$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: AGO/thsmRVHkw/o2RsKmigEaQm/0LSmU+dmdCohryOc= Subject key identifier: 9A:DE:AB:84:A2:5B:EB:ED:87:FE:8C:FC:8D:A1:2E:6C:B6:BB:5B:05 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 0DDB3470538897226D7A31653711E82651DD58BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: D4 Signing time: Tue 03 Jun 2025 13:12:36 +0000 Manifest this update: Tue 03 Jun 2025 13:07:36 +0000 Manifest next update: Fri 06 Jun 2025 22:18:36 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: PGSwK9Wdr3OU+xsn9SPwEEmBEqCYT0Wu9ckstvqAjlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:db:34:70:53:88:97:22:6d:7a:31:65:37:11:e8:26:51:dd:58:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Jun 3 13:07:36 2025 GMT Not After : Jun 6 22:18:36 2025 GMT Subject: CN=9ADEAB84A25BEBED87FE8CFC8DA12E6CB6BB5B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:b2:82:48:2c:74:f7:2f:e2:c7:39:25:e7: ab:3a:e9:a7:d1:83:3f:b7:9b:06:6c:9f:bd:8c:5a: 4a:dc:ad:a4:9a:e0:de:39:3e:4a:26:0c:a6:03:3c: 3a:a1:73:28:28:3a:cb:ca:ff:4d:a9:04:a6:1a:45: 88:5f:01:5f:d7:ac:2b:6f:bd:a7:a9:fd:af:a4:a8: 2a:3e:29:92:27:ec:87:df:5a:2a:52:4b:21:d7:b0: cc:80:ee:b7:2c:46:ad:c6:f6:96:1f:c6:bc:9a:c1: 51:e6:ab:1e:27:8c:96:2e:6f:9f:ba:b4:66:83:b1: 8c:08:77:3b:ca:29:5a:76:71:10:50:89:22:b4:16: c7:a1:f5:6a:d3:a1:64:ce:83:ac:d6:ea:18:1a:6c: 83:8a:12:e1:7e:80:81:81:36:6e:cc:2d:81:88:06: 52:db:39:03:ea:6b:d2:08:12:0f:52:4a:f4:a6:79: d9:26:3a:d4:13:75:20:33:d1:cd:08:94:41:b4:cb: eb:71:1f:4e:27:82:ed:65:ee:ce:e9:0d:e7:a6:93: 93:2d:21:4f:de:a9:81:47:25:b3:f4:a5:ab:a8:52: b3:7d:06:7b:b4:e3:87:fe:14:18:3e:da:48:b6:6a: 61:a1:d1:58:14:31:86:5e:4d:ff:1f:1f:9d:43:d0: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DE:AB:84:A2:5B:EB:ED:87:FE:8C:FC:8D:A1:2E:6C:B6:BB:5B:05 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:07:fb:9c:b6:4e:49:15:be:d5:78:49:15:23:cf:b6:1f:b1: 7f:16:22:61:ef:08:ef:11:fb:39:ae:86:87:b3:f7:2e:81:74: ef:fc:06:da:e7:1d:c2:d8:ad:c8:ee:e9:04:d9:9e:40:9a:42: 16:60:39:e6:8b:61:d5:07:6a:6f:17:1a:37:b2:4e:88:bc:90: 8a:96:89:de:85:c9:2e:27:d7:93:91:f8:18:27:f6:5b:05:bd: 44:3e:5e:46:e0:d2:35:d1:10:04:bd:7b:9d:11:80:e3:4f:ed: 5f:a3:a5:4c:da:91:05:b4:63:c6:94:c8:f7:1e:03:3b:f4:69: b0:f9:b2:a2:1d:a3:f8:ec:a0:62:b1:dd:f4:93:ec:53:08:ff: 85:a0:e7:18:ce:a8:05:92:e3:2d:2c:1f:42:b5:f4:79:bc:7c: a0:08:df:61:6c:83:9e:6d:d3:d5:77:ef:c2:67:0e:6c:ff:50: ca:8b:62:04:2c:f7:47:99:a1:0c:8a:a8:6b:64:75:9b:3e:c2: ef:f0:51:d6:1d:0c:73:56:17:87:4d:d6:04:52:6f:60:d0:50: e2:97:92:71:63:da:12:9f:50:c1:b8:e3:a6:8d:1c:1c:fd:76: e2:fb:c9:c3:79:0b:6f:9a:98:3c:1c:38:fa:0a:14:85:9e:47: 85:34:38:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDds0cFOIlyJtejFlNxHoJlHdWLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTA2MDMxMzA3MzZaFw0yNTA2MDYyMjE4MzZaMDMxMTAvBgNV BAMTKDlBREVBQjg0QTI1QkVCRUQ4N0ZFOENGQzhEQTEyRTZDQjZCQjVCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvbKCSCx09y/ixzkl56s66afR gz+3mwZsn72MWkrcraSa4N45PkomDKYDPDqhcygoOsvK/02pBKYaRYhfAV/XrCtv vaep/a+kqCo+KZIn7IffWipSSyHXsMyA7rcsRq3G9pYfxryawVHmqx4njJYub5+6 tGaDsYwIdzvKKVp2cRBQiSK0Fseh9WrToWTOg6zW6hgabIOKEuF+gIGBNm7MLYGI BlLbOQPqa9IIEg9SSvSmedkmOtQTdSAz0c0IlEG0y+txH04ngu1l7s7pDeemk5Mt IU/eqYFHJbP0pauoUrN9Bnu044f+FBg+2ki2amGh0VgUMYZeTf8fH51D0PthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmt6rhKJb6+2H/oz8jaEubLa7WwUwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQH+5y2TkkVvtV4SRUjz7YfsX8WImHvCO8R +zmuhoez9y6BdO/8BtrnHcLYrcju6QTZnkCaQhZgOeaLYdUHam8XGjeyToi8kIqW id6FyS4n15OR+Bgn9lsFvUQ+Xkbg0jXREAS9e50RgONP7V+jpUzakQW0Y8aUyPce Azv0abD5sqIdo/jsoGKx3fST7FMI/4Wg5xjOqAWS4y0sH0K19Hm8fKAI32Fsg55t 09V378JnDmz/UMqLYgQs90eZoQyKqGtkdZs+wu/wUdYdDHNWF4dN1gRSb2DQUOKX knFj2hKfUMG446aNHBz9duL7ycN5C2+amDwcOPoKFIWeR4U0OJ0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:56 2025 by rpki-client