$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: v/IxgJ1ykpqZyTJfJoqyf7InfE/gwHPK6kWlAAwlKgI= Subject key identifier: FF:C8:72:2D:9A:A4:DD:00:93:70:E9:54:2B:5D:C7:FE:5B:1A:73:1F Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 38F7C1D68B0AB3DCC4230E1BD88DF752DA5C3D97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01CF Signing time: Sun 07 Sep 2025 09:51:40 +0000 Manifest this update: Sun 07 Sep 2025 09:46:40 +0000 Manifest next update: Wed 10 Sep 2025 19:30:40 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) 2: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: VGe+q/klabvBVny2++KYgflW2i548qZFpfBV/urRVgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f7:c1:d6:8b:0a:b3:dc:c4:23:0e:1b:d8:8d:f7:52:da:5c:3d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Sep 7 09:46:40 2025 GMT Not After : Sep 10 19:30:40 2025 GMT Subject: CN=FFC8722D9AA4DD009370E9542B5DC7FE5B1A731F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:b2:e5:2c:9e:b6:77:05:47:ae:54:85:45: 1f:2d:f8:40:73:e9:da:73:46:2f:45:5c:65:9d:f8: 03:a9:92:2f:51:40:af:b2:fe:ef:e6:cf:f1:4c:df: b2:b6:4a:06:ec:3b:a7:71:23:72:09:c8:fd:e3:b7: 4f:97:36:fc:b0:e6:2d:27:71:69:38:4f:98:d2:de: 74:fd:aa:be:34:db:65:4d:c5:29:3a:38:6b:6f:20: 9c:bc:6e:f3:ce:60:3a:af:3f:b8:2c:1c:98:ac:d1: 1e:c8:c4:59:7a:ad:16:2f:07:b3:67:59:0f:57:41: 61:42:13:c0:43:a2:fa:4d:63:ab:a3:0c:d6:ba:73: 83:d2:2c:54:33:78:aa:67:dc:6b:21:c9:22:23:49: 56:46:d2:3d:f5:2b:50:70:24:72:e0:46:e8:ec:c5: d0:8d:d3:ad:cf:fd:51:5e:8a:d5:a7:33:d4:9c:a2: 18:96:b3:c2:4b:64:3c:a8:f5:33:16:91:66:8e:33: 2d:90:f5:c2:90:23:22:90:54:43:5a:bc:85:e7:52: bc:60:0f:99:f9:2d:49:8e:6e:64:42:67:52:fb:10: 37:7f:07:72:d9:c0:25:11:a4:42:e4:9d:84:cd:42: 1b:66:b5:77:47:a4:79:bd:b3:e9:d6:a6:d7:c9:f2: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C8:72:2D:9A:A4:DD:00:93:70:E9:54:2B:5D:C7:FE:5B:1A:73:1F X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:57:78:5c:b7:38:87:ea:51:65:c7:6a:49:0c:ae:26:50:9c: 61:c2:c8:99:94:4d:e2:71:2c:81:b2:c2:e8:1a:fe:28:de:c6: 0d:a0:86:03:70:ce:00:40:0a:dd:28:25:cb:75:35:dd:fc:9e: e6:8f:83:97:6d:63:ee:91:9d:6b:af:bf:0c:25:82:7d:22:ab: 0e:b3:ce:a8:21:d4:48:b7:af:27:8e:c6:fb:1a:2c:18:71:2c: 33:8f:f3:0c:3a:7a:53:7f:eb:b5:11:12:76:b8:ae:f0:35:95: 96:7a:b7:15:b3:7e:95:78:d3:52:91:8b:a5:c9:a5:52:c5:a1: 71:18:4a:bb:81:fd:f0:b3:61:33:5b:13:2b:bc:3b:56:31:63: 03:0a:5a:37:88:fc:d9:77:5b:03:16:74:59:2f:27:e3:62:ed: 70:ac:8f:d7:74:15:e8:0f:e3:b4:ec:fe:78:58:fc:0b:45:5e: 38:7b:dc:1d:b5:5c:b1:ba:bf:84:fa:9e:20:2d:a5:33:30:d5: 8a:27:08:23:b4:29:43:83:ae:d6:e2:a5:08:58:82:ab:56:79: b7:5a:3a:49:4c:98:a6:7a:e9:81:84:8a:39:2f:69:5e:b0:36: 9a:89:bf:05:fc:d6:5a:2f:e3:60:e2:e8:5a:c8:3c:98:f5:19: d0:5e:6c:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPfB1osKs9zEIw4b2I33UtpcPZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA5MDcwOTQ2NDBaFw0yNTA5MTAxOTMwNDBaMDMxMTAvBgNV BAMTKEZGQzg3MjJEOUFBNEREMDA5MzcwRTk1NDJCNURDN0ZFNUIxQTczMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EbLlLJ62dwVHrlSFRR8t+EBz 6dpzRi9FXGWd+AOpki9RQK+y/u/mz/FM37K2SgbsO6dxI3IJyP3jt0+XNvyw5i0n cWk4T5jS3nT9qr4022VNxSk6OGtvIJy8bvPOYDqvP7gsHJis0R7IxFl6rRYvB7Nn WQ9XQWFCE8BDovpNY6ujDNa6c4PSLFQzeKpn3GshySIjSVZG0j31K1BwJHLgRujs xdCN063P/VFeitWnM9ScohiWs8JLZDyo9TMWkWaOMy2Q9cKQIyKQVENavIXnUrxg D5n5LUmObmRCZ1L7EDd/B3LZwCURpELknYTNQhtmtXdHpHm9s+nWptfJ8r0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/8hyLZqk3QCTcOlUK13H/lsacx8wHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdXeFy3OIfqUWXHakkMriZQnGHCyJmUTeJx LIGywuga/ijexg2ghgNwzgBACt0oJct1Nd38nuaPg5dtY+6RnWuvvwwlgn0iqw6z zqgh1Ei3ryeOxvsaLBhxLDOP8ww6elN/67UREna4rvA1lZZ6txWzfpV401KRi6XJ pVLFoXEYSruB/fCzYTNbEyu8O1YxYwMKWjeI/Nl3WwMWdFkvJ+Ni7XCsj9d0FegP 47Ts/nhY/AtFXjh73B21XLG6v4T6niAtpTMw1YonCCO0KUODrtbipQhYgqtWebda OklMmKZ66YGEijkvaV6wNpqJvwX81lov42Di6FrIPJj1GdBebOc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:32:20 2025 by rpki-client