$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: opqO1oVjmwy8MaIXqYGbjaHB9r4C7qMtYhWibokOSRU= Subject key identifier: 9B:72:A8:E6:9C:AE:D8:FA:77:51:B5:83:D9:C4:D5:A9:36:12:61:77 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 4A522EA3220D67C4DD1904335E09C224F13822DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0505 Signing time: Fri 05 Sep 2025 14:40:04 +0000 Manifest this update: Fri 05 Sep 2025 14:35:04 +0000 Manifest next update: Mon 08 Sep 2025 17:49:04 +0000 Files and hashes: 1: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: GLXTAA1jfnbsAQ0cW1Dz9nzcUpTmNQQEIbTueG2+JHQ=) 2: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:52:2e:a3:22:0d:67:c4:dd:19:04:33:5e:09:c2:24:f1:38:22:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Sep 5 14:35:04 2025 GMT Not After : Sep 8 17:49:04 2025 GMT Subject: CN=9B72A8E69CAED8FA7751B583D9C4D5A936126177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:ec:53:c4:65:06:55:94:7a:3d:de:6f:d6: c1:7a:25:3f:66:cb:61:c6:99:a2:9c:97:18:cb:50: a2:08:95:4f:1b:50:4b:a2:94:16:87:ee:66:48:8c: 0f:5f:3e:c4:27:d7:13:43:9d:62:91:fe:41:82:b2: 2f:40:07:af:69:48:82:08:12:9d:12:16:01:7d:9c: b7:a6:8b:50:cd:7d:7c:fb:bd:a6:15:87:4c:09:dd: 3c:16:8e:ac:42:c0:ee:cb:39:9c:5c:8e:7f:dd:78: fc:09:73:0f:fb:cd:0f:cd:0a:3d:04:8f:d3:75:64: 53:77:83:a8:0b:24:4f:90:58:3a:dd:ba:66:d1:92: bc:5e:e8:f1:34:99:a5:58:3c:89:4d:71:84:67:f5: 83:a8:cf:cd:47:2e:73:6f:b6:a6:5e:dd:5f:76:ed: b8:11:67:63:53:c8:1f:78:e0:81:6a:04:0a:c1:0f: 4e:16:1e:fa:90:f6:9f:bd:2e:28:b6:02:72:79:9b: d1:ab:fd:6f:5b:ec:ed:3d:08:fb:10:9f:9c:06:12: 7a:25:da:a3:b5:f8:99:6c:ae:67:33:64:6a:8f:b3: e4:67:d5:81:59:22:64:2a:96:ed:34:35:eb:19:6a: d9:90:0c:a6:f5:cd:75:b8:c9:eb:12:35:1f:41:7a: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:72:A8:E6:9C:AE:D8:FA:77:51:B5:83:D9:C4:D5:A9:36:12:61:77 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d4:77:77:c8:ea:bf:89:82:01:08:3f:d9:ea:05:5d:9d:1f: f0:07:61:72:f7:54:6b:29:3e:43:1e:09:6f:a2:d4:62:24:f1: d5:29:46:87:7d:86:a0:66:d6:ce:5b:25:32:60:7d:8c:0c:03: e4:ec:60:79:f8:3e:eb:41:9c:25:de:28:68:2d:f2:11:5d:ed: 97:53:48:7f:a8:86:b0:11:55:b5:1d:d6:2c:6d:d9:92:41:aa: f8:33:68:2a:fe:09:8d:91:0a:30:c0:cc:81:f0:ad:6b:02:ab: 36:79:0a:80:64:a5:1a:33:72:c3:50:ac:de:1a:bf:fe:83:40: 72:40:d3:af:67:12:1a:7e:0a:5b:c1:27:2a:4d:89:d7:36:36: ba:07:85:07:41:45:82:cc:87:95:3b:35:bf:bf:a0:ca:3b:ea: 75:0f:fb:67:9f:cc:27:6b:cd:54:8e:7b:17:97:f1:85:62:d6: ab:9b:f1:ee:83:b7:fd:c7:05:9f:a3:54:18:ce:30:1b:16:d6: ba:4e:bd:33:20:ee:c3:59:0f:34:a6:13:75:d6:6f:c3:a1:88: 5c:e8:b1:16:cf:5d:4f:5f:fb:09:d8:1e:ac:79:37:e7:38:08: 24:c6:1a:b6:6c:c5:7d:0f:ba:08:5f:90:59:c9:67:41:f7:da: 74:9c:45:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlIuoyINZ8TdGQQzXgnCJPE4It4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTA5MDUxNDM1MDRaFw0yNTA5MDgxNzQ5MDRaMDMxMTAvBgNV BAMTKDlCNzJBOEU2OUNBRUQ4RkE3NzUxQjU4M0Q5QzRENUE5MzYxMjYxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIauxTxGUGVZR6Pd5v1sF6JT9m y2HGmaKclxjLUKIIlU8bUEuilBaH7mZIjA9fPsQn1xNDnWKR/kGCsi9AB69pSIII Ep0SFgF9nLemi1DNfXz7vaYVh0wJ3TwWjqxCwO7LOZxcjn/dePwJcw/7zQ/NCj0E j9N1ZFN3g6gLJE+QWDrdumbRkrxe6PE0maVYPIlNcYRn9YOoz81HLnNvtqZe3V92 7bgRZ2NTyB944IFqBArBD04WHvqQ9p+9Lii2AnJ5m9Gr/W9b7O09CPsQn5wGEnol 2qO1+JlsrmczZGqPs+Rn1YFZImQqlu00NesZatmQDKb1zXW4yesSNR9BevJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3Ko5pyu2Pp3UbWD2cTVqTYSYXcwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7Ud3fI6r+JggEIP9nqBV2dH/AHYXL3VGsp PkMeCW+i1GIk8dUpRod9hqBm1s5bJTJgfYwMA+TsYHn4PutBnCXeKGgt8hFd7ZdT SH+ohrARVbUd1ixt2ZJBqvgzaCr+CY2RCjDAzIHwrWsCqzZ5CoBkpRozcsNQrN4a v/6DQHJA069nEhp+ClvBJypNidc2NroHhQdBRYLMh5U7Nb+/oMo76nUP+2efzCdr zVSOexeX8YVi1qub8e6Dt/3HBZ+jVBjOMBsW1rpOvTMg7sNZDzSmE3XWb8OhiFzo sRbPXU9f+wnYHqx5N+c4CCTGGrZsxX0PughfkFnJZ0H32nScRRU= -----END CERTIFICATE-----Generated at Fri Sep 5 20:24:14 2025 by rpki-client