$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: L6jMHtnA3HT3rQX/NQUPrYwN+mmWSq7380I46sBe4Mg= Subject key identifier: 4A:F2:AA:72:C6:EF:88:A3:29:5B:A7:69:37:A8:9F:CD:29:8C:EE:A8 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 6612CDEE57B303F69CD1284DA6F0423D22024CAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 0501 Signing time: Fri 05 Sep 2025 08:21:12 +0000 Manifest this update: Fri 05 Sep 2025 08:16:12 +0000 Manifest next update: Mon 08 Sep 2025 17:10:12 +0000 Files and hashes: 1: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 2: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 3: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) 4: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: lJgnnQjbGaN8ZFBUFwlFje4EQqjVpIWcfA2j5yum1hQ=) 5: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) 6: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:12:cd:ee:57:b3:03:f6:9c:d1:28:4d:a6:f0:42:3d:22:02:4c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Sep 5 08:16:12 2025 GMT Not After : Sep 8 17:10:12 2025 GMT Subject: CN=4AF2AA72C6EF88A3295BA76937A89FCD298CEEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ad:f0:fb:e8:b6:57:11:13:5a:59:1f:c1:83: 3e:02:8d:a1:60:3b:fe:34:0f:ae:7b:53:0f:09:62: cb:b9:0b:59:f0:7b:16:6a:e3:a2:6c:0b:7e:c2:93: 95:17:62:66:27:02:5c:76:74:36:15:ba:a9:99:0a: 13:7f:bd:52:4e:e8:bb:97:1b:92:68:db:22:0d:91: c9:88:15:bf:55:9f:16:2a:9f:56:fe:fe:c8:cd:c6: fb:4b:87:38:df:ac:68:4a:f2:53:f5:eb:8f:9f:5d: f2:79:eb:89:65:0d:f2:c2:4d:06:75:81:d8:19:26: 05:5b:42:f7:69:e9:47:a6:c4:a9:5e:72:b5:7b:86: 6d:5e:61:36:ad:64:78:bf:8e:8a:5b:ac:27:07:83: fa:5d:51:1d:a6:2d:6e:7b:a9:0c:04:b9:c5:af:9c: f4:ee:9b:53:5a:dd:63:35:f8:05:2c:2a:f4:04:e8: 43:8c:dc:83:0c:ba:f5:cd:4c:1b:eb:3e:d8:e6:ec: 43:bc:96:36:d9:09:ca:a8:c1:2c:95:02:df:d0:5c: e3:25:cc:90:a0:e6:2b:60:3c:60:69:04:46:9d:cb: f3:19:be:64:17:fe:9e:bf:62:a6:eb:05:5f:f7:68: 26:59:7a:e7:36:1d:29:e2:7c:54:b8:88:77:26:14: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:AA:72:C6:EF:88:A3:29:5B:A7:69:37:A8:9F:CD:29:8C:EE:A8 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:96:90:72:c9:b0:10:73:64:68:51:cd:8a:75:f5:74:ec:ae: 37:46:99:fc:7b:24:3c:ce:c0:23:3a:bd:77:2c:6b:91:40:0c: 28:d3:d2:9a:db:a3:66:54:7c:92:f6:9d:e4:78:4e:09:82:cb: f7:0b:9f:8a:21:88:97:53:48:c9:34:9d:43:30:44:8d:fc:69: a0:4f:65:59:d7:27:ae:ea:b7:c4:b6:7b:66:a3:db:cb:d1:28: 3f:dc:69:25:f7:7b:cf:41:86:c5:ce:11:73:92:8a:1f:cd:b5: b9:ea:39:08:67:6b:14:35:9b:b5:4f:e8:5a:eb:1e:26:0e:11: f9:e1:51:87:9e:a7:f1:75:41:c4:fa:24:03:a4:d1:a9:08:37: ff:81:ba:f0:25:a7:20:f9:a1:a6:70:a1:89:e4:6a:6f:d6:4c: 93:dd:3f:60:2a:38:49:ca:8f:01:e2:a8:34:44:81:70:e8:c1: 65:37:2a:74:dc:0f:b0:49:d9:3a:00:00:ab:a6:e1:43:ba:53: f5:46:1b:be:60:c8:76:b1:fb:4a:dc:c6:a8:86:63:34:ba:0b: a5:ec:3e:c4:a4:fb:b8:67:a9:c7:47:22:5b:db:59:5a:51:af: ab:a7:a6:0b:49:25:2c:02:88:c8:c7:c9:b0:55:fa:d2:bc:ad: 08:80:94:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhLN7lezA/ac0ShNpvBCPSICTKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTA5MDUwODE2MTJaFw0yNTA5MDgxNzEwMTJaMDMxMTAvBgNV BAMTKDRBRjJBQTcyQzZFRjg4QTMyOTVCQTc2OTM3QTg5RkNEMjk4Q0VFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsrfD76LZXERNaWR/Bgz4CjaFg O/40D657Uw8JYsu5C1nwexZq46JsC37Ck5UXYmYnAlx2dDYVuqmZChN/vVJO6LuX G5Jo2yINkcmIFb9VnxYqn1b+/sjNxvtLhzjfrGhK8lP164+fXfJ564llDfLCTQZ1 gdgZJgVbQvdp6UemxKlecrV7hm1eYTatZHi/jopbrCcHg/pdUR2mLW57qQwEucWv nPTum1Na3WM1+AUsKvQE6EOM3IMMuvXNTBvrPtjm7EO8ljbZCcqowSyVAt/QXOMl zJCg5itgPGBpBEady/MZvmQX/p6/YqbrBV/3aCZZeuc2HSnifFS4iHcmFLJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSvKqcsbviKMpW6dpN6ifzSmM7qgwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOWkHLJsBBzZGhRzYp19XTsrjdGmfx7JDzO wCM6vXcsa5FADCjT0prbo2ZUfJL2neR4TgmCy/cLn4ohiJdTSMk0nUMwRI38aaBP ZVnXJ67qt8S2e2aj28vRKD/caSX3e89BhsXOEXOSih/NtbnqOQhnaxQ1m7VP6Frr HiYOEfnhUYeep/F1QcT6JAOk0akIN/+BuvAlpyD5oaZwoYnkam/WTJPdP2AqOEnK jwHiqDREgXDowWU3KnTcD7BJ2ToAAKum4UO6U/VGG75gyHax+0rcxqiGYzS6C6Xs PsSk+7hnqcdHIlvbWVpRr6unpgtJJSwCiMjHybBV+tK8rQiAlAU= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:22 2025 by rpki-client