$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: z4OCGMLBbOLdvo4lXZaWoRIGi8f6KXlJMPbQXf8efYY= Subject key identifier: B0:01:86:63:A0:D5:95:13:09:05:F5:E6:DF:4F:A3:D6:C6:23:A6:7D Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 6BED48D357838B7DDC94D7400F016A60977971DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 16:01:52 +0000 Manifest this update: Sat 06 Sep 2025 15:56:52 +0000 Manifest next update: Tue 09 Sep 2025 21:23:52 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: cBT5ywqXs/yy2cxvSDFOyR/Dq8vG9SUkTD9zhXLEaCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ed:48:d3:57:83:8b:7d:dc:94:d7:40:0f:01:6a:60:97:79:71:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Sep 6 15:56:52 2025 GMT Not After : Sep 9 21:23:52 2025 GMT Subject: CN=B0018663A0D595130905F5E6DF4FA3D6C623A67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:e7:f7:aa:e6:c1:7a:08:da:b1:a1:a8:cc: 10:7d:59:73:6e:b3:50:45:95:56:60:9c:c1:18:2b: 43:8b:9d:03:eb:bf:e5:28:24:ed:fd:e8:72:90:1f: 11:a9:28:97:85:02:98:f1:dc:f6:18:2b:cb:c6:6e: d4:60:d5:c3:c8:cb:34:64:74:24:6e:e0:b4:2a:a1: 41:3d:cc:44:95:5d:e6:71:13:c9:96:80:85:c8:a8: 5c:b8:95:7a:90:44:c0:c0:03:31:f1:45:06:87:31: 7e:bc:3f:18:57:e8:0a:6e:6c:ec:ab:86:ee:25:dd: 1f:f6:aa:4c:67:90:23:30:f5:6d:fb:02:80:ff:aa: 5b:65:51:56:91:93:e6:fe:0e:2c:23:05:d6:0f:8f: 11:12:ed:36:d3:12:11:7e:2a:29:4a:55:e4:d8:61: 69:7d:07:7e:23:d8:1a:53:21:17:8d:ad:f9:e3:0f: 01:4e:07:28:7a:34:f3:e4:e8:66:a7:09:59:11:50: 4a:bd:99:68:2b:4a:2c:1f:3e:cf:78:83:a4:23:c8: c6:49:ec:ee:42:bc:ee:20:f6:91:41:36:cf:74:d3: 43:4c:b9:f3:70:67:88:11:f8:ff:c4:62:07:2e:46: 05:8b:ee:e4:9a:0e:fd:99:0d:8f:9a:52:5d:69:d3: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:86:63:A0:D5:95:13:09:05:F5:E6:DF:4F:A3:D6:C6:23:A6:7D X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:45:99:6f:86:bc:75:b7:50:68:e0:b8:48:96:fa:c4:68:22: 86:b2:27:d1:ee:13:f1:e0:69:1e:92:65:ce:b6:91:33:a3:e5: d9:b2:3b:82:55:a3:15:26:38:8c:00:4d:75:e4:8b:51:d7:b8: 28:83:f7:76:f8:0a:92:59:ac:87:e2:12:4b:2a:29:2b:78:83: ca:75:5b:e6:ad:19:92:4c:a3:a7:aa:dc:e2:72:e1:98:4e:ce: 56:77:d8:3d:30:9a:4f:85:97:d2:72:8a:f5:d9:97:cd:b0:9c: 65:4e:2f:a7:a3:ce:f4:3c:b8:91:96:4e:33:e9:4c:90:a4:81: 65:c2:bc:97:57:17:77:ad:62:97:cf:34:5e:b8:a5:c7:09:19: d3:00:54:e4:ac:17:e0:70:77:78:6a:95:6b:4f:6c:1b:0e:5d: de:9a:0f:75:eb:1e:b7:44:b1:d4:30:25:0c:e4:47:99:fe:8f: a3:36:9e:83:b2:c9:bf:39:12:2b:20:3e:0b:cd:68:44:6c:d4: b7:76:25:70:3b:d8:ec:19:d9:9c:a9:c8:7b:0e:c1:d7:41:6a: a5:d3:72:64:07:5e:ca:4b:c9:f7:20:22:10:e0:34:c6:00:04: 44:39:81:ab:b2:60:9e:fb:78:93:13:7c:65:7e:12:17:46:00: 92:ec:58:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+1I01eDi33clNdADwFqYJd5cd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA5MDYxNTU2NTJaFw0yNTA5MDkyMTIzNTJaMDMxMTAvBgNV BAMTKEIwMDE4NjYzQTBENTk1MTMwOTA1RjVFNkRGNEZBM0Q2QzYyM0E2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKuf3qubBegjasaGozBB9WXNu s1BFlVZgnMEYK0OLnQPrv+UoJO396HKQHxGpKJeFApjx3PYYK8vGbtRg1cPIyzRk dCRu4LQqoUE9zESVXeZxE8mWgIXIqFy4lXqQRMDAAzHxRQaHMX68PxhX6ApubOyr hu4l3R/2qkxnkCMw9W37AoD/qltlUVaRk+b+DiwjBdYPjxES7TbTEhF+KilKVeTY YWl9B34j2BpTIReNrfnjDwFOByh6NPPk6GanCVkRUEq9mWgrSiwfPs94g6QjyMZJ 7O5CvO4g9pFBNs9000NMufNwZ4gR+P/EYgcuRgWL7uSaDv2ZDY+aUl1p03JBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsAGGY6DVlRMJBfXm30+j1sYjpn0wHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdFmW+GvHW3UGjguEiW+sRoIoayJ9HuE/Hg aR6SZc62kTOj5dmyO4JVoxUmOIwATXXki1HXuCiD93b4CpJZrIfiEksqKSt4g8p1 W+atGZJMo6eq3OJy4ZhOzlZ32D0wmk+Fl9JyivXZl82wnGVOL6ejzvQ8uJGWTjPp TJCkgWXCvJdXF3etYpfPNF64pccJGdMAVOSsF+Bwd3hqlWtPbBsOXd6aD3XrHrdE sdQwJQzkR5n+j6M2noOyyb85EisgPgvNaERs1Ld2JXA72OwZ2ZypyHsOwddBaqXT cmQHXspLyfcgIhDgNMYABEQ5gauyYJ77eJMTfGV+EhdGAJLsWCs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:50 2025 by rpki-client