$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: +2M+0+L+EYJYhlMHgaOd9roNqUh9UcD0cFU+Dir2VNE= Subject key identifier: A8:36:6A:00:EF:E4:20:49:07:D9:D0:8C:36:C2:41:FD:7F:7B:19:C8 Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 2DFD23A4466E2D9579B8DD5040131C05FB4C66A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 0295 Signing time: Tue 01 Jul 2025 10:51:30 +0000 Manifest this update: Tue 01 Jul 2025 10:46:30 +0000 Manifest next update: Fri 04 Jul 2025 20:32:30 +0000 Files and hashes: 1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: VRBUiBpxSdfg7EcpUJc7QVw/NaqSmrjO5vDr5Tg5cIA=) 2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=) 3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fd:23:a4:46:6e:2d:95:79:b8:dd:50:40:13:1c:05:fb:4c:66:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Jul 1 10:46:30 2025 GMT Not After : Jul 4 20:32:30 2025 GMT Subject: CN=A8366A00EFE4204907D9D08C36C241FD7F7B19C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:7f:f9:3c:aa:37:73:02:e7:39:e9:5d:48: 6b:a5:b7:b1:19:53:20:ee:1e:a6:7f:92:64:c5:f1: 23:4f:dd:81:b7:c8:5a:e2:73:19:dc:0f:c6:98:c7: e1:fb:a9:32:e8:4f:2b:23:15:fe:0a:3e:4d:5c:e5: c8:78:45:3a:63:06:39:91:59:81:a4:6b:9f:7f:54: 45:73:98:ea:a5:a9:b0:ba:02:5b:24:0f:fd:bc:42: 05:aa:ba:e1:04:20:15:97:29:ce:32:65:18:64:4c: 3e:58:a2:e5:98:28:87:65:9e:65:d6:cf:b5:3f:14: 8c:96:bd:67:7e:56:f3:fe:89:5a:21:e1:11:30:db: 54:97:8f:2e:8b:e6:6a:9c:b9:fd:ee:13:b7:a2:51: 9b:2c:fe:ab:6a:4d:62:aa:82:f4:a2:e2:55:00:63: 94:3e:0e:26:51:66:0e:81:b9:f3:0b:14:a2:eb:e9: 48:8b:4b:a7:b8:85:68:ce:8c:21:da:90:fa:79:b2: 45:62:85:f6:dc:e3:00:c3:84:a4:30:7d:bb:e1:ee: ca:70:87:28:c5:75:55:d4:8f:98:72:47:15:ec:24: 60:ed:31:f2:44:14:78:8c:ff:36:a3:9c:32:a6:e4: 28:cc:3b:46:52:9f:4c:3a:c2:22:6a:e9:82:48:42: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:6A:00:EF:E4:20:49:07:D9:D0:8C:36:C2:41:FD:7F:7B:19:C8 X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:52:05:eb:85:ce:63:62:a6:ad:65:b1:24:76:7a:df:9f:52: bf:c7:c0:3b:d4:35:47:68:6c:fa:67:fb:25:20:56:ff:13:04: 44:4d:d3:a9:f6:ac:5c:37:87:09:b3:14:4f:b4:fd:f6:0b:df: d6:9c:06:4f:8f:27:d0:87:07:d1:1f:2c:7a:39:c6:02:63:5e: 36:54:e8:36:ab:32:b2:d5:b1:fc:9c:a2:b9:2b:49:90:9b:40: 57:a4:b6:92:17:d6:ff:70:ae:38:cb:5c:b8:57:ed:cc:9e:03: de:9e:41:e5:71:cb:39:53:4b:22:2f:4c:60:82:e4:92:95:71: 3b:eb:c5:49:88:3f:a1:d8:49:36:84:db:60:f8:41:56:b9:94: 60:19:1b:84:70:c3:fb:57:22:fb:31:df:ad:d9:50:09:49:08: 9e:fd:64:24:ae:34:de:25:1c:31:fa:ba:92:2b:48:54:08:84: 40:dd:19:dc:3a:a8:e6:44:8e:62:42:cf:9f:61:bc:dd:c1:0b: e4:e5:31:4a:5a:28:48:8f:8f:0d:a9:2a:56:4b:ee:a8:3b:bf: c7:c2:09:c8:55:41:48:e3:26:12:06:83:72:76:17:97:13:af: c2:bf:80:c9:08:80:f7:ee:2c:57:18:cb:e4:77:31:77:3c:a4: 93:9c:59:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULf0jpEZuLZV5uN1QQBMcBftMZqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNTA3MDExMDQ2MzBaFw0yNTA3MDQyMDMyMzBaMDMxMTAvBgNV BAMTKEE4MzY2QTAwRUZFNDIwNDkwN0Q5RDA4QzM2QzI0MUZEN0Y3QjE5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbX/5PKo3cwLnOeldSGult7EZ UyDuHqZ/kmTF8SNP3YG3yFricxncD8aYx+H7qTLoTysjFf4KPk1c5ch4RTpjBjmR WYGka59/VEVzmOqlqbC6AlskD/28QgWquuEEIBWXKc4yZRhkTD5YouWYKIdlnmXW z7U/FIyWvWd+VvP+iVoh4REw21SXjy6L5mqcuf3uE7eiUZss/qtqTWKqgvSi4lUA Y5Q+DiZRZg6BufMLFKLr6UiLS6e4hWjOjCHakPp5skVihfbc4wDDhKQwfbvh7spw hyjFdVXUj5hyRxXsJGDtMfJEFHiM/zajnDKm5CjMO0ZSn0w6wiJq6YJIQn6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqDZqAO/kIEkH2dCMNsJB/X97GcgwHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANSBeuFzmNipq1lsSR2et+fUr/HwDvUNUdo bPpn+yUgVv8TBERN06n2rFw3hwmzFE+0/fYL39acBk+PJ9CHB9EfLHo5xgJjXjZU 6DarMrLVsfycorkrSZCbQFektpIX1v9wrjjLXLhX7cyeA96eQeVxyzlTSyIvTGCC 5JKVcTvrxUmIP6HYSTaE22D4QVa5lGAZG4Rww/tXIvsx363ZUAlJCJ79ZCSuNN4l HDH6upIrSFQIhEDdGdw6qOZEjmJCz59hvN3BC+TlMUpaKEiPjw2pKlZL7qg7v8fC CchVQUjjJhIGg3J2F5cTr8K/gMkIgPfuLFcYy+R3MXc8pJOcWYo= -----END CERTIFICATE-----Generated at Thu Jul 3 00:41:50 2025 by rpki-client