$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: HtiPHl/YBMVRMKrxxGH0G/Bk4iBmoUcQ+ri+CT0hNs0= Subject key identifier: D8:1E:60:1E:6F:42:BE:F5:0F:1E:6A:7D:33:11:18:6B:A7:96:F9:A2 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 4C053912DACB3C4EEF58552FA1A2CE20262CE10A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 04D4 Signing time: Wed 03 Sep 2025 15:21:44 +0000 Manifest this update: Wed 03 Sep 2025 15:16:44 +0000 Manifest next update: Sun 07 Sep 2025 02:29:44 +0000 Files and hashes: 1: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=) 2: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=) 3: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: IbhEjC+zlRPVjsaeFRKF6bq/ChYwqcnLE9RQ6H/pKvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 02:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:05:39:12:da:cb:3c:4e:ef:58:55:2f:a1:a2:ce:20:26:2c:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Sep 3 15:16:44 2025 GMT Not After : Sep 7 02:29:44 2025 GMT Subject: CN=D81E601E6F42BEF50F1E6A7D3311186BA796F9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:e0:1c:7e:9e:2d:dc:a3:f9:57:e2:6f:f0: 35:50:61:8a:9d:32:75:ed:d6:90:0a:d4:28:1a:2e: 81:f5:a8:ea:9f:a3:2f:8e:99:13:4d:9e:89:7d:63: 15:81:ed:85:19:a3:70:1f:4e:67:4d:ad:e8:1e:4a: ac:b5:fc:8c:71:d2:a2:2e:27:dc:e5:05:ca:8a:a1: a5:86:c3:58:bf:f7:f4:b6:7f:3f:66:d0:cf:b7:e7: 23:75:32:e1:de:e9:28:e8:6b:d6:69:81:e9:8b:e3: de:87:98:46:bc:ad:db:5e:2d:4e:60:86:a6:5e:c3: a3:ea:c1:81:44:e7:91:53:f9:a3:c5:80:23:81:14: ba:26:18:c7:99:47:90:f4:09:94:ad:79:5d:fc:ec: f7:64:a6:0a:de:f8:0e:ac:d4:08:fb:27:f5:cb:83: 5c:82:ea:4f:b4:66:24:ce:3c:73:2e:ee:f0:e7:7c: 5c:7c:05:9f:da:16:ba:8f:d0:a6:ba:18:c4:6c:a0: 07:49:40:db:c3:4c:35:8a:7e:82:94:47:3f:e8:83: 1a:d0:e3:30:46:be:6d:5d:5b:69:00:b9:ac:6c:3a: b4:9b:78:34:6f:37:9c:2b:d3:c0:21:d1:ff:de:bb: 7b:cb:4e:d3:da:4e:fb:94:d7:dd:28:66:37:b7:da: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1E:60:1E:6F:42:BE:F5:0F:1E:6A:7D:33:11:18:6B:A7:96:F9:A2 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:37:98:10:0f:1b:6a:74:49:5e:22:d1:07:3d:fb:bd:d5:51: b9:aa:5b:39:ab:5a:7c:76:f6:0b:ea:8c:5c:38:52:1c:95:e2: 3c:d7:b2:50:7e:a3:c0:aa:ee:ed:61:0a:bd:d0:68:b0:72:5f: 7c:c5:b5:91:35:7f:81:a7:90:73:d5:59:f8:a0:7a:3f:5f:72: 67:48:7a:35:75:64:82:e7:71:49:45:f9:b7:66:32:54:f9:a9: 94:16:fd:82:fc:43:b0:4c:42:07:66:9e:2a:ac:40:71:fb:a7: 42:bc:47:3d:00:14:ac:c8:f6:fd:95:06:f8:fa:2c:a2:a4:22: 82:52:32:dc:09:8c:0f:f1:07:c6:46:d9:a8:5c:32:93:72:91: 28:e1:57:c2:bb:a9:78:f0:67:b4:fe:3f:4a:96:f9:5f:34:6c: cc:e1:2f:8c:e7:43:5b:d7:08:7f:72:de:58:ea:a5:6c:fb:e7: 29:44:84:1d:e7:f3:f0:49:06:a3:aa:c8:27:dc:36:c1:db:5a: a4:47:65:6c:52:79:28:2a:7c:cd:1f:02:08:87:ea:7a:1f:87: 2b:bc:0b:95:0e:e4:4e:f6:d4:d2:e1:d0:7d:ed:d4:33:f2:f1: ac:3e:1b:f6:fc:68:20:37:41:9d:df:c2:39:38:09:e3:f9:91: 59:67:40:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAU5EtrLPE7vWFUvoaLOICYs4QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTA5MDMxNTE2NDRaFw0yNTA5MDcwMjI5NDRaMDMxMTAvBgNV BAMTKEQ4MUU2MDFFNkY0MkJFRjUwRjFFNkE3RDMzMTExODZCQTc5NkY5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzduAcfp4t3KP5V+Jv8DVQYYqd MnXt1pAK1CgaLoH1qOqfoy+OmRNNnol9YxWB7YUZo3AfTmdNregeSqy1/Ixx0qIu J9zlBcqKoaWGw1i/9/S2fz9m0M+35yN1MuHe6Sjoa9ZpgemL496HmEa8rdteLU5g hqZew6PqwYFE55FT+aPFgCOBFLomGMeZR5D0CZSteV387Pdkpgre+A6s1Aj7J/XL g1yC6k+0ZiTOPHMu7vDnfFx8BZ/aFrqP0Ka6GMRsoAdJQNvDTDWKfoKURz/ogxrQ 4zBGvm1dW2kAuaxsOrSbeDRvN5wr08Ah0f/eu3vLTtPaTvuU190oZje32n8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2B5gHm9CvvUPHmp9MxEYa6eW+aIwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGw3mBAPG2p0SV4i0Qc9+73VUbmqWzmrWnx2 9gvqjFw4UhyV4jzXslB+o8Cq7u1hCr3QaLByX3zFtZE1f4GnkHPVWfigej9fcmdI ejV1ZILncUlF+bdmMlT5qZQW/YL8Q7BMQgdmniqsQHH7p0K8Rz0AFKzI9v2VBvj6 LKKkIoJSMtwJjA/xB8ZG2ahcMpNykSjhV8K7qXjwZ7T+P0qW+V80bMzhL4znQ1vX CH9y3ljqpWz75ylEhB3n8/BJBqOqyCfcNsHbWqRHZWxSeSgqfM0fAgiH6nofhyu8 C5UO5E721NLh0H3t1DPy8aw+G/b8aCA3QZ3fwjk4CeP5kVlnQH0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:53 2025 by rpki-client