$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: ldnUK7jyWEHphbiqgPUBJXTK+AyuIkoBrmX5oLcGHc4= Subject key identifier: CC:04:6E:6E:FD:95:D7:23:0E:DF:40:BB:06:0D:EA:7B:0E:CE:39:68 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 3F5A6448EBE0099AFDDE1E714B9429368840B13A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 01DD Signing time: Fri 22 Aug 2025 12:21:43 +0000 Manifest this update: Fri 22 Aug 2025 12:16:43 +0000 Manifest next update: Mon 25 Aug 2025 12:23:43 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) 2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: KVO0XE8eaw2Q+Fqvur5WcfOcH2JLlCY3ABJDlGjOrrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:64:48:eb:e0:09:9a:fd:de:1e:71:4b:94:29:36:88:40:b1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Aug 22 12:16:43 2025 GMT Not After : Aug 25 12:23:43 2025 GMT Subject: CN=CC046E6EFD95D7230EDF40BB060DEA7B0ECE3968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:98:68:e2:31:8b:69:5a:18:0a:3c:96:56: 82:31:73:62:02:8d:21:5d:ae:28:6b:aa:16:74:14: 80:53:c8:c6:b8:b0:aa:87:37:09:7b:6b:49:24:e7: 29:a0:19:ae:ee:1c:a7:ba:c0:32:cf:e2:c0:3d:9c: 1e:bd:ab:3b:62:9d:42:e3:fc:7c:cb:91:1e:99:95: db:76:13:f1:f5:5d:13:e3:b4:ca:fa:e5:d0:e8:ed: 71:e0:50:a3:b4:81:1d:6b:da:43:1c:39:69:2d:d4: 2e:21:e6:02:83:02:98:b4:38:85:00:83:3d:79:9e: a6:38:76:32:0c:55:da:9a:ba:83:6b:00:eb:e9:aa: ef:ca:73:a1:9b:cd:b3:d5:25:ab:bc:f0:6a:da:54: e3:22:da:26:03:64:94:5b:a4:ba:32:aa:22:65:47: 6b:c6:8f:60:47:0e:ba:76:ca:8e:e6:76:b3:4c:9e: 80:b6:2c:89:af:62:5e:1a:49:c1:8e:74:0e:e1:91: be:05:46:e6:1f:13:82:38:fa:82:18:50:42:ad:a8: b8:58:12:c6:95:9f:c1:d2:34:05:11:10:c9:dc:0c: e3:f2:a5:17:82:7c:74:87:e3:e4:e2:71:99:d4:ed: 68:4b:7a:4d:a6:e0:18:64:72:e4:32:16:b7:14:47: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:6E:6E:FD:95:D7:23:0E:DF:40:BB:06:0D:EA:7B:0E:CE:39:68 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6a:74:50:b3:06:e4:13:11:00:99:e6:a1:9b:47:43:6b:52: f5:cd:85:09:8e:3f:c9:fd:94:fc:a8:07:7d:b9:34:7b:7c:f6: 9f:5a:c5:e1:cc:3e:41:eb:b5:1f:07:ff:15:a7:3d:98:5c:53: b7:4e:1a:26:ac:59:6e:46:99:1c:0d:19:1c:8c:bf:7a:27:d3: e9:87:ec:1a:0d:54:8e:20:7e:ec:a2:04:7c:27:ee:b1:6a:b2: 70:03:77:bc:ea:f9:df:d3:2c:61:47:09:98:2b:dc:dd:62:d6: 64:22:13:ce:c4:11:c0:e8:03:fb:be:68:c5:c5:09:35:30:d2: 57:c1:f0:dc:44:c2:08:8a:f6:59:28:2c:07:e1:ca:13:e3:d7: 76:03:12:94:8f:d6:7f:d0:e1:20:45:ea:bd:ab:66:82:3e:54: 8d:c3:47:40:be:8c:bd:ff:68:ef:09:d4:ae:98:43:be:6f:f9: 76:0a:99:09:ec:ff:7d:12:0b:da:6f:04:d9:a5:79:f3:f2:7e: cb:d1:54:88:a8:52:da:eb:ce:28:98:25:3d:2b:7b:fa:d4:17: bc:6e:aa:09:4e:c7:0f:0e:72:53:14:9b:ab:46:ec:39:3b:37: 35:f7:14:52:72:bc:a1:af:18:a7:60:ed:7c:52:bd:51:43:e2: 86:ce:34:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1pkSOvgCZr93h5xS5QpNohAsTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTA4MjIxMjE2NDNaFw0yNTA4MjUxMjIzNDNaMDMxMTAvBgNV BAMTKENDMDQ2RTZFRkQ5NUQ3MjMwRURGNDBCQjA2MERFQTdCMEVDRTM5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZJho4jGLaVoYCjyWVoIxc2IC jSFdrihrqhZ0FIBTyMa4sKqHNwl7a0kk5ymgGa7uHKe6wDLP4sA9nB69qztinULj /HzLkR6Zldt2E/H1XRPjtMr65dDo7XHgUKO0gR1r2kMcOWkt1C4h5gKDApi0OIUA gz15nqY4djIMVdqauoNrAOvpqu/Kc6GbzbPVJau88GraVOMi2iYDZJRbpLoyqiJl R2vGj2BHDrp2yo7mdrNMnoC2LImvYl4aScGOdA7hkb4FRuYfE4I4+oIYUEKtqLhY EsaVn8HSNAUREMncDOPypReCfHSH4+TicZnU7WhLek2m4BhkcuQyFrcUR0oFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzARubv2V1yMO30C7Bg3qew7OOWgwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdqdFCzBuQTEQCZ5qGbR0NrUvXNhQmOP8n9 lPyoB325NHt89p9axeHMPkHrtR8H/xWnPZhcU7dOGiasWW5GmRwNGRyMv3on0+mH 7BoNVI4gfuyiBHwn7rFqsnADd7zq+d/TLGFHCZgr3N1i1mQiE87EEcDoA/u+aMXF CTUw0lfB8NxEwgiK9lkoLAfhyhPj13YDEpSP1n/Q4SBF6r2rZoI+VI3DR0C+jL3/ aO8J1K6YQ75v+XYKmQns/30SC9pvBNmlefPyfsvRVIioUtrrziiYJT0re/rUF7xu qglOxw8OclMUm6tG7Dk7NzX3FFJyvKGvGKdg7XxSvVFD4obONHM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:39 2025 by rpki-client