$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: Hbm97cdkampz0Fr9BKfQwkqQ1OU9+jCDAO4/RBINERc= Subject key identifier: A7:5E:5B:36:5C:D4:D1:4A:5E:4D:73:33:FC:8A:47:A1:06:0F:A8:3B Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 2E9851A7C59677A299EF6A6811793D6D2CECFABE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01A2 Signing time: Sun 15 Jun 2025 20:01:46 +0000 Manifest this update: Sun 15 Jun 2025 19:56:46 +0000 Manifest next update: Wed 18 Jun 2025 21:31:46 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: 6AB5bq4lxkpATYu0rKSJdzLFkqGQhdfrOpLg4Tu8L9I=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: GFfMQ0mms4zz6PIZYmd3LzUEAWlMZ5wMDrpxU35T3EE=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: pF0XX8iGUNaEAPEmdUcwKZzSPnUJMqKA+lJt2x8Gm7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:98:51:a7:c5:96:77:a2:99:ef:6a:68:11:79:3d:6d:2c:ec:fa:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Jun 15 19:56:46 2025 GMT Not After : Jun 18 21:31:46 2025 GMT Subject: CN=A75E5B365CD4D14A5E4D7333FC8A47A1060FA83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:fd:2c:a6:fa:5e:b4:7f:f4:6d:21:f0:1e: a1:4d:ee:72:66:2c:bb:9e:ed:48:82:a5:09:4a:b2: e9:a9:c2:1f:e9:7e:66:ba:ff:25:3e:0e:d9:0d:d9: ab:fb:3a:80:f8:7f:81:89:d1:aa:6a:f4:f0:ae:6b: 76:b0:43:5a:2b:7b:cf:9c:d8:72:a9:fb:6f:05:e6: 3e:c7:49:83:0e:cd:8e:9d:0e:41:2a:ae:13:c6:f8: 8b:f9:58:fa:7b:eb:50:72:67:a9:7e:34:8f:0c:fb: 5c:f7:1b:e4:e9:f1:b7:fd:a6:98:38:53:7e:00:e8: 8b:81:79:03:c6:a0:f1:d8:49:ee:88:f2:0f:32:ed: e4:12:d7:c1:47:df:50:82:09:75:c4:b2:97:b1:0f: c4:53:61:45:08:e4:17:62:81:28:77:74:38:7d:e6: f7:ca:78:02:16:74:04:f1:11:e0:e6:38:94:6f:4a: dd:0a:a8:88:6c:c3:d6:d7:ca:26:cb:69:8b:f8:9b: 90:3b:b9:c9:91:ec:49:ae:a7:9c:b1:ed:d1:da:6c: 2c:7f:87:b6:22:b1:4d:b0:f2:bf:9f:7a:2c:7f:cb: 69:db:44:35:95:ca:85:93:70:34:c0:93:b5:c5:dc: 82:d7:9c:bb:27:e4:ff:2f:c7:09:3a:ce:90:cc:6f: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:5B:36:5C:D4:D1:4A:5E:4D:73:33:FC:8A:47:A1:06:0F:A8:3B X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:52:66:7d:63:da:2e:79:c5:55:26:04:71:dc:d1:82:fc:95: ff:0a:9f:b7:4e:e2:be:7d:95:55:9d:f3:81:ee:82:45:19:9b: 29:fc:2e:a3:12:2e:61:e4:d5:b1:38:70:51:5f:10:e5:3f:a0: 9d:7d:b9:20:f8:09:1d:e3:93:25:4e:f3:a5:b8:7d:4f:40:50: 5e:ce:7e:35:80:7d:34:3d:d6:c4:37:cd:b0:09:0d:e5:97:fb: ff:d1:c4:91:fe:47:ad:a9:76:39:cf:5a:be:61:d0:70:df:50: 57:df:14:93:83:99:26:50:f8:94:4c:c3:57:52:b9:67:d4:e1: de:1e:b7:70:d9:e6:69:95:cc:be:8a:ef:1b:19:4f:d6:f2:0e: 0a:aa:1a:ee:09:f5:02:74:a6:db:6b:50:2b:8c:d1:c3:72:e6: c8:59:c0:d2:45:10:1b:1f:a3:e1:2f:8b:da:ec:cf:e8:3e:a5: 64:2f:66:20:4a:88:c2:aa:5e:87:24:ae:6f:b2:d9:cc:5f:de: d3:dc:ff:9a:85:19:3f:f9:d2:40:02:5a:dd:bf:7c:9a:b7:d7: b2:e8:91:a6:37:c4:33:c8:54:19:c2:0a:b0:4c:ee:df:4c:b6: be:b1:23:6c:6c:b1:4e:0d:67:34:bb:da:35:c4:3e:7b:7d:95: 9c:6e:90:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULphRp8WWd6KZ72poEXk9bSzs+r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA2MTUxOTU2NDZaFw0yNTA2MTgyMTMxNDZaMDMxMTAvBgNV BAMTKEE3NUU1QjM2NUNENEQxNEE1RTRENzMzM0ZDOEE0N0ExMDYwRkE4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHu/0spvpetH/0bSHwHqFN7nJm LLue7UiCpQlKsumpwh/pfma6/yU+DtkN2av7OoD4f4GJ0apq9PCua3awQ1ore8+c 2HKp+28F5j7HSYMOzY6dDkEqrhPG+Iv5WPp761ByZ6l+NI8M+1z3G+Tp8bf9ppg4 U34A6IuBeQPGoPHYSe6I8g8y7eQS18FH31CCCXXEspexD8RTYUUI5BdigSh3dDh9 5vfKeAIWdATxEeDmOJRvSt0KqIhsw9bXyibLaYv4m5A7ucmR7Emup5yx7dHabCx/ h7YisU2w8r+feix/y2nbRDWVyoWTcDTAk7XF3ILXnLsn5P8vxwk6zpDMbzkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp15bNlzU0UpeTXMz/IpHoQYPqDswHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxSZn1j2i55xVUmBHHc0YL8lf8Kn7dO4r59 lVWd84HugkUZmyn8LqMSLmHk1bE4cFFfEOU/oJ19uSD4CR3jkyVO86W4fU9AUF7O fjWAfTQ91sQ3zbAJDeWX+//RxJH+R62pdjnPWr5h0HDfUFffFJODmSZQ+JRMw1dS uWfU4d4et3DZ5mmVzL6K7xsZT9byDgqqGu4J9QJ0pttrUCuM0cNy5shZwNJFEBsf o+Evi9rsz+g+pWQvZiBKiMKqXockrm+y2cxf3tPc/5qFGT/50kACWt2/fJq317Lo kaY3xDPIVBnCCrBM7t9Mtr6xI2xssU4NZzS72jXEPnt9lZxukIs= -----END CERTIFICATE-----Generated at Tue Jun 17 16:19:41 2025 by rpki-client