$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json) Hash identifier: aGhy0t4J9ouqnYOU5GscAfr1Smu4/WacF+Ej1iUZhi4= Subject key identifier: D7:18:4A:A2:55:CB:89:56:6D:00:43:84:B2:AD:FC:35:BA:8C:D1:D0 Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Certificate serial: 0C3A59637EFB5DEEC03D5347DBDD8B9BCC16EB12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft Manifest number: 03A2 Signing time: Wed 06 Aug 2025 09:21:54 +0000 Manifest this update: Wed 06 Aug 2025 09:16:53 +0000 Manifest next update: Sat 09 Aug 2025 19:35:53 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: 6cj5uI59cR8iuhB+dGI9lfG37MPFAcebdXbUM0Dv2Ak=) 2: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: PPujzQv3OhuFDrDxha1LOXsXpusURYPpkI5A0sX0sL8=) 3: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Z4m+4VYQxa9asx7q0PvLa+6IIDMkLHF/pNBvi09vFpg=) 4: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: bZ83knFcAIH+x3MCllavMdUXghwNZQdIi5y8BOAPyxE=) 5: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: KXby9djIRSMhLtiY+1iIK8h6Zdgp7aSyIhPxwupb118=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3a:59:63:7e:fb:5d:ee:c0:3d:53:47:db:dd:8b:9b:cc:16:eb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Validity Not Before: Aug 6 09:16:53 2025 GMT Not After : Aug 9 19:35:53 2025 GMT Subject: CN=D7184AA255CB89566D004384B2ADFC35BA8CD1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:cc:02:fe:72:d8:98:65:08:fb:37:d0:4a: 12:1d:c5:d5:78:a1:30:94:2c:3b:15:3f:d0:3d:c4: 89:d6:ab:26:56:ab:b8:36:35:be:82:19:76:fe:aa: b9:56:92:b6:25:06:0d:c0:64:83:79:1e:72:52:c3: 90:29:5e:90:06:b6:ed:c6:6d:5a:18:93:c7:35:9d: 0a:c4:07:df:b6:45:f3:cf:82:ad:2c:3b:2a:34:35: ba:b8:95:42:75:4c:14:d0:12:56:50:9f:a0:93:ad: ca:73:8f:a9:2b:e8:e4:77:47:b8:a6:e2:a6:0f:d7: 3a:18:68:92:ba:e9:6a:27:30:57:d7:0f:d3:39:d9: c6:d1:c8:a7:26:6d:0b:8c:35:c5:eb:58:f9:60:92: 3c:1f:08:7e:c6:6b:1e:06:70:6e:ab:2f:83:45:0a: a9:62:d9:74:25:d1:8b:be:2f:f2:88:0a:eb:0e:be: d2:d1:9f:f8:0e:6d:88:09:10:d8:54:91:96:30:85: 74:7e:7e:33:a6:99:71:53:fe:a3:82:49:85:db:98: f1:bd:48:2e:54:97:a2:2e:2f:47:f3:b8:91:c6:6a: 1e:13:6d:3f:b0:d7:54:8c:5f:01:c7:6a:27:d1:96: d8:de:81:23:2c:b6:1c:e9:ef:08:d0:f8:e4:02:00: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:4A:A2:55:CB:89:56:6D:00:43:84:B2:AD:FC:35:BA:8C:D1:D0 X509v3 Authority Key Identifier: keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b0:06:c6:99:f7:f9:91:54:51:5e:c3:94:f2:a1:21:a4:dc: 66:d0:9e:29:9f:72:28:85:ed:57:94:de:83:ee:09:cf:14:b9: bb:26:34:a3:63:18:81:5f:8b:86:1d:cd:ad:e4:36:6e:e2:65: 3a:0b:7f:96:30:82:67:3b:86:e8:1a:2f:c9:60:e9:26:9e:f9: 99:36:1a:2f:ea:60:60:f6:be:61:f3:2a:48:f8:f2:5d:a8:24: b1:eb:b1:02:cb:2d:9e:3b:e7:5e:26:42:68:7c:9f:ba:54:97: de:84:09:c3:45:06:c4:31:69:44:cc:86:90:8e:0b:cb:95:38: 40:96:9e:dc:33:53:63:b3:c6:88:52:c8:d0:ff:eb:05:8e:0b: c0:f1:45:77:49:60:5e:9e:6f:dd:e5:17:c6:14:1f:35:77:84: 49:56:8a:49:39:36:c0:6f:16:dc:48:29:1e:c4:e6:88:78:3a: 67:7c:16:5a:72:18:c3:54:59:c5:bb:ec:c4:fd:d1:b3:fe:c2: 75:a5:83:80:43:3e:0a:65:41:52:2d:89:d4:df:3d:9d:97:89: 28:18:2d:81:07:c2:6c:ef:26:d4:d2:1c:b1:f4:ae:78:54:aa: ad:3f:94:21:0d:09:40:db:4b:13:d3:86:1a:79:27:fb:be:cd: 0f:04:31:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDpZY377Xe7APVNH292Lm8wW6xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFF QjhGNDg1MzAeFw0yNTA4MDYwOTE2NTNaFw0yNTA4MDkxOTM1NTNaMDMxMTAvBgNV BAMTKEQ3MTg0QUEyNTVDQjg5NTY2RDAwNDM4NEIyQURGQzM1QkE4Q0QxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUswC/nLYmGUI+zfQShIdxdV4 oTCULDsVP9A9xInWqyZWq7g2Nb6CGXb+qrlWkrYlBg3AZIN5HnJSw5ApXpAGtu3G bVoYk8c1nQrEB9+2RfPPgq0sOyo0Nbq4lUJ1TBTQElZQn6CTrcpzj6kr6OR3R7im 4qYP1zoYaJK66WonMFfXD9M52cbRyKcmbQuMNcXrWPlgkjwfCH7Gax4GcG6rL4NF Cqli2XQl0Yu+L/KICusOvtLRn/gObYgJENhUkZYwhXR+fjOmmXFT/qOCSYXbmPG9 SC5Ul6IuL0fzuJHGah4TbT+w11SMXwHHaifRltjegSMsthzp7wjQ+OQCAA5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xhKolXLiVZtAEOEsq38NbqM0dAwHwYDVR0j BBgwFoAUDQgA8VFtpXvZuVYf+iokKuuPSFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8wRDA4MDBGMTUx NkRBNTdCRDlCOTU2MUZGQTJBMjQyQUVCOEY0ODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFFQjhG NDg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0 MkFFQjhGNDg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2wBsaZ9/mRVFFew5TyoSGk3GbQnimfciiF 7VeU3oPuCc8UubsmNKNjGIFfi4Ydza3kNm7iZToLf5Ywgmc7hugaL8lg6Sae+Zk2 Gi/qYGD2vmHzKkj48l2oJLHrsQLLLZ47514mQmh8n7pUl96ECcNFBsQxaUTMhpCO C8uVOECWntwzU2OzxohSyND/6wWOC8DxRXdJYF6eb93lF8YUHzV3hElWikk5NsBv FtxIKR7E5oh4Omd8FlpyGMNUWcW77MT90bP+wnWlg4BDPgplQVItidTfPZ2XiSgY LYEHwmzvJtTSHLH0rnhUqq0/lCENCUDbSxPThhp5J/u+zQ8EMYc= -----END CERTIFICATE-----Generated at Thu Aug 7 23:55:47 2025 by rpki-client