$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: +to28Brwls5aCEcvuVypZizi+wTlaKDh6EmNgvD1xVk= Subject key identifier: 47:A2:E7:B7:B6:32:A8:64:A9:C0:EA:1B:D7:39:10:40:B7:7D:BE:61 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 549A4A487FD47887980BF3D5D60E9A55F5CCCBA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 09:11:55 +0000 Manifest this update: Sun 19 Oct 2025 09:06:55 +0000 Manifest next update: Wed 22 Oct 2025 09:24:55 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: Nxb59JK+lm3JP5izJAwe+R8haMesV3//ja/g0CyS8n8=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:4a:48:7f:d4:78:87:98:0b:f3:d5:d6:0e:9a:55:f5:cc:cb:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Oct 19 09:06:55 2025 GMT Not After : Oct 22 09:24:55 2025 GMT Subject: CN=47A2E7B7B632A864A9C0EA1BD7391040B77DBE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:f2:a0:4a:a8:ff:94:1c:be:5d:f5:c7:25: bf:1f:71:77:0f:45:d8:92:f3:d5:46:85:2d:bc:2e: 46:f2:d8:a5:6b:a1:79:12:13:49:3e:68:de:00:40: a8:f3:0b:58:d2:c0:3d:a1:c0:b9:f8:69:0a:76:cf: c8:fe:6c:14:e2:07:ed:af:e5:f1:32:fc:f0:ec:a0: ab:c8:9b:36:72:53:ff:fb:b8:80:bc:9c:97:00:c2: f8:50:e7:8d:81:37:5b:a9:09:78:d0:c8:c8:73:c1: df:9e:76:9b:fe:a9:7a:32:93:7c:85:a0:e8:41:c6: c0:14:94:b2:64:f3:07:4d:55:9c:de:ea:84:83:67: 67:ad:12:08:49:a5:b3:d6:13:bc:a5:0a:3e:e4:c6: 70:11:ee:0b:a7:72:2d:d1:d2:ef:2d:18:cf:8f:11: 86:ec:88:f9:f1:05:d1:f9:cb:2a:c1:40:b4:33:1b: 5e:31:51:58:f2:0e:37:97:6d:e2:fc:37:a8:ca:57: 96:15:45:76:6a:bb:a1:5a:18:6c:f3:db:10:45:13: c7:95:d4:71:5f:57:4c:da:71:5b:64:96:a8:d4:68: c1:28:3f:e1:7f:be:63:34:af:fa:b9:6a:6d:8f:72: 43:03:66:db:dc:89:a7:33:59:98:72:05:0b:50:9e: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A2:E7:B7:B6:32:A8:64:A9:C0:EA:1B:D7:39:10:40:B7:7D:BE:61 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3d:49:a1:fd:8e:65:57:b0:59:80:90:c0:96:97:0b:ed:e3: df:8e:6c:18:87:54:a2:d1:5c:d6:ff:fb:0e:1f:ff:ae:41:1d: 99:15:8a:c9:37:a3:b7:e9:19:4f:13:e4:4f:48:84:0a:e8:e7: 8d:8c:8a:d6:ba:6b:7a:d9:4d:59:0f:b9:37:96:2c:3c:c0:d1: 68:f7:23:30:bb:fe:ab:a3:a1:8a:d3:7a:26:a2:c8:44:c9:40: 23:bb:81:e0:6d:17:29:c7:30:f8:70:f1:54:0d:f3:5e:a3:e8: 7e:9f:68:44:65:ee:17:5d:0a:f2:be:82:00:a4:1d:39:40:ff: d0:c6:28:c4:c8:0a:5e:73:18:d5:83:7d:74:c8:33:fd:68:15: 56:51:4a:3d:f8:21:21:47:23:b5:22:75:03:ee:de:4a:ad:24: 12:01:1e:63:ce:ed:d4:9a:79:4a:d6:fd:db:79:3a:45:29:17: 8d:7f:32:f3:f4:ff:67:47:f9:9a:d0:c1:8b:9b:a4:fe:c6:ab: 4f:18:7a:da:6a:0c:33:64:52:d4:eb:34:fc:77:bf:cd:00:13: bd:7f:e0:b3:31:d9:c5:c0:b1:cd:38:28:37:e4:fe:f7:46:f2: 9a:6b:fc:23:c6:0a:49:10:65:a6:f2:1a:d2:60:51:ab:59:c0: 31:d2:06:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJpKSH/UeIeYC/PV1g6aVfXMy6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTEwMTkwOTA2NTVaFw0yNTEwMjIwOTI0NTVaMDMxMTAvBgNV BAMTKDQ3QTJFN0I3QjYzMkE4NjRBOUMwRUExQkQ3MzkxMDQwQjc3REJFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAT/KgSqj/lBy+XfXHJb8fcXcP RdiS89VGhS28Lkby2KVroXkSE0k+aN4AQKjzC1jSwD2hwLn4aQp2z8j+bBTiB+2v 5fEy/PDsoKvImzZyU//7uIC8nJcAwvhQ542BN1upCXjQyMhzwd+edpv+qXoyk3yF oOhBxsAUlLJk8wdNVZze6oSDZ2etEghJpbPWE7ylCj7kxnAR7gunci3R0u8tGM+P EYbsiPnxBdH5yyrBQLQzG14xUVjyDjeXbeL8N6jKV5YVRXZqu6FaGGzz2xBFE8eV 1HFfV0zacVtklqjUaMEoP+F/vmM0r/q5am2PckMDZtvciaczWZhyBQtQnvUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR6Lnt7YyqGSpwOob1zkQQLd9vmEwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAs9SaH9jmVXsFmAkMCWlwvt49+ObBiHVKLR XNb/+w4f/65BHZkVisk3o7fpGU8T5E9IhAro542Mita6a3rZTVkPuTeWLDzA0Wj3 IzC7/qujoYrTeiaiyETJQCO7geBtFynHMPhw8VQN816j6H6faERl7hddCvK+ggCk HTlA/9DGKMTICl5zGNWDfXTIM/1oFVZRSj34ISFHI7UidQPu3kqtJBIBHmPO7dSa eUrW/dt5OkUpF41/MvP0/2dH+ZrQwYubpP7Gq08YetpqDDNkUtTrNPx3v80AE71/ 4LMx2cXAsc04KDfk/vdG8ppr/CPGCkkQZabyGtJgUatZwDHSBjM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:08 2025 by rpki-client