$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: NKEjCtqs/xa6fiGFiHfEhsIEMLTe8O4fgqMylZOT0HM= Subject key identifier: EA:6A:DA:CD:C4:CD:E5:5B:6A:70:62:A7:D2:05:90:96:2A:D0:F7:3E Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 4C91F42F17EBD3BB40A5887AE7CAFF0B2A45BBA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: F7 Signing time: Fri 22 Aug 2025 13:21:43 +0000 Manifest this update: Fri 22 Aug 2025 13:16:43 +0000 Manifest next update: Mon 25 Aug 2025 16:29:43 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: zB+GDh1FfQyX2RDhRIocGGvP39nDA+YzTgZJjiTr2HE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:91:f4:2f:17:eb:d3:bb:40:a5:88:7a:e7:ca:ff:0b:2a:45:bb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Aug 22 13:16:43 2025 GMT Not After : Aug 25 16:29:43 2025 GMT Subject: CN=EA6ADACDC4CDE55B6A7062A7D20590962AD0F73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:84:a2:59:89:68:0d:70:98:7a:b7:6a:c7: 22:bd:69:bb:74:7b:15:4b:4f:a7:68:e6:9b:85:1e: 84:a9:28:8b:d5:a7:03:e2:c6:8c:e3:19:dd:60:b5: 4a:36:41:f2:df:97:96:dc:e0:ea:3b:1f:43:9e:e5: db:a4:98:44:a2:31:13:f5:76:1b:65:5f:16:16:0e: 25:ec:3d:f5:67:ff:79:35:8e:b4:a6:84:cd:40:41: d9:36:d3:a7:1d:6c:8e:48:6c:1c:b8:88:c9:7d:ea: 29:5a:2a:1c:7c:61:04:04:bc:b5:9b:2f:ab:b7:09: d7:b8:d5:11:b9:8e:53:a9:b4:3d:49:84:79:b9:6b: f8:bb:4e:b6:ff:66:2e:44:d0:fd:25:d8:e0:ff:e0: 75:38:ea:b3:0c:5d:7f:a1:17:f3:53:a8:43:52:fa: ab:1e:22:b6:aa:15:73:fa:f3:38:b1:bf:cc:e2:d2: 3c:93:37:23:5b:29:84:9c:9b:01:db:74:38:62:43: d4:b8:e6:ce:18:28:fd:cd:d4:e9:a2:2d:33:e8:d4: f4:bb:10:b9:42:a3:d8:98:c5:f4:70:10:46:49:2d: e8:30:87:f4:b4:f9:df:7e:18:90:7d:ce:1b:dd:2b: 3e:dc:10:eb:1b:6d:6c:d1:39:43:d6:9b:a9:23:8d: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6A:DA:CD:C4:CD:E5:5B:6A:70:62:A7:D2:05:90:96:2A:D0:F7:3E X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0b:a5:5a:b5:f5:7f:95:74:49:72:1d:dc:fe:cb:6d:ba:4c: a2:3a:56:f7:1e:4f:36:dd:b5:90:9f:fc:24:2a:d3:ae:d8:97: 8f:85:2d:e7:0b:5e:14:d7:1f:30:2a:d5:f4:9d:59:a6:63:3d: b2:4d:35:43:01:f0:06:95:0f:2d:20:4e:81:fe:e1:d5:b3:6f: 62:cc:c9:0a:1e:45:0c:39:1f:4b:db:fd:6f:d7:d6:3a:23:42: 94:4e:7d:71:0d:db:bc:e9:8e:b6:05:3e:b1:58:a1:2b:13:bb: 63:e1:dc:46:19:7e:c1:7c:11:34:eb:03:52:58:5c:9c:ea:f8: 8c:fa:19:fc:d2:dd:45:63:dc:fe:70:d1:cb:90:37:d3:8e:af: b0:ec:72:58:a0:54:d0:0c:23:15:d9:e3:f4:2b:47:47:bd:4b: 5b:d9:78:d2:60:fd:64:a9:a8:ff:a5:5e:42:bc:51:85:f8:b3: 30:0d:c2:2c:b6:6f:39:b9:a3:39:73:8e:d0:3f:83:25:66:cd: 70:28:8e:7f:d1:d2:16:70:be:47:9b:99:7a:bd:d2:3c:b9:d1: a2:62:b7:f3:05:e1:a4:91:62:b8:91:44:4d:00:f1:ec:48:03: 51:78:70:da:81:45:85:65:22:ab:1b:00:34:ed:db:28:89:fe: 2b:8b:0d:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJH0Lxfr07tApYh658r/CypFu6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTA4MjIxMzE2NDNaFw0yNTA4MjUxNjI5NDNaMDMxMTAvBgNV BAMTKEVBNkFEQUNEQzRDREU1NUI2QTcwNjJBN0QyMDU5MDk2MkFEMEY3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbISiWYloDXCYerdqxyK9abt0 exVLT6do5puFHoSpKIvVpwPixozjGd1gtUo2QfLfl5bc4Oo7H0Oe5dukmESiMRP1 dhtlXxYWDiXsPfVn/3k1jrSmhM1AQdk206cdbI5IbBy4iMl96ilaKhx8YQQEvLWb L6u3Cde41RG5jlOptD1JhHm5a/i7Trb/Zi5E0P0l2OD/4HU46rMMXX+hF/NTqENS +qseIraqFXP68zixv8zi0jyTNyNbKYScmwHbdDhiQ9S45s4YKP3N1OmiLTPo1PS7 ELlCo9iYxfRwEEZJLegwh/S0+d9+GJB9zhvdKz7cEOsbbWzROUPWm6kjjfppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mrazcTN5VtqcGKn0gWQlirQ9z4wHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkLpVq19X+VdElyHdz+y226TKI6VvceTzbd tZCf/CQq067Yl4+FLecLXhTXHzAq1fSdWaZjPbJNNUMB8AaVDy0gToH+4dWzb2LM yQoeRQw5H0vb/W/X1jojQpROfXEN27zpjrYFPrFYoSsTu2Ph3EYZfsF8ETTrA1JY XJzq+Iz6GfzS3UVj3P5w0cuQN9OOr7DscligVNAMIxXZ4/QrR0e9S1vZeNJg/WSp qP+lXkK8UYX4szANwiy2bzm5ozlzjtA/gyVmzXAojn/R0hZwvkebmXq90jy50aJi t/MF4aSRYriRRE0A8exIA1F4cNqBRYVlIqsbADTt2yiJ/iuLDf0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:06 2025 by rpki-client