$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: VN+V0w7pVWNkB6CVHD0qaW3hmsU33aHSr5LrX3iDWbs= Subject key identifier: 47:98:6B:29:16:70:D1:2D:35:21:D1:D3:AA:10:2D:E4:5B:9C:11:B9 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 15DF85F4254E9FF58DFB483E96782736865EE5C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01D1 Signing time: Fri 22 Aug 2025 07:22:20 +0000 Manifest this update: Fri 22 Aug 2025 07:17:20 +0000 Manifest next update: Mon 25 Aug 2025 08:39:20 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: 1iOnInsT16EV38HbyP1b6gQh1bO9GbEg8o02ltpyFUE=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:df:85:f4:25:4e:9f:f5:8d:fb:48:3e:96:78:27:36:86:5e:e5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Aug 22 07:17:20 2025 GMT Not After : Aug 25 08:39:20 2025 GMT Subject: CN=47986B291670D12D3521D1D3AA102DE45B9C11B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:68:c6:74:cd:7e:f9:0b:d0:67:c8:82:e1: a0:1b:68:a8:33:cb:d5:1d:e4:87:4a:78:82:c9:04: e7:15:38:bf:42:95:99:8f:85:76:01:73:92:9c:40: 12:fb:2e:6b:97:15:05:89:53:1e:57:10:b0:c9:d1: 9a:6d:2f:fe:b3:53:5f:af:25:68:de:d9:23:4a:5f: 32:67:15:b5:ac:75:71:d7:e9:2a:07:4a:6c:e7:e5: fb:c7:ad:e5:43:59:f7:cb:7f:62:2e:8c:e4:10:99: 9c:da:bf:b9:8f:94:fc:5e:f3:2c:b8:f0:b5:69:95: 44:fc:a0:04:92:9b:c4:0a:4f:4e:da:6f:7a:60:3e: f5:5d:aa:24:b6:6c:0f:f7:9c:14:92:30:1b:0e:48: 10:68:86:f3:39:e7:8a:99:5a:d4:e2:ae:64:32:5a: 1b:c0:26:3e:16:b3:7d:cc:0a:ec:e5:1c:dd:88:07: f2:6c:ef:79:9b:2f:56:bc:12:9c:c2:ca:e7:8e:a3: 71:28:72:ac:86:41:f8:cc:a0:1a:1c:02:34:b7:1d: 39:8a:86:ed:aa:1d:b6:dc:3c:3a:55:90:7c:ef:c0: 9f:ee:39:03:76:9e:22:05:92:a4:e7:cb:ea:46:98: 4e:56:a2:48:ce:cc:1e:02:e7:36:66:86:5b:6a:6f: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:6B:29:16:70:D1:2D:35:21:D1:D3:AA:10:2D:E4:5B:9C:11:B9 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8c:62:54:d6:e2:50:f6:a7:19:9a:83:dc:ee:1b:1a:c4:1e: dc:79:65:d7:8f:c4:8c:c2:5c:a6:63:b9:31:2d:95:9d:7d:6e: 51:1c:3d:19:50:c6:22:ee:91:52:51:0b:98:bf:77:59:52:a7: 47:8f:19:ff:0f:de:b1:d2:e9:50:13:51:d3:ee:20:67:5e:ad: 5f:56:9d:ee:6d:42:ad:f3:32:d7:b0:01:4f:62:a3:4c:e9:9a: 4c:43:1f:05:b5:d4:bb:5a:bd:f7:2e:4f:0c:48:b8:76:a3:12: 87:b6:cc:4f:69:5f:82:cc:3a:5c:38:83:ac:be:0a:d1:6c:81: 88:d7:2b:4e:09:75:7f:15:e0:0f:76:8b:ce:d3:18:34:3a:c6: f1:81:8a:1d:45:6f:74:72:e9:fe:fc:a9:50:7c:14:e5:18:52: 83:9c:c4:95:8e:00:a3:35:ae:c6:5d:ca:ba:c7:fd:1a:54:27: 30:4f:6c:6f:e3:16:98:7d:1e:01:7e:87:59:3c:10:af:9c:c0: 42:87:04:cd:eb:21:41:c0:21:f7:57:fd:f0:0a:8a:fe:02:95: 8a:d5:b7:fc:1b:e9:c8:ec:a6:0d:c1:bc:bf:78:35:16:1e:c6: 09:ed:58:8e:4e:b2:64:96:bd:a7:e0:d2:9c:aa:bb:e5:21:63: 6e:ac:bb:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFd+F9CVOn/WN+0g+lngnNoZe5cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA4MjIwNzE3MjBaFw0yNTA4MjUwODM5MjBaMDMxMTAvBgNV BAMTKDQ3OTg2QjI5MTY3MEQxMkQzNTIxRDFEM0FBMTAyREU0NUI5QzExQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsmjGdM1++QvQZ8iC4aAbaKgz y9Ud5IdKeILJBOcVOL9ClZmPhXYBc5KcQBL7LmuXFQWJUx5XELDJ0ZptL/6zU1+v JWje2SNKXzJnFbWsdXHX6SoHSmzn5fvHreVDWffLf2IujOQQmZzav7mPlPxe8yy4 8LVplUT8oASSm8QKT07ab3pgPvVdqiS2bA/3nBSSMBsOSBBohvM554qZWtTirmQy WhvAJj4Ws33MCuzlHN2IB/Js73mbL1a8EpzCyueOo3EocqyGQfjMoBocAjS3HTmK hu2qHbbcPDpVkHzvwJ/uOQN2niIFkqTny+pGmE5WokjOzB4C5zZmhltqb4OrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5hrKRZw0S01IdHTqhAt5FucEbkwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCMYlTW4lD2pxmag9zuGxrEHtx5ZdePxIzC XKZjuTEtlZ19blEcPRlQxiLukVJRC5i/d1lSp0ePGf8P3rHS6VATUdPuIGderV9W ne5tQq3zMtewAU9io0zpmkxDHwW11LtavfcuTwxIuHajEoe2zE9pX4LMOlw4g6y+ CtFsgYjXK04JdX8V4A92i87TGDQ6xvGBih1Fb3Ry6f78qVB8FOUYUoOcxJWOAKM1 rsZdyrrH/RpUJzBPbG/jFph9HgF+h1k8EK+cwEKHBM3rIUHAIfdX/fAKiv4ClYrV t/wb6cjspg3BvL94NRYexgntWI5OsmSWvafg0pyqu+UhY26su+w= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:09 2025 by rpki-client