$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: np+T0f5HFd55zi0El4M44EhHfv1OrizSiyK+qvgMaSQ= Subject key identifier: 6F:0A:F0:AD:DC:3F:7F:BE:53:98:FC:BF:69:DA:D1:B1:1F:7E:EA:C6 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 758D022B45C0381B5817B2C467CBE50284F3351D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01C0 Signing time: Wed 06 Aug 2025 02:31:42 +0000 Manifest this update: Wed 06 Aug 2025 02:26:42 +0000 Manifest next update: Sat 09 Aug 2025 03:09:42 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: u+C+EDPKRXC5UcJJAUOSlMkIy/pBBT8oEsQFcXbpIWU=) 2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:02:2b:45:c0:38:1b:58:17:b2:c4:67:cb:e5:02:84:f3:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Aug 6 02:26:42 2025 GMT Not After : Aug 9 03:09:42 2025 GMT Subject: CN=6F0AF0ADDC3F7FBE5398FCBF69DAD1B11F7EEAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:f0:de:43:e0:7b:c5:82:b3:e4:9e:78:3b: 79:3a:a5:51:55:e9:fc:68:87:cf:99:d9:4f:65:88: 38:9c:7a:04:4a:7a:c1:a1:2f:84:da:30:ff:9c:75: 20:ce:f5:7f:06:6a:70:47:2c:d2:0f:f7:a7:53:16: 65:36:16:de:09:c8:97:2c:1d:32:44:a7:2d:07:bf: a0:dc:d3:5f:87:05:b4:7a:c2:a4:23:bd:57:ff:bb: 60:fa:20:44:af:18:72:a9:2b:21:1f:95:25:72:40: d3:40:4a:f8:e3:14:44:30:d5:cd:94:09:5d:14:5e: 3b:57:55:b6:b5:25:4c:6e:df:18:20:14:65:0d:f9: 1f:51:18:81:b7:2b:18:ee:04:4a:b1:02:db:2a:00: 78:d4:a6:1b:8a:32:97:bb:bd:09:c1:4e:d5:85:bc: 37:8a:46:f3:51:9d:b3:f6:11:dd:2e:49:b4:4a:01: e1:6c:55:53:ef:0c:98:1b:65:d0:11:bd:f3:3c:24: 12:e3:39:63:a7:2c:4e:d6:94:71:55:9a:20:26:16: 8d:bd:77:d2:4e:41:48:1b:aa:3a:86:a2:9e:ab:77: 7f:c1:18:e3:21:01:0c:ab:06:b6:0e:58:9f:e7:da: 67:cd:9c:42:84:02:9f:8f:b7:7f:b2:b2:c1:87:2d: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0A:F0:AD:DC:3F:7F:BE:53:98:FC:BF:69:DA:D1:B1:1F:7E:EA:C6 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f2:b3:48:43:e6:83:84:60:66:c3:a2:21:e9:5b:ed:49:da: fb:ed:3d:e5:b9:40:f5:da:61:3d:85:ac:56:89:ab:a6:74:5e: 28:44:29:a3:0b:cc:fb:15:25:46:a5:8c:1a:3e:3c:e3:cc:27: 8a:1b:0f:24:59:dc:c4:ab:20:f8:42:f8:3f:1c:cd:9c:75:37: f8:89:4d:e3:c1:8a:0a:d7:3e:f0:c9:c6:c1:48:e4:a6:19:30: 3a:2a:a9:b0:51:ac:ed:68:b7:1f:2a:2e:f4:9c:f1:da:85:fc: c4:91:79:eb:69:80:e2:57:16:e3:55:c8:24:4e:79:f2:a5:3d: 50:77:70:1b:c4:d4:ba:60:4c:6b:ac:3d:08:40:2c:a9:e5:e1: 29:5a:f8:81:a6:a8:a5:fd:f9:ae:6f:e2:6f:45:0c:40:2a:b3: ef:49:ec:fd:26:f1:a0:a7:45:48:83:da:eb:5b:47:80:d3:06: fc:8f:9f:3f:1c:b4:9b:2b:50:8b:f8:6f:fc:99:9f:3e:93:ee: 60:55:e8:08:41:ca:26:d9:f7:01:6b:81:6c:09:bf:b8:55:19: d5:8a:87:8b:4c:8c:8b:8c:a2:ee:1c:51:e8:5e:7b:4a:2b:fc: d2:bd:83:68:77:ef:16:2a:1e:54:12:fb:01:fd:3b:aa:2d:dd: 73:a7:8e:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdY0CK0XAOBtYF7LEZ8vlAoTzNR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA4MDYwMjI2NDJaFw0yNTA4MDkwMzA5NDJaMDMxMTAvBgNV BAMTKDZGMEFGMEFEREMzRjdGQkU1Mzk4RkNCRjY5REFEMUIxMUY3RUVBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYi/DeQ+B7xYKz5J54O3k6pVFV 6fxoh8+Z2U9liDicegRKesGhL4TaMP+cdSDO9X8GanBHLNIP96dTFmU2Ft4JyJcs HTJEpy0Hv6Dc01+HBbR6wqQjvVf/u2D6IESvGHKpKyEflSVyQNNASvjjFEQw1c2U CV0UXjtXVba1JUxu3xggFGUN+R9RGIG3KxjuBEqxAtsqAHjUphuKMpe7vQnBTtWF vDeKRvNRnbP2Ed0uSbRKAeFsVVPvDJgbZdARvfM8JBLjOWOnLE7WlHFVmiAmFo29 d9JOQUgbqjqGop6rd3/BGOMhAQyrBrYOWJ/n2mfNnEKEAp+Pt3+yssGHLSpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbwrwrdw/f75TmPy/adrRsR9+6sYwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXys0hD5oOEYGbDoiHpW+1J2vvtPeW5QPXa YT2FrFaJq6Z0XihEKaMLzPsVJUaljBo+POPMJ4obDyRZ3MSrIPhC+D8czZx1N/iJ TePBigrXPvDJxsFI5KYZMDoqqbBRrO1otx8qLvSc8dqF/MSReetpgOJXFuNVyCRO efKlPVB3cBvE1LpgTGusPQhALKnl4Sla+IGmqKX9+a5v4m9FDEAqs+9J7P0m8aCn RUiD2utbR4DTBvyPnz8ctJsrUIv4b/yZnz6T7mBV6AhByibZ9wFrgWwJv7hVGdWK h4tMjIuMou4cUehee0or/NK9g2h37xYqHlQS+wH9O6ot3XOnjhk= -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:23 2025 by rpki-client