$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: XymAfCCDNJdpBrk2fEmtUpoicpKnWo2bteQMy7o3dVw= Subject key identifier: AD:34:0C:BE:C9:0A:39:12:6D:68:59:85:7C:C0:A7:80:7D:CA:76:DB Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 556F4B542C1EE9399D557BE7252F9CE807176C5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0110 Signing time: Tue 22 Jul 2025 15:51:55 +0000 Manifest this update: Tue 22 Jul 2025 15:46:55 +0000 Manifest next update: Fri 25 Jul 2025 23:27:55 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: 4Nm+DTuw4nY+WMANrcLBGEl7tTyRDPAL+I98n0nvmsw=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6f:4b:54:2c:1e:e9:39:9d:55:7b:e7:25:2f:9c:e8:07:17:6c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Jul 22 15:46:55 2025 GMT Not After : Jul 25 23:27:55 2025 GMT Subject: CN=AD340CBEC90A39126D6859857CC0A7807DCA76DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:1c:27:d1:7c:05:7a:d6:18:ad:72:94:39: 8a:34:c8:61:bc:b5:13:b2:5c:86:ad:15:78:2a:e1: 7f:f9:3e:8e:7c:d5:bd:03:29:dc:ba:aa:19:a7:ec: b2:d0:66:be:69:98:d7:cf:53:89:52:b3:b6:24:c1: a2:08:0f:96:f4:2c:c0:c3:05:ac:d0:dc:2a:42:05: 2c:3a:20:72:2a:50:75:85:fb:31:48:c0:76:b8:90: 4d:14:c6:62:4c:8a:a7:a9:0b:12:13:fa:2c:95:e7: f5:83:72:a8:d3:66:ea:9e:7b:4d:8c:e5:7f:3b:c4: 31:76:ad:49:4e:1a:0a:f4:59:76:9a:09:66:71:90: 03:70:5d:24:d9:5a:70:64:98:d2:06:2b:34:fa:c3: 57:f0:b2:23:de:e1:fa:f7:49:e4:ca:59:6d:02:0b: 97:3d:e0:cf:0c:38:ec:b6:6b:e2:b0:55:c2:28:91: 66:50:e4:55:21:83:59:0b:75:eb:3e:cd:e3:f7:6f: 2a:e4:c0:32:ed:73:a7:5a:ea:4c:0d:f8:e7:50:ea: ec:ae:26:ee:fe:63:5e:24:05:b5:71:d9:10:32:00: a3:2e:7d:b2:1d:c7:f1:cc:89:60:21:8c:49:6b:32: 04:35:70:1b:3c:3a:68:4c:df:15:b1:3e:b2:c2:de: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:0C:BE:C9:0A:39:12:6D:68:59:85:7C:C0:A7:80:7D:CA:76:DB X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:59:8b:13:3c:10:17:43:2c:e2:b8:d9:a7:32:e5:3d:01:ac: 56:b6:05:92:67:bc:58:b9:c3:1f:2e:ab:82:53:59:ed:31:ee: d6:ef:7d:39:f2:36:13:eb:db:2a:7c:b1:3a:0a:1f:28:49:94: 6d:a6:b7:67:04:aa:0e:21:84:79:03:74:ef:13:e2:58:f9:4f: 67:c0:ec:de:f8:6d:da:89:98:dd:43:0e:6c:d4:67:fd:e9:05: 73:3f:af:56:85:50:0e:0d:1b:f8:31:93:e1:ae:70:fc:db:79: 60:9a:ca:a2:ab:2b:a9:e1:2f:16:39:54:2c:06:e0:d5:73:f9: e8:c4:b3:7e:44:0c:ed:54:87:9c:cd:ee:c0:c5:e7:c7:20:2f: e8:06:c2:81:35:e3:2a:cd:ee:69:98:be:3f:43:00:ad:6e:8c: 51:1b:bb:bc:31:b4:d7:4e:81:d4:8b:d2:47:e3:0d:15:9b:fd: 40:74:8a:10:72:fc:5a:20:79:15:69:ed:19:b2:ed:06:53:db: 9a:94:fb:77:ce:15:00:f2:a2:1c:f4:6e:74:0f:2f:28:f6:0d: 67:ff:5f:0d:a1:05:e7:b2:3b:f9:b8:d6:93:47:ee:72:c3:ba: e5:76:f7:4a:82:d6:40:ad:bb:7f:ef:df:e4:7a:b1:0f:ed:0f: 1d:5e:1d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVW9LVCwe6TmdVXvnJS+c6AcXbFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA3MjIxNTQ2NTVaFw0yNTA3MjUyMzI3NTVaMDMxMTAvBgNV BAMTKEFEMzQwQ0JFQzkwQTM5MTI2RDY4NTk4NTdDQzBBNzgwN0RDQTc2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrxwn0XwFetYYrXKUOYo0yGG8 tROyXIatFXgq4X/5Po581b0DKdy6qhmn7LLQZr5pmNfPU4lSs7YkwaIID5b0LMDD BazQ3CpCBSw6IHIqUHWF+zFIwHa4kE0UxmJMiqepCxIT+iyV5/WDcqjTZuqee02M 5X87xDF2rUlOGgr0WXaaCWZxkANwXSTZWnBkmNIGKzT6w1fwsiPe4fr3SeTKWW0C C5c94M8MOOy2a+KwVcIokWZQ5FUhg1kLdes+zeP3byrkwDLtc6da6kwN+OdQ6uyu Ju7+Y14kBbVx2RAyAKMufbIdx/HMiWAhjElrMgQ1cBs8OmhM3xWxPrLC3ugXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTQMvskKORJtaFmFfMCngH3KdtswHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFZixM8EBdDLOK42acy5T0BrFa2BZJnvFi5 wx8uq4JTWe0x7tbvfTnyNhPr2yp8sToKHyhJlG2mt2cEqg4hhHkDdO8T4lj5T2fA 7N74bdqJmN1DDmzUZ/3pBXM/r1aFUA4NG/gxk+GucPzbeWCayqKrK6nhLxY5VCwG 4NVz+ejEs35EDO1Uh5zN7sDF58cgL+gGwoE14yrN7mmYvj9DAK1ujFEbu7wxtNdO gdSL0kfjDRWb/UB0ihBy/FogeRVp7Rmy7QZT25qU+3fOFQDyohz0bnQPLyj2DWf/ Xw2hBeeyO/m41pNH7nLDuuV290qC1kCtu3/v3+R6sQ/tDx1eHZw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:09 2025 by rpki-client