$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: mpuwgyT4QoSwj62FzlV6wPpdt27LYVYbsgOkD2q0HSg= Subject key identifier: 5D:25:15:B7:AD:FB:4C:0D:3F:C0:FD:2F:0E:5C:67:36:20:A8:8B:AF Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 6262B26677ECD7E830E7E27F25E16983452EF747 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 04C0 Signing time: Sun 20 Jul 2025 02:41:43 +0000 Manifest this update: Sun 20 Jul 2025 02:36:43 +0000 Manifest next update: Wed 23 Jul 2025 13:55:43 +0000 Files and hashes: 1: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: kQByePFlJ+h13hGEYbAC1Jf2kpmFee8BwVgE+q6BE2M=) 2: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=) 3: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:62:b2:66:77:ec:d7:e8:30:e7:e2:7f:25:e1:69:83:45:2e:f7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Jul 20 02:36:43 2025 GMT Not After : Jul 23 13:55:43 2025 GMT Subject: CN=5D2515B7ADFB4C0D3FC0FD2F0E5C673620A88BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:ba:9a:b3:31:1e:37:54:e5:cc:3e:24:60: 9d:ce:1c:4b:84:5b:10:e4:06:92:73:43:2a:34:8c: 4d:a7:af:cb:7f:c3:6b:92:fc:33:77:ab:ac:d9:03: c2:86:8f:f3:7b:98:2e:11:fe:eb:3f:f3:ff:cc:41: 27:05:f2:72:f3:2b:84:d9:07:47:36:c5:f6:08:60: b3:a4:54:88:48:c1:82:a4:77:59:6f:e4:91:34:e6: 29:71:14:df:3d:e6:25:e5:16:e2:1d:f7:e1:f2:31: e6:8c:4b:b3:b4:c9:f4:86:85:72:04:c9:b8:e9:9b: ed:c8:29:7b:98:5f:cb:8a:01:e5:d6:3c:e0:9e:57: f4:c2:cf:40:95:1a:40:ed:51:32:9f:1b:bb:cf:a4: 2a:4e:05:b0:be:8d:70:7d:60:6b:31:41:b8:19:c4: 03:39:f1:ae:9b:2c:97:86:0f:70:cc:ca:c0:70:19: e4:0f:c5:bd:19:03:7a:1d:fb:16:ec:41:97:8e:83: fd:bf:8b:ee:83:35:91:8e:02:41:7e:c6:e1:b9:71: 32:13:4f:b9:d8:57:72:15:17:c7:d9:ee:88:db:5f: 89:e9:da:20:df:36:5e:24:5d:e9:69:dd:de:23:54: de:8f:d5:6c:b7:03:f4:8b:72:8b:02:60:32:f0:33: 2f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:15:B7:AD:FB:4C:0D:3F:C0:FD:2F:0E:5C:67:36:20:A8:8B:AF X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:91:52:40:47:a8:08:10:8b:15:37:03:e2:d2:43:4b:49:49: e6:19:a8:f9:ad:85:2b:8a:6c:1a:e6:9d:71:f8:95:86:b8:e2: 03:1d:8e:91:7b:76:62:52:4b:16:4a:e0:4a:99:a4:ea:43:95: 97:e3:37:62:d5:fb:14:f3:23:40:c5:42:12:91:e5:aa:bd:69: c8:a9:78:1c:91:6c:0b:78:88:a8:d8:75:74:95:4a:bf:a5:bd: bf:b0:dd:4a:77:e9:da:0a:a2:b7:45:81:50:8c:29:b5:aa:e4: 75:58:62:d3:a5:48:ab:ea:b1:33:42:66:44:1d:14:2c:fb:70: c4:b6:65:9f:f3:e3:14:ff:0f:5b:4a:97:43:3e:ea:da:16:a0: 05:f6:a2:1e:0f:eb:7e:b3:1c:98:62:61:80:b8:50:b3:51:71: a6:02:04:40:8e:4e:f9:74:af:69:81:51:a9:31:ab:86:b3:f6: 88:98:71:f4:85:63:d6:9b:8f:cd:94:25:97:ba:6f:92:b7:ac: 88:3f:fc:2f:1b:ff:79:55:34:a3:74:fe:1f:3a:8c:d5:af:e1: 25:6d:47:fb:d0:5b:9a:66:12:e3:64:92:c6:88:54:ae:86:bf: fb:e7:f6:44:2d:ed:42:56:4d:65:14:89:10:18:58:00:11:85: 0c:ac:cc:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmKyZnfs1+gw5+J/JeFpg0Uu90cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTA3MjAwMjM2NDNaFw0yNTA3MjMxMzU1NDNaMDMxMTAvBgNV BAMTKDVEMjUxNUI3QURGQjRDMEQzRkMwRkQyRjBFNUM2NzM2MjBBODhCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3rqaszEeN1TlzD4kYJ3OHEuE WxDkBpJzQyo0jE2nr8t/w2uS/DN3q6zZA8KGj/N7mC4R/us/8//MQScF8nLzK4TZ B0c2xfYIYLOkVIhIwYKkd1lv5JE05ilxFN895iXlFuId9+HyMeaMS7O0yfSGhXIE ybjpm+3IKXuYX8uKAeXWPOCeV/TCz0CVGkDtUTKfG7vPpCpOBbC+jXB9YGsxQbgZ xAM58a6bLJeGD3DMysBwGeQPxb0ZA3od+xbsQZeOg/2/i+6DNZGOAkF+xuG5cTIT T7nYV3IVF8fZ7ojbX4np2iDfNl4kXelp3d4jVN6P1Wy3A/SLcosCYDLwMy9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSUVt637TA0/wP0vDlxnNiCoi68wHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANaRUkBHqAgQixU3A+LSQ0tJSeYZqPmthSuK bBrmnXH4lYa44gMdjpF7dmJSSxZK4EqZpOpDlZfjN2LV+xTzI0DFQhKR5aq9acip eByRbAt4iKjYdXSVSr+lvb+w3Up36doKordFgVCMKbWq5HVYYtOlSKvqsTNCZkQd FCz7cMS2ZZ/z4xT/D1tKl0M+6toWoAX2oh4P636zHJhiYYC4ULNRcaYCBECOTvl0 r2mBUakxq4az9oiYcfSFY9abj82UJZe6b5K3rIg//C8b/3lVNKN0/h86jNWv4SVt R/vQW5pmEuNkksaIVK6Gv/vn9kQt7UJWTWUUiRAYWAARhQyszP8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:44:10 2025 by rpki-client