$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: djBWFm6KsGHax6iKFRrGHz7/SQP4sMzc//EMeuxd4OA= Subject key identifier: 69:4F:5E:8E:4C:FC:A1:DB:82:47:E1:F4:4D:5B:28:BE:77:8C:0F:AA Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 09B4B8F5DA3430201927CC248DB71B28F2C514C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 01D6 Signing time: Thu 07 Aug 2025 10:41:45 +0000 Manifest this update: Thu 07 Aug 2025 10:36:45 +0000 Manifest next update: Sun 10 Aug 2025 11:03:45 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: m7o/hEaVt1nd79bJVytP5ShEyBogbwP6Wo9mx+qCago=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 11:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b4:b8:f5:da:34:30:20:19:27:cc:24:8d:b7:1b:28:f2:c5:14:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Aug 7 10:36:45 2025 GMT Not After : Aug 10 11:03:45 2025 GMT Subject: CN=694F5E8E4CFCA1DB8247E1F44D5B28BE778C0FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:14:a7:bb:12:08:ad:fb:29:8e:d5:ab:38: 23:18:66:ca:2e:98:e1:6a:57:fb:2c:93:d3:9d:cf: 2c:d4:15:5b:ae:51:c2:33:b2:ab:a8:cf:8f:fb:ba: b1:bc:1b:e7:d3:1a:fc:f9:c3:e6:b8:18:91:96:dd: d6:03:c4:ad:c3:a8:e0:1a:ea:da:41:bb:fa:4d:52: 9a:01:90:1d:fe:cb:73:5c:bc:1d:29:4b:e6:89:4b: 5b:c0:b7:48:ab:28:89:c7:c8:05:b7:97:40:c9:41: a3:10:af:7a:1d:f1:4a:06:62:2a:1a:21:80:d2:36: 87:5c:fd:59:35:35:fa:16:95:90:f5:8d:96:53:87: 6f:73:25:67:2f:b4:90:86:77:57:69:54:5c:95:5a: 55:d2:ea:25:00:19:89:06:ac:13:aa:23:f3:aa:7c: c1:06:ff:64:91:ed:68:b5:81:8d:5c:99:c7:69:c2: 2d:a7:d9:3a:65:52:2f:ac:a1:44:e6:78:4f:6f:6d: d6:51:8b:b5:fd:27:95:ae:4d:18:11:45:0b:ad:2b: 95:53:27:cc:84:16:4a:3c:91:08:52:a5:65:e9:b0: f2:42:57:05:ff:d4:a4:3b:7d:7f:c1:77:b9:0c:ec: c7:f2:bc:e9:66:ce:b9:d9:2e:3e:c3:31:fa:f2:3a: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4F:5E:8E:4C:FC:A1:DB:82:47:E1:F4:4D:5B:28:BE:77:8C:0F:AA X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3c:2c:62:ff:6c:64:2f:2e:d5:50:32:d3:1b:21:c2:cb:77: 91:09:af:99:fe:58:da:b4:42:3d:8b:0e:23:f2:3a:d2:a8:f6: e6:06:08:10:19:1f:e0:91:5b:ee:50:05:83:0d:94:77:6a:b5: 5c:97:d3:36:8a:e3:b1:3e:a9:68:86:a8:58:30:91:e3:86:e0: 16:65:6c:df:42:c2:5d:2e:ed:4f:58:4b:5b:fa:16:74:e6:68: 31:71:67:e0:25:8c:e4:30:d5:0e:a8:09:4f:c4:28:c4:90:04: bf:20:ef:43:63:55:58:b7:58:fd:5c:5d:98:29:3d:fd:14:d0: bf:5c:cf:f3:34:1e:c1:3a:a0:07:25:04:ee:1f:ed:2c:e8:0d: cb:bd:71:af:3c:65:ff:cb:a5:81:58:c0:fb:be:9f:e2:3d:12: da:94:ed:5b:42:42:c7:cc:9a:3f:80:1c:4b:c0:2f:ce:91:33: 03:07:51:8d:fc:c3:ca:aa:92:ca:be:ab:17:50:4b:5f:33:c2: bc:a9:49:44:44:34:7a:9b:f6:58:a8:08:b8:ce:72:1f:da:e9: 84:a5:b7:eb:2b:62:e7:4a:43:03:b6:6f:71:4e:f4:59:ef:26: 37:ba:62:bb:0f:47:cc:1e:fe:f8:0b:95:ee:0e:2e:d0:75:31: 13:f2:ac:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbS49do0MCAZJ8wkjbcbKPLFFMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTA4MDcxMDM2NDVaFw0yNTA4MTAxMTAzNDVaMDMxMTAvBgNV BAMTKDY5NEY1RThFNENGQ0ExREI4MjQ3RTFGNDRENUIyOEJFNzc4QzBGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLxSnuxIIrfspjtWrOCMYZsou mOFqV/ssk9OdzyzUFVuuUcIzsquoz4/7urG8G+fTGvz5w+a4GJGW3dYDxK3DqOAa 6tpBu/pNUpoBkB3+y3NcvB0pS+aJS1vAt0irKInHyAW3l0DJQaMQr3od8UoGYioa IYDSNodc/Vk1NfoWlZD1jZZTh29zJWcvtJCGd1dpVFyVWlXS6iUAGYkGrBOqI/Oq fMEG/2SR7Wi1gY1cmcdpwi2n2TplUi+soUTmeE9vbdZRi7X9J5WuTRgRRQutK5VT J8yEFko8kQhSpWXpsPJCVwX/1KQ7fX/Bd7kM7MfyvOlmzrnZLj7DMfryOvNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaU9ejkz8oduCR+H0TVsovneMD6owHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA8LGL/bGQvLtVQMtMbIcLLd5EJr5n+WNq0 Qj2LDiPyOtKo9uYGCBAZH+CRW+5QBYMNlHdqtVyX0zaK47E+qWiGqFgwkeOG4BZl bN9Cwl0u7U9YS1v6FnTmaDFxZ+AljOQw1Q6oCU/EKMSQBL8g70NjVVi3WP1cXZgp Pf0U0L9cz/M0HsE6oAclBO4f7SzoDcu9ca88Zf/LpYFYwPu+n+I9EtqU7VtCQsfM mj+AHEvAL86RMwMHUY38w8qqksq+qxdQS18zwrypSURENHqb9lioCLjOch/a6YSl t+srYudKQwO2b3FO9FnvJje6YrsPR8we/vgLle4OLtB1MRPyrGM= -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:11 2025 by rpki-client