$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: 0d/IMe8LX/T+EfMXrIn2Ec/6cyVfnin+eA1D19ukg1k= Subject key identifier: 62:1D:FA:F4:DD:9A:C9:23:AE:69:E9:C6:BF:A0:42:C4:3A:2A:C3:76 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 6177671933D9FC128FB979389914F4CFE633FEA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01B9 Signing time: Wed 06 Aug 2025 04:01:38 +0000 Manifest this update: Wed 06 Aug 2025 03:56:38 +0000 Manifest next update: Sat 09 Aug 2025 13:19:38 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: lqzM57MhgCPa61HL5EFqboJEZIxI5oeTDhxuZtAbNxo=) 3: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:77:67:19:33:d9:fc:12:8f:b9:79:38:99:14:f4:cf:e6:33:fe:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Aug 6 03:56:38 2025 GMT Not After : Aug 9 13:19:38 2025 GMT Subject: CN=621DFAF4DD9AC923AE69E9C6BFA042C43A2AC376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:6f:94:03:b1:0b:f3:d7:fb:2c:af:50:ed: c9:17:0e:93:0d:83:6a:1b:98:96:15:41:75:e5:b6: b0:41:2b:c3:a1:f9:e2:3b:7b:f2:95:3e:c9:f1:14: 2b:f8:38:1a:d7:fb:0a:ea:06:a7:53:bc:7c:b5:98: 53:13:fe:5e:be:bf:45:b1:0c:bc:7c:ff:03:7b:1b: 0f:ef:a7:58:09:f3:9a:76:34:2c:f9:09:a4:31:d2: 27:55:94:e8:f4:e4:6f:35:6b:2f:ce:66:26:24:8c: 3b:83:f2:58:d3:98:cd:5c:23:b8:18:57:4f:29:a9: 7c:ab:00:5a:b9:0a:bd:63:ab:26:92:12:eb:ce:08: 58:13:65:85:02:e1:92:d6:4b:f7:21:b8:8f:75:a5: f1:12:7d:e5:f8:f0:09:5b:81:86:65:d4:50:49:73: 6b:29:2c:d8:a7:cc:6f:84:bf:b5:5b:65:0a:4a:3a: 90:76:42:d1:6d:ab:c4:cc:24:7e:35:46:bc:32:df: de:65:16:e3:ba:14:29:f5:ea:04:f1:b5:e2:b0:ad: 16:f7:34:73:f8:2e:74:29:98:dc:6e:cc:7a:69:97: a2:5d:18:3d:ce:f1:be:d2:da:76:62:c7:77:92:49: bf:19:19:45:6f:66:fa:38:57:d5:ba:de:5d:c3:b5: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1D:FA:F4:DD:9A:C9:23:AE:69:E9:C6:BF:A0:42:C4:3A:2A:C3:76 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:2b:c1:f6:47:4d:04:56:dd:43:78:23:8a:b5:37:89:d5: c1:fa:ab:58:86:0f:a0:8b:1a:ee:5a:64:c8:36:fc:6e:a9:af: c2:23:de:dd:61:8b:a4:e4:7b:f2:ec:47:1c:7a:12:59:12:f8: b3:e3:f6:d1:0f:d6:88:cd:bf:0e:6f:f2:5e:fc:cd:1d:a6:0e: 34:eb:8d:06:50:c5:20:a8:7e:7e:e0:54:86:83:da:b3:98:42: 4a:bd:cc:fb:4f:5a:11:dc:d4:4e:a3:a5:61:44:df:f9:4a:6b: 81:fa:28:d4:90:35:32:d4:d1:1d:c1:d7:55:6c:39:cb:8a:cc: 5d:63:a1:e7:d7:5e:f6:95:f0:b8:f9:21:bf:db:a8:67:51:00: 10:87:37:10:0a:2f:8e:31:fd:f8:ef:a2:59:20:09:62:32:a0: 8a:49:77:6d:06:87:d5:65:be:9f:d2:a1:80:93:df:21:11:8e: 0b:80:95:cf:25:c9:e2:a2:1b:fe:e8:34:7d:ce:d8:dd:a2:16: 30:c8:bb:19:51:2d:2c:92:20:8c:0e:77:02:f2:57:5e:b7:a4: 53:71:97:49:16:d9:be:e7:e3:90:c9:9f:b2:6d:40:64:6b:50: 20:30:fd:f7:14:8e:46:36:6c:4b:df:97:03:17:09:9e:ca:58: 20:08:d2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXdnGTPZ/BKPuXk4mRT0z+Yz/qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA4MDYwMzU2MzhaFw0yNTA4MDkxMzE5MzhaMDMxMTAvBgNV BAMTKDYyMURGQUY0REQ5QUM5MjNBRTY5RTlDNkJGQTA0MkM0M0EyQUMzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPm+UA7EL89f7LK9Q7ckXDpMN g2obmJYVQXXltrBBK8Oh+eI7e/KVPsnxFCv4OBrX+wrqBqdTvHy1mFMT/l6+v0Wx DLx8/wN7Gw/vp1gJ85p2NCz5CaQx0idVlOj05G81ay/OZiYkjDuD8ljTmM1cI7gY V08pqXyrAFq5Cr1jqyaSEuvOCFgTZYUC4ZLWS/chuI91pfESfeX48AlbgYZl1FBJ c2spLNinzG+Ev7VbZQpKOpB2QtFtq8TMJH41Rrwy395lFuO6FCn16gTxteKwrRb3 NHP4LnQpmNxuzHppl6JdGD3O8b7S2nZix3eSSb8ZGUVvZvo4V9W63l3DtZUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYh369N2aySOuaenGv6BCxDoqw3YwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADitK8H2R00EVt1DeCOKtTeJ1cH6q1iGD6CL Gu5aZMg2/G6pr8Ij3t1hi6Tke/LsRxx6ElkS+LPj9tEP1ojNvw5v8l78zR2mDjTr jQZQxSCofn7gVIaD2rOYQkq9zPtPWhHc1E6jpWFE3/lKa4H6KNSQNTLU0R3B11Vs OcuKzF1joefXXvaV8Lj5Ib/bqGdRABCHNxAKL44x/fjvolkgCWIyoIpJd20Gh9Vl vp/SoYCT3yERjguAlc8lyeKiG/7oNH3O2N2iFjDIuxlRLSySIIwOdwLyV163pFNx l0kW2b7n45DJn7JtQGRrUCAw/fcUjkY2bEvflwMXCZ7KWCAI0uU= -----END CERTIFICATE-----Generated at Fri Aug 8 12:52:16 2025 by rpki-client