$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: h/XbY6BlXiWe61mLRNmV29End3EDwqtLwbRnkJk1ovA= Subject key identifier: 5A:33:6B:E7:BD:91:7F:5D:7E:40:E3:49:8B:EE:29:6B:FB:29:57:C8 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 1E49F61DCD57540D2F92A9A55C310B5F74C96B15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01A9 Signing time: Tue 01 Jul 2025 18:41:33 +0000 Manifest this update: Tue 01 Jul 2025 18:36:33 +0000 Manifest next update: Sat 05 Jul 2025 01:46:33 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: pF0XX8iGUNaEAPEmdUcwKZzSPnUJMqKA+lJt2x8Gm7M=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: tqPg4T8Dw0icdGUxt1lYTZBrTwDEt+2TCt6iPREG3Zg=) 3: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: 6AB5bq4lxkpATYu0rKSJdzLFkqGQhdfrOpLg4Tu8L9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 01:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:49:f6:1d:cd:57:54:0d:2f:92:a9:a5:5c:31:0b:5f:74:c9:6b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Jul 1 18:36:33 2025 GMT Not After : Jul 5 01:46:33 2025 GMT Subject: CN=5A336BE7BD917F5D7E40E3498BEE296BFB2957C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:1f:23:c1:c4:e4:a8:d7:e4:ab:52:a7:f7: 6c:3b:0e:82:87:c1:55:31:e6:c2:91:a2:d5:58:fd: a6:ae:63:a5:c8:e0:f9:87:1e:63:c0:d7:42:ec:f1: 87:bb:eb:24:e3:cc:90:fb:ec:00:f2:1c:a6:79:80: 32:21:89:58:8a:07:5c:f2:38:66:15:a1:3e:75:d5: ca:e8:55:fc:95:46:41:56:f4:3f:f2:7a:76:b5:85: b8:a6:bd:32:22:6c:62:47:58:08:90:49:c3:83:ad: b3:b7:44:cb:d1:98:3c:6f:de:8e:55:a8:80:eb:3a: 75:3a:42:42:70:48:79:05:b8:25:37:ff:a1:d9:f1: 01:f6:40:9e:c0:44:2d:56:2f:04:ab:ce:57:70:c7: 5b:75:d7:52:7f:a1:24:30:ae:12:ac:c6:38:69:4c: a7:3f:4b:9a:b2:f1:a5:d6:9f:66:cc:cd:16:6d:51: 48:66:e6:5d:90:20:94:f2:71:b6:33:93:0a:ac:35: de:96:95:5b:78:d4:e6:75:50:a1:60:1c:7f:e1:f8: b7:28:20:74:72:e7:79:52:20:03:76:4a:1e:bc:49: d4:bf:ef:86:d2:1d:65:08:b1:39:fe:9a:22:79:db: 5e:7c:c2:30:1a:24:5e:95:f0:02:53:a4:dc:47:b1: 75:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:6B:E7:BD:91:7F:5D:7E:40:E3:49:8B:EE:29:6B:FB:29:57:C8 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1b:41:46:6d:0d:a8:de:4b:10:da:9d:b8:d0:b8:83:6d:62: 8f:05:77:1f:5c:ee:2e:60:fa:65:33:54:a2:8c:5c:16:bc:5a: 1e:36:cd:69:36:2e:44:13:dd:07:fe:d6:e1:f7:35:b4:ef:a0: eb:68:64:56:d7:cb:eb:ee:0e:18:87:a3:48:81:27:18:1b:65: 86:12:40:92:5c:9e:b2:8d:9f:d3:fe:6c:20:7b:c3:7d:00:3e: fd:b3:8f:14:d0:d1:9e:82:da:d5:a4:60:5d:35:e7:03:4c:2e: e0:71:9a:2b:0c:1e:d5:db:e7:30:ca:fe:ca:f4:bc:5a:67:86: 27:34:89:99:b9:d9:2b:de:18:d1:8b:4b:fc:f5:40:ad:d9:05: cf:95:db:42:41:5f:a7:5a:a2:9b:be:7c:f3:62:1b:35:5d:c6: e1:cd:dd:7b:d6:4a:a3:41:b6:11:e9:32:e9:ba:d7:b0:97:ed: 4d:05:d8:43:87:a4:79:e3:39:10:10:2f:6f:d8:7e:5c:39:ae: a6:8f:cc:c6:29:f7:62:64:d4:29:38:e4:88:2e:93:7c:80:89: ca:e5:66:1a:f7:84:85:59:59:d1:07:9a:23:8a:f7:23:46:3c: 45:fb:21:d9:43:5e:d8:4d:94:3f:a3:28:a5:b1:64:86:93:5a: dd:79:5e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkn2Hc1XVA0vkqmlXDELX3TJaxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA3MDExODM2MzNaFw0yNTA3MDUwMTQ2MzNaMDMxMTAvBgNV BAMTKDVBMzM2QkU3QkQ5MTdGNUQ3RTQwRTM0OThCRUUyOTZCRkIyOTU3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3B8jwcTkqNfkq1Kn92w7DoKH wVUx5sKRotVY/aauY6XI4PmHHmPA10Ls8Ye76yTjzJD77ADyHKZ5gDIhiViKB1zy OGYVoT511croVfyVRkFW9D/yena1hbimvTIibGJHWAiQScODrbO3RMvRmDxv3o5V qIDrOnU6QkJwSHkFuCU3/6HZ8QH2QJ7ARC1WLwSrzldwx1t111J/oSQwrhKsxjhp TKc/S5qy8aXWn2bMzRZtUUhm5l2QIJTycbYzkwqsNd6WlVt41OZ1UKFgHH/h+Lco IHRy53lSIAN2Sh68SdS/74bSHWUIsTn+miJ52158wjAaJF6V8AJTpNxHsXWFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjNr572Rf11+QONJi+4pa/spV8gwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUbQUZtDajeSxDanbjQuINtYo8Fdx9c7i5g +mUzVKKMXBa8Wh42zWk2LkQT3Qf+1uH3NbTvoOtoZFbXy+vuDhiHo0iBJxgbZYYS QJJcnrKNn9P+bCB7w30APv2zjxTQ0Z6C2tWkYF015wNMLuBxmisMHtXb5zDK/sr0 vFpnhic0iZm52SveGNGLS/z1QK3ZBc+V20JBX6daopu+fPNiGzVdxuHN3XvWSqNB thHpMum617CX7U0F2EOHpHnjORAQL2/Yflw5rqaPzMYp92Jk1Ck45Iguk3yAicrl Zhr3hIVZWdEHmiOK9yNGPEX7IdlDXthNlD+jKKWxZIaTWt15Xvk= -----END CERTIFICATE-----Generated at Wed Jul 2 05:01:14 2025 by rpki-client