$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json) Hash identifier: XlLpLCi6ko+ShfjtvdLyYaZUPks9hnG60ktNsFWV2to= Subject key identifier: 3C:CF:68:E0:91:81:C7:03:B7:5C:2D:59:C5:1E:89:2D:BD:8F:5E:3C Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Certificate serial: 708811E5670B07F11725CF457C5909A2713A7D73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft Manifest number: 04DC Signing time: Mon 08 Sep 2025 19:11:01 +0000 Manifest this update: Mon 08 Sep 2025 19:06:01 +0000 Manifest next update: Thu 11 Sep 2025 22:02:01 +0000 Files and hashes: 1: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: ZeBUf/2xTGD8cxyGBH4bHDcl23+zglooHDqHxRoxWJo=) 2: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=) 3: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=) 4: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:88:11:e5:67:0b:07:f1:17:25:cf:45:7c:59:09:a2:71:3a:7d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Validity Not Before: Sep 8 19:06:01 2025 GMT Not After : Sep 11 22:02:01 2025 GMT Subject: CN=3CCF68E09181C703B75C2D59C51E892DBD8F5E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:2d:d4:f5:cd:7d:8d:dd:0e:a7:66:c2:0f: b1:c7:0a:8d:bf:53:1f:c8:24:1c:7a:b5:d7:a3:75: de:af:1a:7a:64:f6:a4:28:e5:01:c4:a8:cb:dd:1b: 27:2e:ed:be:c9:92:76:62:c9:01:42:6a:23:e0:ec: 91:f4:e7:b1:9e:fe:99:d5:76:8d:aa:85:e3:fa:7e: e5:a9:df:09:53:4e:9b:e6:eb:73:f0:50:df:0c:46: 0d:a4:85:b0:eb:0f:83:14:00:81:97:a5:21:61:d0: f2:87:27:9b:44:48:fe:69:bc:69:5a:19:8a:84:d8: c3:26:43:c1:b8:c3:f6:f3:82:0b:04:d9:49:8c:70: 41:58:f0:5c:79:82:db:5b:25:2f:07:40:89:0e:1a: 26:a7:36:85:5d:d8:15:09:1d:80:26:f3:b5:6e:25: 2b:d2:80:16:ea:4c:a2:f0:89:f5:ec:e0:f5:4d:26: 5c:9d:cd:4b:d1:9e:bc:db:c0:33:91:0a:d7:d7:7f: 24:5a:06:7e:5a:79:5f:00:f0:5d:b0:b4:76:0e:dc: b1:00:bb:37:59:21:d4:36:d1:08:ec:d9:c3:dc:54: cd:cd:19:bb:5b:98:f6:ea:07:a3:a9:82:f3:40:94: 85:27:88:49:87:36:e7:b1:46:2b:5c:b3:dd:0b:0d: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:68:E0:91:81:C7:03:B7:5C:2D:59:C5:1E:89:2D:BD:8F:5E:3C X509v3 Authority Key Identifier: keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:59:15:0b:04:bc:7c:6f:8c:50:5d:74:bf:ee:d4:c8:98: b2:6f:85:b0:89:2b:73:20:f9:79:3a:31:43:78:66:dc:e4:f7: c9:b3:b3:2b:64:ba:fe:20:57:6c:67:85:f5:67:98:ba:91:47: 98:2f:4a:22:58:ea:e4:5c:48:5e:67:99:50:92:fb:ae:46:b3: d9:a2:59:38:df:e3:3f:41:3d:54:4a:59:17:60:91:d4:8c:fb: 3d:47:1a:4b:5e:6d:c5:0c:45:4a:42:9f:d7:07:29:00:63:f9: 2b:c9:d3:ad:68:dc:47:87:b2:a9:ce:ff:0c:84:df:0d:f9:17: 73:11:ed:09:d2:3d:69:c6:c4:22:77:e9:37:e0:38:db:46:90: fe:6a:a4:34:41:3d:6e:c8:7b:71:9d:9d:0b:95:27:9c:e6:26: d8:98:9b:93:47:3e:17:ce:c6:1c:ba:40:2b:57:0f:52:95:0b: 1d:a1:40:c6:98:12:b8:ad:30:ad:6f:65:ee:ac:15:8b:e4:fd: 60:f2:55:17:f8:80:62:ab:e2:9b:8d:d8:35:b2:39:13:56:be: b9:81:eb:75:ad:98:54:08:af:b0:a5:0b:7c:17:07:f1:69:fe: da:0f:df:da:43:32:63:6c:57:26:6b:8d:8d:3e:ea:4d:3a:cb: fb:52:bc:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIgR5WcLB/EXJc9FfFkJonE6fXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy OUZDMTNBOTAeFw0yNTA5MDgxOTA2MDFaFw0yNTA5MTEyMjAyMDFaMDMxMTAvBgNV BAMTKDNDQ0Y2OEUwOTE4MUM3MDNCNzVDMkQ1OUM1MUU4OTJEQkQ4RjVFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCES3U9c19jd0Op2bCD7HHCo2/ Ux/IJBx6tdejdd6vGnpk9qQo5QHEqMvdGycu7b7JknZiyQFCaiPg7JH057Ge/pnV do2qheP6fuWp3wlTTpvm63PwUN8MRg2khbDrD4MUAIGXpSFh0PKHJ5tESP5pvGla GYqE2MMmQ8G4w/bzggsE2UmMcEFY8Fx5gttbJS8HQIkOGianNoVd2BUJHYAm87Vu JSvSgBbqTKLwifXs4PVNJlydzUvRnrzbwDORCtfXfyRaBn5aeV8A8F2wtHYO3LEA uzdZIdQ20Qjs2cPcVM3NGbtbmPbqB6OpgvNAlIUniEmHNuexRitcs90LDZudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPM9o4JGBxwO3XC1ZxR6JLb2PXjwwHwYDVR0j BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD MTNBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz NGYtYTcyMWMzNzJhNzRjLzAvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMx RDQyOUZDMTNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0VWRULBLx8b4xQXXS/7tTImLJvhbCJK3Mg +Xk6MUN4Ztzk98mzsytkuv4gV2xnhfVnmLqRR5gvSiJY6uRcSF5nmVCS+65Gs9mi WTjf4z9BPVRKWRdgkdSM+z1HGktebcUMRUpCn9cHKQBj+SvJ061o3EeHsqnO/wyE 3w35F3MR7QnSPWnGxCJ36TfgONtGkP5qpDRBPW7Ie3GdnQuVJ5zmJtiYm5NHPhfO xhy6QCtXD1KVCx2hQMaYEritMK1vZe6sFYvk/WDyVRf4gGKr4puN2DWyORNWvrmB 63WtmFQIr7ClC3wXB/Fp/toP39pDMmNsVyZrjY0+6k06y/tSvC4= -----END CERTIFICATE-----Generated at Tue Sep 9 02:44:33 2025 by rpki-client