$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json) Hash identifier: IacJnWyXLproGNiQFJbfSwFYO3o/ubYuWeBGkHfsaKo= Subject key identifier: C9:1C:15:3F:A7:34:F3:77:C5:5C:24:A8:C8:C1:C8:6D:C0:DF:00:D5 Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Certificate serial: 6FD646CEEA03805F4CDC5A8A1EA6304A9EAF4B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft Manifest number: 021E Signing time: Sat 19 Jul 2025 19:52:06 +0000 Manifest this update: Sat 19 Jul 2025 19:47:06 +0000 Manifest next update: Tue 22 Jul 2025 20:09:06 +0000 Files and hashes: 1: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: Ytn4J3L//ntkx3dIdir2Ut4ptmhaS3TkbsBspKupuTk=) 2: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: C5Q79kp4QrZRLAtZyAF8ew/3n1xKU/Kd0+iRX7hCCOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d6:46:ce:ea:03:80:5f:4c:dc:5a:8a:1e:a6:30:4a:9e:af:4b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Validity Not Before: Jul 19 19:47:06 2025 GMT Not After : Jul 22 20:09:06 2025 GMT Subject: CN=C91C153FA734F377C55C24A8C8C1C86DC0DF00D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:3b:2b:29:9c:3f:c1:4e:86:ba:10:59:34: 99:7b:71:96:9a:b6:96:07:f3:dd:9d:c4:ba:0e:0c: a0:d4:a7:2e:f4:e5:ec:c3:06:73:db:34:48:dc:e9: 48:4b:93:b7:c9:17:73:8b:92:d0:29:86:09:bf:34: d8:83:70:e4:d6:d2:f5:5b:55:15:f9:f2:a8:d4:74: c1:09:0e:9b:7d:6b:36:ac:05:11:fc:f9:f9:70:5d: e2:96:6b:22:6f:d3:80:5e:5b:ce:2f:f6:77:ca:a5: 6c:b8:6b:11:e8:97:8d:d3:39:8c:9d:2e:f5:00:b8: 4e:cb:64:89:97:f8:95:2c:67:71:ff:45:da:38:2d: 4a:98:e9:d8:83:ef:4f:03:76:12:8d:c7:a1:48:93: 43:bf:ef:d3:f8:f7:8f:ff:68:3b:44:e2:e3:3c:82: 8a:cf:ac:ee:65:67:94:cf:d2:1a:04:6a:dc:04:15: 45:f3:ad:fe:1c:af:2a:d8:c8:16:3d:ef:ef:7d:98: d9:47:1d:98:f1:f0:27:5f:c1:ea:fa:57:60:77:db: 49:b1:74:67:a5:00:3d:2b:3b:3f:75:bf:84:2d:60: 70:27:b6:d3:cf:90:77:f9:32:00:a8:f3:95:e2:dc: 1b:20:26:65:52:84:e9:49:5d:a5:2e:5b:77:a8:35: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1C:15:3F:A7:34:F3:77:C5:5C:24:A8:C8:C1:C8:6D:C0:DF:00:D5 X509v3 Authority Key Identifier: keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5c:90:64:b1:17:db:f1:f5:ba:87:29:f0:e9:cf:42:80:35: a6:77:eb:ea:4b:68:78:fb:5c:34:45:2c:c8:9c:2e:50:3b:b9: b4:e6:ff:07:df:3e:10:cf:31:4a:14:55:a0:f9:8c:16:89:2e: ed:65:25:03:63:4d:10:3f:dd:44:40:92:2e:35:51:da:b0:11: 99:a1:13:4b:42:4a:6a:11:70:3a:91:76:e0:3e:b8:fb:c5:c3: 24:37:a2:db:a9:9b:37:15:85:59:0d:54:8d:d6:ed:16:e4:16: 39:9a:af:82:7f:55:fb:6f:cf:62:69:74:3c:cb:83:8a:04:1e: dd:19:ab:52:bf:ff:53:a9:89:96:e5:2f:c4:7a:33:6c:d9:f3: 7e:7d:fa:7d:57:93:71:6e:c7:85:af:81:cd:13:b5:4e:92:3e: 1d:19:2f:0b:a9:e0:f4:00:50:f6:27:47:58:e1:f0:9f:52:af: d2:bb:2d:dc:c9:b5:ea:14:27:11:6e:ab:65:49:26:2f:48:5c: 00:d3:64:c4:7f:f2:b8:7e:bf:a2:16:80:ca:1f:79:cf:18:ab: 34:3c:6f:1e:63:54:10:28:e6:dd:3d:4e:30:fb:6e:5e:df:b3: d4:98:43:bd:2e:0b:9c:18:c2:6a:cd:9d:99:53:26:0a:d2:ed: 5a:f0:a2:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9ZGzuoDgF9M3FqKHqYwSp6vSzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1 MTdDOEZEQjAeFw0yNTA3MTkxOTQ3MDZaFw0yNTA3MjIyMDA5MDZaMDMxMTAvBgNV BAMTKEM5MUMxNTNGQTczNEYzNzdDNTVDMjRBOEM4QzFDODZEQzBERjAwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhDsrKZw/wU6GuhBZNJl7cZaa tpYH892dxLoODKDUpy705ezDBnPbNEjc6UhLk7fJF3OLktAphgm/NNiDcOTW0vVb VRX58qjUdMEJDpt9azasBRH8+flwXeKWayJv04BeW84v9nfKpWy4axHol43TOYyd LvUAuE7LZImX+JUsZ3H/Rdo4LUqY6diD708DdhKNx6FIk0O/79P494//aDtE4uM8 gorPrO5lZ5TP0hoEatwEFUXzrf4cryrYyBY97+99mNlHHZjx8Cdfwer6V2B320mx dGelAD0rOz91v4QtYHAnttPPkHf5MgCo85Xi3BsgJmVShOlJXaUuW3eoNdZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRwVP6c083fFXCSoyMHIbcDfANUwHwYDVR0j BBgwFoAU2dBzDbUSlf7FvUgM3UK16FF8j9swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMC9EOUQwNzMwREI1 MTI5NUZFQzVCRDQ4MENERDQyQjVFODUxN0M4RkRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1MTdD OEZEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmI4YjMtZGVjOC00MWNmLWEx NmQtZTExNzE1NjFkNzI1LzAvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1 RTg1MTdDOEZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENckGSxF9vx9bqHKfDpz0KANaZ36+pLaHj7 XDRFLMicLlA7ubTm/wffPhDPMUoUVaD5jBaJLu1lJQNjTRA/3URAki41UdqwEZmh E0tCSmoRcDqRduA+uPvFwyQ3otupmzcVhVkNVI3W7RbkFjmar4J/Vftvz2JpdDzL g4oEHt0Zq1K//1OpiZblL8R6M2zZ8359+n1Xk3Fux4Wvgc0TtU6SPh0ZLwup4PQA UPYnR1jh8J9Sr9K7LdzJteoUJxFuq2VJJi9IXADTZMR/8rh+v6IWgMofec8YqzQ8 bx5jVBAo5t09TjD7bl7fs9SYQ70uC5wYwmrNnZlTJgrS7Vrwou8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:34 2025 by rpki-client