$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: X4qQlLTbbgElcyAzzu2OZchBvSkaYZ+uf7zvHzIlhsg= Subject key identifier: 71:FA:7B:D2:C7:08:8B:13:74:C6:F1:4D:DD:C1:63:73:DF:0F:48:B0 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 305CED6647F8F58416CEB66D41BCB9DF322131C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: DF Signing time: Sat 28 Jun 2025 18:41:41 +0000 Manifest this update: Sat 28 Jun 2025 18:36:41 +0000 Manifest next update: Wed 02 Jul 2025 03:17:41 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: 4aPOhFlrkfwEhWYNZPK8wGshtQyw1D4ca8hJt8Dq53w=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5c:ed:66:47:f8:f5:84:16:ce:b6:6d:41:bc:b9:df:32:21:31:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Jun 28 18:36:41 2025 GMT Not After : Jul 2 03:17:41 2025 GMT Subject: CN=71FA7BD2C7088B1374C6F14DDDC16373DF0F48B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:35:a6:b5:8a:4d:4e:fb:7a:00:ba:e6:92: 11:1d:2a:fd:82:d3:92:88:d6:a7:33:24:4d:0b:a8: fd:ca:24:ef:03:38:68:3c:18:14:40:e0:7f:9f:fd: 16:d1:44:ad:79:6b:c0:dd:57:1d:76:d8:65:71:06: 57:58:e7:3f:c6:d4:7e:33:d9:a9:30:2c:7b:42:35: 87:18:ff:2b:31:19:b9:6a:fd:be:4a:c1:fb:36:e8: f2:2a:14:b7:af:4f:80:02:3b:19:a2:f4:ad:8c:40: 61:41:b8:12:3d:41:4a:67:ef:22:39:47:c7:aa:f2: 84:fc:06:d9:bb:72:38:73:42:4d:7a:61:46:ab:06: 4b:7c:5c:32:a9:b3:12:9d:e5:4d:15:cb:ff:3c:2c: d8:b2:0a:18:bd:7f:e4:9b:22:bb:89:4f:a8:36:e5: c3:c6:98:c0:24:04:9f:a4:0a:6c:20:f3:b9:88:c8: 6f:ac:b5:fd:a5:91:95:23:cf:83:f4:d9:14:bf:65: 7f:08:c3:cf:09:64:d9:81:17:dc:0a:4d:9c:c7:24: c6:f8:0f:bf:fa:61:ec:11:80:b8:60:43:c2:48:39: 52:89:4b:bf:29:f4:f3:0a:da:56:4a:d0:df:4d:c4: 65:3a:51:e6:9a:9e:3c:fb:63:f1:9e:70:36:de:80: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:7B:D2:C7:08:8B:13:74:C6:F1:4D:DD:C1:63:73:DF:0F:48:B0 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0b:39:2e:f9:c0:37:9c:94:91:e6:54:04:0f:2b:09:0b:b7: f2:b1:c6:bd:0b:f0:3b:03:83:b8:69:da:91:d3:93:1f:a5:d6: b7:f2:c0:11:f2:90:48:a9:01:02:0e:04:33:7e:0e:db:9c:90: 8e:a6:fb:97:bb:15:02:d3:d4:dd:e0:d7:99:0e:57:5f:05:66: 13:30:99:3c:55:20:9a:29:9a:19:61:90:08:de:c1:a8:2e:e7: 75:2b:6e:fc:72:a2:03:92:a4:c2:2b:64:60:41:1c:9e:ce:83: b1:b8:5d:55:77:e8:3e:5c:bc:ba:62:db:ef:fc:74:5b:96:60: a4:f5:5c:ec:8c:59:3b:87:ea:82:79:bc:46:a2:2d:08:3f:ff: ee:7d:6a:a5:27:9f:7d:79:f9:9e:9c:88:9c:fd:33:b4:3d:93: de:a2:04:ce:c6:92:a7:61:1c:9c:eb:22:d6:4d:0b:9f:a1:82: b2:53:cd:e5:03:96:b6:25:de:b7:7f:30:68:25:b3:31:c5:fa: c9:d2:45:11:c7:e7:d3:a0:f3:d7:b4:8f:df:d1:22:c2:d0:53: 77:f0:94:fc:9b:87:2d:bf:c7:97:8a:71:c0:12:58:cd:69:3a: 85:bd:64:62:46:31:26:b9:7b:a5:fa:51:7d:70:80:a8:a1:72: ee:e6:25:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFztZkf49YQWzrZtQby53zIhMccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTA2MjgxODM2NDFaFw0yNTA3MDIwMzE3NDFaMDMxMTAvBgNV BAMTKDcxRkE3QkQyQzcwODhCMTM3NEM2RjE0REREQzE2MzczREYwRjQ4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLzWmtYpNTvt6ALrmkhEdKv2C 05KI1qczJE0LqP3KJO8DOGg8GBRA4H+f/RbRRK15a8DdVx122GVxBldY5z/G1H4z 2akwLHtCNYcY/ysxGblq/b5Kwfs26PIqFLevT4ACOxmi9K2MQGFBuBI9QUpn7yI5 R8eq8oT8Btm7cjhzQk16YUarBkt8XDKpsxKd5U0Vy/88LNiyChi9f+SbIruJT6g2 5cPGmMAkBJ+kCmwg87mIyG+stf2lkZUjz4P02RS/ZX8Iw88JZNmBF9wKTZzHJMb4 D7/6YewRgLhgQ8JIOVKJS78p9PMK2lZK0N9NxGU6Ueaanjz7Y/GecDbegMaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfp70scIixN0xvFN3cFjc98PSLAwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0LOS75wDeclJHmVAQPKwkLt/Kxxr0L8DsD g7hp2pHTkx+l1rfywBHykEipAQIOBDN+DtuckI6m+5e7FQLT1N3g15kOV18FZhMw mTxVIJopmhlhkAjewagu53UrbvxyogOSpMIrZGBBHJ7Og7G4XVV36D5cvLpi2+/8 dFuWYKT1XOyMWTuH6oJ5vEaiLQg//+59aqUnn315+Z6ciJz9M7Q9k96iBM7Gkqdh HJzrItZNC5+hgrJTzeUDlrYl3rd/MGglszHF+snSRRHH59Og89e0j9/RIsLQU3fw lPybhy2/x5eKccASWM1pOoW9ZGJGMSa5e6X6UX1wgKihcu7mJcE= -----END CERTIFICATE-----Generated at Tue Jul 1 01:44:26 2025 by rpki-client