$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: gWli2G4k96ofUQeUloPFY/9hJoy+oPEH4ozg76o0CI8= Subject key identifier: 57:8F:A2:F4:58:DD:82:0B:BA:EA:42:CE:E7:A7:29:1B:E2:55:6A:DC Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 212035FB426D7780F723857DDCDA1F8D8FDC72D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01B9 Signing time: Mon 21 Jul 2025 00:31:43 +0000 Manifest this update: Mon 21 Jul 2025 00:26:43 +0000 Manifest next update: Thu 24 Jul 2025 05:56:43 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: SM4n8dzpICu2HVOFwnGSBher9L3BoI8RB/Bj5VQwJn0=) 2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:20:35:fb:42:6d:77:80:f7:23:85:7d:dc:da:1f:8d:8f:dc:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Jul 21 00:26:43 2025 GMT Not After : Jul 24 05:56:43 2025 GMT Subject: CN=578FA2F458DD820BBAEA42CEE7A7291BE2556ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:c9:5d:6e:bd:1d:49:fe:37:39:d2:96:95: cb:c8:e3:d3:bf:e7:73:94:79:75:31:e3:77:cd:63: 5f:2d:c7:bd:9a:d5:1b:91:20:a5:25:8d:05:ce:4e: bd:7c:de:2b:f3:f8:7c:9d:29:be:84:3d:65:5a:81: a6:dd:f2:c1:6f:b6:a5:c3:17:74:2f:80:9c:07:8f: eb:13:e8:fa:9d:47:67:84:6e:6e:15:8d:c7:88:e7: c8:68:6b:ad:56:ca:53:e9:fa:6f:e7:94:24:30:0e: fb:bd:76:11:0d:30:3c:80:0f:d2:a6:7f:68:82:0e: 61:90:bb:50:92:0e:ee:02:ae:51:73:7e:f0:c8:92: 39:48:d5:3f:e3:a8:f9:8a:6b:ae:e0:33:7a:bf:0b: 1e:57:44:2f:e6:94:e2:1c:b1:f3:73:2e:2f:8b:17: c2:b3:e1:48:4a:d0:be:cc:17:fe:2a:03:1a:82:0c: 9b:d0:29:b6:76:9c:cc:e9:46:46:62:6f:48:0f:17: 5b:50:74:f6:3c:14:b2:98:83:d2:2e:4d:b8:f5:70: 0d:e5:64:0d:a4:e8:29:4d:f0:70:83:cf:23:91:c2: 6b:79:b6:10:e9:d6:db:29:4b:41:ad:9e:c8:8f:fc: 1f:ea:8a:9c:41:0b:e3:b7:85:7c:1e:d8:59:45:9a: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8F:A2:F4:58:DD:82:0B:BA:EA:42:CE:E7:A7:29:1B:E2:55:6A:DC X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c2:aa:ec:67:07:c0:5d:44:b6:c6:bc:5d:36:72:2f:3b:ef: 4c:65:77:97:5e:3f:7d:f0:42:5d:18:54:8c:ef:a4:e5:02:4d: e2:e4:3a:14:a7:fc:15:74:9e:6b:6b:cf:8f:57:0f:91:69:2a: 15:e9:24:f6:80:39:a5:1a:af:14:35:e3:bc:02:8c:d6:ef:71: c7:57:0e:a3:6c:ca:71:17:f2:3d:c9:2d:fb:40:32:48:2a:f4: 71:21:0b:74:5e:fd:7f:0b:6f:f9:b4:e1:8c:5a:a4:0a:6b:14: f8:74:1e:1c:b9:cf:75:f5:71:8c:e0:57:a9:4b:74:09:be:89: aa:c8:84:67:b0:03:bf:cb:13:3a:d0:78:92:28:06:3a:4b:94: 7b:9d:24:77:1e:ec:5e:43:22:fe:79:f3:a5:4f:22:ba:84:b5: 78:0d:9e:e1:0b:cf:36:58:31:83:d6:9e:6f:39:dc:72:51:d4: 48:ee:cd:e4:57:b3:8e:c4:ff:72:16:71:e1:53:8a:d0:45:06: 00:0d:31:ef:5d:00:14:1e:d4:76:2c:d5:21:df:0f:d4:3a:b6: 09:d3:64:a0:31:c1:ac:8d:80:25:8b:11:e6:53:b5:99:81:43: fe:4e:88:76:57:2d:7a:bc:46:f2:eb:4e:9c:17:41:00:78:75: 03:22:9e:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISA1+0Jtd4D3I4V93NofjY/cctAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA3MjEwMDI2NDNaFw0yNTA3MjQwNTU2NDNaMDMxMTAvBgNV BAMTKDU3OEZBMkY0NThERDgyMEJCQUVBNDJDRUU3QTcyOTFCRTI1NTZBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa58ldbr0dSf43OdKWlcvI49O/ 53OUeXUx43fNY18tx72a1RuRIKUljQXOTr183ivz+HydKb6EPWVagabd8sFvtqXD F3QvgJwHj+sT6PqdR2eEbm4VjceI58hoa61WylPp+m/nlCQwDvu9dhENMDyAD9Km f2iCDmGQu1CSDu4CrlFzfvDIkjlI1T/jqPmKa67gM3q/Cx5XRC/mlOIcsfNzLi+L F8Kz4UhK0L7MF/4qAxqCDJvQKbZ2nMzpRkZib0gPF1tQdPY8FLKYg9IuTbj1cA3l ZA2k6ClN8HCDzyORwmt5thDp1tspS0GtnsiP/B/qipxBC+O3hXwe2FlFmhYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4+i9Fjdggu66kLO56cpG+JVatwwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/CquxnB8BdRLbGvF02ci8770xld5deP33w Ql0YVIzvpOUCTeLkOhSn/BV0nmtrz49XD5FpKhXpJPaAOaUarxQ147wCjNbvccdX DqNsynEX8j3JLftAMkgq9HEhC3Re/X8Lb/m04YxapAprFPh0Hhy5z3X1cYzgV6lL dAm+iarIhGewA7/LEzrQeJIoBjpLlHudJHce7F5DIv5586VPIrqEtXgNnuELzzZY MYPWnm853HJR1EjuzeRXs47E/3IWceFTitBFBgANMe9dABQe1HYs1SHfD9Q6tgnT ZKAxwayNgCWLEeZTtZmBQ/5OiHZXLXq8RvLrTpwXQQB4dQMiniE= -----END CERTIFICATE-----Generated at Mon Jul 21 13:05:05 2025 by rpki-client