$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: +OCwthh5keowq8/dkyxprNXsfLcMpG4kBQOvOCcXcp4= Subject key identifier: F6:66:0A:D4:25:C7:B8:18:AB:D0:5E:7B:0A:0D:B0:D1:E5:B6:3E:E8 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 13BD0256E8FFC12995BFCF87C9C54149286A43B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0238 Signing time: Tue 05 Aug 2025 01:42:13 +0000 Manifest this update: Tue 05 Aug 2025 01:37:13 +0000 Manifest next update: Fri 08 Aug 2025 10:52:13 +0000 Files and hashes: 1: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: OXealqFWzVeyD806+45l/jqqBOUz5VchyaEX9NYDPoM=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:02:56:e8:ff:c1:29:95:bf:cf:87:c9:c5:41:49:28:6a:43:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Aug 5 01:37:13 2025 GMT Not After : Aug 8 10:52:13 2025 GMT Subject: CN=F6660AD425C7B818ABD05E7B0A0DB0D1E5B63EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:d4:6a:00:e7:8a:cb:d4:7b:92:7f:7b:5d: c3:d9:e0:e4:ab:15:27:3c:10:b0:36:33:7d:10:b0: ed:72:a5:1b:91:59:10:9c:08:29:d7:18:90:79:3b: b4:f4:50:ba:1a:6a:ac:fe:a5:89:9d:da:06:09:5e: db:25:38:f6:27:4d:4d:08:ab:22:f1:8c:f8:26:81: bb:22:73:8d:df:04:77:a3:19:69:40:96:86:ba:12: 24:ff:33:5c:e9:bc:c2:d7:53:a1:4f:6b:0a:a5:60: 3f:bd:e6:de:99:07:43:24:c5:b7:f1:69:e8:b1:4f: 67:35:53:53:86:4b:fe:47:a1:50:b2:8b:4b:c9:11: 56:c3:ee:d4:49:de:3d:48:51:e0:76:25:48:c4:ef: 93:67:d2:ee:01:a6:c6:17:0f:e8:e7:a2:ce:7d:3a: dd:2a:1b:56:21:88:e6:f9:25:0e:86:2e:c2:80:1c: 45:a5:d7:06:f5:ab:e9:c3:ed:06:b1:ac:5b:b8:a8: 2e:a5:2b:f9:e8:f9:f8:93:7f:e4:90:ec:f9:f5:51: 24:be:23:c5:0d:5d:3d:d6:56:be:ec:d3:a8:4e:e5: 7b:35:c2:67:16:5b:bd:52:b6:db:74:63:f0:a5:d5: 0a:53:cb:6c:a5:54:7b:cb:e9:9a:fc:02:b3:ec:43: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:66:0A:D4:25:C7:B8:18:AB:D0:5E:7B:0A:0D:B0:D1:E5:B6:3E:E8 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:23:9b:2d:98:37:63:a5:6d:60:f2:0c:78:f5:c6:23:e4:92: 25:d5:47:0e:4a:f4:64:9a:62:6f:41:b0:8f:96:2b:b3:71:37: aa:4c:a8:a6:a8:c6:6c:bd:56:a6:e9:74:89:df:c6:2b:64:f5: 34:d1:06:17:21:c2:db:3b:a7:8f:ad:84:05:63:7b:27:cb:0e: ec:d8:e7:24:aa:d5:d5:f2:e3:fe:8b:c9:ce:34:f3:1b:5c:6f: 6f:da:59:d1:3a:14:a2:3f:54:27:d8:39:22:41:ad:06:25:9f: 21:d8:aa:3f:fb:32:28:5a:14:c2:18:7e:2b:75:a8:09:18:3b: 6b:9e:c8:e6:2b:f6:12:cc:b2:66:1d:d5:73:c8:c7:a5:bc:8c: 64:17:b6:5a:a5:1c:43:61:63:7d:53:fa:52:65:3f:59:ae:3e: 68:26:ec:0c:49:d2:a7:af:f4:13:fc:12:bc:95:4d:e9:cc:b4: 42:13:44:29:a5:f1:09:70:cf:a4:91:18:50:08:62:04:88:80: 0b:06:e9:8b:2e:ed:07:2d:65:b5:84:bc:d2:f1:47:da:24:ba: fc:99:a4:d9:18:6d:a2:93:1d:80:0c:f3:4f:99:78:23:95:4e: 10:c5:e4:bf:7d:13:64:03:de:6a:1a:d3:4e:0b:57:dc:e8:a8: 06:0f:65:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE70CVuj/wSmVv8+HycVBSShqQ7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA4MDUwMTM3MTNaFw0yNTA4MDgxMDUyMTNaMDMxMTAvBgNV BAMTKEY2NjYwQUQ0MjVDN0I4MThBQkQwNUU3QjBBMERCMEQxRTVCNjNFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiINRqAOeKy9R7kn97XcPZ4OSr FSc8ELA2M30QsO1ypRuRWRCcCCnXGJB5O7T0ULoaaqz+pYmd2gYJXtslOPYnTU0I qyLxjPgmgbsic43fBHejGWlAloa6EiT/M1zpvMLXU6FPawqlYD+95t6ZB0Mkxbfx aeixT2c1U1OGS/5HoVCyi0vJEVbD7tRJ3j1IUeB2JUjE75Nn0u4BpsYXD+jnos59 Ot0qG1YhiOb5JQ6GLsKAHEWl1wb1q+nD7QaxrFu4qC6lK/no+fiTf+SQ7Pn1USS+ I8UNXT3WVr7s06hO5Xs1wmcWW71Sttt0Y/Cl1QpTy2ylVHvL6Zr8ArPsQ0R1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mYK1CXHuBir0F57Cg2w0eW2PugwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAjmy2YN2OlbWDyDHj1xiPkkiXVRw5K9GSa Ym9BsI+WK7NxN6pMqKaoxmy9VqbpdInfxitk9TTRBhchwts7p4+thAVjeyfLDuzY 5ySq1dXy4/6Lyc408xtcb2/aWdE6FKI/VCfYOSJBrQYlnyHYqj/7MihaFMIYfit1 qAkYO2ueyOYr9hLMsmYd1XPIx6W8jGQXtlqlHENhY31T+lJlP1muPmgm7AxJ0qev 9BP8EryVTenMtEITRCml8Qlwz6SRGFAIYgSIgAsG6Ysu7QctZbWEvNLxR9okuvyZ pNkYbaKTHYAM80+ZeCOVThDF5L99E2QD3moa004LV9zoqAYPZQY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:38 2025 by rpki-client