$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: mYX429fBvpK847fX80pBu/81qMpQHOFxoVo6zoQ8s5Y= Subject key identifier: A0:FF:F0:63:EC:5D:33:2C:F1:D2:DA:77:C8:0C:F4:82:38:0A:A1:2F Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 14CF99E15CC9752E854FF745F678EA0A4F6E9FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 01ED Signing time: Fri 25 Jul 2025 07:01:52 +0000 Manifest this update: Fri 25 Jul 2025 06:56:52 +0000 Manifest next update: Mon 28 Jul 2025 10:56:52 +0000 Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) 2: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: ASoIVaXuMgBq3AO7V/QQm6aJH7aDEmtGNqsHQ0QT0qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 10:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cf:99:e1:5c:c9:75:2e:85:4f:f7:45:f6:78:ea:0a:4f:6e:9f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Jul 25 06:56:52 2025 GMT Not After : Jul 28 10:56:52 2025 GMT Subject: CN=A0FFF063EC5D332CF1D2DA77C80CF482380AA12F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:4f:e1:8f:a6:8b:74:07:c2:17:ca:be:f7: 7b:b2:f0:c0:fa:eb:27:00:2f:cd:9a:7b:6b:5b:13: 40:a1:51:5b:18:83:60:09:ee:00:66:2f:20:45:8d: 5b:92:da:f1:77:c4:49:65:5d:3f:1d:ac:86:b4:33: a9:87:2d:60:76:b7:ac:d6:fc:6e:80:9f:86:38:0d: e5:b3:f3:1b:58:31:e2:3e:b9:e5:86:58:64:ce:2c: 5b:37:0b:b7:f6:cd:af:27:29:72:a2:8c:9a:aa:e1: 57:66:99:40:c3:46:a1:56:a0:e3:bc:a3:5b:87:b3: a0:17:15:3e:e7:80:83:94:ad:c1:06:da:15:f8:ea: 1c:24:67:1e:51:a2:05:b0:e7:3a:82:10:b0:20:43: 15:24:8f:04:52:95:cc:5c:dc:38:da:7c:6e:97:15: 8a:30:45:a4:26:00:de:58:76:ff:f1:20:f5:6d:ff: 8a:bb:53:7a:6e:64:41:b7:49:1d:71:7f:eb:64:19: 77:3e:60:51:10:f1:f9:7f:4c:09:36:24:35:0a:8d: 40:1b:bd:e7:12:e6:a6:de:b3:7b:20:91:51:d2:eb: c0:16:40:6a:fd:af:92:ca:f7:69:59:63:dc:d3:da: 30:ed:c2:13:d1:cc:a7:da:fc:cf:90:c6:5b:00:76: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FF:F0:63:EC:5D:33:2C:F1:D2:DA:77:C8:0C:F4:82:38:0A:A1:2F X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:c1:05:10:03:f9:4a:9d:cc:28:d2:67:a8:1c:2c:23:ef:88: d8:fd:b9:68:04:55:66:04:f4:15:24:fa:62:55:ae:68:09:05: b0:4d:35:7b:fb:db:00:35:88:41:2d:21:12:30:f7:c8:a3:3a: 0e:7a:ff:f9:b9:28:20:55:a6:52:13:75:74:57:1b:a6:e7:df: 05:db:40:8a:db:f2:1d:49:d8:77:7d:5d:69:a2:5c:9d:89:92: a9:75:1b:d5:88:3d:6e:ef:1f:c2:a5:dc:33:23:f9:26:8d:ce: 70:de:2e:d3:bb:b3:62:51:00:e6:c1:39:3a:f2:74:e0:76:08: da:c9:80:c3:b8:71:82:7c:ff:2a:34:a2:48:05:38:32:b9:b5: 65:86:61:21:17:41:fb:2f:25:c2:d8:54:a7:5f:fd:0f:a8:b7: 5b:b7:dc:9e:f4:2b:74:cf:9c:36:e5:2d:b7:26:14:ad:56:65: ac:c9:e7:a7:cf:7b:fb:ef:69:c6:14:3d:e7:d4:47:2a:9a:47: 4a:04:8c:1a:5f:57:de:e7:96:6d:15:ed:60:38:8d:22:f5:45: fc:03:6d:80:07:80:bf:9f:a1:cf:04:0e:f4:4b:aa:9f:54:38: e8:15:c8:68:94:88:b0:d2:89:9e:a9:be:0c:7f:9f:9b:1b:92: fa:98:44:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFM+Z4VzJdS6FT/dF9njqCk9un8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTA3MjUwNjU2NTJaFw0yNTA3MjgxMDU2NTJaMDMxMTAvBgNV BAMTKEEwRkZGMDYzRUM1RDMzMkNGMUQyREE3N0M4MENGNDgyMzgwQUExMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8E/hj6aLdAfCF8q+93uy8MD6 6ycAL82ae2tbE0ChUVsYg2AJ7gBmLyBFjVuS2vF3xEllXT8drIa0M6mHLWB2t6zW /G6An4Y4DeWz8xtYMeI+ueWGWGTOLFs3C7f2za8nKXKijJqq4VdmmUDDRqFWoOO8 o1uHs6AXFT7ngIOUrcEG2hX46hwkZx5RogWw5zqCELAgQxUkjwRSlcxc3DjafG6X FYowRaQmAN5Ydv/xIPVt/4q7U3puZEG3SR1xf+tkGXc+YFEQ8fl/TAk2JDUKjUAb vecS5qbes3sgkVHS68AWQGr9r5LK92lZY9zT2jDtwhPRzKfa/M+QxlsAdtavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoP/wY+xdMyzx0tp3yAz0gjgKoS8wHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzBBRAD+UqdzCjSZ6gcLCPviNj9uWgEVWYE 9BUk+mJVrmgJBbBNNXv72wA1iEEtIRIw98ijOg56//m5KCBVplITdXRXG6bn3wXb QIrb8h1J2Hd9XWmiXJ2Jkql1G9WIPW7vH8Kl3DMj+SaNznDeLtO7s2JRAObBOTry dOB2CNrJgMO4cYJ8/yo0okgFODK5tWWGYSEXQfsvJcLYVKdf/Q+ot1u33J70K3TP nDblLbcmFK1WZazJ56fPe/vvacYUPefURyqaR0oEjBpfV97nlm0V7WA4jSL1RfwD bYAHgL+foc8EDvRLqp9UOOgVyGiUiLDSiZ6pvgx/n5sbkvqYROc= -----END CERTIFICATE-----Generated at Fri Jul 25 15:22:39 2025 by rpki-client