$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json) Hash identifier: f0ZThayi4qmgeIXfywld+eEAtUPk6zqORGqSD1W3jdM= Subject key identifier: B9:5C:E5:06:1E:64:5A:C8:CE:4B:8E:3D:D2:C7:B9:1F:19:28:22:20 Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Certificate serial: 733B33C7E92C78B6E80BA74A5169764D707E4A78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft Manifest number: 04C6 Signing time: Tue 22 Jul 2025 13:10:59 +0000 Manifest this update: Tue 22 Jul 2025 13:05:59 +0000 Manifest next update: Fri 25 Jul 2025 20:43:59 +0000 Files and hashes: 1: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: WS6nCRq7BsIHPWQzPJJaSfdwMkYo6eqriU8W7e8ib5w=) 2: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: BQkEeWFZR8rknKNZBkItfwN8svdOp5ahDx5VVdB7w/0=) 3: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: mlhnbAkpJ5WE/E+MZelidz+6mGgigg2Tl3xpoPq5FUU=) 4: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: 9hSdOJYAB1FezhzlJu5cbjM1IwCbIITSX9JZxyyiY5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3b:33:c7:e9:2c:78:b6:e8:0b:a7:4a:51:69:76:4d:70:7e:4a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Validity Not Before: Jul 22 13:05:59 2025 GMT Not After : Jul 25 20:43:59 2025 GMT Subject: CN=B95CE5061E645AC8CE4B8E3DD2C7B91F19282220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:26:22:e5:a5:4b:87:e4:6f:44:af:25:27: c6:2d:59:14:61:32:de:42:4c:04:65:a4:0f:71:7d: 92:02:82:c7:03:2e:ee:be:fc:9a:c4:ec:24:52:1f: 24:b1:3a:17:af:d6:47:9f:8b:73:e0:ed:01:9a:5d: cf:84:d0:be:0e:e1:d7:af:09:76:81:90:45:91:ca: 6d:28:03:24:ca:f8:8a:4a:a5:c9:b0:fa:f3:e3:75: 14:6c:76:18:58:b5:b5:c1:a2:c8:6d:bf:ef:6e:5c: 1f:3c:03:bc:72:ce:4c:61:3f:5a:0b:23:40:ce:0f: 08:c2:5d:62:ac:7a:2e:9d:9e:fc:12:59:e3:6f:d7: a8:a7:c5:38:22:81:17:f4:3d:99:f6:aa:6a:f0:23: f7:a9:99:41:aa:5b:54:1f:3c:b8:e0:54:a0:90:92: 5d:bc:1a:19:83:46:04:8c:d1:d1:81:91:d4:17:fb: c0:02:fb:c0:e7:cc:5b:00:50:50:71:81:a5:e9:b0: d5:36:1e:b5:af:ba:af:ba:c5:00:51:87:28:01:0d: 13:d8:0d:21:68:21:cb:fa:20:7f:ad:29:ea:00:1a: 88:d1:ac:13:fd:cd:d4:77:5a:7e:85:10:55:dd:fe: a7:a8:19:da:87:17:5c:c8:eb:71:14:4c:da:9f:31: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:E5:06:1E:64:5A:C8:CE:4B:8E:3D:D2:C7:B9:1F:19:28:22:20 X509v3 Authority Key Identifier: keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c4:da:d9:d6:13:85:cf:38:82:4b:c7:67:9d:ef:81:87:15: 38:c6:b2:fe:be:f3:c2:8f:20:0b:a8:bd:29:bd:a8:63:0b:68: 62:71:d1:64:dc:85:75:34:15:93:fb:93:8e:0a:79:43:33:7d: dc:ed:d8:10:b5:1b:67:6a:bf:e4:2e:2e:5b:8f:46:f2:76:88: 83:80:9c:20:a4:62:7d:35:49:c1:a1:f8:66:cd:c6:1b:a0:1e: 00:78:02:7e:9b:eb:75:05:59:1b:bc:22:13:2f:25:dc:90:8e: 45:b7:ad:cb:32:8a:5e:bd:9e:38:01:e6:bc:f3:c0:96:65:fe: bb:58:5c:57:16:85:64:de:5c:a6:2c:86:ca:89:d0:68:ed:ff: ca:01:3f:cf:b1:c1:8f:ab:5a:5f:a7:aa:1b:45:96:47:bc:02: d8:29:56:a5:b9:5f:a5:54:00:0e:99:b2:5a:7f:3c:c3:3a:74: a1:0a:6b:b4:b3:18:02:ec:3f:9a:ff:eb:d4:65:9c:24:dd:58: 6f:1e:21:02:a6:a3:32:9b:4b:08:63:ce:6b:2f:e6:13:74:af: 30:a5:34:39:cc:8e:01:d8:27:4a:00:fe:0c:52:b8:d8:9e:41: c7:33:38:0d:1b:c3:d5:47:f2:9e:2e:31:9f:43:7b:69:cc:1b: 67:4b:67:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczszx+kseLboC6dKUWl2TXB+SngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy OUZDMTNBOTAeFw0yNTA3MjIxMzA1NTlaFw0yNTA3MjUyMDQzNTlaMDMxMTAvBgNV BAMTKEI5NUNFNTA2MUU2NDVBQzhDRTRCOEUzREQyQzdCOTFGMTkyODIyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDasCYi5aVLh+RvRK8lJ8YtWRRh Mt5CTARlpA9xfZICgscDLu6+/JrE7CRSHySxOhev1kefi3Pg7QGaXc+E0L4O4dev CXaBkEWRym0oAyTK+IpKpcmw+vPjdRRsdhhYtbXBoshtv+9uXB88A7xyzkxhP1oL I0DODwjCXWKsei6dnvwSWeNv16inxTgigRf0PZn2qmrwI/epmUGqW1QfPLjgVKCQ kl28GhmDRgSM0dGBkdQX+8AC+8DnzFsAUFBxgaXpsNU2HrWvuq+6xQBRhygBDRPY DSFoIcv6IH+tKeoAGojRrBP9zdR3Wn6FEFXd/qeoGdqHF1zI63EUTNqfMXGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVzlBh5kWsjOS4490se5HxkoIiAwHwYDVR0j BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD MTNBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz NGYtYTcyMWMzNzJhNzRjLzAvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMx RDQyOUZDMTNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/E2tnWE4XPOIJLx2ed74GHFTjGsv6+88KP IAuovSm9qGMLaGJx0WTchXU0FZP7k44KeUMzfdzt2BC1G2dqv+QuLluPRvJ2iIOA nCCkYn01ScGh+GbNxhugHgB4An6b63UFWRu8IhMvJdyQjkW3rcsyil69njgB5rzz wJZl/rtYXFcWhWTeXKYshsqJ0Gjt/8oBP8+xwY+rWl+nqhtFlke8AtgpVqW5X6VU AA6Zslp/PMM6dKEKa7SzGALsP5r/69RlnCTdWG8eIQKmozKbSwhjzmsv5hN0rzCl NDnMjgHYJ0oA/gxSuNieQcczOA0bw9VH8p4uMZ9De2nMG2dLZ8M= -----END CERTIFICATE-----Generated at Wed Jul 23 12:12:02 2025 by rpki-client