$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: TkoUR9f3yGYKsET9sPpTqnSzFHhwwXU41fLRKs/19ug= Subject key identifier: 79:A7:19:34:D4:70:6A:F8:73:9D:B6:01:26:CF:71:99:BD:4D:F8:D2 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 3D5207EC679272C182F5A68048E8FF48C335FE6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 019E Signing time: Fri 06 Jun 2025 17:41:37 +0000 Manifest this update: Fri 06 Jun 2025 17:36:37 +0000 Manifest next update: Tue 10 Jun 2025 03:47:37 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: pF0XX8iGUNaEAPEmdUcwKZzSPnUJMqKA+lJt2x8Gm7M=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: 7dIAgqw3k6+/plc9vRUwJXdtPQAeU1isYog9xiXeA5k=) 3: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: 6AB5bq4lxkpATYu0rKSJdzLFkqGQhdfrOpLg4Tu8L9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:52:07:ec:67:92:72:c1:82:f5:a6:80:48:e8:ff:48:c3:35:fe:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Jun 6 17:36:37 2025 GMT Not After : Jun 10 03:47:37 2025 GMT Subject: CN=79A71934D4706AF8739DB60126CF7199BD4DF8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4b:fd:a0:a0:c1:7b:8a:73:6a:e8:b0:7a:a8: f4:34:4f:07:06:7e:c6:d7:54:17:c4:a4:e4:80:db: a1:71:83:21:08:0e:59:b2:be:54:21:7e:fb:07:fb: 67:df:ae:79:18:a3:73:14:dc:4e:b8:d4:a5:9f:83: a6:45:c6:7d:85:0e:b4:5e:52:23:88:19:98:1f:30: 44:4f:96:db:d2:26:2c:51:ae:2b:be:e2:7a:13:45: fc:a1:c0:eb:31:71:17:5f:fe:8f:e9:28:6d:dc:79: 24:bd:01:29:d2:08:f7:fa:af:de:88:2c:8e:7f:55: 09:f4:46:83:e9:1f:46:17:aa:29:dc:01:c2:39:39: 43:c7:50:c3:4f:1b:79:fc:bb:2a:bd:ef:bb:e9:ba: ce:73:ad:c5:f7:9e:22:cd:d8:b8:69:b8:f5:89:f8: 1c:94:9a:98:c6:85:74:db:95:13:1c:a8:c8:77:4c: ec:c8:21:b0:b2:63:67:17:bd:c2:4e:fb:71:0e:ee: c2:c6:c7:eb:37:15:24:49:cd:ee:01:05:57:2e:2c: 85:bc:9c:f4:8d:f9:d7:39:e8:55:03:1c:7f:3d:59: 2c:15:b7:bc:96:3f:0a:d4:ea:4a:c1:3c:85:ea:76: 73:5e:fe:06:15:5a:11:c0:b8:59:b6:d9:5d:7d:d7: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A7:19:34:D4:70:6A:F8:73:9D:B6:01:26:CF:71:99:BD:4D:F8:D2 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:31:83:57:60:65:9e:db:4f:d3:d3:6c:59:94:77:40:36:27: eb:ec:98:ed:71:cf:b1:55:53:b2:c3:ce:8b:27:95:7b:e2:e1: c5:76:7a:99:01:33:07:90:03:ef:9e:4f:5e:9b:69:6e:9a:5e: 03:1a:22:7a:27:5b:30:5c:b9:c8:45:d4:86:01:fe:49:94:ab: 5e:65:84:6b:94:07:4e:47:a6:21:f0:fd:97:52:dd:97:44:62: 09:25:3a:23:9b:9e:1e:fa:63:0a:84:45:68:88:0b:fc:8b:f8: 56:5d:1f:1a:e4:12:a8:8b:27:7e:63:71:87:b9:44:9a:ad:50: c6:2c:e5:63:28:26:55:4e:27:fe:7f:cc:30:ce:f6:f5:46:ce: 4a:99:23:03:c6:52:6f:c3:8e:76:ea:09:eb:a3:6f:23:42:77: 95:3f:f9:36:d2:be:45:5a:cc:16:41:1f:42:f6:20:f9:d1:64: 63:cc:44:d2:06:89:42:59:84:1a:bf:ac:ee:ef:34:76:b3:4d: 06:a9:13:1a:64:62:c0:0f:73:35:00:fb:30:65:4a:43:1d:46: 13:49:1b:22:f4:99:d2:6d:c5:17:2d:f7:d9:d8:13:e3:cb:d9: ff:af:03:2e:89:d0:45:58:7c:b1:a9:6c:2b:1d:3e:26:d1:fe: 10:d5:43:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVIH7GeScsGC9aaASOj/SMM1/m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA2MDYxNzM2MzdaFw0yNTA2MTAwMzQ3MzdaMDMxMTAvBgNV BAMTKDc5QTcxOTM0RDQ3MDZBRjg3MzlEQjYwMTI2Q0Y3MTk5QkQ0REY4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpS/2goMF7inNq6LB6qPQ0TwcG fsbXVBfEpOSA26FxgyEIDlmyvlQhfvsH+2ffrnkYo3MU3E641KWfg6ZFxn2FDrRe UiOIGZgfMERPltvSJixRriu+4noTRfyhwOsxcRdf/o/pKG3ceSS9ASnSCPf6r96I LI5/VQn0RoPpH0YXqincAcI5OUPHUMNPG3n8uyq977vpus5zrcX3niLN2LhpuPWJ +ByUmpjGhXTblRMcqMh3TOzIIbCyY2cXvcJO+3EO7sLGx+s3FSRJze4BBVcuLIW8 nPSN+dc56FUDHH89WSwVt7yWPwrU6krBPIXqdnNe/gYVWhHAuFm22V19172vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeacZNNRwavhznbYBJs9xmb1N+NIwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoxg1dgZZ7bT9PTbFmUd0A2J+vsmO1xz7FV U7LDzosnlXvi4cV2epkBMweQA++eT16baW6aXgMaInonWzBcuchF1IYB/kmUq15l hGuUB05HpiHw/ZdS3ZdEYgklOiObnh76YwqERWiIC/yL+FZdHxrkEqiLJ35jcYe5 RJqtUMYs5WMoJlVOJ/5/zDDO9vVGzkqZIwPGUm/DjnbqCeujbyNCd5U/+TbSvkVa zBZBH0L2IPnRZGPMRNIGiUJZhBq/rO7vNHazTQapExpkYsAPczUA+zBlSkMdRhNJ GyL0mdJtxRct99nYE+PL2f+vAy6J0EVYfLGpbCsdPibR/hDVQ2Q= -----END CERTIFICATE-----Generated at Sun Jun 8 11:54:36 2025 by rpki-client