$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: 5zCYBbACFk//A+66O3KD+syYIjOGlTbQZrejtbHleVo= Subject key identifier: 96:2C:C9:9A:4C:C6:C5:B1:AE:67:09:90:09:41:93:A3:FA:4D:11:7D Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 78AA89EFD794E02D8124DEE0B32592AB4BA2A409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0118 Signing time: Sat 09 Aug 2025 16:51:57 +0000 Manifest this update: Sat 09 Aug 2025 16:46:57 +0000 Manifest next update: Tue 12 Aug 2025 17:21:57 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: tzdtpaYBoqlZrg88RGk4Ics6mI8BKvKs3F8lLoDaM/I=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 17:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:aa:89:ef:d7:94:e0:2d:81:24:de:e0:b3:25:92:ab:4b:a2:a4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Aug 9 16:46:57 2025 GMT Not After : Aug 12 17:21:57 2025 GMT Subject: CN=962CC99A4CC6C5B1AE670990094193A3FA4D117D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:59:fa:a7:13:8c:2e:aa:c1:79:2c:86:b3: ae:d2:fe:c5:99:a0:84:6d:a9:28:34:aa:80:58:64: b7:03:1a:9a:da:6b:f8:2c:65:d5:3b:f9:7f:a7:fa: 7f:16:cf:33:c1:19:81:94:26:08:cf:b9:9a:97:5a: cb:c1:7f:5e:75:59:72:d2:ea:20:e2:56:fe:44:90: d5:5c:86:a5:89:3f:83:6a:63:75:eb:0d:e7:67:1c: c9:a6:0a:9b:7e:e4:54:de:12:da:ba:a4:59:b3:3e: 89:48:7e:3a:1d:af:2e:e6:38:b9:60:ad:7a:60:d3: 8f:28:a5:ea:d9:08:d6:e4:46:39:fe:35:e1:71:cf: 7c:89:b7:dd:de:5f:3b:18:0d:96:ca:8e:f0:e8:70: 6c:63:c1:7f:7b:65:9b:eb:b1:82:40:7c:6d:10:28: e3:f4:5b:3a:f0:5c:3d:ee:07:b8:f1:2e:df:d8:69: 36:6c:ba:0e:f0:27:d4:67:9b:5a:5a:4b:9d:c8:3b: 1c:5e:6c:78:08:a1:03:1d:38:84:bd:b9:17:d1:9d: 34:5c:da:c2:74:2c:05:92:d5:e7:5b:c9:5f:ce:df: 51:e4:a8:b5:5b:05:3d:ad:a2:e7:bb:b8:58:2f:76: dc:fa:aa:8d:6e:71:d5:b8:f5:73:dd:73:1c:97:36: bc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:C9:9A:4C:C6:C5:B1:AE:67:09:90:09:41:93:A3:FA:4D:11:7D X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:89:7a:4b:d2:ba:f2:40:40:b3:be:66:aa:11:ba:f8:e7:59: 83:ac:a8:ef:10:56:c6:f0:c0:72:06:74:20:dd:e7:0c:e5:51: 37:0f:0a:81:ac:47:67:9d:6d:00:40:5d:91:58:c2:e4:1f:bd: 84:5a:88:cc:05:e4:42:59:67:8c:b2:48:2f:42:b7:d6:7d:07: 3a:fb:0f:9c:54:80:01:e2:27:e8:4b:75:45:ec:69:1e:aa:95: 45:b6:0c:90:53:e4:8f:0d:f2:08:db:53:77:bc:e0:8f:8c:57: 88:06:fe:67:f3:3b:88:f7:b3:64:87:b7:cf:d1:d4:7b:4c:cb: 4c:27:03:67:c3:74:57:79:f6:3f:02:4d:f1:0f:c6:7e:26:95: d8:d7:78:0b:0c:2e:a4:6e:cc:a4:cc:f6:74:26:8f:8d:0f:a2: ac:d4:03:d7:9e:73:19:26:92:0d:63:b8:85:5d:fe:90:32:d2: 7c:96:49:bd:93:5b:c7:ea:45:e1:35:cd:d6:c7:5a:74:11:6c: b6:b7:c5:29:d3:83:03:69:cc:6c:de:a1:88:51:bc:24:f2:90: 2f:b9:7e:ba:a8:73:17:4d:e9:39:75:4c:d4:dc:61:0b:25:0b: ab:e0:d3:83:9f:3d:61:5c:17:19:d5:fe:ba:ec:be:d0:96:0c: e6:38:f9:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKqJ79eU4C2BJN7gsyWSq0uipAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA4MDkxNjQ2NTdaFw0yNTA4MTIxNzIxNTdaMDMxMTAvBgNV BAMTKDk2MkNDOTlBNENDNkM1QjFBRTY3MDk5MDA5NDE5M0EzRkE0RDExN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnFn6pxOMLqrBeSyGs67S/sWZ oIRtqSg0qoBYZLcDGpraa/gsZdU7+X+n+n8WzzPBGYGUJgjPuZqXWsvBf151WXLS 6iDiVv5EkNVchqWJP4NqY3XrDednHMmmCpt+5FTeEtq6pFmzPolIfjodry7mOLlg rXpg048operZCNbkRjn+NeFxz3yJt93eXzsYDZbKjvDocGxjwX97ZZvrsYJAfG0Q KOP0WzrwXD3uB7jxLt/YaTZsug7wJ9Rnm1paS53IOxxebHgIoQMdOIS9uRfRnTRc 2sJ0LAWS1edbyV/O31HkqLVbBT2toue7uFgvdtz6qo1ucdW49XPdcxyXNrzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlizJmkzGxbGuZwmQCUGTo/pNEX0wHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiJekvSuvJAQLO+ZqoRuvjnWYOsqO8QVsbw wHIGdCDd5wzlUTcPCoGsR2edbQBAXZFYwuQfvYRaiMwF5EJZZ4yySC9Ct9Z9Bzr7 D5xUgAHiJ+hLdUXsaR6qlUW2DJBT5I8N8gjbU3e84I+MV4gG/mfzO4j3s2SHt8/R 1HtMy0wnA2fDdFd59j8CTfEPxn4mldjXeAsMLqRuzKTM9nQmj40PoqzUA9eecxkm kg1juIVd/pAy0nyWSb2TW8fqReE1zdbHWnQRbLa3xSnTgwNpzGzeoYhRvCTykC+5 frqocxdN6Tl1TNTcYQslC6vg04OfPWFcFxnV/rrsvtCWDOY4+W8= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:14 2025 by rpki-client