$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: ZsnrbrjkO2mNagHvzmZ4dtC0/LqNAuAf4f+dh5zp0a4= Subject key identifier: A0:B3:D5:77:74:B3:59:B4:CF:2B:66:E8:38:E0:A7:3E:B4:2D:70:7D Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 7E750BA742CC9441B0FAADEAE8A5AB7C36429F28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 022A Signing time: Sat 28 Jun 2025 20:20:52 +0000 Manifest this update: Sat 28 Jun 2025 20:15:52 +0000 Manifest next update: Wed 02 Jul 2025 03:47:52 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 2: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=) 3: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 4: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: jLAMOMskelMDwNEbKAYxveU6B1Mw+4qqBYKgr0Hzhxk=) 5: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=) 6: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 7: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) 8: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=) 9: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:75:0b:a7:42:cc:94:41:b0:fa:ad:ea:e8:a5:ab:7c:36:42:9f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Jun 28 20:15:52 2025 GMT Not After : Jul 2 03:47:52 2025 GMT Subject: CN=A0B3D57774B359B4CF2B66E838E0A73EB42D707D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:aa:48:fc:89:3f:b5:70:b0:a9:9c:5d:34: e3:97:9d:55:11:42:f7:01:0b:95:27:8f:ac:68:8d: df:01:43:c8:e9:31:f5:b7:6d:74:64:81:d4:e4:96: f5:7c:c7:95:68:48:00:6c:83:7b:d2:51:43:0c:e5: 89:98:d2:78:63:70:e4:a2:0d:4b:8d:f7:71:0c:75: 20:65:d4:43:56:78:45:ca:c0:a0:cb:28:22:34:1a: 98:e3:0c:33:73:77:19:d3:7f:21:44:98:8e:6f:62: 67:c2:3f:57:ab:ab:a5:f9:34:82:d7:47:ae:4d:36: d1:bc:00:76:e7:9c:e6:a8:f3:96:c3:3d:88:fa:3f: a5:8b:f6:b3:74:a0:c6:17:c4:d4:a2:18:f4:97:b2: ed:00:52:8d:78:2d:b6:67:3a:23:af:2f:50:3e:03: ad:ba:7d:a5:1e:86:4d:df:21:ca:f4:f6:ab:7c:4c: de:7a:e4:7e:36:4b:e7:79:82:d5:37:42:8f:54:54: 49:74:fb:18:05:7c:3a:aa:17:81:ea:94:0f:e6:c9: ce:26:19:fb:c8:dd:6c:6f:fa:bf:24:5d:1f:58:f9: 31:8f:ea:36:58:58:67:fc:ec:fe:92:2e:30:37:69: 16:fa:aa:02:62:c1:90:f8:af:15:29:53:5d:69:ad: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:D5:77:74:B3:59:B4:CF:2B:66:E8:38:E0:A7:3E:B4:2D:70:7D X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:77:2a:63:5a:ba:72:ea:21:83:15:9e:1a:70:3c:4e:da:4b: 13:bc:73:fe:bb:f3:bf:96:72:22:8c:a4:36:6e:44:cb:36:88: bb:ca:3b:d2:44:5f:ee:68:e4:07:a0:d3:76:5d:05:93:ef:59: d8:a4:0c:41:63:aa:f6:54:ff:ac:1a:3c:ed:d3:ac:de:fa:ee: 73:ae:ab:12:7d:94:03:ff:0f:cb:b0:58:c3:28:0f:60:e0:ef: 9d:de:cb:7c:25:f9:5d:e9:8c:f3:fc:89:40:74:67:82:cc:86: b6:62:40:a9:2f:a3:61:67:9a:2b:74:be:e4:17:bc:f0:b9:da: f5:85:81:ac:af:3a:65:a2:09:a2:5b:ef:38:a1:52:74:37:d2: b5:2a:1a:21:9e:a9:17:e6:bb:37:94:be:71:4f:97:64:e3:92: d1:55:c1:95:38:af:77:2f:69:9a:67:42:09:08:35:07:ed:f0: 67:2c:32:b7:ad:a9:32:fa:ab:a0:52:bf:85:c8:b5:45:47:e2: ff:20:df:24:23:67:00:03:62:0e:91:e2:01:b0:55:4b:ea:43: 8a:d2:7d:9b:19:14:2f:8e:cb:c9:c9:62:72:97:54:c4:66:45: f8:af:2f:ff:ed:db:fe:fe:56:4e:d0:ce:58:0f:61:9f:33:30: 5d:21:c7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnULp0LMlEGw+q3q6KWrfDZCnygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA2MjgyMDE1NTJaFw0yNTA3MDIwMzQ3NTJaMDMxMTAvBgNV BAMTKEEwQjNENTc3NzRCMzU5QjRDRjJCNjZFODM4RTBBNzNFQjQyRDcwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAapI/Ik/tXCwqZxdNOOXnVUR QvcBC5Unj6xojd8BQ8jpMfW3bXRkgdTklvV8x5VoSABsg3vSUUMM5YmY0nhjcOSi DUuN93EMdSBl1ENWeEXKwKDLKCI0GpjjDDNzdxnTfyFEmI5vYmfCP1erq6X5NILX R65NNtG8AHbnnOao85bDPYj6P6WL9rN0oMYXxNSiGPSXsu0AUo14LbZnOiOvL1A+ A626faUehk3fIcr09qt8TN565H42S+d5gtU3Qo9UVEl0+xgFfDqqF4HqlA/myc4m GfvI3Wxv+r8kXR9Y+TGP6jZYWGf87P6SLjA3aRb6qgJiwZD4rxUpU11prYwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLPVd3SzWbTPK2boOOCnPrQtcH0wHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR3KmNaunLqIYMVnhpwPE7aSxO8c/6787+W ciKMpDZuRMs2iLvKO9JEX+5o5Aeg03ZdBZPvWdikDEFjqvZU/6waPO3TrN767nOu qxJ9lAP/D8uwWMMoD2Dg753ey3wl+V3pjPP8iUB0Z4LMhrZiQKkvo2Fnmit0vuQX vPC52vWFgayvOmWiCaJb7zihUnQ30rUqGiGeqRfmuzeUvnFPl2TjktFVwZU4r3cv aZpnQgkINQft8GcsMretqTL6q6BSv4XItUVH4v8g3yQjZwADYg6R4gGwVUvqQ4rS fZsZFC+Oy8nJYnKXVMRmRfivL//t2/7+Vk7QzlgPYZ8zMF0hxyU= -----END CERTIFICATE-----Generated at Mon Jun 30 11:25:17 2025 by rpki-client