$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: oOVAysoFosN27UpIaxxMHuxfyvv54Ui31r6lTzLHV9w= Subject key identifier: 0A:E9:96:D5:45:65:BE:29:B0:1B:89:8F:3E:0A:91:B8:F9:24:3B:C0 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 02EF2B9097C4D0021BACBBB073EDFC788DFF8BBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01C0 Signing time: Fri 22 Aug 2025 02:11:37 +0000 Manifest this update: Fri 22 Aug 2025 02:06:37 +0000 Manifest next update: Mon 25 Aug 2025 07:56:37 +0000 Files and hashes: 1: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: nEb5Sh5KKuy+ZuVRG9ooUNd06y8wzoBsBpD0dhFR6S0=) 2: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 3: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ef:2b:90:97:c4:d0:02:1b:ac:bb:b0:73:ed:fc:78:8d:ff:8b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Aug 22 02:06:37 2025 GMT Not After : Aug 25 07:56:37 2025 GMT Subject: CN=0AE996D54565BE29B01B898F3E0A91B8F9243BC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:11:bc:d6:b4:69:41:79:74:d3:c4:28:82: 1e:41:93:bb:db:b5:7a:c9:a5:3b:4e:f6:c9:36:ef: 5a:c5:26:17:a8:38:43:3e:1f:a7:cf:c0:41:bd:45: e3:bd:e1:55:77:39:9f:15:8a:16:8b:7a:b6:46:ad: 53:d4:29:1b:54:e3:31:0c:3d:ac:54:b7:d6:b1:66: d9:5a:8e:ea:0c:cd:c1:0c:81:59:4b:5b:f1:53:dc: 40:82:7b:ef:32:9b:00:f2:3a:bb:73:01:2c:b7:6a: d6:b1:ba:8b:a1:83:7b:65:23:11:96:95:29:e3:7c: 7a:9e:e2:18:46:8a:f5:77:f2:dc:a3:16:61:a5:d2: 72:af:7f:b6:92:f9:2e:26:61:ba:e0:81:f5:44:6e: c2:39:09:7d:5b:4e:37:81:78:b7:31:32:3c:71:a6: cd:b1:e9:78:57:0e:b6:a1:7f:84:8d:3d:31:4b:f1: 41:fa:ef:6f:a1:7c:02:b9:a6:3d:85:dc:33:5a:15: ca:a6:51:4f:d7:60:e1:f3:96:fc:fd:93:59:d8:a6: 76:21:43:1e:a5:c8:f8:43:21:5f:1d:bc:60:69:b3: 5b:36:59:d1:e2:4a:47:76:ff:3d:ec:79:b9:06:e5: 71:04:97:fd:0e:71:97:e8:87:ef:e7:cf:4d:bb:1b: b4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E9:96:D5:45:65:BE:29:B0:1B:89:8F:3E:0A:91:B8:F9:24:3B:C0 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:70:f7:ed:c5:0e:1e:1b:00:7b:16:b2:23:9d:64:60:e9: 5d:41:57:d9:a8:7a:58:ba:b7:4e:67:07:8f:63:52:c8:22:8f: db:d9:b7:7f:4a:d3:88:b9:af:65:1c:c5:5d:b2:d2:cd:a5:5e: 64:37:f1:4e:9b:9e:dd:a2:75:4f:cd:ff:29:37:16:56:01:f6: db:c9:1d:f6:6b:cd:c2:b2:06:1a:0e:00:4e:aa:30:07:91:e6: 07:75:67:18:9f:0a:5a:39:8f:6f:d2:9c:98:33:15:c3:58:c0: 6c:a2:52:fc:03:48:01:89:3f:aa:12:64:e6:cf:49:0b:96:4d: a8:91:9e:66:68:8a:23:e2:8f:10:44:ad:5f:ce:fc:70:2a:ab: 1a:92:d4:50:73:ec:0c:6b:7f:b1:14:54:34:b5:98:ab:3f:9a: 31:81:eb:70:3a:89:a9:1d:f7:28:73:18:99:6c:46:13:38:e8: 89:a2:84:64:58:9a:9e:6f:96:ed:78:09:4d:be:66:a9:b0:60: bf:ff:69:76:07:83:e9:ea:82:7a:39:39:fc:9d:d0:b3:90:30: 04:48:b2:7b:db:de:90:f6:11:8f:da:0f:7d:70:ad:e6:41:09: 68:ab:13:1e:da:9e:22:c9:6e:f0:40:dd:6b:70:5e:6f:9c:c4: 9b:d4:bf:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAu8rkJfE0AIbrLuwc+38eI3/i7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA4MjIwMjA2MzdaFw0yNTA4MjUwNzU2MzdaMDMxMTAvBgNV BAMTKDBBRTk5NkQ1NDU2NUJFMjlCMDFCODk4RjNFMEE5MUI4RjkyNDNCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NhG81rRpQXl008Qogh5Bk7vb tXrJpTtO9sk271rFJheoOEM+H6fPwEG9ReO94VV3OZ8VihaLerZGrVPUKRtU4zEM PaxUt9axZtlajuoMzcEMgVlLW/FT3ECCe+8ymwDyOrtzASy3ataxuouhg3tlIxGW lSnjfHqe4hhGivV38tyjFmGl0nKvf7aS+S4mYbrggfVEbsI5CX1bTjeBeLcxMjxx ps2x6XhXDrahf4SNPTFL8UH672+hfAK5pj2F3DNaFcqmUU/XYOHzlvz9k1nYpnYh Qx6lyPhDIV8dvGBps1s2WdHiSkd2/z3sebkG5XEEl/0OcZfoh+/nz027G7TfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCumW1UVlvimwG4mPPgqRuPkkO8AwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7jcPftxQ4eGwB7FrIjnWRg6V1BV9moeli6 t05nB49jUsgij9vZt39K04i5r2UcxV2y0s2lXmQ38U6bnt2idU/N/yk3FlYB9tvJ HfZrzcKyBhoOAE6qMAeR5gd1ZxifClo5j2/SnJgzFcNYwGyiUvwDSAGJP6oSZObP SQuWTaiRnmZoiiPijxBErV/O/HAqqxqS1FBz7Axrf7EUVDS1mKs/mjGB63A6iakd 9yhzGJlsRhM46ImihGRYmp5vlu14CU2+ZqmwYL//aXYHg+nqgno5Ofyd0LOQMARI snvb3pD2EY/aD31wreZBCWirEx7aniLJbvBA3WtwXm+cxJvUv9k= -----END CERTIFICATE-----Generated at Sat Aug 23 19:56:38 2025 by rpki-client