$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: zgUR8KZPw7nvLzHEswVrUD0Y2PCFKg0a0BbbyzlznIU= Subject key identifier: 0E:14:60:78:CF:08:3B:5B:F0:20:0D:D1:7D:28:6E:77:3F:CD:B1:27 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 0B0CB887FD483C86D476B480812D956B2282318C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 01FA Signing time: Sat 23 Aug 2025 08:51:51 +0000 Manifest this update: Sat 23 Aug 2025 08:46:51 +0000 Manifest next update: Tue 26 Aug 2025 12:22:51 +0000 Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) 2: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: ksRtfRiPsoBTNJakoY5+xVuFFQkOJz7JDZQm7CVR5lw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0c:b8:87:fd:48:3c:86:d4:76:b4:80:81:2d:95:6b:22:82:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Aug 23 08:46:51 2025 GMT Not After : Aug 26 12:22:51 2025 GMT Subject: CN=0E146078CF083B5BF0200DD17D286E773FCDB127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:25:4b:81:df:82:82:c0:fd:87:10:83:68: cf:84:67:b4:f7:85:bb:ef:a1:00:69:ab:e2:ae:7e: 2b:9d:a2:aa:6d:83:e5:14:0c:28:b0:a2:9a:ad:7d: d9:1a:ee:8a:63:39:17:37:4d:51:fe:85:25:0e:a9: 79:fa:3b:8b:28:7f:91:54:2c:76:f0:1b:9e:3f:50: 58:59:07:a1:cb:51:ca:2c:68:2d:08:71:d9:0c:a9: c9:1a:43:63:b2:2f:09:64:1c:12:30:97:08:b7:96: c1:51:f8:8c:2d:de:14:0d:16:1a:47:0c:99:3a:74: 01:f1:55:e6:ed:a2:79:f0:64:2c:0c:ca:3e:54:e3: af:18:fb:9d:81:a1:21:cf:16:e8:bb:91:81:9c:14: 52:b4:3e:02:e1:77:bb:99:bf:93:48:1d:6d:93:08: 56:cb:45:16:0e:17:ea:0c:a1:c8:6b:0c:ce:5d:7b: b4:1f:c8:03:c4:80:12:ba:8b:e2:90:a9:c6:ec:03: a6:35:b9:79:6b:c9:e0:3b:b6:b3:89:51:fd:ea:13: a7:5a:1e:3a:58:58:37:bc:22:f3:1a:a9:1f:98:28: ef:02:cf:00:0e:b1:42:df:4d:cb:6a:76:21:a3:98: 92:01:8a:1b:35:44:b7:98:a1:5b:fc:16:35:77:38: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:14:60:78:CF:08:3B:5B:F0:20:0D:D1:7D:28:6E:77:3F:CD:B1:27 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:7b:9a:81:83:84:0f:60:c5:02:bd:d0:e2:0d:c1:04:32: 02:f8:a4:e4:6b:11:11:7f:3e:1f:6f:cd:ec:bb:39:db:19:8b: e5:55:18:23:b2:97:b4:8e:ee:7d:6f:74:0b:7f:27:9c:2d:2a: 2f:52:93:9a:cc:5e:cc:16:84:48:70:a2:39:44:14:ab:54:52: 04:36:62:4b:7a:cf:b7:54:4a:0b:1c:c9:4d:6b:2e:83:50:af: d5:ae:3e:3d:5f:4d:dc:e5:73:71:a0:3f:1e:e5:dc:06:ef:b1: a9:79:86:5e:09:61:85:d9:35:bf:44:48:a2:24:dd:9a:8b:6c: cd:dc:31:5f:b2:7a:93:cd:d2:94:26:35:dd:63:bb:ea:c5:bc: 66:0b:74:fb:cc:01:58:85:a5:52:d6:5c:f4:f6:4e:8f:23:0c: 0a:ec:1a:90:bb:59:fc:d1:b4:e0:e0:c1:af:4b:f3:fa:2d:89: 67:06:bb:2c:f8:32:06:08:c4:6d:d7:51:c0:28:1b:b2:72:e1: db:d6:2a:2b:29:11:c9:75:42:28:73:9e:c4:ab:67:c6:ef:41: 5b:6a:27:08:63:b0:10:28:6a:99:15:fe:ec:0a:b7:f1:ef:73: 69:54:55:16:56:87:10:38:e6:f6:e4:b9:ba:de:de:0e:3c:2e: f4:84:1f:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwy4h/1IPIbUdrSAgS2VayKCMYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTA4MjMwODQ2NTFaFw0yNTA4MjYxMjIyNTFaMDMxMTAvBgNV BAMTKDBFMTQ2MDc4Q0YwODNCNUJGMDIwMEREMTdEMjg2RTc3M0ZDREIxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSSVLgd+CgsD9hxCDaM+EZ7T3 hbvvoQBpq+Kufiudoqptg+UUDCiwopqtfdka7opjORc3TVH+hSUOqXn6O4sof5FU LHbwG54/UFhZB6HLUcosaC0IcdkMqckaQ2OyLwlkHBIwlwi3lsFR+Iwt3hQNFhpH DJk6dAHxVebtonnwZCwMyj5U468Y+52BoSHPFui7kYGcFFK0PgLhd7uZv5NIHW2T CFbLRRYOF+oMochrDM5de7QfyAPEgBK6i+KQqcbsA6Y1uXlryeA7trOJUf3qE6da HjpYWDe8IvMaqR+YKO8CzwAOsULfTctqdiGjmJIBihs1RLeYoVv8FjV3OE55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhRgeM8IO1vwIA3RfShudz/NsScwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTae5qBg4QPYMUCvdDiDcEEMgL4pORrERF/ Ph9vzey7OdsZi+VVGCOyl7SO7n1vdAt/J5wtKi9Sk5rMXswWhEhwojlEFKtUUgQ2 Ykt6z7dUSgscyU1rLoNQr9WuPj1fTdzlc3GgPx7l3Abvsal5hl4JYYXZNb9ESKIk 3ZqLbM3cMV+yepPN0pQmNd1ju+rFvGYLdPvMAViFpVLWXPT2To8jDArsGpC7WfzR tODgwa9L8/otiWcGuyz4MgYIxG3XUcAoG7Jy4dvWKispEcl1QihznsSrZ8bvQVtq JwhjsBAoapkV/uwKt/Hvc2lUVRZWhxA45vbkubre3g48LvSEHyI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:50 2025 by rpki-client