$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: HhqvSUY9TZaMUyH6pFdReLc1Isku9ENn1P/DJDgc5jY= Subject key identifier: 71:5A:CA:33:C7:A4:CE:9E:20:FD:EB:6C:78:43:95:3B:55:C1:0B:15 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 3566E6586F17BD2BF1F4EA939A829AA96B983E25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 0126 Signing time: Fri 22 Aug 2025 06:21:26 +0000 Manifest this update: Fri 22 Aug 2025 06:16:26 +0000 Manifest next update: Mon 25 Aug 2025 08:26:26 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: HqoFLqQTCKU4cORLO+ItGdYYwIE+m/xw0UJLEPlmioY=) 2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: 5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=) 3: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: RixsJ9DxB/nR+d8lQtRArWEWTfMPmgsp0HpNk0p3jm8=) 4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: tzUv6ZoVBauP5SIKaVDlU1vK/lJ77kKziRyhRQRActU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:66:e6:58:6f:17:bd:2b:f1:f4:ea:93:9a:82:9a:a9:6b:98:3e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Aug 22 06:16:26 2025 GMT Not After : Aug 25 08:26:26 2025 GMT Subject: CN=715ACA33C7A4CE9E20FDEB6C7843953B55C10B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:17:15:d4:f5:75:e3:f4:2a:9a:2c:2c:d4: bf:64:44:4e:80:9d:9e:03:e0:59:5d:8f:9c:81:20: 20:18:02:2d:80:1d:4c:26:66:67:99:17:74:64:c3: 0b:d0:c8:bd:73:a4:bc:97:78:6b:53:a4:43:f9:b0: c9:74:0a:8e:8a:c3:50:98:4b:db:8c:05:69:9d:dd: 42:21:f6:fc:12:85:d0:8d:c1:a2:88:d3:2f:10:fa: cb:e9:72:15:6a:42:b6:37:d4:8e:2d:e9:d0:a0:e5: f0:66:97:c7:18:0f:ac:46:1c:27:41:69:64:15:d9: e7:b1:cf:c7:70:5a:c5:58:f9:db:66:23:ac:3c:61: 48:ab:17:de:37:55:0e:65:88:78:89:09:90:16:dc: 62:be:27:1b:47:74:41:ab:50:83:af:7b:64:0e:1f: 58:dd:f3:27:c5:0c:0a:77:4e:93:a6:54:02:95:e6: ef:7c:ce:0e:89:f6:37:a3:b5:b6:ba:2f:fa:c6:9f: f3:79:6b:02:32:2e:25:88:99:c3:94:77:90:4d:88: 22:85:c1:a6:eb:15:fc:e2:77:df:72:7e:47:3c:0b: ff:73:59:4e:38:3d:9b:1b:49:b7:f3:90:e8:cf:b0: 86:70:7d:e2:c8:4e:75:31:e5:d5:34:d8:5a:e6:b4: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:CA:33:C7:A4:CE:9E:20:FD:EB:6C:78:43:95:3B:55:C1:0B:15 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:62:77:82:fb:aa:9e:24:17:7e:86:6c:de:e0:a5:18:08:75: d1:e5:72:df:78:c8:83:d8:5d:a5:26:55:05:bd:9a:56:7f:20: 24:08:c9:39:e8:35:85:42:7c:37:c4:40:83:33:60:f1:c1:40: ea:26:f3:34:77:16:79:37:01:4e:79:02:66:8c:91:6e:75:e5: 06:68:e6:ef:a3:04:a0:e1:75:ca:dc:d8:59:63:1e:d4:f6:bc: fc:d5:4f:0e:0d:59:2e:e1:54:3f:30:9f:a2:a6:55:9a:79:3f: ec:2a:da:d5:ab:a7:fe:82:18:a9:6a:65:b6:03:2b:f0:26:b8: 53:5a:92:1a:71:3e:f2:82:f2:92:35:0b:54:60:2e:59:3e:1d: 9d:b2:95:db:f9:45:df:85:14:9c:19:21:d2:36:ca:c3:83:5a: 81:90:ad:eb:0c:27:f1:e0:67:6f:92:0e:67:b7:a4:82:e4:57: d0:05:0a:ac:09:f5:a9:22:fc:d3:5d:db:7c:44:3a:0b:eb:4a: b1:6b:46:84:62:06:56:37:c6:46:6f:81:6e:61:32:9c:cd:29: ac:80:84:2b:30:2f:8e:c0:07:60:db:1e:2a:00:56:22:61:e1: 43:b0:59:de:e3:e4:71:f1:a5:8c:92:22:f4:41:db:2a:ff:4a: 53:91:7c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWbmWG8XvSvx9OqTmoKaqWuYPiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTA4MjIwNjE2MjZaFw0yNTA4MjUwODI2MjZaMDMxMTAvBgNV BAMTKDcxNUFDQTMzQzdBNENFOUUyMEZERUI2Qzc4NDM5NTNCNTVDMTBCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NxcV1PV14/Qqmiws1L9kRE6A nZ4D4Fldj5yBICAYAi2AHUwmZmeZF3RkwwvQyL1zpLyXeGtTpEP5sMl0Co6Kw1CY S9uMBWmd3UIh9vwShdCNwaKI0y8Q+svpchVqQrY31I4t6dCg5fBml8cYD6xGHCdB aWQV2eexz8dwWsVY+dtmI6w8YUirF943VQ5liHiJCZAW3GK+JxtHdEGrUIOve2QO H1jd8yfFDAp3TpOmVAKV5u98zg6J9jejtba6L/rGn/N5awIyLiWImcOUd5BNiCKF wabrFfzid99yfkc8C/9zWU44PZsbSbfzkOjPsIZwfeLITnUx5dU02FrmtJOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVrKM8ekzp4g/etseEOVO1XBCxUwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRid4L7qp4kF36GbN7gpRgIddHlct94yIPY XaUmVQW9mlZ/ICQIyTnoNYVCfDfEQIMzYPHBQOom8zR3Fnk3AU55AmaMkW515QZo 5u+jBKDhdcrc2FljHtT2vPzVTw4NWS7hVD8wn6KmVZp5P+wq2tWrp/6CGKlqZbYD K/AmuFNakhpxPvKC8pI1C1RgLlk+HZ2yldv5Rd+FFJwZIdI2ysODWoGQresMJ/Hg Z2+SDme3pILkV9AFCqwJ9aki/NNd23xEOgvrSrFrRoRiBlY3xkZvgW5hMpzNKayA hCswL47AB2DbHioAViJh4UOwWd7j5HHxpYySIvRB2yr/SlORfO4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:37 2025 by rpki-client