$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: hfFK09Lk/KzwWHUkZt+Vv0BgeaR2oPKnOBeBuFOKhl0= Subject key identifier: 54:6D:93:25:DA:E6:80:BC:E1:47:EB:B7:E6:87:3E:82:BE:2F:7F:01 Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 64BC644899E5F70FE8E0BF24FE5A2073800B3E45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 017E Signing time: Sun 29 Jun 2025 05:00:39 +0000 Manifest this update: Sun 29 Jun 2025 04:55:39 +0000 Manifest next update: Wed 02 Jul 2025 13:23:39 +0000 Files and hashes: 1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: /PzEAWQ7Sfr+iPae/ooRZfgLjdKFHfgURCobJ+A7FHU=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bc:64:48:99:e5:f7:0f:e8:e0:bf:24:fe:5a:20:73:80:0b:3e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Jun 29 04:55:39 2025 GMT Not After : Jul 2 13:23:39 2025 GMT Subject: CN=546D9325DAE680BCE147EBB7E6873E82BE2F7F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:c2:8b:e2:b2:f7:99:ab:70:8a:dc:42:03: 15:61:04:15:d3:9c:9a:aa:9e:35:6c:8c:f1:ff:04: 68:47:54:ae:56:73:a7:d5:43:fb:be:71:7a:16:17: 56:e2:5a:e6:2d:3b:6c:e7:b6:ac:f4:06:b5:db:1b: 15:d4:7b:a5:1c:23:0d:4d:2f:58:11:84:7c:af:5c: 82:36:8b:63:d8:49:0d:d4:9e:39:06:e3:ad:0b:09: 7c:19:e6:0e:0e:de:d0:c4:1e:97:c8:5d:a3:4b:78: 2c:46:a6:0a:5e:c3:bc:8b:e5:ad:6e:d3:d2:7d:9d: 44:00:cd:84:bc:08:5e:ee:7a:1a:fa:c1:1f:10:4a: e7:45:e6:3a:f9:1e:75:90:5e:fe:24:75:a6:2a:99: 41:1e:ee:37:0f:ce:bc:6d:49:b9:78:0c:17:c2:4d: 2b:9f:8d:94:ee:1a:6e:a3:0c:55:a2:62:b5:72:9c: 06:cb:3e:e7:f7:53:0c:fc:3a:5c:03:e3:4d:21:31: 71:e0:7d:55:ca:65:30:5f:3b:b0:0f:9e:f6:62:d5: 70:2c:cc:3b:d0:e9:8c:3a:a9:9b:4c:cf:f7:bf:c9: 57:67:bf:c9:7d:60:ba:c3:1c:89:56:70:1d:ff:84: 7a:b0:f3:bd:ab:93:55:6e:5e:43:d9:f7:35:83:c0: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6D:93:25:DA:E6:80:BC:E1:47:EB:B7:E6:87:3E:82:BE:2F:7F:01 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a0:de:ab:ab:0f:52:53:54:7c:2e:d3:04:a2:84:92:2e:d0: 3d:da:62:22:a5:3b:d2:d1:1e:54:6b:80:40:1c:ee:e2:b5:4f: 2f:4f:e2:67:a2:ca:08:c1:2d:79:82:2f:95:b8:ce:48:f0:8a: c9:07:d0:6d:9c:17:04:0f:e2:01:22:e0:d4:26:54:54:03:52: 17:95:20:f7:a9:1f:c0:fd:0b:8f:a2:47:8e:c0:0b:0f:cc:25: a8:fc:a3:99:a0:e6:45:3e:67:3a:1a:03:cd:75:cc:8d:fe:ce: c5:8d:b6:f7:2b:6c:4a:33:f5:30:52:1c:59:7d:c6:63:63:71: 26:c0:c1:28:e6:81:06:90:2e:a5:b6:26:db:d8:54:6e:0e:3f: b8:6b:0e:fe:6c:dd:24:a9:ee:0e:3e:0e:f1:62:26:2d:36:dd: 82:e7:bd:b6:df:17:cb:65:9d:16:8f:33:04:69:17:6f:81:38: e5:52:0f:2a:14:c0:bb:e7:f8:6d:9c:36:74:b8:e3:b2:51:94: df:35:de:e7:4a:2a:11:e3:db:f6:80:1e:2b:fb:0b:b4:a0:a1: 6f:4c:b3:b2:1b:07:e6:f5:3c:67:c1:1b:72:e5:c4:de:96:27: 7c:55:26:b0:dc:0d:9c:67:dd:09:ad:48:f0:c8:30:06:be:fd: 10:a8:b1:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLxkSJnl9w/o4L8k/logc4ALPkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTA2MjkwNDU1MzlaFw0yNTA3MDIxMzIzMzlaMDMxMTAvBgNV BAMTKDU0NkQ5MzI1REFFNjgwQkNFMTQ3RUJCN0U2ODczRTgyQkUyRjdGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUsKL4rL3matwitxCAxVhBBXT nJqqnjVsjPH/BGhHVK5Wc6fVQ/u+cXoWF1biWuYtO2zntqz0BrXbGxXUe6UcIw1N L1gRhHyvXII2i2PYSQ3UnjkG460LCXwZ5g4O3tDEHpfIXaNLeCxGpgpew7yL5a1u 09J9nUQAzYS8CF7uehr6wR8QSudF5jr5HnWQXv4kdaYqmUEe7jcPzrxtSbl4DBfC TSufjZTuGm6jDFWiYrVynAbLPuf3Uwz8OlwD400hMXHgfVXKZTBfO7APnvZi1XAs zDvQ6Yw6qZtMz/e/yVdnv8l9YLrDHIlWcB3/hHqw872rk1VuXkPZ9zWDwJsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVG2TJdrmgLzhR+u35oc+gr4vfwEwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+g3qurD1JTVHwu0wSihJIu0D3aYiKlO9LR HlRrgEAc7uK1Ty9P4meiygjBLXmCL5W4zkjwiskH0G2cFwQP4gEi4NQmVFQDUheV IPepH8D9C4+iR47ACw/MJaj8o5mg5kU+ZzoaA811zI3+zsWNtvcrbEoz9TBSHFl9 xmNjcSbAwSjmgQaQLqW2JtvYVG4OP7hrDv5s3SSp7g4+DvFiJi023YLnvbbfF8tl nRaPMwRpF2+BOOVSDyoUwLvn+G2cNnS447JRlN813udKKhHj2/aAHiv7C7SgoW9M s7IbB+b1PGfBG3LlxN6WJ3xVJrDcDZxn3QmtSPDIMAa+/RCoscw= -----END CERTIFICATE-----Generated at Sun Jun 29 23:19:37 2025 by rpki-client