$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json) Hash identifier: dRIDFP5+Z1xohBW6wcHNRFQDKgf8SX/15GiviodtrdE= Subject key identifier: E8:54:AE:9A:FE:4F:DC:00:92:F6:CF:2E:D7:90:A1:AE:C4:A5:B8:BC Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Certificate serial: 06F8531B0517DCF6E31517CC1F514A78D29D381A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft Manifest number: 04CD Signing time: Tue 05 Aug 2025 20:10:59 +0000 Manifest this update: Tue 05 Aug 2025 20:05:59 +0000 Manifest next update: Sat 09 Aug 2025 00:49:59 +0000 Files and hashes: 1: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=) 2: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: lkSZ4+0gtY3FuX0H8j/08EJHL/aJy45a9jNFiF5pDTQ=) 3: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=) 4: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f8:53:1b:05:17:dc:f6:e3:15:17:cc:1f:51:4a:78:d2:9d:38:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Validity Not Before: Aug 5 20:05:59 2025 GMT Not After : Aug 9 00:49:59 2025 GMT Subject: CN=E854AE9AFE4FDC0092F6CF2ED790A1AEC4A5B8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:35:34:15:28:af:cb:91:16:18:09:70:69: fa:43:69:49:70:dc:7e:e6:4a:2b:c1:79:40:0a:1f: 19:bc:02:26:c5:8c:bd:a4:7f:77:6f:22:be:2f:d2: 7d:b9:a4:0b:e8:60:91:06:03:13:77:19:0d:9e:c0: 3e:63:4a:30:66:54:b3:4d:28:2b:cc:d4:c5:69:c2: 4d:ef:74:a0:98:52:7b:da:e6:b1:13:cc:2a:14:cf: e8:84:a6:9c:10:da:1a:1c:8d:27:25:d4:ae:6a:8e: d6:1f:9d:38:2f:45:96:57:da:33:da:b2:cf:0f:ef: cf:c1:16:0e:16:aa:e7:6c:94:3c:bf:67:29:4c:00: 2c:78:88:cb:91:79:a5:d0:0c:1b:d5:3e:01:d3:91: 79:aa:76:5b:62:ca:cb:2c:d1:8e:6e:1a:a7:11:35: 53:1e:5c:1b:94:b2:7f:5c:be:49:1e:01:47:93:13: 23:18:b2:98:35:b8:73:1a:0a:d8:86:b3:09:d5:58: 46:23:3f:92:2d:af:aa:e7:78:7a:cb:b4:50:6f:25: 56:2b:5a:9e:54:97:1a:cb:a6:28:05:3a:a1:2a:f2: 0e:bd:fe:be:0a:3f:57:d7:19:78:a7:38:de:02:74: 2e:f3:59:45:0a:1e:80:0c:a9:1e:c0:33:de:3d:8f: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:54:AE:9A:FE:4F:DC:00:92:F6:CF:2E:D7:90:A1:AE:C4:A5:B8:BC X509v3 Authority Key Identifier: keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d3:89:34:83:66:2e:32:27:c5:01:a2:05:c6:a2:6c:ce:d9: 53:d7:92:ee:61:fe:8a:55:82:0d:91:51:88:59:34:d7:19:05: ff:33:3d:4d:b1:2a:7f:4e:1e:99:c3:31:96:49:5f:98:1e:b3: c7:b4:21:61:5d:82:8e:27:f9:0a:1b:22:94:d1:8a:5c:0e:50: e5:70:56:f7:ad:36:9f:d2:a2:86:0d:bc:e1:9a:87:53:c6:eb: cc:53:50:fc:5f:0d:cd:c7:3f:cc:52:d4:52:7e:f8:cd:bf:16: 5b:c1:c1:04:20:e3:af:b0:20:a4:7e:b5:3c:ed:8a:b0:34:72: 41:b1:4d:6c:30:98:3d:e5:16:95:15:d1:d1:f8:fd:d9:ac:1b: 42:d9:c3:30:84:45:9b:6d:5a:a8:7a:b8:f5:f1:58:9b:2d:e2: 7f:d3:e3:42:5a:97:c5:8f:9f:c5:a3:10:71:22:bd:91:9a:9b: 8f:8d:10:0a:91:62:26:74:09:99:5f:0f:ed:34:72:16:48:c8: 4d:4d:79:50:a1:ef:84:4d:4b:09:aa:36:1d:89:ee:6b:9c:24: c9:6d:80:1e:8f:2f:84:54:32:cd:79:c1:6d:f7:cb:f4:97:85: 83:39:33:a9:48:44:74:e0:76:81:7c:52:10:62:23:d2:b6:f1: aa:d3:2c:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvhTGwUX3PbjFRfMH1FKeNKdOBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy OUZDMTNBOTAeFw0yNTA4MDUyMDA1NTlaFw0yNTA4MDkwMDQ5NTlaMDMxMTAvBgNV BAMTKEU4NTRBRTlBRkU0RkRDMDA5MkY2Q0YyRUQ3OTBBMUFFQzRBNUI4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeDU0FSivy5EWGAlwafpDaUlw 3H7mSivBeUAKHxm8AibFjL2kf3dvIr4v0n25pAvoYJEGAxN3GQ2ewD5jSjBmVLNN KCvM1MVpwk3vdKCYUnva5rETzCoUz+iEppwQ2hocjScl1K5qjtYfnTgvRZZX2jPa ss8P78/BFg4WqudslDy/ZylMACx4iMuReaXQDBvVPgHTkXmqdltiysss0Y5uGqcR NVMeXBuUsn9cvkkeAUeTEyMYspg1uHMaCtiGswnVWEYjP5Itr6rneHrLtFBvJVYr Wp5UlxrLpigFOqEq8g69/r4KP1fXGXinON4CdC7zWUUKHoAMqR7AM949j6AXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6FSumv5P3ACS9s8u15ChrsSluLwwHwYDVR0j BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD MTNBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz NGYtYTcyMWMzNzJhNzRjLzAvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMx RDQyOUZDMTNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTTiTSDZi4yJ8UBogXGomzO2VPXku5h/opV gg2RUYhZNNcZBf8zPU2xKn9OHpnDMZZJX5ges8e0IWFdgo4n+QobIpTRilwOUOVw VvetNp/SooYNvOGah1PG68xTUPxfDc3HP8xS1FJ++M2/FlvBwQQg46+wIKR+tTzt irA0ckGxTWwwmD3lFpUV0dH4/dmsG0LZwzCERZttWqh6uPXxWJst4n/T40Jal8WP n8WjEHEivZGam4+NEAqRYiZ0CZlfD+00chZIyE1NeVCh74RNSwmqNh2J7mucJMlt gB6PL4RUMs15wW33y/SXhYM5M6lIRHTgdoF8UhBiI9K28arTLD4= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:05 2025 by rpki-client