$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: CnfqpRz5vPTk/wbOOU0OR+1ORptioz5FPHy89DLwGi8= Subject key identifier: D9:D0:E9:F6:73:F7:0C:1B:C8:44:BB:D3:49:AB:E5:FB:36:DE:C0:44 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 7CD71836F6C7F13E63B30673A435B1FCE1AAD5AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 20:41:54 +0000 Manifest this update: Mon 03 Nov 2025 20:36:54 +0000 Manifest next update: Fri 07 Nov 2025 03:34:54 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: stChWr73yXdGbh+hX2t7/VZVC5KN+AQMPaBkSkViaZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:18:36:f6:c7:f1:3e:63:b3:06:73:a4:35:b1:fc:e1:aa:d5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Nov 3 20:36:54 2025 GMT Not After : Nov 7 03:34:54 2025 GMT Subject: CN=D9D0E9F673F70C1BC844BBD349ABE5FB36DEC044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:30:ad:63:95:48:9a:a4:c9:07:a7:bb:5d: 97:74:09:da:f6:64:76:c3:32:57:e4:fa:44:3b:1c: 82:4c:12:e7:84:55:d4:47:dd:eb:43:a5:c5:11:b0: fe:24:2a:4d:45:43:c7:f7:36:fc:17:b2:cf:44:07: c6:24:f1:ba:4c:58:5a:77:7c:c7:93:0c:07:7a:47: 2b:22:13:91:62:d0:09:e4:57:63:a6:29:f6:ca:bd: c5:c0:29:a0:aa:0b:6a:fd:5f:00:db:0e:e4:7c:61: 98:6a:be:9f:98:0c:4b:2f:5d:86:59:68:61:ee:32: f1:b4:0c:d4:75:15:24:8a:a3:61:a1:f2:55:20:de: 60:81:4e:ec:35:2f:c1:16:55:d6:58:eb:4c:0e:89: fd:da:3e:e5:5f:7f:cd:b1:c0:60:35:01:5d:e8:fe: f0:3c:a4:ca:61:8f:56:17:85:1c:74:88:61:f2:c4: 0a:32:6b:55:84:d2:e3:1b:5a:84:8c:65:6b:49:93: 7c:a4:93:51:4d:34:12:0f:5e:86:a3:9e:17:93:1d: be:d7:0e:24:0b:e9:4c:00:e4:d9:7c:3a:2f:3d:33: 9e:e1:24:b5:8c:29:3f:2e:53:4c:d9:80:49:cb:3b: 3f:4b:ef:0e:e6:ff:64:9b:00:b3:c7:91:24:63:53: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:E9:F6:73:F7:0C:1B:C8:44:BB:D3:49:AB:E5:FB:36:DE:C0:44 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:86:a5:7b:c3:18:04:a7:f3:07:2c:9a:6e:64:7d:f9:37:30: fb:aa:c4:91:02:ce:d0:83:51:66:63:b6:e0:58:92:ae:78:05: 05:66:7a:84:ff:6a:21:2e:62:79:70:d7:3f:76:9f:b8:e1:40: 73:c3:8a:bd:e5:20:b8:31:6e:35:34:1f:e0:5e:c0:5d:15:56: 56:43:35:8a:9f:f8:f2:47:02:0a:4a:7f:5f:e8:57:81:8a:ad: 45:97:cd:2d:6a:f8:25:11:f3:1c:46:42:84:19:f5:b3:a3:83: 08:43:d2:5f:48:56:87:a8:27:ab:2c:8e:99:31:32:f3:6a:c1: 77:a5:09:a4:bd:49:95:ac:40:60:ec:ac:92:e9:6d:00:aa:a6: f7:ec:00:0c:f7:d4:ee:3c:03:d3:aa:2a:77:47:43:e2:f5:38: c6:8d:d8:87:1f:c8:35:05:be:eb:f1:ee:86:1b:28:4c:2c:11: de:21:21:b2:52:35:77:07:07:b1:72:7d:8d:2e:0c:9d:06:c1: 0f:66:d3:60:4d:e3:ca:7a:2b:54:99:af:2d:1f:fe:23:f2:ae: c9:da:dc:80:a1:64:32:d1:4c:c4:13:64:25:cd:5c:d5:2b:8c: 08:4b:d3:0f:5b:a5:b9:90:bd:13:e8:e2:d5:70:5d:d6:b6:fa: 30:18:43:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNcYNvbH8T5jswZzpDWx/OGq1aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTExMDMyMDM2NTRaFw0yNTExMDcwMzM0NTRaMDMxMTAvBgNV BAMTKEQ5RDBFOUY2NzNGNzBDMUJDODQ0QkJEMzQ5QUJFNUZCMzZERUMwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkTCtY5VImqTJB6e7XZd0Cdr2 ZHbDMlfk+kQ7HIJMEueEVdRH3etDpcURsP4kKk1FQ8f3NvwXss9EB8Yk8bpMWFp3 fMeTDAd6RysiE5Fi0AnkV2OmKfbKvcXAKaCqC2r9XwDbDuR8YZhqvp+YDEsvXYZZ aGHuMvG0DNR1FSSKo2Gh8lUg3mCBTuw1L8EWVdZY60wOif3aPuVff82xwGA1AV3o /vA8pMphj1YXhRx0iGHyxAoya1WE0uMbWoSMZWtJk3ykk1FNNBIPXoajnheTHb7X DiQL6UwA5Nl8Oi89M57hJLWMKT8uU0zZgEnLOz9L7w7m/2SbALPHkSRjU43bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2dDp9nP3DBvIRLvTSavl+zbewEQwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSGpXvDGASn8wcsmm5kffk3MPuqxJECztCD UWZjtuBYkq54BQVmeoT/aiEuYnlw1z92n7jhQHPDir3lILgxbjU0H+BewF0VVlZD NYqf+PJHAgpKf1/oV4GKrUWXzS1q+CUR8xxGQoQZ9bOjgwhD0l9IVoeoJ6ssjpkx MvNqwXelCaS9SZWsQGDsrJLpbQCqpvfsAAz31O48A9OqKndHQ+L1OMaN2IcfyDUF vuvx7oYbKEwsEd4hIbJSNXcHB7FyfY0uDJ0GwQ9m02BN48p6K1SZry0f/iPyrsna 3IChZDLRTMQTZCXNXNUrjAhL0w9bpbmQvRPo4tVwXda2+jAYQzg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:16:29 2025 by rpki-client