$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: RMDBIzHlSvFhQmxMXduU439ZnPFutZk5X0jBUHrS99k= Subject key identifier: AB:88:F3:38:71:37:F3:DC:46:38:ED:2B:D7:57:E6:91:74:7E:07:9D Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 67AC91EAB52138EE289FF7676FAC74C19183A4D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0240 Signing time: Sat 23 Aug 2025 00:52:07 +0000 Manifest this update: Sat 23 Aug 2025 00:47:07 +0000 Manifest next update: Tue 26 Aug 2025 06:20:07 +0000 Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: wn/C+sSOem8RZlg+gvm9aKJFyQKvej7rCJRrFZCzJok=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ac:91:ea:b5:21:38:ee:28:9f:f7:67:6f:ac:74:c1:91:83:a4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Aug 23 00:47:07 2025 GMT Not After : Aug 26 06:20:07 2025 GMT Subject: CN=AB88F3387137F3DC4638ED2BD757E691747E079D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:0f:31:bc:fe:6d:1b:81:f3:12:0c:5b:c2: 50:87:1b:d1:29:c1:97:0c:3a:7e:7f:22:cd:fa:a8: 74:f7:d0:e1:a5:ca:20:88:07:db:ca:41:0d:93:50: a0:07:4a:9d:53:66:3b:90:f9:37:4d:18:78:8b:1a: 05:93:89:02:40:db:91:04:da:c3:d7:02:ce:84:08: de:0b:8d:6a:5b:44:bb:28:2e:01:f1:2a:f1:8f:7b: 6f:12:27:0b:7b:16:2c:80:38:1f:ab:fb:61:80:ac: fc:88:21:ba:e1:cb:db:cb:f3:e5:0e:26:1e:d4:39: c2:a9:77:f2:e3:98:dd:e3:ef:da:1e:39:48:cf:7c: 87:5d:83:32:11:50:62:08:56:92:00:ba:24:a0:af: d2:de:bf:38:9f:79:1b:1a:12:d3:ee:b4:73:03:59: 81:0f:72:a3:40:5a:fe:3f:5c:7b:81:71:8d:76:18: 90:ff:4b:a7:55:f2:64:7f:1d:67:f4:54:5d:56:46: 96:2f:70:e3:1a:f7:5f:f1:a0:d6:90:68:06:eb:02: a9:b5:af:90:a4:13:02:d3:c9:75:1b:8a:f4:c2:2a: db:12:98:95:a2:1f:08:9b:1b:49:83:46:d0:96:f8: 21:30:04:90:27:59:f1:7f:20:fc:65:c7:39:91:72: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:F3:38:71:37:F3:DC:46:38:ED:2B:D7:57:E6:91:74:7E:07:9D X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:13:eb:90:34:8d:32:62:fb:05:f1:0b:19:df:ad:ed:77:64: 94:e3:46:97:e3:9f:01:2a:6c:6c:d2:b4:08:94:95:ac:c6:64: b0:b9:0a:51:1f:b4:52:a9:1f:08:26:6f:ff:06:4e:cc:b8:98: 08:11:fa:ac:52:4f:51:e1:a9:72:0b:df:6e:98:83:f8:5d:d5: 5a:ee:89:55:85:36:a5:a9:b9:ee:e9:4c:39:59:97:c4:2f:ff: 38:2b:87:c7:41:72:a1:17:36:3c:74:59:3c:04:d3:01:4c:8b: 3b:08:44:e8:29:9e:e2:62:b8:82:93:ed:6e:57:53:20:9c:d1: cd:33:e5:19:97:3b:29:16:79:85:14:80:0b:2d:36:74:40:ca: be:e2:df:ae:81:93:fb:89:60:43:32:49:63:9e:b1:ec:6b:e6: 20:47:86:73:f5:b1:9f:25:d7:4e:e7:15:3b:d9:97:72:21:ad: 13:ee:1e:97:fe:c3:ec:af:5e:5b:ee:df:f8:fb:2f:92:46:8c: 79:d1:c7:db:25:7f:97:80:75:81:b1:c4:8c:3d:cd:45:f1:aa: 40:2a:b3:1f:4f:8a:88:ec:f0:79:d9:80:26:a6:68:f9:a4:7d: b9:27:11:39:6a:47:a8:d4:42:82:98:03:8e:fc:41:ac:d7:84: 49:b4:6c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6yR6rUhOO4on/dnb6x0wZGDpNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA4MjMwMDQ3MDdaFw0yNTA4MjYwNjIwMDdaMDMxMTAvBgNV BAMTKEFCODhGMzM4NzEzN0YzREM0NjM4RUQyQkQ3NTdFNjkxNzQ3RTA3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zQ8xvP5tG4HzEgxbwlCHG9Ep wZcMOn5/Is36qHT30OGlyiCIB9vKQQ2TUKAHSp1TZjuQ+TdNGHiLGgWTiQJA25EE 2sPXAs6ECN4LjWpbRLsoLgHxKvGPe28SJwt7FiyAOB+r+2GArPyIIbrhy9vL8+UO Jh7UOcKpd/LjmN3j79oeOUjPfIddgzIRUGIIVpIAuiSgr9LevzifeRsaEtPutHMD WYEPcqNAWv4/XHuBcY12GJD/S6dV8mR/HWf0VF1WRpYvcOMa91/xoNaQaAbrAqm1 r5CkEwLTyXUbivTCKtsSmJWiHwibG0mDRtCW+CEwBJAnWfF/IPxlxzmRcksdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4jzOHE389xGOO0r11fmkXR+B50wHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQT65A0jTJi+wXxCxnfre13ZJTjRpfjnwEq bGzStAiUlazGZLC5ClEftFKpHwgmb/8GTsy4mAgR+qxST1HhqXIL326Yg/hd1Vru iVWFNqWpue7pTDlZl8Qv/zgrh8dBcqEXNjx0WTwE0wFMizsIROgpnuJiuIKT7W5X UyCc0c0z5RmXOykWeYUUgAstNnRAyr7i366Bk/uJYEMySWOesexr5iBHhnP1sZ8l 107nFTvZl3IhrRPuHpf+w+yvXlvu3/j7L5JGjHnRx9slf5eAdYGxxIw9zUXxqkAq sx9Piojs8HnZgCamaPmkfbknETlqR6jUQoKYA478QazXhEm0bDU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:26 2025 by rpki-client