$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: pp5BwI8bbG2XUE9jAvoQK2PWYuLiTMtezp9DiTwSkbs= Subject key identifier: C2:29:57:F3:CB:78:71:73:F6:7D:14:03:94:4A:64:DD:E6:40:07:75 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 2FA12F0C664A88F7B52CDD0B9B4A1A73240DEA61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 011E Signing time: Fri 22 Aug 2025 17:01:59 +0000 Manifest this update: Fri 22 Aug 2025 16:56:59 +0000 Manifest next update: Mon 25 Aug 2025 20:50:59 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: 6sNlcPytyRxIVLnKgvfVjeegE2hIdGwEb6e5frPfXTE=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a1:2f:0c:66:4a:88:f7:b5:2c:dd:0b:9b:4a:1a:73:24:0d:ea:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Aug 22 16:56:59 2025 GMT Not After : Aug 25 20:50:59 2025 GMT Subject: CN=C22957F3CB787173F67D1403944A64DDE6400775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:9e:4f:9f:75:1d:0b:0f:2b:b7:49:ec:b2: 2f:21:00:ee:f9:da:e6:97:23:b4:11:ce:3b:cf:9d: ca:07:0b:c8:06:9d:be:13:04:a5:13:22:93:9d:78: a2:b6:38:25:bc:89:f3:f3:5e:e5:d7:5c:da:8f:63: a1:88:b6:66:e4:57:ef:a4:cb:8a:8e:68:8f:63:f4: 88:e5:fc:6c:a9:1e:9b:fb:79:f2:50:e1:7e:96:79: ca:51:67:76:8a:00:c9:0f:d6:7c:a4:d3:b7:a8:07: 9b:bc:45:1e:be:ef:fa:71:06:75:25:08:65:56:3a: d1:bc:1a:64:4a:9e:13:af:82:4b:f4:d0:75:fc:26: cf:5e:49:b3:c3:ad:0a:fd:82:7c:0d:22:85:3c:77: ac:49:e2:48:ed:ba:5e:1b:d9:cc:7b:69:26:9e:ba: 75:99:a4:fc:ae:2b:10:5d:57:6d:af:b2:6d:46:d0: c1:aa:52:b8:d6:41:be:d8:cd:12:83:8b:af:c2:95: 68:ab:f5:85:a9:13:e0:a8:94:4c:47:94:58:c8:c2: 72:e5:ec:05:a8:3a:76:8b:64:db:2e:20:fb:31:06: 41:95:0c:ac:15:a3:92:3b:92:2e:61:a4:ab:aa:28: 2c:ea:04:18:ed:29:7c:11:39:b4:b5:f2:66:6e:31: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:57:F3:CB:78:71:73:F6:7D:14:03:94:4A:64:DD:E6:40:07:75 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:c8:82:c9:31:da:39:52:db:38:b2:fb:f8:37:d9:f3:65: 74:58:67:9b:f3:43:f2:c2:4b:a9:b9:1c:cc:0e:4d:4a:bf:a5: 66:65:eb:a2:d3:e3:4e:c9:66:fe:7f:f5:4d:d5:5a:3d:07:fd: 58:66:f0:6b:f3:8c:01:b5:5e:f3:87:62:5d:31:87:51:58:b8: 0f:96:23:2f:bb:5a:55:67:04:80:dd:a1:89:f2:bb:2c:1f:02: 35:37:6a:58:8a:cf:27:bc:1a:be:45:87:49:ea:96:29:42:ec: 17:ec:cc:d1:a1:74:8a:9d:93:9f:d5:d4:3c:40:dc:8d:9d:41: d0:b6:8e:ff:7c:a3:09:99:55:3f:79:15:98:0b:44:dd:d8:c0: 6d:fe:b9:ab:ed:14:8a:52:b7:31:77:4c:92:9c:59:dd:6c:fa: b8:52:b0:5f:14:cb:04:bb:29:c5:74:70:37:2e:e0:ec:ef:3b: 9b:95:d2:f7:61:ac:99:b5:b3:da:01:ef:c0:1e:55:c6:2b:e2: 1b:46:82:17:3d:d0:79:87:59:a2:58:e6:c4:bf:06:a0:19:70: 49:f2:3c:19:90:58:ac:7c:6e:7f:c6:44:44:01:9e:01:e5:04: f0:1f:1a:c4:4c:6c:9f:f5:d0:4b:bf:ad:dc:95:b5:36:8a:99: 2d:2e:b2:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6EvDGZKiPe1LN0Lm0oacyQN6mEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA4MjIxNjU2NTlaFw0yNTA4MjUyMDUwNTlaMDMxMTAvBgNV BAMTKEMyMjk1N0YzQ0I3ODcxNzNGNjdEMTQwMzk0NEE2NERERTY0MDA3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZZ5Pn3UdCw8rt0nssi8hAO75 2uaXI7QRzjvPncoHC8gGnb4TBKUTIpOdeKK2OCW8ifPzXuXXXNqPY6GItmbkV++k y4qOaI9j9Ijl/GypHpv7efJQ4X6WecpRZ3aKAMkP1nyk07eoB5u8RR6+7/pxBnUl CGVWOtG8GmRKnhOvgkv00HX8Js9eSbPDrQr9gnwNIoU8d6xJ4kjtul4b2cx7aSae unWZpPyuKxBdV22vsm1G0MGqUrjWQb7YzRKDi6/ClWir9YWpE+ColExHlFjIwnLl 7AWoOnaLZNsuIPsxBkGVDKwVo5I7ki5hpKuqKCzqBBjtKXwRObS18mZuMfDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwilX88t4cXP2fRQDlEpk3eZAB3UwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIDyILJMdo5Uts4svv4N9nzZXRYZ5vzQ/LC S6m5HMwOTUq/pWZl66LT407JZv5/9U3VWj0H/Vhm8GvzjAG1XvOHYl0xh1FYuA+W Iy+7WlVnBIDdoYnyuywfAjU3aliKzye8Gr5Fh0nqlilC7BfszNGhdIqdk5/V1DxA 3I2dQdC2jv98owmZVT95FZgLRN3YwG3+uavtFIpStzF3TJKcWd1s+rhSsF8UywS7 KcV0cDcu4OzvO5uV0vdhrJm1s9oB78AeVcYr4htGghc90HmHWaJY5sS/BqAZcEny PBmQWKx8bn/GREQBngHlBPAfGsRMbJ/10Eu/rdyVtTaKmS0usjA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:42 2025 by rpki-client