$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: RSgCavOD8X2P2LLqGF38kTCdXKT5++XZWlKqoG1Lh4Q= Subject key identifier: 8B:4C:0F:82:4C:72:8B:C0:FA:AB:10:84:9A:D4:DF:E6:84:95:68:43 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 3F7CED75C4D1A0A2FF66DE0B4CACBB1EB113E62E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: EC Signing time: Sun 10 Aug 2025 04:22:18 +0000 Manifest this update: Sun 10 Aug 2025 04:17:18 +0000 Manifest next update: Wed 13 Aug 2025 09:59:18 +0000 Files and hashes: 1: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: kXSm01dLmCU8FMau1mhLjYf/7N0Gm3wmBdFotDSD/18=) 2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 09:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7c:ed:75:c4:d1:a0:a2:ff:66:de:0b:4c:ac:bb:1e:b1:13:e6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Aug 10 04:17:18 2025 GMT Not After : Aug 13 09:59:18 2025 GMT Subject: CN=8B4C0F824C728BC0FAAB10849AD4DFE684956843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:10:f5:c9:52:81:2e:71:e5:33:09:c4:41: 71:a6:b0:ca:9c:41:36:25:d6:21:72:b4:c3:df:56: 1a:08:72:c9:c9:b7:cc:ac:70:b5:35:7e:e3:8c:87: f3:e4:aa:55:ab:78:02:5a:0f:45:b3:e5:72:fd:cb: 91:01:69:ff:d0:52:5b:a6:db:4b:5c:05:4b:d2:cd: b3:e5:2c:4e:67:0b:b5:5c:f4:c9:05:34:a6:c1:4c: ea:ec:c3:78:dc:bb:4d:94:3f:8f:20:53:fe:6f:f0: c3:d9:a2:0e:a5:c9:f5:e0:21:10:32:c6:b8:01:50: 72:52:1e:6c:04:9f:7e:75:a7:3f:39:7f:1a:a9:ae: be:65:6b:1a:6b:7f:3f:b2:b4:2e:83:91:d1:ad:b3: 40:58:b2:19:a6:16:1a:22:6b:d5:4d:d1:49:d9:32: 00:d6:b4:25:0d:93:3f:af:b7:7a:bc:4f:1f:f7:f8: 19:bd:7f:ab:10:78:11:41:f4:0c:1d:c3:ef:bb:da: e8:c1:2e:83:e9:d5:3c:8f:d8:32:81:fc:bc:ed:c4: 66:94:7a:86:17:41:78:a2:12:74:a0:ee:16:8a:d4: 2f:52:4f:c9:e6:42:a2:bd:37:b8:dc:c4:66:04:ec: 0a:4d:cd:25:59:71:a9:1f:24:dc:1a:f1:b3:7d:c9: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4C:0F:82:4C:72:8B:C0:FA:AB:10:84:9A:D4:DF:E6:84:95:68:43 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f0:7d:42:a9:91:48:48:07:d3:df:cb:a6:80:f8:f6:13:0e: 52:68:d7:77:92:d8:a6:4f:8a:49:31:1c:42:55:26:de:a1:08: a1:48:9c:49:ad:b8:22:e9:37:b4:13:56:f0:02:72:94:b2:52: 2f:21:3e:a9:99:78:05:d2:f4:55:9f:ae:61:a6:c6:00:5c:d4: 8e:6d:1c:c1:8a:dd:86:c3:55:84:af:54:eb:c5:b1:6c:46:57: eb:f1:e6:47:7d:3f:78:f6:a7:31:7a:f5:50:d0:62:a9:d7:a0: fd:85:4d:46:9a:31:b9:d0:36:3d:39:ab:4a:6f:64:1d:dc:3d: c2:0e:1a:25:db:dd:86:14:d5:b9:01:55:25:de:90:3d:eb:58: 4f:a6:5f:a6:4c:0e:a7:88:fb:23:19:c8:f5:fc:6b:17:9c:50: b2:68:8a:f2:74:89:8c:a0:8a:65:ad:72:ea:fe:8f:4b:3e:28: 00:a8:fb:7d:0a:b9:84:13:63:3b:56:8d:38:ef:d7:62:17:15: d0:e1:42:5e:f9:06:2f:00:c2:ff:b5:44:f2:79:6a:9b:c7:5b: 26:44:db:4e:68:aa:0e:fb:be:69:65:3b:b5:5b:68:05:7c:3c: 6d:02:4a:99:51:98:74:be:f2:3a:83:10:ae:5b:5f:cf:2d:ad: 4c:f6:5f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3ztdcTRoKL/Zt4LTKy7HrET5i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTA4MTAwNDE3MThaFw0yNTA4MTMwOTU5MThaMDMxMTAvBgNV BAMTKDhCNEMwRjgyNEM3MjhCQzBGQUFCMTA4NDlBRDRERkU2ODQ5NTY4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+RD1yVKBLnHlMwnEQXGmsMqc QTYl1iFytMPfVhoIcsnJt8yscLU1fuOMh/PkqlWreAJaD0Wz5XL9y5EBaf/QUlum 20tcBUvSzbPlLE5nC7Vc9MkFNKbBTOrsw3jcu02UP48gU/5v8MPZog6lyfXgIRAy xrgBUHJSHmwEn351pz85fxqprr5laxprfz+ytC6DkdGts0BYshmmFhoia9VN0UnZ MgDWtCUNkz+vt3q8Tx/3+Bm9f6sQeBFB9Awdw++72ujBLoPp1TyP2DKB/LztxGaU eoYXQXiiEnSg7haK1C9ST8nmQqK9N7jcxGYE7ApNzSVZcakfJNwa8bN9yTptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi0wPgkxyi8D6qxCEmtTf5oSVaEMwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPwfUKpkUhIB9Pfy6aA+PYTDlJo13eS2KZP ikkxHEJVJt6hCKFInEmtuCLpN7QTVvACcpSyUi8hPqmZeAXS9FWfrmGmxgBc1I5t HMGK3YbDVYSvVOvFsWxGV+vx5kd9P3j2pzF69VDQYqnXoP2FTUaaMbnQNj05q0pv ZB3cPcIOGiXb3YYU1bkBVSXekD3rWE+mX6ZMDqeI+yMZyPX8axecULJoivJ0iYyg imWtcur+j0s+KACo+30KuYQTYztWjTjv12IXFdDhQl75Bi8Awv+1RPJ5apvHWyZE 205oqg77vmllO7VbaAV8PG0CSplRmHS+8jqDEK5bX88trUz2X4k= -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:14 2025 by rpki-client