$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: 0AbM01BfUdgS+Ne0C8U+jR0xLl0HOstNkxgDVLR29bA= Subject key identifier: D6:EA:A8:32:71:79:87:DF:3B:49:80:5A:2A:4E:C3:DF:A9:E5:09:5B Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 685A8502694206B7C1DA735137C1AE9DD9FC4B70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 01F7 Signing time: Wed 06 Aug 2025 11:22:03 +0000 Manifest this update: Wed 06 Aug 2025 11:17:03 +0000 Manifest next update: Sat 09 Aug 2025 15:06:03 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: kKd8iZqWnlFcqdY5Pll60VtnlZx0v1CR2+UHuKX2ccg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5a:85:02:69:42:06:b7:c1:da:73:51:37:c1:ae:9d:d9:fc:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Aug 6 11:17:03 2025 GMT Not After : Aug 9 15:06:03 2025 GMT Subject: CN=D6EAA832717987DF3B49805A2A4EC3DFA9E5095B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:7d:44:87:dc:48:1a:93:c6:23:48:95:a0: 99:55:93:e1:f2:0b:de:70:12:dd:c6:ff:a5:5d:d9: c6:1b:a7:f5:33:2c:f0:44:b2:a5:3f:06:0e:c1:35: f5:80:c0:1e:62:6e:23:32:7f:d9:ab:f3:78:c2:c1: 84:04:42:48:75:4a:d8:8a:69:6a:33:20:35:04:9d: fb:34:2e:68:54:39:80:54:de:5e:7b:a3:66:37:ee: ae:06:5b:86:65:b7:65:46:9c:a1:dd:85:30:23:ee: 80:ba:8f:34:a5:95:25:17:68:98:bb:88:7d:33:71: d9:bf:72:bc:b7:19:d2:ea:22:f6:ac:70:62:05:09: 03:72:b5:8a:0a:f0:b6:71:fe:ff:d6:68:75:b5:0f: 05:45:62:ef:9c:b4:bf:08:58:52:37:24:d5:27:16: a3:d7:36:db:d0:a7:1c:d9:7c:8b:c8:3c:d9:83:e1: 7d:e5:fe:3d:3a:5e:8e:eb:f1:2c:da:c9:4e:5d:5e: 97:db:e5:4d:4b:55:74:b4:19:35:71:22:6e:d6:2b: 39:cc:78:f0:aa:2c:4f:4f:82:e7:34:17:cc:a0:42: 27:6b:4b:39:7e:12:ad:31:ca:e8:7c:94:c3:eb:58: 1a:50:1a:13:41:9b:82:68:80:ce:fa:97:75:95:39: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EA:A8:32:71:79:87:DF:3B:49:80:5A:2A:4E:C3:DF:A9:E5:09:5B X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:c7:cf:88:ef:b2:7a:77:99:f8:3a:b1:df:86:9c:0b:c3: c7:d9:0d:67:c0:db:1a:71:b1:b3:8d:dd:b7:48:7e:75:9d:18: 75:3b:91:69:a0:a4:c8:2a:50:4c:13:ba:d2:f9:fc:59:97:27: 1f:e3:f9:59:f3:e2:00:ec:90:8c:6f:99:e3:51:d4:1a:b7:68: 03:80:94:29:a4:45:33:1c:32:a3:9e:06:79:06:45:91:58:d5: b6:c1:06:b2:fe:4c:e7:93:a6:ac:13:43:41:ff:b0:40:05:9c: 08:27:4d:d8:b3:0b:2e:54:f9:44:02:8b:f8:9e:e6:73:15:bf: 03:55:13:f2:61:b5:c7:21:53:55:a7:a4:e0:79:b4:59:0d:dc: 8b:72:a1:c7:a9:02:c5:40:e3:6b:41:76:e3:1e:39:73:ad:e3: e9:c9:14:b8:f1:83:5d:21:1c:f9:0f:01:02:b7:c9:5f:00:33: d0:1a:21:35:5d:2e:26:56:25:20:45:a0:16:75:66:1e:03:2c: 62:74:4a:c0:c7:02:4c:60:20:dc:77:ff:ca:67:f1:8e:ef:61: cf:a6:6d:9c:70:c8:15:4e:8e:a9:25:d6:3c:ed:1f:b5:67:fd: 60:6b:16:78:17:e8:ef:81:f8:39:59:c8:dd:14:09:b8:51:5d: bf:83:b9:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFqFAmlCBrfB2nNRN8Gundn8S3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTA4MDYxMTE3MDNaFw0yNTA4MDkxNTA2MDNaMDMxMTAvBgNV BAMTKEQ2RUFBODMyNzE3OTg3REYzQjQ5ODA1QTJBNEVDM0RGQTlFNTA5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX31Eh9xIGpPGI0iVoJlVk+Hy C95wEt3G/6Vd2cYbp/UzLPBEsqU/Bg7BNfWAwB5ibiMyf9mr83jCwYQEQkh1StiK aWozIDUEnfs0LmhUOYBU3l57o2Y37q4GW4Zlt2VGnKHdhTAj7oC6jzSllSUXaJi7 iH0zcdm/cry3GdLqIvascGIFCQNytYoK8LZx/v/WaHW1DwVFYu+ctL8IWFI3JNUn FqPXNtvQpxzZfIvIPNmD4X3l/j06Xo7r8SzayU5dXpfb5U1LVXS0GTVxIm7WKznM ePCqLE9Pguc0F8ygQidrSzl+Eq0xyuh8lMPrWBpQGhNBm4JogM76l3WVOekPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uqoMnF5h987SYBaKk7D36nlCVswHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKABx8+I77J6d5n4OrHfhpwLw8fZDWfA2xpx sbON3bdIfnWdGHU7kWmgpMgqUEwTutL5/FmXJx/j+Vnz4gDskIxvmeNR1Bq3aAOA lCmkRTMcMqOeBnkGRZFY1bbBBrL+TOeTpqwTQ0H/sEAFnAgnTdizCy5U+UQCi/ie 5nMVvwNVE/JhtcchU1WnpOB5tFkN3ItyocepAsVA42tBduMeOXOt4+nJFLjxg10h HPkPAQK3yV8AM9AaITVdLiZWJSBFoBZ1Zh4DLGJ0SsDHAkxgINx3/8pn8Y7vYc+m bZxwyBVOjqkl1jztH7Vn/WBrFngX6O+B+DlZyN0UCbhRXb+DuW4= -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:45 2025 by rpki-client