$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: TE0JmNi8Mc9MeE/ZBaBDH5PYn6M0FBOuAuEXIYGsSXc= Subject key identifier: 75:DF:1B:21:AB:D1:7A:08:5C:9E:5C:8E:4F:38:80:F7:90:FB:5B:53 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 1A83EFEF1D9FAE90CE8B6CCD30E95AA91B1B3237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 013F Signing time: Tue 04 Nov 2025 00:51:58 +0000 Manifest this update: Tue 04 Nov 2025 00:46:58 +0000 Manifest next update: Fri 07 Nov 2025 05:08:58 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) 2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: Xe4VKX/co3UIiYc3QS5ieSCcJ+fajMKHp+AyBzM2tDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:83:ef:ef:1d:9f:ae:90:ce:8b:6c:cd:30:e9:5a:a9:1b:1b:32:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Nov 4 00:46:58 2025 GMT Not After : Nov 7 05:08:58 2025 GMT Subject: CN=75DF1B21ABD17A085C9E5C8E4F3880F790FB5B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:59:b1:67:e6:d9:30:8e:76:27:1c:df:5e: 53:f9:31:5c:1a:f1:74:01:0d:dc:2c:52:d4:34:95: f1:24:88:21:bf:c2:03:e4:08:de:ae:a7:99:ee:4b: 9d:0a:15:f7:c6:21:71:dd:db:4a:d9:3a:58:67:88: fc:02:77:00:13:0c:b4:38:30:b3:3d:a0:db:0c:a5: 33:43:c4:0b:28:58:05:73:98:4a:9f:1a:9a:ee:9a: 8c:05:83:84:ac:04:7b:58:c4:62:59:25:f6:4d:53: c8:1a:cf:85:2c:bf:e1:69:5d:8b:34:d7:08:2c:c5: d8:79:63:ca:66:66:74:84:e7:0f:5d:4d:da:86:79: 56:1e:f1:42:cd:64:b9:2b:cd:35:ec:4f:ee:59:c3: 8d:5c:81:27:c2:b3:a4:55:21:e4:22:a6:1f:b4:e2: 60:21:b1:f5:c1:14:a2:18:8c:59:49:c7:a7:c9:60: 57:6e:e5:08:ab:bb:46:e0:99:fe:d9:93:1b:0b:ae: d3:b2:87:9f:ad:ae:05:c6:bd:f7:8b:b8:1a:b1:c5: 4e:c7:86:59:06:3d:a3:12:61:d3:80:e4:ba:b2:fd: 6a:f7:db:d8:fc:73:89:76:ce:25:f3:07:3f:0c:b5: 84:3a:6d:fc:a8:6a:46:0e:01:56:cf:d9:1f:ef:d4: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:1B:21:AB:D1:7A:08:5C:9E:5C:8E:4F:38:80:F7:90:FB:5B:53 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:33:89:df:76:dc:ba:c8:2b:4e:fb:a4:a5:7b:21:a3:f9:0c: 05:53:e2:76:80:0d:1a:24:28:dd:47:4d:48:5d:6a:02:d5:4e: e8:05:b5:80:73:ed:c3:f9:e2:43:d8:6f:6b:7a:8f:31:bf:d4: 50:b7:19:90:5a:ee:14:e0:35:3a:1a:15:c0:20:1e:3b:60:82: de:0a:3e:c6:17:de:6c:eb:21:c6:6b:df:ac:d2:67:73:f5:3d: 35:b2:97:bd:5c:36:d2:99:47:e0:b7:ff:79:30:d3:53:3c:67: ad:4d:26:87:db:ed:bc:88:9d:e4:f6:c4:81:8b:5b:47:7d:07: df:d8:ad:46:18:65:a0:ff:cb:74:91:c2:3e:a0:bd:05:a4:d9: f4:49:cf:b1:34:dc:a0:bb:4d:31:f8:db:7e:dc:51:5e:bc:89: 40:59:af:a8:2e:58:9c:9f:e2:60:1c:0b:e8:db:ac:25:0e:91: fe:66:75:bc:27:1b:1e:82:ad:85:a4:dc:5d:ae:59:99:66:ec: 3b:fe:5a:90:36:a9:76:18:89:29:33:dc:01:61:11:16:b0:47: d7:25:43:e7:57:45:70:f4:3b:d3:d2:30:92:d4:65:8a:a5:8e: 4a:de:2b:e7:0f:be:14:8a:7a:fa:22:b2:4f:56:5d:ec:cc:da: 52:57:ff:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoPv7x2frpDOi2zNMOlaqRsbMjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTExMDQwMDQ2NThaFw0yNTExMDcwNTA4NThaMDMxMTAvBgNV BAMTKDc1REYxQjIxQUJEMTdBMDg1QzlFNUM4RTRGMzg4MEY3OTBGQjVCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9lmxZ+bZMI52JxzfXlP5MVwa 8XQBDdwsUtQ0lfEkiCG/wgPkCN6up5nuS50KFffGIXHd20rZOlhniPwCdwATDLQ4 MLM9oNsMpTNDxAsoWAVzmEqfGprumowFg4SsBHtYxGJZJfZNU8gaz4Usv+FpXYs0 1wgsxdh5Y8pmZnSE5w9dTdqGeVYe8ULNZLkrzTXsT+5Zw41cgSfCs6RVIeQiph+0 4mAhsfXBFKIYjFlJx6fJYFdu5Qiru0bgmf7ZkxsLrtOyh5+trgXGvfeLuBqxxU7H hlkGPaMSYdOA5Lqy/Wr329j8c4l2ziXzBz8MtYQ6bfyoakYOAVbP2R/v1BmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdd8bIavReghcnlyOTziA95D7W1MwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYzid923LrIK077pKV7IaP5DAVT4naADRok KN1HTUhdagLVTugFtYBz7cP54kPYb2t6jzG/1FC3GZBa7hTgNToaFcAgHjtggt4K PsYX3mzrIcZr36zSZ3P1PTWyl71cNtKZR+C3/3kw01M8Z61NJofb7byIneT2xIGL W0d9B9/YrUYYZaD/y3SRwj6gvQWk2fRJz7E03KC7TTH4237cUV68iUBZr6guWJyf 4mAcC+jbrCUOkf5mdbwnGx6CrYWk3F2uWZlm7Dv+WpA2qXYYiSkz3AFhERawR9cl Q+dXRXD0O9PSMJLUZYqljkreK+cPvhSKevoisk9WXezM2lJX/+Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:47 2025 by rpki-client