$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: JmSmmTLKkVX9+vi3Vev7116vG8TyoEOpuAijEXotf6c= Subject key identifier: 47:A9:F8:49:12:F3:E7:8C:0C:6A:48:E1:6B:4D:0C:89:F0:16:53:3C Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 413E0B2B158C2DC1E074114F46B624C33844371E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 88 Signing time: Sun 07 Sep 2025 09:11:04 +0000 Manifest this update: Sun 07 Sep 2025 09:06:04 +0000 Manifest next update: Wed 10 Sep 2025 14:17:04 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: /xLgdbI90sYC0J0247NtQ0osunlTvM8eKW2LJPvOXD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3e:0b:2b:15:8c:2d:c1:e0:74:11:4f:46:b6:24:c3:38:44:37:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Sep 7 09:06:04 2025 GMT Not After : Sep 10 14:17:04 2025 GMT Subject: CN=47A9F84912F3E78C0C6A48E16B4D0C89F016533C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:8a:6d:5c:c0:bb:65:73:56:bf:b1:cf:c8: d8:c9:22:a1:5f:26:61:e3:fb:8c:e8:5e:d6:f0:0f: 10:c5:db:1f:9b:fb:26:3e:81:3e:cd:b2:9b:b5:43: 8b:d0:23:a9:29:9a:bd:1e:34:74:54:74:c7:a9:ec: 4a:73:c7:38:99:86:fa:a5:f3:09:ab:f1:83:92:db: cb:4c:e4:bb:84:2c:4f:cc:1d:e4:f4:5e:18:09:b8: e1:5c:78:d4:16:37:b5:5e:f8:59:fb:ae:4e:48:22: 77:31:d9:38:c0:d7:09:75:83:05:87:e2:fa:f0:0c: 6e:8a:9f:09:ba:65:20:36:24:63:b1:e8:30:ae:f8: 39:8e:f5:69:e7:f9:a4:3d:09:62:c3:09:41:f1:85: 57:8b:8f:f8:3b:cc:3f:77:aa:d6:8d:f6:df:33:9d: cc:d6:63:eb:10:4e:2c:a4:46:4b:eb:45:78:b3:97: 21:44:99:a8:85:23:6b:a4:27:dc:c2:db:e4:b2:44: c4:50:da:00:93:16:f0:70:7e:76:51:28:99:23:e6: 0c:9f:fe:4b:29:1d:5c:d7:85:fe:48:3a:24:39:0a: 22:32:23:70:e3:6d:32:9d:ed:ae:92:aa:bb:5b:9a: 27:8e:b0:56:b4:08:95:f2:97:4b:78:65:50:22:c4: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A9:F8:49:12:F3:E7:8C:0C:6A:48:E1:6B:4D:0C:89:F0:16:53:3C X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6c:7a:8a:55:7d:1b:29:4d:1f:7e:0a:c5:7e:a7:19:d1:b9: 4c:0d:a3:67:1d:f6:7d:69:c0:10:0a:4d:7f:b2:a6:9c:d3:23: 01:27:f2:df:7c:88:74:d0:ed:4a:73:db:6b:8a:f8:65:a3:fd: 75:22:cd:28:87:1a:d3:7c:ac:80:d6:93:5a:04:59:19:ed:34: cc:2f:84:d8:31:71:9d:bf:78:4e:0d:7b:4f:0f:94:df:dc:04: 47:02:65:50:42:50:d3:52:16:a3:49:e4:90:00:0c:27:f7:ae: 74:02:2e:bb:f6:cc:d9:93:2a:40:5a:48:ec:bd:10:e7:87:a3: 96:81:1e:56:6e:3e:40:4d:55:b2:68:2d:e2:fd:18:29:59:8c: ad:17:04:fc:b9:c1:2b:be:d2:b9:3d:98:4e:22:3f:b6:75:bd: bf:1e:48:9a:fd:73:cd:ae:9f:f5:23:21:13:b8:2c:ba:8a:49: df:dc:7b:b8:70:7b:a4:70:09:b5:6e:58:be:a9:63:c6:37:b2: 22:fe:53:46:ba:86:9f:b5:af:f2:d9:cd:5d:94:6e:c5:14:60: 7d:f9:f3:b8:5f:e8:e3:36:cf:03:8a:89:bd:9f:97:4d:c4:7f: 9c:ac:9b:81:63:0f:4c:c1:2c:04:f2:a0:e3:80:e4:a0:f9:cd: 4c:93:ab:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQT4LKxWMLcHgdBFPRrYkwzhENx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA5MDcwOTA2MDRaFw0yNTA5MTAxNDE3MDRaMDMxMTAvBgNV BAMTKDQ3QTlGODQ5MTJGM0U3OEMwQzZBNDhFMTZCNEQwQzg5RjAxNjUzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JIptXMC7ZXNWv7HPyNjJIqFf JmHj+4zoXtbwDxDF2x+b+yY+gT7Nspu1Q4vQI6kpmr0eNHRUdMep7EpzxziZhvql 8wmr8YOS28tM5LuELE/MHeT0XhgJuOFceNQWN7Ve+Fn7rk5IIncx2TjA1wl1gwWH 4vrwDG6Knwm6ZSA2JGOx6DCu+DmO9Wnn+aQ9CWLDCUHxhVeLj/g7zD93qtaN9t8z nczWY+sQTiykRkvrRXizlyFEmaiFI2ukJ9zC2+SyRMRQ2gCTFvBwfnZRKJkj5gyf /kspHVzXhf5IOiQ5CiIyI3DjbTKd7a6SqrtbmieOsFa0CJXyl0t4ZVAixBe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR6n4SRLz54wMakjha00MifAWUzwwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZseopVfRspTR9+CsV+pxnRuUwNo2cd9n1p wBAKTX+yppzTIwEn8t98iHTQ7Upz22uK+GWj/XUizSiHGtN8rIDWk1oEWRntNMwv hNgxcZ2/eE4Ne08PlN/cBEcCZVBCUNNSFqNJ5JAADCf3rnQCLrv2zNmTKkBaSOy9 EOeHo5aBHlZuPkBNVbJoLeL9GClZjK0XBPy5wSu+0rk9mE4iP7Z1vb8eSJr9c82u n/UjIRO4LLqKSd/ce7hwe6RwCbVuWL6pY8Y3siL+U0a6hp+1r/LZzV2UbsUUYH35 87hf6OM2zwOKib2fl03Ef5ysm4FjD0zBLATyoOOA5KD5zUyTq7g= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:08 2025 by rpki-client