$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: 1m6BU362uG0CvqhHUgMg7oTSAx4VaGNZPzT3K7SrVY8= Subject key identifier: 9A:CB:0E:CD:11:A1:D2:C7:A3:5A:C8:13:D7:05:06:1C:B9:A5:9E:C0 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 76260140569DD82CAE04DCC1B2389D2CCAB121A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 04EC Signing time: Sat 19 Jul 2025 15:11:09 +0000 Manifest this update: Sat 19 Jul 2025 15:06:09 +0000 Manifest next update: Wed 23 Jul 2025 00:01:09 +0000 Files and hashes: 1: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) 2: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) 3: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 4: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: Y0SdbX3XhCSYSKSaxWd7YMSahZyVhxqUBJsazQ+ENSY=) 5: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 6: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:26:01:40:56:9d:d8:2c:ae:04:dc:c1:b2:38:9d:2c:ca:b1:21:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Jul 19 15:06:09 2025 GMT Not After : Jul 23 00:01:09 2025 GMT Subject: CN=9ACB0ECD11A1D2C7A35AC813D705061CB9A59EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:9d:1a:6e:f7:85:1e:d3:8f:61:51:77:6e: 64:41:18:b8:f2:d5:d0:ca:03:ac:77:7e:58:8f:b6: 08:87:30:0e:9f:a0:00:35:78:01:77:3a:40:1c:26: c3:11:0a:6a:c7:a1:9f:45:e5:af:f3:1f:8c:ae:5e: 38:3b:3e:8a:98:2f:76:eb:2f:51:55:65:6e:69:4d: 8b:07:9a:58:b2:b9:5e:90:e7:0d:4b:42:49:30:7a: 72:65:35:d2:7b:db:13:e2:fe:4e:e5:48:96:49:8d: 4a:70:25:05:e4:86:4e:84:8f:00:45:66:f9:c2:9f: ba:09:a8:e5:2f:93:05:84:f2:c6:33:a7:ca:84:0a: f2:7a:ad:7c:c4:64:75:f0:01:13:ea:0a:9f:4f:b7: 96:b0:ba:5d:b3:76:dd:6f:54:2b:4e:3e:d9:58:01: e7:69:16:ec:d4:ed:a8:5b:02:a4:32:63:bb:d0:ec: 2e:5e:64:9f:df:c8:f2:c8:89:58:bd:e9:8d:09:8a: 53:d1:2a:f6:10:d4:4f:9f:47:e9:dd:81:79:f1:b0: 82:05:46:e0:2a:fa:38:b5:7a:23:c3:a3:92:42:5d: 88:e7:ac:c0:be:69:32:ae:1f:e9:90:31:b0:ca:22: 6f:f8:11:e9:a0:fb:bc:8b:72:2c:d6:b7:2c:f5:69: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CB:0E:CD:11:A1:D2:C7:A3:5A:C8:13:D7:05:06:1C:B9:A5:9E:C0 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bc:20:ff:d1:37:57:c8:e1:af:76:a3:6e:90:f7:13:89:fd: ae:b0:cd:48:5d:3f:35:b4:6b:8d:af:6a:f1:f5:b8:53:db:da: fa:12:d1:82:ea:03:0a:dc:f7:04:a5:06:6e:17:6d:f7:9f:5b: 0a:19:5a:c8:cc:d8:6e:ac:43:9c:27:de:9c:2f:10:5b:be:52: 95:cd:8e:f2:80:40:7e:30:56:ff:02:43:a9:22:3e:26:74:15: 03:1f:7e:8c:47:31:27:ae:44:a9:ba:c7:15:3e:1f:93:62:df: 9d:9c:3d:d3:f1:ca:7a:e5:5c:79:45:2c:43:c8:a2:a6:f5:19: 26:28:59:b3:7d:10:21:79:f9:38:77:10:2e:b8:e7:fe:8e:22: c9:4e:ce:54:8a:26:5d:1c:f2:5d:6e:66:43:6d:b2:87:98:8d: c0:8b:ae:21:c3:1d:f1:7d:c9:0c:2b:a8:be:f7:45:45:f8:b2: 65:5b:51:e3:63:c1:ee:c7:7f:9d:76:00:a2:27:42:de:b5:62: 1d:56:6a:bd:ab:10:9d:1c:91:31:5e:56:e7:07:09:a9:45:c8: 1c:32:12:aa:c9:74:1e:05:4f:48:dc:e0:2f:37:01:39:f2:1f: a6:59:be:56:d2:51:4a:48:38:e3:96:11:ba:0a:05:5a:38:a2: 2b:f0:a9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiYBQFad2CyuBNzBsjidLMqxIaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTA3MTkxNTA2MDlaFw0yNTA3MjMwMDAxMDlaMDMxMTAvBgNV BAMTKDlBQ0IwRUNEMTFBMUQyQzdBMzVBQzgxM0Q3MDUwNjFDQjlBNTlFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN750abveFHtOPYVF3bmRBGLjy 1dDKA6x3fliPtgiHMA6foAA1eAF3OkAcJsMRCmrHoZ9F5a/zH4yuXjg7PoqYL3br L1FVZW5pTYsHmliyuV6Q5w1LQkkwenJlNdJ72xPi/k7lSJZJjUpwJQXkhk6EjwBF ZvnCn7oJqOUvkwWE8sYzp8qECvJ6rXzEZHXwARPqCp9Pt5awul2zdt1vVCtOPtlY AedpFuzU7ahbAqQyY7vQ7C5eZJ/fyPLIiVi96Y0JilPRKvYQ1E+fR+ndgXnxsIIF RuAq+ji1eiPDo5JCXYjnrMC+aTKuH+mQMbDKIm/4Eemg+7yLcizWtyz1afSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmssOzRGh0sejWsgT1wUGHLmlnsAwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS8IP/RN1fI4a92o26Q9xOJ/a6wzUhdPzW0 a42vavH1uFPb2voS0YLqAwrc9wSlBm4XbfefWwoZWsjM2G6sQ5wn3pwvEFu+UpXN jvKAQH4wVv8CQ6kiPiZ0FQMffoxHMSeuRKm6xxU+H5Ni352cPdPxynrlXHlFLEPI oqb1GSYoWbN9ECF5+Th3EC645/6OIslOzlSKJl0c8l1uZkNtsoeYjcCLriHDHfF9 yQwrqL73RUX4smVbUeNjwe7Hf512AKInQt61Yh1War2rEJ0ckTFeVucHCalFyBwy EqrJdB4FT0jc4C83ATnyH6ZZvlbSUUpIOOOWEboKBVo4oivwqcw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:07 2025 by rpki-client