$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: FYl8YdwLVc5eybuZzIc6rPuCcbU200bXLtt2M4dcAsA= Subject key identifier: FB:AF:43:F7:88:26:02:45:1E:4B:4A:B6:2B:29:4C:90:50:9F:C7:21 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 4CF5015061DA841220C98F52F7DF8E70FFE0B26F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: B6 Signing time: Sun 29 Jun 2025 19:52:02 +0000 Manifest this update: Sun 29 Jun 2025 19:47:02 +0000 Manifest next update: Thu 03 Jul 2025 02:28:02 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=) 2: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: jFNlG+zBZFcmIEY3Duq22JJu7lOYJNI+1xzFsh23C5A=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f5:01:50:61:da:84:12:20:c9:8f:52:f7:df:8e:70:ff:e0:b2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Jun 29 19:47:02 2025 GMT Not After : Jul 3 02:28:02 2025 GMT Subject: CN=FBAF43F7882602451E4B4AB62B294C90509FC721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:f9:ff:51:d9:d2:e4:a4:b4:e7:84:85:f8: 36:09:23:7f:52:cb:59:6f:3a:2e:51:32:56:f4:25: 3a:26:78:ac:95:7d:f4:3b:4f:c4:39:40:ac:75:cd: 48:b5:41:c3:55:fc:42:87:a5:12:ff:6f:0d:8a:14: 0b:34:5c:b3:03:89:ca:8a:4b:fb:82:f5:a0:8a:cb: 9c:ed:46:4f:c4:35:a2:30:05:63:0f:af:a5:44:e6: 68:3b:35:7e:12:64:58:f4:7a:ff:43:b8:7e:2b:1e: c3:0a:77:73:44:65:cb:cb:49:1b:ac:8b:49:37:c7: 7d:29:ee:47:d4:6f:a1:b2:a0:ed:bf:b4:8c:5a:38: b1:f9:b6:97:b2:e3:d0:d1:0f:61:15:ec:5b:50:37: 0b:89:c1:76:5d:99:7a:90:2e:b8:3a:ef:1d:01:cb: 93:9f:8d:04:58:e4:fe:5c:3e:ea:e6:36:f6:c9:37: 09:63:f8:94:78:d2:02:a1:4d:d2:5f:4d:c0:f8:3e: 87:f6:b1:fd:a9:e7:6c:c0:d4:11:70:b2:99:66:b4: cc:c6:c3:26:ed:8e:ad:30:1a:d5:61:79:71:1c:6a: 92:56:c7:d7:08:2a:af:f8:58:a2:a0:a1:20:01:0b: f5:7b:8b:9c:b1:a3:a8:4f:76:7b:60:e9:dd:7d:6e: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:43:F7:88:26:02:45:1E:4B:4A:B6:2B:29:4C:90:50:9F:C7:21 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b8:4c:d5:fa:2d:65:6a:5b:4d:f8:97:db:1c:52:a3:df:04: f2:fc:d8:7b:ec:3e:e9:58:77:27:b2:2b:8a:6a:82:ac:18:65: 56:8a:65:5d:36:a4:e8:82:40:7b:a4:82:fa:48:1b:1d:63:8c: ce:c6:7e:8b:49:e9:df:4e:1d:3c:22:9b:5f:5e:86:80:b3:a9: 6c:d2:53:cf:e1:3c:89:41:b8:3b:9b:6a:0d:9c:8b:1e:2f:7d: df:6d:16:bb:69:62:92:e2:a4:51:6c:cd:48:ea:d6:f6:a7:10: 96:47:2f:74:6b:40:eb:8a:ab:a9:be:7f:5a:95:21:91:d5:d3: 3c:53:9a:a8:5f:4f:67:7e:10:ae:70:ca:c6:ed:43:e5:cc:98: c8:eb:6d:63:fb:77:7a:38:7f:22:7c:e2:8a:37:a5:5b:b4:b3: 8e:7e:ef:6a:19:73:11:02:f3:76:f4:ff:0c:af:4c:81:47:c8: 12:d4:cd:8e:80:b0:3c:b0:b8:31:1d:e6:ef:de:2e:fe:6d:2b: 24:df:1b:5e:e3:37:87:b7:37:18:c9:ad:8d:53:b9:e8:46:4b: 08:bd:e7:5b:60:8c:6f:b0:b1:19:64:0f:b6:c9:70:7b:df:a5: 56:5a:89:5f:47:15:46:13:80:16:07:62:a2:24:89:96:7b:6a: dd:24:76:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPUBUGHahBIgyY9S99+OcP/gsm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTA2MjkxOTQ3MDJaFw0yNTA3MDMwMjI4MDJaMDMxMTAvBgNV BAMTKEZCQUY0M0Y3ODgyNjAyNDUxRTRCNEFCNjJCMjk0QzkwNTA5RkM3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP//n/UdnS5KS054SF+DYJI39S y1lvOi5RMlb0JTomeKyVffQ7T8Q5QKx1zUi1QcNV/EKHpRL/bw2KFAs0XLMDicqK S/uC9aCKy5ztRk/ENaIwBWMPr6VE5mg7NX4SZFj0ev9DuH4rHsMKd3NEZcvLSRus i0k3x30p7kfUb6GyoO2/tIxaOLH5tpey49DRD2EV7FtQNwuJwXZdmXqQLrg67x0B y5OfjQRY5P5cPurmNvbJNwlj+JR40gKhTdJfTcD4Pof2sf2p52zA1BFwsplmtMzG wybtjq0wGtVheXEcapJWx9cIKq/4WKKgoSABC/V7i5yxo6hPdntg6d19bo7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+69D94gmAkUeS0q2KylMkFCfxyEwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG4TNX6LWVqW034l9scUqPfBPL82HvsPulY dyeyK4pqgqwYZVaKZV02pOiCQHukgvpIGx1jjM7GfotJ6d9OHTwim19ehoCzqWzS U8/hPIlBuDubag2cix4vfd9tFrtpYpLipFFszUjq1vanEJZHL3RrQOuKq6m+f1qV IZHV0zxTmqhfT2d+EK5wysbtQ+XMmMjrbWP7d3o4fyJ84oo3pVu0s45+72oZcxEC 83b0/wyvTIFHyBLUzY6AsDywuDEd5u/eLv5tKyTfG17jN4e3NxjJrY1TuehGSwi9 51tgjG+wsRlkD7bJcHvfpVZaiV9HFUYTgBYHYqIkiZZ7at0kdpA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:32 2025 by rpki-client