$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: wyDUogVEcaIGk127M+AbvSGHL1d861tZlvkK/x9TMaA= Subject key identifier: 6E:7D:58:AF:F1:2E:96:AF:DF:6A:45:2B:0D:66:F0:8D:75:82:C9:50 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 266BD1F8471CBE530C04EAC16DBBDA24E684A92C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 04CF Signing time: Sat 23 Aug 2025 06:21:45 +0000 Manifest this update: Sat 23 Aug 2025 06:16:45 +0000 Manifest next update: Tue 26 Aug 2025 10:18:45 +0000 Files and hashes: 1: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=) 2: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=) 3: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: ej6mTdtLOckA2Ek0SRWXFrq3XMYErRYSO/XKuxG8bOs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6b:d1:f8:47:1c:be:53:0c:04:ea:c1:6d:bb:da:24:e6:84:a9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Aug 23 06:16:45 2025 GMT Not After : Aug 26 10:18:45 2025 GMT Subject: CN=6E7D58AFF12E96AFDF6A452B0D66F08D7582C950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:1e:c6:a8:dd:b2:13:9b:6d:5a:4b:25:26: c7:55:2c:d8:33:9b:b4:11:3c:4f:d2:be:81:2a:ee: dd:5d:26:a7:d5:a7:f0:02:b7:0f:d9:58:f7:c2:99: 3f:8a:5a:0b:02:68:70:23:38:26:34:7c:7f:b1:4b: bf:db:4f:d5:c9:bd:88:54:82:72:23:ce:76:b0:ee: c1:8f:ab:21:3f:0f:6b:cf:62:f8:ce:68:28:d2:12: 1f:f9:b3:90:d7:d8:5b:69:db:37:02:92:f7:65:1f: 39:fd:c4:a1:d6:cb:85:5a:27:b0:74:b4:aa:aa:64: 57:2b:72:49:eb:e8:eb:4b:3c:1b:3c:03:39:c2:66: 84:92:10:b6:3b:34:48:52:02:b2:a9:47:7e:65:54: f2:e7:bb:3d:36:e3:2a:7b:42:d7:5d:79:12:97:d7: b8:b3:c7:f6:19:e9:d0:78:b0:da:36:ae:48:4e:8d: a8:3b:dc:0f:35:e0:f4:c8:22:90:66:fb:d2:73:78: 72:7d:f5:df:95:50:92:57:36:d4:eb:5d:b6:90:9a: 90:b6:4e:29:09:c4:51:5b:37:68:d6:62:a9:84:3c: be:64:8b:2f:fe:b1:3a:f6:db:71:23:6e:51:78:96: e7:56:0b:72:c7:9e:3c:37:2e:c0:5a:cc:2b:33:a6: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7D:58:AF:F1:2E:96:AF:DF:6A:45:2B:0D:66:F0:8D:75:82:C9:50 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bd:92:93:e7:af:b8:6e:7c:1f:f8:3d:d0:c5:31:06:dc:e7: 1a:b0:22:0a:64:b5:db:f5:2c:15:8f:66:da:c9:fd:45:cb:16: 36:dd:21:3c:eb:c0:68:fc:16:2e:ed:01:db:25:59:80:ce:cc: be:ca:1b:6e:54:20:ba:02:4a:17:26:62:f8:09:9e:1e:a3:57: 92:b6:41:91:37:fb:a6:42:ce:8d:60:a0:93:b5:84:98:fb:c6: 0e:0f:29:4f:7f:cd:f0:f6:c2:a5:9b:d9:b7:0b:cd:40:8c:60: 7f:27:e0:47:0b:89:11:bc:57:bb:3b:2f:b8:71:96:f6:b7:8a: 4f:b7:88:c5:4d:58:15:f5:94:be:c3:88:cc:0d:fd:70:3c:53: 57:5e:73:bc:92:5e:ca:46:19:53:e0:74:f9:45:00:4b:8c:31: 1c:02:07:2d:8a:91:bc:0e:38:35:d3:30:75:2b:1c:e6:a1:f2: 73:a7:be:0b:9f:96:d4:0d:05:4e:7d:86:b4:ce:63:7b:f9:a5: 1c:6a:a3:66:58:8a:bc:98:c5:2f:05:34:53:9e:80:a7:dd:1b: 13:88:a2:2f:96:55:e2:85:12:00:87:55:fe:78:80:99:7c:a8: da:8e:a9:7c:47:84:3c:c0:17:a7:82:44:8c:3f:71:11:8c:6e: f8:2a:25:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmvR+EccvlMMBOrBbbvaJOaEqSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTA4MjMwNjE2NDVaFw0yNTA4MjYxMDE4NDVaMDMxMTAvBgNV BAMTKDZFN0Q1OEFGRjEyRTk2QUZERjZBNDUyQjBENjZGMDhENzU4MkM5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8R7GqN2yE5ttWkslJsdVLNgz m7QRPE/SvoEq7t1dJqfVp/ACtw/ZWPfCmT+KWgsCaHAjOCY0fH+xS7/bT9XJvYhU gnIjznaw7sGPqyE/D2vPYvjOaCjSEh/5s5DX2Ftp2zcCkvdlHzn9xKHWy4VaJ7B0 tKqqZFcrcknr6OtLPBs8AznCZoSSELY7NEhSArKpR35lVPLnuz024yp7QtddeRKX 17izx/YZ6dB4sNo2rkhOjag73A814PTIIpBm+9JzeHJ99d+VUJJXNtTrXbaQmpC2 TikJxFFbN2jWYqmEPL5kiy/+sTr223EjblF4ludWC3LHnjw3LsBazCszpmWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbn1Yr/Eulq/fakUrDWbwjXWCyVAwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK9kpPnr7hufB/4PdDFMQbc5xqwIgpktdv1 LBWPZtrJ/UXLFjbdITzrwGj8Fi7tAdslWYDOzL7KG25UILoCShcmYvgJnh6jV5K2 QZE3+6ZCzo1goJO1hJj7xg4PKU9/zfD2wqWb2bcLzUCMYH8n4EcLiRG8V7s7L7hx lva3ik+3iMVNWBX1lL7DiMwN/XA8U1dec7ySXspGGVPgdPlFAEuMMRwCBy2KkbwO ODXTMHUrHOah8nOnvgufltQNBU59hrTOY3v5pRxqo2ZYiryYxS8FNFOegKfdGxOI oi+WVeKFEgCHVf54gJl8qNqOqXxHhDzAF6eCRIw/cRGMbvgqJfU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:14 2025 by rpki-client