$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: NQ5kOP9Rws9tcet8mRp7NdJd+vTalm35zZJzBna9yaI= Subject key identifier: 84:61:2C:5D:96:D8:3B:09:A9:54:39:C2:16:8A:AF:09:DC:8E:93:E6 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 09FC32471F2792CD3785883D155A0B7E1AB35AF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01C7 Signing time: Sat 06 Sep 2025 18:41:36 +0000 Manifest this update: Sat 06 Sep 2025 18:36:36 +0000 Manifest next update: Tue 09 Sep 2025 23:52:36 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 2: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 3: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: 67Ebwhmyj3utv04BQR9DosESCLl87D6D1F5GvLsRi/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fc:32:47:1f:27:92:cd:37:85:88:3d:15:5a:0b:7e:1a:b3:5a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Sep 6 18:36:36 2025 GMT Not After : Sep 9 23:52:36 2025 GMT Subject: CN=84612C5D96D83B09A95439C2168AAF09DC8E93E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:db:fe:14:2e:68:14:a1:86:30:56:e2:4e: 57:e9:c2:c5:18:35:9a:0c:63:10:d2:ba:a7:0a:db: a5:ac:6c:94:9c:ad:7f:2c:4f:8f:17:39:24:a2:06: 69:24:1a:be:19:ba:7c:46:70:40:cf:71:de:5e:f0: 25:27:a9:4e:af:ad:82:82:3a:44:48:f9:ba:b1:1e: a6:ef:de:b0:3b:79:3a:4e:b2:e4:96:e9:fc:45:12: 53:8e:e8:d0:99:f5:1e:06:31:43:3c:6e:6c:9a:08: 84:4f:9b:ea:5e:80:90:f8:7e:4a:1d:9f:77:28:c8: d5:0e:f7:e5:1b:eb:b8:d8:46:c9:34:87:7a:a7:5e: 06:1b:70:f8:45:45:4e:f9:a2:a5:7b:93:7b:62:36: 93:71:e4:02:1b:ef:16:6d:b1:3d:6b:97:09:c8:3c: f9:5d:2f:f1:fd:55:10:09:16:c2:c0:31:da:b3:a7: 2a:ca:16:e3:c8:31:c4:57:08:3f:37:c0:35:42:47: d3:ea:da:0f:b0:df:35:a1:af:e3:44:4a:f8:41:d2: 37:30:11:fe:80:e2:71:df:2b:a1:07:e8:50:67:3b: ab:ea:d9:ac:6f:d7:27:fe:58:51:0a:81:01:13:cf: a2:b9:b4:c3:24:0d:6f:37:62:b6:d2:d9:5a:dd:14: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:2C:5D:96:D8:3B:09:A9:54:39:C2:16:8A:AF:09:DC:8E:93:E6 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9d:15:bb:0e:ca:b1:b6:6a:1d:0b:cb:cb:8c:9e:e1:0b:94: be:2e:5e:ec:31:21:df:fb:95:22:d2:c9:cd:92:78:48:d8:08: 59:ac:52:ef:3d:b7:08:0d:30:47:16:12:93:ad:a9:1c:80:a9: 57:b7:ad:62:8a:22:07:43:d4:61:c0:56:b0:f4:18:9d:af:6b: 5e:43:da:60:54:e9:60:87:3c:85:bd:e4:5a:f7:cb:0f:2b:2a: 56:a2:9b:1c:56:a7:c4:95:1a:44:0e:c8:53:37:66:df:0a:46: 3b:55:7a:ac:29:72:18:f5:e3:49:f1:29:5d:18:f2:12:ff:e9: dd:77:47:94:74:58:de:80:82:1c:81:cb:29:cf:1d:04:a1:5a: c9:7c:ad:59:c1:80:c3:74:33:88:4c:d0:eb:33:95:8e:c4:3c: d4:e3:f4:a2:01:29:6e:a2:84:34:fe:10:c5:b0:a3:a0:ce:04: 2f:17:25:78:fc:af:84:dc:55:7a:18:8d:31:ed:32:b9:12:0f: 53:3c:40:d7:d0:14:8f:86:24:01:d4:7d:a8:5a:a3:1b:42:85: f4:ca:a6:a6:f2:d3:f8:58:36:e4:d5:41:f6:0b:f8:0e:d3:98: 17:e6:f2:e0:c8:20:5d:a4:0a:77:65:38:da:55:58:a8:9d:d6: fb:8f:5b:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfwyRx8nks03hYg9FVoLfhqzWvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA5MDYxODM2MzZaFw0yNTA5MDkyMzUyMzZaMDMxMTAvBgNV BAMTKDg0NjEyQzVEOTZEODNCMDlBOTU0MzlDMjE2OEFBRjA5REM4RTkzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxF9v+FC5oFKGGMFbiTlfpwsUY NZoMYxDSuqcK26WsbJScrX8sT48XOSSiBmkkGr4ZunxGcEDPcd5e8CUnqU6vrYKC OkRI+bqxHqbv3rA7eTpOsuSW6fxFElOO6NCZ9R4GMUM8bmyaCIRPm+pegJD4fkod n3coyNUO9+Ub67jYRsk0h3qnXgYbcPhFRU75oqV7k3tiNpNx5AIb7xZtsT1rlwnI PPldL/H9VRAJFsLAMdqzpyrKFuPIMcRXCD83wDVCR9Pq2g+w3zWhr+NESvhB0jcw Ef6A4nHfK6EH6FBnO6vq2axv1yf+WFEKgQETz6K5tMMkDW83YrbS2VrdFLi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGEsXZbYOwmpVDnCFoqvCdyOk+YwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADydFbsOyrG2ah0Ly8uMnuELlL4uXuwxId/7 lSLSyc2SeEjYCFmsUu89twgNMEcWEpOtqRyAqVe3rWKKIgdD1GHAVrD0GJ2va15D 2mBU6WCHPIW95Fr3yw8rKlaimxxWp8SVGkQOyFM3Zt8KRjtVeqwpchj140nxKV0Y 8hL/6d13R5R0WN6AghyByynPHQShWsl8rVnBgMN0M4hM0OszlY7EPNTj9KIBKW6i hDT+EMWwo6DOBC8XJXj8r4TcVXoYjTHtMrkSD1M8QNfQFI+GJAHUfahaoxtChfTK pqby0/hYNuTVQfYL+A7TmBfm8uDIIF2kCndlONpVWKid1vuPWwo= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:47 2025 by rpki-client