$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: L13SQZ+lliJPr6qnmhNuvQgoNrb2TKdw0+QYuriBKdc= Subject key identifier: FF:95:83:07:93:6F:19:5F:40:40:1B:1B:44:A7:05:96:D2:3D:FC:5C Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 3F6D7E739203A32570242CE7CEAFE70F716F1AD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0108 Signing time: Fri 04 Jul 2025 03:21:52 +0000 Manifest this update: Fri 04 Jul 2025 03:16:52 +0000 Manifest next update: Mon 07 Jul 2025 11:50:52 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: q5dGfhJHl5X5IKCqcZK5zwwzceb1L6RIX9KNgTWSe1g=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 11:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6d:7e:73:92:03:a3:25:70:24:2c:e7:ce:af:e7:0f:71:6f:1a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Jul 4 03:16:52 2025 GMT Not After : Jul 7 11:50:52 2025 GMT Subject: CN=FF958307936F195F40401B1B44A70596D23DFC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:57:7d:f7:85:88:67:a9:84:59:91:27:b3: 0f:8a:1e:ab:a1:99:8a:0a:88:ed:89:8a:8c:64:7a: 59:be:e4:81:72:c1:79:a9:07:79:ef:f2:cd:58:27: 16:9f:f5:12:17:e1:9a:94:de:1d:59:cb:11:63:08: 9c:75:f4:c0:fe:fa:49:40:f8:15:e1:b6:83:28:82: 3c:db:e0:d0:25:62:af:c2:29:5f:bc:75:e4:91:c8: 38:0b:38:9a:59:7c:01:7a:1f:43:61:bf:a0:3f:56: 60:93:98:d1:62:64:c1:22:46:b8:ad:49:e9:48:45: 72:e3:83:d6:c2:09:dc:31:66:79:b0:ed:0a:1c:0d: bd:8e:d5:2a:bf:21:64:a9:c8:72:f5:34:ee:7f:c2: 97:f3:f6:93:e6:01:0b:67:e1:88:47:20:16:ba:3a: af:a0:76:0f:3c:58:94:62:7d:b0:62:b9:6c:57:c4: 75:c6:1e:dd:bc:17:75:0b:88:a3:60:2e:5e:90:26: 59:fb:7d:09:d4:0c:b7:07:a9:ee:65:2d:8d:4b:66: 84:61:3e:ec:ab:ef:c6:ae:b7:1d:b1:1b:f8:b0:a2: f5:b1:6b:c7:f8:d7:f2:18:a1:08:ff:0d:7a:fe:6e: 1f:39:59:fd:65:72:dd:c2:ba:0a:48:25:d3:12:e4: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:83:07:93:6F:19:5F:40:40:1B:1B:44:A7:05:96:D2:3D:FC:5C X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0e:33:f4:12:f5:95:2b:7c:14:4a:c5:5d:cb:81:5d:ca:54: 11:5e:56:d7:5f:44:9c:e7:7e:50:81:f5:15:57:c5:00:07:8e: 6c:80:e9:38:f1:73:76:58:1c:01:66:c1:6e:4a:c7:e0:e8:af: 80:ac:4f:cf:e1:e2:81:e1:65:7e:6e:b8:f1:8d:3a:51:2d:ee: 10:a2:03:4f:a9:80:d2:65:73:21:33:e9:77:86:d9:b4:1f:f6: 20:40:dd:44:6f:35:89:7b:59:42:cf:31:b1:84:4e:4d:59:6c: e2:19:ce:21:c0:05:ac:cd:38:4c:5b:27:ac:6d:80:7e:51:6e: a4:21:0d:7a:c9:a9:c3:4d:17:a6:7c:d8:7f:77:d5:58:d2:36: 67:7c:56:8d:29:8f:8b:ff:09:70:55:0f:f6:eb:9d:b5:60:53: e1:dc:99:2d:fe:dd:bb:b6:fe:dc:9f:ba:bc:38:55:0a:33:45: 75:b6:7d:91:0d:67:0e:a9:d7:25:a1:ac:15:f7:ab:86:2d:54: 63:da:9f:4b:33:ce:e3:f0:5f:23:7f:b0:bd:5c:4a:dd:32:b3: 45:6b:04:b9:88:bd:0e:96:de:c6:76:8a:e0:dc:49:2f:8e:35: 79:6a:05:96:9e:e3:07:a8:2e:74:c0:18:8e:2d:7b:ec:f0:8d: 29:c9:94:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP21+c5IDoyVwJCznzq/nD3FvGtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA3MDQwMzE2NTJaFw0yNTA3MDcxMTUwNTJaMDMxMTAvBgNV BAMTKEZGOTU4MzA3OTM2RjE5NUY0MDQwMUIxQjQ0QTcwNTk2RDIzREZDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fVd994WIZ6mEWZEnsw+KHquh mYoKiO2Jioxkelm+5IFywXmpB3nv8s1YJxaf9RIX4ZqU3h1ZyxFjCJx19MD++klA +BXhtoMogjzb4NAlYq/CKV+8deSRyDgLOJpZfAF6H0Nhv6A/VmCTmNFiZMEiRrit SelIRXLjg9bCCdwxZnmw7QocDb2O1Sq/IWSpyHL1NO5/wpfz9pPmAQtn4YhHIBa6 Oq+gdg88WJRifbBiuWxXxHXGHt28F3ULiKNgLl6QJln7fQnUDLcHqe5lLY1LZoRh Puyr78autx2xG/iwovWxa8f41/IYoQj/DXr+bh85Wf1lct3CugpIJdMS5KRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5WDB5NvGV9AQBsbRKcFltI9/FwwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUOM/QS9ZUrfBRKxV3LgV3KVBFeVtdfRJzn flCB9RVXxQAHjmyA6Tjxc3ZYHAFmwW5Kx+Dor4CsT8/h4oHhZX5uuPGNOlEt7hCi A0+pgNJlcyEz6XeG2bQf9iBA3URvNYl7WULPMbGETk1ZbOIZziHABazNOExbJ6xt gH5RbqQhDXrJqcNNF6Z82H931VjSNmd8Vo0pj4v/CXBVD/brnbVgU+HcmS3+3bu2 /tyfurw4VQozRXW2fZENZw6p1yWhrBX3q4YtVGPan0szzuPwXyN/sL1cSt0ys0Vr BLmIvQ6W3sZ2iuDcSS+ONXlqBZae4weoLnTAGI4te+zwjSnJlEI= -----END CERTIFICATE-----Generated at Sat Jul 5 04:53:01 2025 by rpki-client