$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: rsK4bFjoQUvGw6lWpkxEQCvIwPKjPmCNg1HbasRTV1w= Subject key identifier: D0:D2:8C:DC:C5:27:F7:5B:C5:7E:39:4B:D3:16:61:29:6B:68:84:64 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 42C421A5350B3557EE3B12AC1827EA1A13054483 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: 5A Signing time: Sun 20 Jul 2025 05:32:10 +0000 Manifest this update: Sun 20 Jul 2025 05:27:10 +0000 Manifest next update: Wed 23 Jul 2025 07:03:10 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc=) 2: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: 4DEpUuXOKhm7tD2qi523sZRcfOYdMSe+Zqjt2/0idgA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c4:21:a5:35:0b:35:57:ee:3b:12:ac:18:27:ea:1a:13:05:44:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Jul 20 05:27:10 2025 GMT Not After : Jul 23 07:03:10 2025 GMT Subject: CN=D0D28CDCC527F75BC57E394BD31661296B688464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:35:3a:de:24:66:89:70:b2:31:2e:08:77: 25:b3:12:dd:b1:da:da:a6:78:4b:6e:f1:47:16:e2: c3:bb:cd:f0:82:c9:57:cc:a6:7d:d6:43:94:90:16: 3e:95:53:db:38:dc:18:47:28:4e:a2:b8:f6:78:2e: b3:5d:9b:ae:d6:81:c0:4c:41:5e:f5:ff:25:56:58: d3:bd:fc:b3:c6:eb:b1:7b:b2:14:5a:2e:a9:4f:72: ff:29:f8:a6:85:c6:b0:53:33:1a:89:78:99:18:e2: bb:a9:f0:56:fa:b3:05:b2:d5:63:49:26:3c:2c:17: c3:e9:83:aa:23:a8:34:39:5d:0a:0d:a8:02:b1:e5: dc:7a:00:9c:8a:fa:f5:ae:49:b3:24:bb:68:35:40: a8:8c:82:11:ec:00:21:65:d8:36:6b:fd:1f:b2:ac: 1b:71:f8:26:e9:03:5c:b2:cf:3a:e5:1c:bc:e2:1f: 3a:d3:a6:b7:c6:3a:74:7c:71:2b:03:55:d0:a0:83: 52:1c:c8:fd:4a:98:88:e6:f6:83:ac:cb:20:ff:6f: fd:35:d4:e0:04:1b:18:17:a0:dd:25:2f:54:25:e6: da:d7:46:24:ad:12:8a:6e:35:b5:b0:b4:bd:8b:9a: 8b:76:a2:cd:07:9e:9a:43:9c:eb:59:75:72:18:be: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D2:8C:DC:C5:27:F7:5B:C5:7E:39:4B:D3:16:61:29:6B:68:84:64 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c0:8a:b3:27:b7:21:8c:5c:34:2e:ef:7d:81:6b:c2:b8:88: 95:97:bb:e4:9e:0b:8a:fc:3a:de:ed:5f:05:bf:93:de:d8:43: c8:6c:2d:8e:4b:c1:e6:37:bd:13:00:87:85:1b:ae:e5:f8:0c: 2b:60:7a:4b:59:7e:68:b9:ba:22:af:42:bb:2b:7c:c9:d8:6a: d3:6f:ad:e2:41:c1:9b:31:9c:a9:13:08:7a:e7:ac:a9:05:e3: a1:27:f5:69:44:0c:fc:2c:40:c3:c5:0b:c9:7f:5b:e3:5d:23: 73:d3:5d:1e:8b:73:3e:0a:81:a5:a9:b6:84:97:e7:a1:36:af: 04:2e:52:a9:53:03:0e:87:76:c8:73:19:7c:5d:bb:dd:5e:98: ce:23:b8:1f:8f:2a:4c:af:80:61:b5:bb:09:d2:01:8b:b0:4e: 0e:33:24:4d:42:d6:27:73:c2:7a:e5:a2:78:ae:82:1c:f3:fa: 66:bb:c1:92:dd:dd:e9:93:b9:9c:93:58:85:9d:de:8c:e7:5f: b3:22:56:97:9f:f9:f6:ef:72:10:7c:42:7b:cc:48:f8:e4:ae: 60:44:7f:90:09:7f:e2:c9:bc:3d:f9:fc:3e:ae:f4:9e:11:ea: 9b:93:7b:cc:27:c3:5e:8a:98:22:9a:4b:77:32:5b:4e:84:93: 64:aa:c2:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQsQhpTULNVfuOxKsGCfqGhMFRIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTA3MjAwNTI3MTBaFw0yNTA3MjMwNzAzMTBaMDMxMTAvBgNV BAMTKEQwRDI4Q0RDQzUyN0Y3NUJDNTdFMzk0QkQzMTY2MTI5NkI2ODg0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hTU63iRmiXCyMS4IdyWzEt2x 2tqmeEtu8UcW4sO7zfCCyVfMpn3WQ5SQFj6VU9s43BhHKE6iuPZ4LrNdm67WgcBM QV71/yVWWNO9/LPG67F7shRaLqlPcv8p+KaFxrBTMxqJeJkY4rup8Fb6swWy1WNJ JjwsF8Ppg6ojqDQ5XQoNqAKx5dx6AJyK+vWuSbMku2g1QKiMghHsACFl2DZr/R+y rBtx+CbpA1yyzzrlHLziHzrTprfGOnR8cSsDVdCgg1IcyP1KmIjm9oOsyyD/b/01 1OAEGxgXoN0lL1Ql5trXRiStEopuNbWwtL2Lmot2os0HnppDnOtZdXIYvn05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0NKM3MUn91vFfjlL0xZhKWtohGQwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXAirMntyGMXDQu732Ba8K4iJWXu+SeC4r8 Ot7tXwW/k97YQ8hsLY5LweY3vRMAh4UbruX4DCtgektZfmi5uiKvQrsrfMnYatNv reJBwZsxnKkTCHrnrKkF46En9WlEDPwsQMPFC8l/W+NdI3PTXR6Lcz4KgaWptoSX 56E2rwQuUqlTAw6HdshzGXxdu91emM4juB+PKkyvgGG1uwnSAYuwTg4zJE1C1idz wnrloniughzz+ma7wZLd3emTuZyTWIWd3oznX7MiVpef+fbvchB8QnvMSPjkrmBE f5AJf+LJvD35/D6u9J4R6puTe8wnw16KmCKaS3cyW06Ek2Sqwr0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:08 2025 by rpki-client