$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: Mtix5GnBxTrwhCVsXprdfNmJ5f3qwh7IYxEy8JRpqUI= Subject key identifier: 40:B4:C2:E0:8F:56:3C:59:53:3C:24:49:3F:FD:21:59:36:96:49:46 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 3EC428E9F37D2C957BF2C78544FEFD57F7F07532 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 010E Signing time: Mon 30 Jun 2025 07:21:22 +0000 Manifest this update: Mon 30 Jun 2025 07:16:22 +0000 Manifest next update: Thu 03 Jul 2025 12:45:22 +0000 Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: tzUv6ZoVBauP5SIKaVDlU1vK/lJ77kKziRyhRQRActU=) 2: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: 8i7ObhAZWfiT/GlN1NNZek14V+lrlIRbPvF6JKOq410=) 3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: 5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=) 4: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: HqoFLqQTCKU4cORLO+ItGdYYwIE+m/xw0UJLEPlmioY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c4:28:e9:f3:7d:2c:95:7b:f2:c7:85:44:fe:fd:57:f7:f0:75:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Jun 30 07:16:22 2025 GMT Not After : Jul 3 12:45:22 2025 GMT Subject: CN=40B4C2E08F563C59533C24493FFD215936964946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f0:65:a1:bf:03:d4:43:39:f6:5a:69:22:c8: eb:96:ad:25:49:ed:5a:68:43:b8:e5:c2:3a:52:44: 4b:0f:4f:77:05:bf:b4:ae:5b:8b:33:aa:06:fb:ee: e0:18:2e:b0:11:5c:10:ae:b7:0b:f3:4f:8b:39:07: 8a:54:6e:8f:5f:0b:a7:4f:88:e2:72:7b:f0:07:60: c8:33:d0:28:7e:51:ef:25:71:21:cb:0b:7f:42:6c: f4:4f:22:d7:ca:1d:3b:48:d1:f8:2b:0b:56:04:a1: 05:15:7d:c2:ca:df:b1:57:9c:cb:d1:b5:f9:1d:14: 33:c3:ef:19:28:77:92:7e:da:35:3d:ed:c5:4c:8a: eb:f2:e2:17:e2:ce:1a:cb:f4:ce:dd:20:d7:db:55: 47:4f:e1:cf:7b:14:9d:7b:5b:0e:18:c8:e6:6e:21: 35:fc:89:86:3a:27:7f:70:b7:eb:4a:9b:3a:60:a1: 14:c8:e2:b6:ff:3b:d7:f6:40:1a:ef:5a:1d:72:44: 7d:c8:0d:ff:3b:99:a3:ef:03:9a:27:84:0c:e0:60: 3b:eb:67:94:00:89:88:b7:75:fc:51:3c:42:e0:d3: 75:db:16:ce:8a:01:f5:b4:e9:bf:23:8e:72:33:15: c3:36:b9:36:ca:df:66:0f:c6:ef:74:a5:2d:e9:c2: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B4:C2:E0:8F:56:3C:59:53:3C:24:49:3F:FD:21:59:36:96:49:46 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:16:e4:68:0e:42:41:7a:4d:5d:cc:f5:51:d5:51:c2:6e:28: 2f:8c:4c:f9:ff:62:d3:9a:cc:df:29:76:eb:7c:7d:90:b6:73: e1:31:33:3a:4a:c0:64:52:ca:c7:71:6f:16:47:a0:1a:24:3f: e0:89:86:72:e6:35:cf:40:cc:ce:35:06:8a:14:c0:50:6e:08: c2:81:88:3a:80:46:c8:8d:e4:f5:32:ea:26:d8:35:fd:50:ad: 97:9a:43:10:94:d0:4f:48:8b:47:b2:94:09:95:39:8d:d5:c4: 36:0a:55:e2:74:22:70:e8:e2:6c:16:b2:b8:74:20:50:6e:b9: 0b:7c:af:e2:07:73:da:4b:ec:9c:c7:1b:42:4e:c7:a7:ad:50: da:35:09:43:78:9c:51:c4:05:3e:e3:d2:6e:a6:e6:4f:58:cd: 83:3d:45:dd:47:1c:2d:fc:c1:6a:9c:81:d8:e2:1a:55:88:1c: 91:63:50:31:78:39:b8:56:91:8d:69:83:10:4d:c3:d1:bb:f8: d5:63:7b:45:3f:ce:c2:ec:f7:2c:1e:ee:e5:02:a5:4f:f8:d2: 5e:cb:06:17:ac:33:26:15:41:a6:7a:4d:10:7b:8a:28:56:51: 0b:09:a7:31:69:29:63:0b:6e:0d:2f:17:d6:04:f3:29:f7:11: 9a:92:5c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsQo6fN9LJV78seFRP79V/fwdTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTA2MzAwNzE2MjJaFw0yNTA3MDMxMjQ1MjJaMDMxMTAvBgNV BAMTKDQwQjRDMkUwOEY1NjNDNTk1MzNDMjQ0OTNGRkQyMTU5MzY5NjQ5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb8GWhvwPUQzn2WmkiyOuWrSVJ 7VpoQ7jlwjpSREsPT3cFv7SuW4szqgb77uAYLrARXBCutwvzT4s5B4pUbo9fC6dP iOJye/AHYMgz0Ch+Ue8lcSHLC39CbPRPItfKHTtI0fgrC1YEoQUVfcLK37FXnMvR tfkdFDPD7xkod5J+2jU97cVMiuvy4hfizhrL9M7dINfbVUdP4c97FJ17Ww4YyOZu ITX8iYY6J39wt+tKmzpgoRTI4rb/O9f2QBrvWh1yRH3IDf87maPvA5onhAzgYDvr Z5QAiYi3dfxRPELg03XbFs6KAfW06b8jjnIzFcM2uTbK32YPxu90pS3pwsb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLTC4I9WPFlTPCRJP/0hWTaWSUYwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0W5GgOQkF6TV3M9VHVUcJuKC+MTPn/YtOa zN8pdut8fZC2c+ExMzpKwGRSysdxbxZHoBokP+CJhnLmNc9AzM41BooUwFBuCMKB iDqARsiN5PUy6ibYNf1QrZeaQxCU0E9Ii0eylAmVOY3VxDYKVeJ0InDo4mwWsrh0 IFBuuQt8r+IHc9pL7JzHG0JOx6etUNo1CUN4nFHEBT7j0m6m5k9YzYM9Rd1HHC38 wWqcgdjiGlWIHJFjUDF4ObhWkY1pgxBNw9G7+NVje0U/zsLs9ywe7uUCpU/40l7L BhesMyYVQaZ6TRB7iihWUQsJpzFpKWMLbg0vF9YE8yn3EZqSXDI= -----END CERTIFICATE-----Generated at Mon Jun 30 08:52:17 2025 by rpki-client