$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: LIuWVjaUt/AFHfuPXNaKLFUUkEHnjRHsfy7YOt4qqPU= Subject key identifier: 78:40:75:FC:96:95:73:5F:CA:BA:37:7D:57:35:2E:62:72:D7:9B:22 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 2DBE79CBA4DCACE0FABB01F6F78E08B1C22A9D43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0101 Signing time: Tue 17 Jun 2025 17:41:59 +0000 Manifest this update: Tue 17 Jun 2025 17:36:59 +0000 Manifest next update: Sat 21 Jun 2025 02:17:59 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: CIj0bBqtNXg7B2537pvuUz0v1hhDNbuRkGijNA2v+XI=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 02:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:be:79:cb:a4:dc:ac:e0:fa:bb:01:f6:f7:8e:08:b1:c2:2a:9d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Jun 17 17:36:59 2025 GMT Not After : Jun 21 02:17:59 2025 GMT Subject: CN=784075FC9695735FCABA377D57352E6272D79B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:7a:15:03:b8:f5:aa:df:7f:ef:7e:59:67: bf:81:ce:42:8f:71:9a:4c:30:b0:64:b6:7d:60:e0: 33:18:b8:4d:d8:10:c9:86:e1:a1:06:f9:f1:b1:42: 92:ef:ba:e6:5a:2e:8d:cf:b9:67:1a:6b:b5:48:37: d0:b4:1a:21:23:f7:1b:88:be:9a:87:21:6d:d6:cb: fc:90:10:97:31:96:73:3f:b7:15:f8:0b:cd:25:1c: 19:32:da:bf:3c:4c:de:46:15:90:85:86:98:f1:80: 5c:70:3c:72:d6:2f:17:7b:80:c8:46:88:8b:aa:38: eb:ee:0e:e2:79:8f:61:b1:12:2c:52:e0:10:36:a7: 1c:89:41:b9:ea:50:86:ae:f8:18:3e:63:ab:eb:a5: a8:56:13:2b:36:ae:f9:cc:46:4d:b3:8b:d7:45:20: 8a:73:87:af:63:05:18:76:2d:25:ff:39:d7:59:66: 09:ec:34:39:dd:93:b0:9e:7b:6f:62:bf:87:65:de: af:55:b2:a7:fb:73:65:72:59:9d:d6:43:6d:b8:1c: 48:77:b8:9b:ef:bc:84:85:f7:a9:b9:a0:2d:7a:93: 2c:a8:71:af:ee:1d:f1:ba:09:e3:f8:75:94:21:2e: 16:4f:c4:7e:62:f0:59:f5:2e:09:98:cb:a4:bd:90: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:40:75:FC:96:95:73:5F:CA:BA:37:7D:57:35:2E:62:72:D7:9B:22 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0e:a6:7d:d4:83:48:9f:cb:59:f4:af:83:21:fe:19:90:f4: ae:2a:ac:3c:87:81:5c:79:0a:93:76:1c:27:d1:2c:75:6a:7d: d2:ba:31:af:ec:a6:fd:71:4f:21:32:02:f5:99:dc:e3:d2:d6: 9b:c3:00:ac:e6:6d:01:9c:c5:fb:ef:05:5d:18:6a:4c:ae:95: ba:ea:3b:32:13:1e:51:3e:77:18:e0:f0:05:86:50:bd:33:67: 4b:5f:a1:7b:ba:fd:20:0d:cb:8f:34:3b:50:a8:62:7b:51:cd: 12:ec:57:43:75:9d:01:01:a1:9d:57:22:f7:c4:b2:0d:1e:a3: f0:dd:63:70:22:c1:ca:59:59:6c:b9:fe:e4:41:6d:d1:10:0c: 6b:0e:e7:c3:9a:8d:8b:88:54:18:35:8d:85:0b:12:22:1f:de: 56:8b:de:ab:c6:dd:b5:19:01:8d:5c:23:47:5a:50:dc:b4:ab: 30:30:ed:7f:c6:00:f2:50:b1:1a:46:e2:8a:32:a5:d5:a4:1e: 74:3d:d9:76:90:cc:ee:40:7c:81:73:89:9d:93:65:7c:7d:c5: c8:6d:19:18:77:84:0f:62:fe:69:3b:2f:c5:60:c1:6d:74:f1: 9e:4b:dc:be:15:fb:73:cf:9a:ad:28:49:a2:0b:05:7d:5e:dc: 1c:b9:fe:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULb55y6TcrOD6uwH2944IscIqnUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA2MTcxNzM2NTlaFw0yNTA2MjEwMjE3NTlaMDMxMTAvBgNV BAMTKDc4NDA3NUZDOTY5NTczNUZDQUJBMzc3RDU3MzUyRTYyNzJENzlCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/XoVA7j1qt9/735ZZ7+BzkKP cZpMMLBktn1g4DMYuE3YEMmG4aEG+fGxQpLvuuZaLo3PuWcaa7VIN9C0GiEj9xuI vpqHIW3Wy/yQEJcxlnM/txX4C80lHBky2r88TN5GFZCFhpjxgFxwPHLWLxd7gMhG iIuqOOvuDuJ5j2GxEixS4BA2pxyJQbnqUIau+Bg+Y6vrpahWEys2rvnMRk2zi9dF IIpzh69jBRh2LSX/OddZZgnsNDndk7Cee29iv4dl3q9Vsqf7c2VyWZ3WQ224HEh3 uJvvvISF96m5oC16kyyoca/uHfG6CeP4dZQhLhZPxH5i8Fn1LgmYy6S9kIajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEB1/JaVc1/Kujd9VzUuYnLXmyIwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsOpn3Ug0ify1n0r4Mh/hmQ9K4qrDyHgVx5 CpN2HCfRLHVqfdK6Ma/spv1xTyEyAvWZ3OPS1pvDAKzmbQGcxfvvBV0Yakyulbrq OzITHlE+dxjg8AWGUL0zZ0tfoXu6/SANy480O1CoYntRzRLsV0N1nQEBoZ1XIvfE sg0eo/DdY3AiwcpZWWy5/uRBbdEQDGsO58OajYuIVBg1jYULEiIf3laL3qvG3bUZ AY1cI0daUNy0qzAw7X/GAPJQsRpG4ooypdWkHnQ92XaQzO5AfIFziZ2TZXx9xcht GRh3hA9i/mk7L8VgwW108Z5L3L4V+3PPmq0oSaILBX1e3By5/uA= -----END CERTIFICATE-----Generated at Tue Jun 17 20:37:30 2025 by rpki-client