$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: U6+SfMStgMojX3XbBTdi7YAL3l+cveinzzBdeYf2LBA= Subject key identifier: 39:53:3E:B8:52:95:A5:1D:8D:9B:F6:23:E4:58:A5:12:67:F2:C3:16 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 5B1CFC3EBF36CB51EDA3B640B149D2751A466616 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 012C Signing time: Thu 04 Sep 2025 12:41:23 +0000 Manifest this update: Thu 04 Sep 2025 12:36:23 +0000 Manifest next update: Sun 07 Sep 2025 19:29:23 +0000 Files and hashes: 1: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: Il4e9aqe1b0i+Q33VF84T7SOeWjJjGb/Rw/ra7qGx6A=) 2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: tzUv6ZoVBauP5SIKaVDlU1vK/lJ77kKziRyhRQRActU=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: HqoFLqQTCKU4cORLO+ItGdYYwIE+m/xw0UJLEPlmioY=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: 5Hz3DyrO7wQwpXeRffEbosBkCXLVJDhMxl5XYFRTw18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 19:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1c:fc:3e:bf:36:cb:51:ed:a3:b6:40:b1:49:d2:75:1a:46:66:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Sep 4 12:36:23 2025 GMT Not After : Sep 7 19:29:23 2025 GMT Subject: CN=39533EB85295A51D8D9BF623E458A51267F2C316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:97:4f:a2:d1:2e:99:fc:e4:9f:ea:83:42: a4:51:fb:ca:d3:e7:bf:35:9f:fa:d3:cc:84:d1:ea: c5:6e:8a:17:f3:03:01:c5:36:42:39:0a:0e:54:b3: b4:47:bf:50:f3:52:2e:24:41:f2:02:85:38:9a:74: 76:15:95:c5:c1:99:5d:04:ef:94:5c:e3:9b:19:e7: f8:3d:63:7e:71:84:4e:78:ef:57:17:6b:d6:77:d0: e9:74:54:37:6e:d2:2c:55:a6:35:67:d9:aa:29:86: cf:75:0e:6e:e7:f1:1c:16:fd:ee:7f:d9:a6:57:ae: a9:cc:13:bd:a2:83:97:8a:11:c3:45:b6:46:bd:f9: 5b:9b:af:eb:af:27:d4:a8:a7:69:b1:9e:e0:09:51: 05:8c:d3:54:d3:4b:ac:f8:a3:f3:a9:d4:8e:0f:0e: 18:e0:c3:c5:87:76:f4:22:cf:dd:5a:6b:69:8c:3d: 97:af:b9:fd:93:ab:5a:84:67:e6:fb:f4:87:bd:93: 94:64:6a:db:9c:79:20:88:ef:cb:ff:c1:36:ca:a9: 4a:39:60:26:77:db:5d:96:e8:34:12:a4:8f:e5:12: 28:42:64:ee:28:5c:99:08:64:a9:6b:82:00:ae:7a: 88:08:b0:87:57:f1:84:ab:65:70:c2:98:d1:73:a7: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:53:3E:B8:52:95:A5:1D:8D:9B:F6:23:E4:58:A5:12:67:F2:C3:16 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:ef:e8:4b:9d:7f:9d:18:ac:2e:47:b8:e9:8d:43:e1:11: 28:ff:bd:d9:33:f1:fa:c3:8b:68:49:cf:5f:1c:a8:e4:b8:98: 30:4b:7a:df:b4:66:85:ac:7c:c9:bd:2b:64:ff:6e:b7:25:40: 85:fe:74:75:d4:e8:28:94:ad:c8:46:23:f6:e6:02:00:55:f5: 8a:c2:da:a0:d8:fc:ab:44:12:c9:7b:c4:e0:69:db:d9:61:1b: 98:9e:71:0b:4d:31:f9:22:bd:5b:69:68:79:26:35:03:63:47: 32:92:ea:c9:bb:bb:a6:1e:21:95:b6:22:86:e9:49:6f:4f:55: 1d:71:5f:28:f4:da:09:ee:55:bc:c5:35:19:2f:2d:ef:03:e0: bb:a3:ed:27:47:97:5e:e2:b8:16:b5:ed:7a:f4:b4:e8:c5:23: a6:46:5e:0f:0c:0c:a4:bc:86:ed:d7:e9:e7:ed:dc:fe:ad:a2: 62:94:5e:ca:36:38:20:60:ef:04:99:16:a9:c0:15:9e:cd:58: c4:66:96:57:0a:59:76:ce:80:4b:b4:c0:6c:c1:57:f7:39:fc: f3:bc:29:42:a8:cd:d6:a0:42:d9:65:00:cc:1a:ba:ad:9a:07: d6:44:62:54:b3:ef:06:9a:b8:33:5a:e6:cb:a5:f0:79:62:91: e1:15:75:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxz8Pr82y1Hto7ZAsUnSdRpGZhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTA5MDQxMjM2MjNaFw0yNTA5MDcxOTI5MjNaMDMxMTAvBgNV BAMTKDM5NTMzRUI4NTI5NUE1MUQ4RDlCRjYyM0U0NThBNTEyNjdGMkMzMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rpdPotEumfzkn+qDQqRR+8rT 5781n/rTzITR6sVuihfzAwHFNkI5Cg5Us7RHv1DzUi4kQfIChTiadHYVlcXBmV0E 75Rc45sZ5/g9Y35xhE5471cXa9Z30Ol0VDdu0ixVpjVn2aophs91Dm7n8RwW/e5/ 2aZXrqnME72ig5eKEcNFtka9+Vubr+uvJ9Sop2mxnuAJUQWM01TTS6z4o/Op1I4P Dhjgw8WHdvQiz91aa2mMPZevuf2Tq1qEZ+b79Ie9k5RkatuceSCI78v/wTbKqUo5 YCZ3212W6DQSpI/lEihCZO4oXJkIZKlrggCueogIsIdX8YSrZXDCmNFzp7YDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVM+uFKVpR2Nm/Yj5FilEmfywxYwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcz7+hLnX+dGKwuR7jpjUPhESj/vdkz8frD i2hJz18cqOS4mDBLet+0ZoWsfMm9K2T/brclQIX+dHXU6CiUrchGI/bmAgBV9YrC 2qDY/KtEEsl7xOBp29lhG5iecQtNMfkivVtpaHkmNQNjRzKS6sm7u6YeIZW2Iobp SW9PVR1xXyj02gnuVbzFNRkvLe8D4Luj7SdHl17iuBa17Xr0tOjFI6ZGXg8MDKS8 hu3X6eft3P6tomKUXso2OCBg7wSZFqnAFZ7NWMRmllcKWXbOgEu0wGzBV/c5/PO8 KUKozdagQtllAMwauq2aB9ZEYlSz7waauDNa5sul8HlikeEVdbs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:54 2025 by rpki-client