$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: vRz9+t34ptdnN0N5CtvEezWGkvGiIu6MW1MFNS6axRU= Subject key identifier: 3F:55:35:4F:9E:0A:D0:26:7F:00:11:1B:71:B9:8B:A0:7B:C9:92:33 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 2430749813C0366F6A01906C318C1129D97FFC8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: FD Signing time: Thu 04 Sep 2025 23:51:41 +0000 Manifest this update: Thu 04 Sep 2025 23:46:41 +0000 Manifest next update: Mon 08 Sep 2025 02:52:41 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: /wTY8JuvjrKWwBae6zHx3Gi+oDZMkuZxpFMcFMEGJLY=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:30:74:98:13:c0:36:6f:6a:01:90:6c:31:8c:11:29:d9:7f:fc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Sep 4 23:46:41 2025 GMT Not After : Sep 8 02:52:41 2025 GMT Subject: CN=3F55354F9E0AD0267F00111B71B98BA07BC99233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:c7:d4:b7:bc:d7:76:74:57:1b:e5:17:ad: ae:1a:98:d2:d9:dd:37:67:f1:96:65:6c:1b:d2:24: 47:5b:10:ac:8a:d0:10:55:54:c5:49:81:25:84:40: b0:30:18:46:01:b9:cc:24:ff:a6:71:03:ef:b3:44: 99:28:62:a9:eb:75:46:33:26:bf:b8:2f:e1:e6:52: 54:7c:98:de:3f:b7:fe:8a:e3:1b:0a:69:01:e2:8e: 21:6f:f2:fd:df:09:5e:df:1e:a1:3b:12:93:f1:fb: 21:22:15:d5:52:5e:9f:c8:68:02:ee:52:ab:9a:16: 14:e6:6c:da:22:37:86:74:e0:13:1a:b5:17:1a:af: fc:aa:bc:1b:23:c8:7b:60:d8:96:77:b9:fa:b7:25: e4:a2:d5:56:c1:6e:35:49:f1:4d:f4:ab:9b:23:e2: 4f:b6:3c:d4:a2:46:88:41:94:09:d8:b0:41:25:ef: 85:66:cd:71:38:88:8e:a3:84:bc:7a:c0:4a:a4:52: c5:ad:9f:1f:47:bf:af:90:04:73:a3:74:fc:5b:6a: 49:29:39:3f:43:dd:0b:29:53:88:82:dd:07:fa:a6: 04:6a:66:90:e5:b8:4a:7a:62:f3:db:9e:c9:bc:e2: 50:6a:77:53:18:e4:de:c7:42:92:b5:78:b9:b3:c4: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:35:4F:9E:0A:D0:26:7F:00:11:1B:71:B9:8B:A0:7B:C9:92:33 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:32:4d:6f:d9:fa:6d:35:2a:ce:26:bc:cc:53:04:9e:bb:20: c8:2d:da:d7:73:7e:84:8a:b9:82:eb:fb:47:a9:1a:f3:ca:0a: be:74:7e:c7:d7:d5:a7:ec:47:81:d5:d4:f9:cd:08:e3:6a:44: 52:a9:c7:a5:27:bb:be:27:a1:4f:d4:19:3a:ef:05:45:18:77: 2c:8f:a5:92:6d:a7:2d:67:e5:34:d5:25:00:5f:ae:86:69:36: d8:b2:e0:f3:b4:2c:d7:9a:3c:e9:01:c1:ee:94:31:22:9b:89: 22:90:8d:aa:5f:2f:43:6c:9f:fc:c1:a5:4f:25:46:8d:0d:4b: 4e:ae:fc:f5:8b:d5:b6:48:6f:67:da:4d:b9:a9:d1:18:d6:99: c0:0f:c4:30:51:ce:3b:75:7b:bc:b9:d5:d4:4f:6a:ba:7d:b2: 86:7b:95:96:e0:37:fa:1d:ad:f0:13:0f:b7:23:a9:e2:22:81: ac:22:a1:0b:ff:16:f3:21:9b:7d:4b:f9:ab:db:b1:cc:e8:ba: 95:f1:d4:2a:2c:35:16:6f:55:e9:46:8a:94:ab:55:70:38:4d: 24:d8:95:14:0b:54:9a:96:a2:84:88:22:cd:05:b0:b3:61:ad: f2:cd:e6:12:32:36:af:dc:a8:76:ce:41:fb:54:d5:a3:c2:8d: 46:8b:96:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDB0mBPANm9qAZBsMYwRKdl//IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTA5MDQyMzQ2NDFaFw0yNTA5MDgwMjUyNDFaMDMxMTAvBgNV BAMTKDNGNTUzNTRGOUUwQUQwMjY3RjAwMTExQjcxQjk4QkEwN0JDOTkyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7cfUt7zXdnRXG+UXra4amNLZ 3Tdn8ZZlbBvSJEdbEKyK0BBVVMVJgSWEQLAwGEYBucwk/6ZxA++zRJkoYqnrdUYz Jr+4L+HmUlR8mN4/t/6K4xsKaQHijiFv8v3fCV7fHqE7EpPx+yEiFdVSXp/IaALu UquaFhTmbNoiN4Z04BMatRcar/yqvBsjyHtg2JZ3ufq3JeSi1VbBbjVJ8U30q5sj 4k+2PNSiRohBlAnYsEEl74VmzXE4iI6jhLx6wEqkUsWtnx9Hv6+QBHOjdPxbakkp OT9D3QspU4iC3Qf6pgRqZpDluEp6YvPbnsm84lBqd1MY5N7HQpK1eLmzxAFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1U1T54K0CZ/ABEbcbmLoHvJkjMwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0yTW/Z+m01Ks4mvMxTBJ67IMgt2tdzfoSK uYLr+0epGvPKCr50fsfX1afsR4HV1PnNCONqRFKpx6Unu74noU/UGTrvBUUYdyyP pZJtpy1n5TTVJQBfroZpNtiy4PO0LNeaPOkBwe6UMSKbiSKQjapfL0Nsn/zBpU8l Ro0NS06u/PWL1bZIb2faTbmp0RjWmcAPxDBRzjt1e7y51dRParp9soZ7lZbgN/od rfATD7cjqeIigawioQv/FvMhm31L+avbsczoupXx1CosNRZvVelGipSrVXA4TSTY lRQLVJqWooSIIs0FsLNhrfLN5hIyNq/cqHbOQftU1aPCjUaLliY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:03:13 2025 by rpki-client