$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: OWuqM1+hLHbaLV1C+je2Go3ZQRWK+ZCDw3PR6rowUmU= Subject key identifier: 9B:97:ED:69:96:FD:D5:48:F3:9F:72:B7:87:6D:E4:07:4F:19:A3:11 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 3CA662FB1C1E470B88AFF3720937D993B26FE046 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01CA Signing time: Wed 06 Aug 2025 12:52:24 +0000 Manifest this update: Wed 06 Aug 2025 12:47:24 +0000 Manifest next update: Sat 09 Aug 2025 17:16:24 +0000 Files and hashes: 1: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: QnNCoFfpgDcoFlRnBPDa3ujiR4JMkvjnH6IZoNT+6Rs=) 3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a6:62:fb:1c:1e:47:0b:88:af:f3:72:09:37:d9:93:b2:6f:e0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Aug 6 12:47:24 2025 GMT Not After : Aug 9 17:16:24 2025 GMT Subject: CN=9B97ED6996FDD548F39F72B7876DE4074F19A311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:58:76:55:56:29:0a:e6:08:e7:f3:b9:61:a3: d8:1f:12:71:e5:18:b1:ca:00:d1:a2:80:84:b6:ab: 80:d2:c8:c0:c8:42:c6:dc:35:29:d1:6a:aa:69:6c: 4a:67:f8:59:3b:c0:c0:de:4d:20:0c:f0:ea:fc:7d: 18:3d:ef:80:6c:b6:49:27:dd:5b:f5:3c:2c:5a:87: dd:e1:10:c2:5b:84:77:16:3e:2a:9f:d1:17:69:c3: fd:cb:cc:40:51:60:72:12:e8:17:48:81:fe:ac:6d: 0f:7e:c2:c1:99:8b:dd:a7:b0:b2:5f:6b:77:6e:5f: 5f:5e:41:08:26:bd:c2:0c:cb:59:31:de:20:90:87: 8c:eb:a2:7f:86:ac:55:c9:78:cb:fc:a0:b6:25:f9: 25:f5:a9:45:df:38:9a:ef:ba:59:15:96:d5:d9:11: d0:16:6d:09:ff:ec:1a:48:a6:ec:2f:80:63:42:c5: 3c:fb:18:14:51:60:88:22:43:6f:88:46:3b:e2:1d: c9:83:9a:f3:97:5d:a7:f8:26:ee:1d:cf:e6:37:45: 79:37:9d:16:d4:07:c5:7b:50:5c:83:f4:ec:5e:78: ac:ae:ac:40:1c:e5:ee:8c:c8:08:ae:b7:2a:d1:1c: 39:5a:94:1e:52:dd:69:5c:05:5e:41:ad:8a:38:a4: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:ED:69:96:FD:D5:48:F3:9F:72:B7:87:6D:E4:07:4F:19:A3:11 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:ab:19:8b:26:b4:80:3b:ab:da:6c:a2:07:7e:c9:05:9f: 98:76:d3:97:73:bf:9d:d9:3d:8a:f4:a1:2c:61:89:6a:49:be: 3f:8c:3d:11:8e:f0:81:11:0d:1d:57:f7:2b:ed:37:39:7a:cf: b1:18:be:43:ab:fe:64:2a:08:30:78:d6:72:3f:d2:c8:bb:e6: b7:2a:b6:f6:0b:51:86:6b:33:3d:5c:03:cd:cf:95:d2:c6:3e: 77:a7:7a:59:90:7b:c9:c0:0b:46:3a:61:e1:04:0f:e2:05:65: c8:fb:9f:7c:96:e8:c6:51:e2:0e:68:ed:46:66:76:07:57:dc: e0:94:9a:ae:07:75:57:4c:62:17:af:b1:e5:5e:96:7c:28:7d: 31:b6:d8:27:09:79:38:a5:46:00:9f:cb:f2:a0:9b:2d:d3:ad: 9c:b9:a7:42:49:ba:ec:7e:73:87:d2:70:1a:5e:c9:d9:c8:34: 5e:33:a1:80:c1:0b:67:6b:7c:b5:d8:94:9c:cb:15:b0:c5:65: 53:2f:54:c3:c3:b0:7b:60:b5:3d:d1:71:8f:d1:72:a5:56:b6: 10:62:ac:cc:70:58:7b:87:9e:c2:75:47:f4:f2:be:9e:26:3b: 6c:c5:4c:a5:a2:e1:1c:4a:a4:82:96:ab:6f:8a:a7:ed:91:42: 17:c4:e3:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKZi+xweRwuIr/NyCTfZk7Jv4EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA4MDYxMjQ3MjRaFw0yNTA4MDkxNzE2MjRaMDMxMTAvBgNV BAMTKDlCOTdFRDY5OTZGREQ1NDhGMzlGNzJCNzg3NkRFNDA3NEYxOUEzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWHZVVikK5gjn87lho9gfEnHl GLHKANGigIS2q4DSyMDIQsbcNSnRaqppbEpn+Fk7wMDeTSAM8Or8fRg974Bstkkn 3Vv1PCxah93hEMJbhHcWPiqf0Rdpw/3LzEBRYHIS6BdIgf6sbQ9+wsGZi92nsLJf a3duX19eQQgmvcIMy1kx3iCQh4zron+GrFXJeMv8oLYl+SX1qUXfOJrvulkVltXZ EdAWbQn/7BpIpuwvgGNCxTz7GBRRYIgiQ2+IRjviHcmDmvOXXaf4Ju4dz+Y3RXk3 nRbUB8V7UFyD9OxeeKyurEAc5e6MyAiutyrRHDlalB5S3WlcBV5BrYo4pDZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm5ftaZb91Ujzn3K3h23kB08ZoxEwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmuqxmLJrSAO6vabKIHfskFn5h205dzv53Z PYr0oSxhiWpJvj+MPRGO8IERDR1X9yvtNzl6z7EYvkOr/mQqCDB41nI/0si75rcq tvYLUYZrMz1cA83PldLGPnenelmQe8nAC0Y6YeEED+IFZcj7n3yW6MZR4g5o7UZm dgdX3OCUmq4HdVdMYhevseVelnwofTG22CcJeTilRgCfy/Kgmy3TrZy5p0JJuux+ c4fScBpeydnINF4zoYDBC2drfLXYlJzLFbDFZVMvVMPDsHtgtT3RcY/RcqVWthBi rMxwWHuHnsJ1R/Tyvp4mO2zFTKWi4RxKpIKWq2+Kp+2RQhfE450= -----END CERTIFICATE-----Generated at Fri Aug 8 10:19:38 2025 by rpki-client