3:d6:73:cb:3b:e0:fa:a6:34:ea:66:62:98:85: ef:fb:d2:2c:4b:a4:4a:89:26:2f:78:77:7d:ac:e2: 45:d7:f9:fb:a6:04:88:f6:fb:5d:e0:72:5d:bc:c2: c3:ab:ff:07:d1:2a:8f:8e:7f:88:db:5f:05:64:0a: 32:ef:5b:3c:32:23:46:4c:70:7e:64:a7:d2:b4:9a: 67:13:1c:86:e6:1f:65:bf:49:d1:81:28:9e:81:74: ab:be:36:3c:56:d9:7e:b3:56:92:bd:41:5d:8d:3c: f5:98:29:34:bb:64:dc:68:bc:a9:0f:90:84:c6:49: d5:32:1e:70:d3:98:16:40:49:2f:8f:e3:12:e7:8b: 1d:02:b3:ec:47:5e:47:19:d7:15:09:b8:d7:14:f2: f9:11:bd:33:4f:38:16:f4:0c:be:32:89:a2:22:5c: 95:25:7e:c7:5c:2b:64:9b:9f:f3:fc:2f:01:6b:80: 23:c9:f4:8c:34:e7:15:b8:88:b0:0d:61:b1:4d:08: 47:20:d2:7a:2e:3e:7c:01:99:5d:dc:5a:40:d7:f3: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:8D:84:B9:E8:D7:27:A6:4A:0F:77:04:04:C7:69:BF:CD:2F:52 X509v3 Authority Key Identifier: keyid:D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:62:5a:3c:cb:ba:8c:84:e3:b9:a5:8f:ad:05:ca:4a:db:03: 8e:88:c6:55:86:79:b0:9c:1d:d2:5b:65:a8:ea:84:69:ec:fe: 7e:6e:8d:bc:c3:0e:53:4c:3e:cb:f2:0b:fa:c0:30:7f:34:76: 3c:45:83:16:08:33:c0:04:7a:2d:03:dd:e8:20:5c:e4:d9:58: e6:e9:92:10:d6:be:ce:3c:0f:59:26:c4:63:2d:1f:b0:33:ed: 87:39:96:13:7b:a5:00:2e:fe:3f:62:71:6d:d1:83:11:59:8c: ef:ce:f8:ad:7b:8f:4d:35:e8:8a:98:e3:2b:81:2e:13:e7:39: f3:74:dd:4e:5a:64:60:ef:8d:84:85:3e:87:64:f5:70:d8:c0: be:43:1f:b4:0d:0e:2c:67:d8:e0:7b:0f:55:a0:0d:aa:85:26: 41:fe:d5:2e:21:30:da:f3:d1:bd:30:ca:8a:88:14:d9:70:6a: da:0e:81:75:4d:ff:b0:02:16:f0:63:bb:b0:fb:0a:f9:ba:56: 2e:cb:b1:b6:6c:0f:57:ef:8d:b3:ec:f7:4e:2b:2e:20:ad:bf: 31:f2:a1:69:10:5b:f7:42:ec:33:76:62:2b:8a:3a:a4:eb:a6: 4e:7b:f2:83:57:f8:b9:4a:34:a2:19:8f:61:d2:3c:d7:f3:96: 23:e2:36:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKYTctqSiN/TquuaMkrN8x4jxbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAx RUMyNkREMTAeFw0yNTA4MjIxODQ2MTRaFw0yNTA4MjYwNTQwMTRaMDMxMTAvBgNV BAMTKDA1MTQ4RDg0QjlFOEQ3MjdBNjRBMEY3NzA0MDRDNzY5QkZDRDJGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuW+E+AtVu3ZHiuoX+6jCwl9d VpyqIb1GG81qld0J0AMnCTfLX/zcqCQ8ZfDT1nPLO+D6pjTqZmKYhe/70ixLpEqJ Ji94d32s4kXX+fumBIj2+13gcl28wsOr/wfRKo+Of4jbXwVkCjLvWzwyI0ZMcH5k p9K0mmcTHIbmH2W/SdGBKJ6BdKu+NjxW2X6zVpK9QV2NPPWYKTS7ZNxovKkPkITG SdUyHnDTmBZASS+P4xLnix0Cs+xHXkcZ1xUJuNcU8vkRvTNPOBb0DL4yiaIiXJUl fsdcK2Sbn/P8LwFrgCPJ9Iw05xW4iLANYbFNCEcg0nouPnwBmV3cWkDX82BfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRSNhLno1yemSg93BATHab/NL1IwHwYDVR0j BBgwFoAU1BccTAaXWkMJ/Fny00DWgB7CbdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzY4MGQwZC1lMjQwLTRhYWYtYmMyMy0yODIzNTkzNzMyODkvMC9ENDE3MUM0QzA2 OTc1QTQzMDlGQzU5RjJEMzQwRDY4MDFFQzI2REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAxRUMy NkREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2 ODAxRUMyNkREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFiWjzLuoyE47mlj60FykrbA46IxlWGebCc HdJbZajqhGns/n5ujbzDDlNMPsvyC/rAMH80djxFgxYIM8AEei0D3eggXOTZWObp khDWvs48D1kmxGMtH7Az7Yc5lhN7pQAu/j9icW3RgxFZjO/O+K17j0016IqY4yuB LhPnOfN03U5aZGDvjYSFPodk9XDYwL5DH7QNDixn2OB7D1WgDaqFJkH+1S4hMNrz 0b0wyoqIFNlwatoOgXVN/7ACFvBju7D7Cvm6Vi7LsbZsD1fvjbPs904rLiCtvzHy oWkQW/dC7DN2YiuKOqTrpk578oNX+LlKNKIZj2HSPNfzliPiNs4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:00:14 2025 by rpki-client