$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: ctxlZHIDzftXlqL6e5EbfBQ4MKUSzE52yZjwHMtfRMA= Subject key identifier: 80:F5:98:20:B5:AE:DE:15:D0:1D:CA:BB:05:AA:98:74:F4:DF:7D:F3 Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 7DB8A12C73E08D9791D7C5ACFDAB346422EC42A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 01B5 Signing time: Sat 23 Aug 2025 10:22:25 +0000 Manifest this update: Sat 23 Aug 2025 10:17:25 +0000 Manifest next update: Tue 26 Aug 2025 21:37:25 +0000 Files and hashes: 1: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: owzFX97yUwQlgrwuIyX44838/uUdwYXvl6IShRtLOss=) 2: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: LPu7TMQfTQ52DHjrxV1v60ML6NZEqWUHq2nk74TBZ44=) 3: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: 7nqCoBs4UD5Q0zFXqw657mJUgZK2hC/5uxbKdURPAzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b8:a1:2c:73:e0:8d:97:91:d7:c5:ac:fd:ab:34:64:22:ec:42:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Aug 23 10:17:25 2025 GMT Not After : Aug 26 21:37:25 2025 GMT Subject: CN=80F59820B5AEDE15D01DCABB05AA9874F4DF7DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:7f:86:31:51:f6:45:3d:f1:52:af:7e:fd: 96:a0:bc:71:81:67:28:9b:dc:95:bc:9f:d8:c8:8c: 08:1a:4f:e3:31:7c:9e:32:74:68:1c:9d:b0:b1:7a: 84:2d:c2:64:1d:50:5d:b4:b6:b4:4d:b1:af:40:20: db:6f:13:92:6f:ff:a3:7e:2c:65:f1:30:5b:b3:0a: bf:80:cf:10:69:74:3a:4b:99:78:bc:ff:a1:34:03: 42:a5:18:70:e9:6b:fd:31:a9:2a:ac:0f:b7:ba:99: c5:4f:5d:b2:41:fd:ac:86:75:29:f4:b2:d6:b2:7c: c0:2a:8c:0a:1d:ff:af:56:d9:6a:bf:d3:2b:67:be: f5:ee:d4:ce:b6:a6:fb:1d:35:88:66:79:1c:66:5c: b9:bb:32:e8:af:c9:9a:a6:ca:42:37:8f:57:3c:23: 13:18:89:3a:f2:37:c8:52:a1:0a:f8:62:b6:80:6c: ba:de:58:c9:44:3e:44:7c:1d:ba:2e:43:eb:a2:27: 77:5d:fb:34:f6:b8:3a:fc:8d:e7:dc:94:07:b1:9f: ef:a8:f8:f3:97:6b:79:47:b4:1b:49:5b:91:d8:c4: a6:d2:2d:9c:41:d5:9c:8f:92:83:cf:92:c0:41:a1: bf:12:2a:79:37:67:eb:8b:e6:07:26:93:28:f5:f3: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F5:98:20:B5:AE:DE:15:D0:1D:CA:BB:05:AA:98:74:F4:DF:7D:F3 X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4a:49:73:1c:92:aa:47:e8:68:d7:6f:f6:e0:94:39:f6:21: 1e:5a:4f:e5:39:61:7e:b7:8a:3f:9b:7b:de:3a:5f:44:22:db: cb:57:00:77:7d:49:53:65:a9:96:d8:db:a5:e8:93:da:98:13: 41:5a:d2:c9:64:42:d6:86:5b:73:1e:5a:40:8e:43:62:10:15: d1:b7:f3:73:b2:4b:61:a3:b6:ad:ef:29:c8:75:83:07:18:97: 64:01:dc:46:d5:59:8e:86:57:8f:5c:0e:0c:cb:41:25:c5:e3: 76:bf:19:74:9a:1e:50:e6:a9:c8:52:35:06:81:70:0c:f8:a5: 29:ea:4c:17:6b:1c:66:97:72:06:f6:9a:b0:26:45:ab:3f:d3: 67:c3:85:18:c3:1f:5e:10:e9:6c:b6:c5:9d:12:62:9c:5d:76: 0e:b4:7d:b4:1c:54:b4:85:77:ea:88:fa:fb:75:3f:8f:aa:26: ec:7d:44:54:45:0d:76:44:0c:5c:7d:0e:79:37:5d:af:05:dd: 8f:0b:70:72:e8:4d:40:33:62:30:45:1a:2c:e4:f9:4e:b0:9b: 06:4f:13:eb:16:ae:cc:2b:2b:ba:43:2f:e7:51:5d:27:a6:76: 0f:9c:38:76:eb:62:fa:2b:4a:d0:ed:d1:40:13:40:b2:b8:fd: 5e:33:09:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbihLHPgjZeR18Ws/as0ZCLsQqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTA4MjMxMDE3MjVaFw0yNTA4MjYyMTM3MjVaMDMxMTAvBgNV BAMTKDgwRjU5ODIwQjVBRURFMTVEMDFEQ0FCQjA1QUE5ODc0RjRERjdERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5n+GMVH2RT3xUq9+/ZagvHGB Zyib3JW8n9jIjAgaT+MxfJ4ydGgcnbCxeoQtwmQdUF20trRNsa9AINtvE5Jv/6N+ LGXxMFuzCr+AzxBpdDpLmXi8/6E0A0KlGHDpa/0xqSqsD7e6mcVPXbJB/ayGdSn0 stayfMAqjAod/69W2Wq/0ytnvvXu1M62pvsdNYhmeRxmXLm7MuivyZqmykI3j1c8 IxMYiTryN8hSoQr4YraAbLreWMlEPkR8HbouQ+uiJ3dd+zT2uDr8jefclAexn++o +POXa3lHtBtJW5HYxKbSLZxB1ZyPkoPPksBBob8SKnk3Z+uL5gcmkyj18xDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPWYILWu3hXQHcq7BaqYdPTfffMwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFKSXMckqpH6GjXb/bglDn2IR5aT+U5YX63 ij+be946X0Qi28tXAHd9SVNlqZbY26Xok9qYE0Fa0slkQtaGW3MeWkCOQ2IQFdG3 83OyS2Gjtq3vKch1gwcYl2QB3EbVWY6GV49cDgzLQSXF43a/GXSaHlDmqchSNQaB cAz4pSnqTBdrHGaXcgb2mrAmRas/02fDhRjDH14Q6Wy2xZ0SYpxddg60fbQcVLSF d+qI+vt1P4+qJux9RFRFDXZEDFx9Dnk3Xa8F3Y8LcHLoTUAzYjBFGizk+U6wmwZP E+sWrswrK7pDL+dRXSemdg+cOHbrYvorStDt0UATQLK4/V4zCTE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:48 2025 by rpki-client