$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: bm/15avWqYD6Dfp3yglSS1RbZD33f+5xXNKrx0OPPZ4= Subject key identifier: B7:31:C5:04:85:57:55:B9:1F:EF:44:A7:6A:6E:AA:84:AD:8C:B6:0D Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 469BFA1B00EAC8BEFDE3BB1AF45F543588EDC3FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 0206 Signing time: Sat 19 Jul 2025 22:41:46 +0000 Manifest this update: Sat 19 Jul 2025 22:36:46 +0000 Manifest next update: Wed 23 Jul 2025 05:35:46 +0000 Files and hashes: 1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: bu4LtbxxfvYhSmPVYXsHJnQ8u6QDASxNerDLPSby9+A=) 2: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: yr1/BIagkge6WS64MXI0BE4S513+N4j4fcEZVx5q8FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9b:fa:1b:00:ea:c8:be:fd:e3:bb:1a:f4:5f:54:35:88:ed:c3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: Jul 19 22:36:46 2025 GMT Not After : Jul 23 05:35:46 2025 GMT Subject: CN=B731C504855755B91FEF44A76A6EAA84AD8CB60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:76:ed:03:49:2a:48:c1:9b:f6:fd:18:3d: 8b:91:54:06:20:e0:5a:55:a6:0a:63:e0:ee:a1:02: eb:d3:59:84:c4:73:3e:f2:2c:89:b8:43:c0:ca:25: 40:91:b8:47:f4:47:42:81:f3:28:25:22:88:91:2b: c0:9c:85:d7:65:94:52:49:2d:85:3b:00:3f:92:16: 1a:16:83:20:78:c8:51:a1:0d:40:20:c5:df:75:91: 46:db:b2:f3:ba:5c:8b:93:29:04:16:89:70:ff:b5: 29:0f:b3:e3:4e:e7:aa:99:2e:a3:47:57:12:17:e4: 7c:eb:91:c7:6c:0e:4b:af:26:56:99:30:1d:3e:78: 60:1d:83:5f:92:b2:09:9c:e0:11:0c:3e:ab:8b:d5: 1e:c3:fd:4a:8c:3e:93:55:8a:25:2a:f4:ff:b0:43: 0a:22:9e:ec:bb:12:04:d7:dd:f2:3c:2d:9d:27:69: a7:46:6b:01:82:36:48:38:53:e8:13:7c:58:4e:98: 59:9e:57:82:e4:f9:c9:ad:90:b4:e5:06:db:3c:cc: 8d:1c:c3:96:ea:de:d7:5c:bf:a9:0e:f5:cb:43:44: a3:a6:02:5b:34:2e:33:b7:d5:37:5b:88:9b:08:5a: 4d:6d:ba:3b:b3:f7:be:31:40:7e:d4:78:e2:e7:b0: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:C5:04:85:57:55:B9:1F:EF:44:A7:6A:6E:AA:84:AD:8C:B6:0D X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0f:7c:dd:89:3a:2b:33:90:13:e5:e9:37:c8:18:54:76:f1: e8:30:49:a6:64:12:d7:98:2b:65:ed:61:d9:ba:af:93:eb:b2: e1:10:c4:ad:b3:a8:cb:64:0a:ce:60:01:27:1e:3c:4f:34:a0: ff:5c:9b:b7:fd:0f:68:fb:c9:f8:94:c1:59:c6:29:e2:88:5c: d2:8a:ce:72:d2:d0:dc:aa:a7:83:f6:db:c7:6f:8c:7b:cb:e8: 3d:92:20:57:16:21:ad:bd:71:d6:61:5d:46:e6:96:a9:5e:6d: f5:46:32:4c:35:ca:a9:53:8d:a0:d9:f8:f9:29:ad:26:b0:97: 94:01:15:32:64:0b:93:16:58:43:4a:8f:90:31:ce:19:1e:59: 30:af:0d:6a:25:5a:c6:03:11:fb:58:9a:25:fc:41:3e:07:b6: 33:87:3c:af:23:8a:40:a5:19:87:bb:4c:a5:1b:92:be:17:4f: 49:fb:9b:37:b6:9f:16:c0:f2:f8:e7:db:98:44:97:b2:b4:20: 33:96:7a:d4:bf:9b:71:7a:e4:b1:ef:97:65:27:4c:01:64:5d: 56:96:d6:30:1e:ed:74:a5:4b:74:07:3f:b5:1a:18:00:37:d4: 2b:e9:56:32:1f:fe:e6:5d:dd:ab:b9:fd:7f:ac:d9:f1:63:38: b5:ac:31:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpv6GwDqyL7947sa9F9UNYjtw/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNTA3MTkyMjM2NDZaFw0yNTA3MjMwNTM1NDZaMDMxMTAvBgNV BAMTKEI3MzFDNTA0ODU1NzU1QjkxRkVGNDRBNzZBNkVBQTg0QUQ4Q0I2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RXbtA0kqSMGb9v0YPYuRVAYg 4FpVpgpj4O6hAuvTWYTEcz7yLIm4Q8DKJUCRuEf0R0KB8yglIoiRK8CchddllFJJ LYU7AD+SFhoWgyB4yFGhDUAgxd91kUbbsvO6XIuTKQQWiXD/tSkPs+NO56qZLqNH VxIX5HzrkcdsDkuvJlaZMB0+eGAdg1+Ssgmc4BEMPquL1R7D/UqMPpNViiUq9P+w Qwoinuy7EgTX3fI8LZ0naadGawGCNkg4U+gTfFhOmFmeV4Lk+cmtkLTlBts8zI0c w5bq3tdcv6kO9ctDRKOmAls0LjO31TdbiJsIWk1tujuz974xQH7UeOLnsMCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtzHFBIVXVbkf70Snam6qhK2Mtg0wHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIPfN2JOiszkBPl6TfIGFR28egwSaZkEteY K2XtYdm6r5PrsuEQxK2zqMtkCs5gAScePE80oP9cm7f9D2j7yfiUwVnGKeKIXNKK znLS0Nyqp4P228dvjHvL6D2SIFcWIa29cdZhXUbmlqlebfVGMkw1yqlTjaDZ+Pkp rSawl5QBFTJkC5MWWENKj5AxzhkeWTCvDWolWsYDEftYmiX8QT4HtjOHPK8jikCl GYe7TKUbkr4XT0n7mze2nxbA8vjn25hEl7K0IDOWetS/m3F65LHvl2UnTAFkXVaW 1jAe7XSlS3QHP7UaGAA31CvpVjIf/uZd3au5/X+s2fFjOLWsMb0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:41 2025 by rpki-client