$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: JIHwHzUpSPSQK+2LXrYAp7RV9Cfe4729oE+7M4U4ccM= Subject key identifier: D1:E0:B0:B9:E4:5A:A9:9D:10:52:C8:36:2F:0E:E0:A1:C1:B9:98:03 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 465A159531275572BF897FBC9D311FC1AA50605D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 033D Signing time: Fri 22 Aug 2025 06:41:00 +0000 Manifest this update: Fri 22 Aug 2025 06:36:00 +0000 Manifest next update: Mon 25 Aug 2025 15:42:00 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 2: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 3: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 4: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: pYRkij3/Ymh+yLoiyxl3hS/pG/xLeV45n50UQTAAmPc=) 5: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 6: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 7: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 8: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 9: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5a:15:95:31:27:55:72:bf:89:7f:bc:9d:31:1f:c1:aa:50:60:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Aug 22 06:36:00 2025 GMT Not After : Aug 25 15:42:00 2025 GMT Subject: CN=D1E0B0B9E45AA99D1052C8362F0EE0A1C1B99803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:24:37:be:f6:c1:8f:7a:b3:26:9c:ea:c4: 34:75:df:9e:9e:dc:40:37:c3:b1:f6:c9:a6:e4:30: cf:9e:83:24:49:b7:14:5c:fe:60:a1:50:be:61:ae: 21:ce:c7:7c:10:f2:34:f7:46:08:07:26:52:3f:2b: ec:45:e2:91:be:94:55:00:a3:fd:17:8d:bd:f8:70: 0d:e9:ef:85:f8:5d:99:1e:df:8f:e3:f1:9e:69:cb: 91:04:40:37:88:dd:87:1d:86:46:27:a4:ba:28:b6: 6c:60:f6:38:2f:da:29:89:47:48:0c:57:f6:81:f5: 84:12:98:7d:e2:2d:c6:e8:a7:0d:e9:47:9b:a8:63: 0b:1b:f3:17:fa:6c:e4:c9:1c:54:36:fd:ba:c7:87: b0:9a:14:3d:ca:e2:37:98:ea:b9:20:9a:70:19:4f: bb:60:41:00:09:ec:33:25:04:1e:7e:ab:f5:88:ae: 08:18:ed:3c:a2:2f:47:47:a2:fe:d9:c5:f9:22:57: 31:0e:4a:b1:cd:5b:59:bd:4f:d3:69:25:3f:7d:3f: 69:a8:37:b8:d7:a8:c7:be:e9:91:28:a1:42:1c:6d: df:74:a4:98:e9:af:a6:be:76:ca:32:a9:ec:07:6e: 2a:b3:94:89:6e:ea:2a:a4:c9:3c:9b:45:94:3a:cb: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:B0:B9:E4:5A:A9:9D:10:52:C8:36:2F:0E:E0:A1:C1:B9:98:03 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0f:4a:3b:9a:a3:08:49:b4:0a:e5:ee:45:01:8d:d6:7f:16: a7:6c:6a:ef:6a:30:fd:b3:b0:58:f5:aa:9e:15:2a:60:25:ec: 5d:81:cf:a9:da:35:e8:08:e7:82:b9:2f:1b:9d:ac:af:30:f1: a7:97:f0:7e:5e:43:e7:ea:4b:99:0e:93:f1:32:6a:e2:f5:e6: d1:25:26:e2:ab:73:ee:90:78:42:e7:ff:6e:c0:6f:54:73:a4: 1a:b8:e6:f8:1a:3c:78:86:26:d8:ef:5d:4e:ee:95:d9:ce:9f: fb:95:d2:3e:6f:ee:5e:ea:f8:15:f6:71:27:9e:cb:10:40:42: 6b:8a:51:b8:5b:94:00:1d:7a:8f:45:2e:bd:95:30:ad:fb:b5: ef:c7:07:63:34:5a:10:df:d4:a6:f8:1b:5d:f6:6b:01:97:5f: 76:f1:fc:33:64:24:39:05:76:d7:60:c5:43:00:97:6e:17:0f: 48:7b:7b:eb:d0:6f:89:8c:ce:3e:7d:fb:1c:fd:93:42:e2:69: cc:74:f6:c6:b8:42:30:bb:db:85:e1:11:0d:44:37:73:35:94: f4:3c:a7:0e:99:40:62:29:73:a9:3e:92:58:53:41:ee:a9:f5: 86:f1:00:6a:eb:b3:26:72:01:c1:d8:17:86:64:1f:05:da:28: 74:d0:05:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURloVlTEnVXK/iX+8nTEfwapQYF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA4MjIwNjM2MDBaFw0yNTA4MjUxNTQyMDBaMDMxMTAvBgNV BAMTKEQxRTBCMEI5RTQ1QUE5OUQxMDUyQzgzNjJGMEVFMEExQzFCOTk4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWSQ3vvbBj3qzJpzqxDR1356e 3EA3w7H2yabkMM+egyRJtxRc/mChUL5hriHOx3wQ8jT3RggHJlI/K+xF4pG+lFUA o/0Xjb34cA3p74X4XZke34/j8Z5py5EEQDeI3YcdhkYnpLootmxg9jgv2imJR0gM V/aB9YQSmH3iLcbopw3pR5uoYwsb8xf6bOTJHFQ2/brHh7CaFD3K4jeY6rkgmnAZ T7tgQQAJ7DMlBB5+q/WIrggY7TyiL0dHov7ZxfkiVzEOSrHNW1m9T9NpJT99P2mo N7jXqMe+6ZEooUIcbd90pJjpr6a+dsoyqewHbiqzlIlu6iqkyTybRZQ6ywpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0eCwueRaqZ0QUsg2Lw7gocG5mAMwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkPSjuaowhJtArl7kUBjdZ/Fqdsau9qMP2z sFj1qp4VKmAl7F2Bz6naNegI54K5LxudrK8w8aeX8H5eQ+fqS5kOk/EyauL15tEl JuKrc+6QeELn/27Ab1RzpBq45vgaPHiGJtjvXU7uldnOn/uV0j5v7l7q+BX2cSee yxBAQmuKUbhblAAdeo9FLr2VMK37te/HB2M0WhDf1Kb4G132awGXX3bx/DNkJDkF dtdgxUMAl24XD0h7e+vQb4mMzj59+xz9k0Liacx09sa4QjC724XhEQ1EN3M1lPQ8 pw6ZQGIpc6k+klhTQe6p9YbxAGrrsyZyAcHYF4ZkHwXaKHTQBXg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:03 2025 by rpki-client