$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: xcBdxA+ZQZMOM8jAp0yOWC+VEdUkyqCsCpgn86o8A4o= Subject key identifier: C6:15:52:52:00:27:37:0E:6E:0D:50:D7:F7:E7:F6:E0:84:03:FF:8B Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 25B82BA9CCE386FE67015A56120BD83343299730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: 9D Signing time: Fri 27 Jun 2025 23:32:01 +0000 Manifest this update: Fri 27 Jun 2025 23:27:01 +0000 Manifest next update: Tue 01 Jul 2025 00:34:01 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: UTRd132SgOwzd2hD+4Rn75VMQ2T/UEvL8RXyhcOIWj8=) 2: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: YzMeBHl/gp0hPsD74Syrnw/fYYcZ9K46SBc/IU62Y+g=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: ihMnpcM8C+9KA0tMwmz+wN2Pjt87gWD8o1eHc6RRFFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b8:2b:a9:cc:e3:86:fe:67:01:5a:56:12:0b:d8:33:43:29:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Jun 27 23:27:01 2025 GMT Not After : Jul 1 00:34:01 2025 GMT Subject: CN=C61552520027370E6E0D50D7F7E7F6E08403FF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:d6:52:e8:a1:b0:fd:7b:1d:b9:f0:b1:06: 6c:46:bf:bb:80:b4:b3:fb:99:6e:c4:c7:74:3e:b9: e6:d4:09:82:a7:e3:71:fb:af:78:53:2e:51:90:45: 40:4a:7f:f5:a8:2c:ab:32:06:0b:3d:d0:50:c2:9d: df:2e:ac:e5:97:92:7d:c6:72:b3:61:44:52:1c:17: 02:21:5d:cd:88:52:12:eb:dd:12:1e:0d:fa:ab:1e: 7a:9e:44:e8:a1:0f:6d:03:e6:8f:8d:d2:78:66:c0: 8e:33:99:8f:39:e1:c7:88:ad:46:ee:80:01:52:c1: 61:54:0f:b1:15:38:da:4f:16:b9:a0:1b:2c:d3:ca: 62:a7:03:7c:0a:e8:2e:b1:00:14:ff:7e:57:58:10: f7:2e:d5:aa:2a:a3:69:80:d8:79:f2:c7:69:b7:98: 35:80:eb:e3:68:ea:80:b9:71:41:19:15:db:90:da: cb:6e:56:4b:ff:dd:8d:51:3c:2a:11:5e:0e:db:1e: b1:21:96:b4:ad:ac:82:97:1d:f4:31:2e:76:1c:c6: c1:b8:0d:db:31:65:e4:4f:7c:68:90:b5:e4:88:dc: c9:0f:66:4d:bb:99:17:c9:b6:1e:a5:57:01:fd:da: ff:36:1b:b7:03:e0:ea:b4:46:94:00:0f:3a:a3:dd: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:15:52:52:00:27:37:0E:6E:0D:50:D7:F7:E7:F6:E0:84:03:FF:8B X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d4:e2:75:44:a1:6b:6c:2f:66:a7:98:e1:0b:de:dc:e9:4b: e3:fa:78:74:9c:51:b0:2e:1e:cb:09:a6:b3:2b:8c:de:f7:6c: 61:58:9f:d7:1b:53:06:01:a4:e6:3e:64:c6:21:ae:71:57:0e: 21:0c:b8:87:42:ae:fc:9d:9f:86:18:9b:2f:1a:cf:59:8c:01: 06:87:e6:1d:7c:86:b8:5e:5d:f1:4c:ff:f4:a7:7d:79:ef:f5: 42:4d:e4:b5:f9:fe:47:ef:c2:e8:45:d4:f8:05:1b:47:79:e5: a9:7d:93:f4:26:cb:e2:99:b7:37:36:01:92:81:4c:41:fe:5c: dc:da:53:87:01:a3:3d:79:94:5e:54:35:13:23:b1:13:5f:c1: 34:c1:42:d9:3f:14:65:c1:2c:39:02:00:30:05:41:49:b2:29: e8:a4:49:6d:c6:19:a4:e7:a9:51:56:aa:8d:91:90:0b:5b:e7: 28:6c:13:bf:c5:1e:8d:1a:80:97:77:11:13:e0:d5:6c:2b:2e: 3f:a7:6a:b0:d5:0b:15:97:d5:51:c4:dd:55:13:a3:30:04:4d: ce:eb:44:85:92:0d:d0:ee:a8:5e:8c:49:81:15:73:2a:7b:1f: 7d:ad:e8:dd:84:48:d4:e1:aa:27:4d:76:95:b3:82:3d:fb:32: 5e:18:92:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbgrqczjhv5nAVpWEgvYM0MplzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTA2MjcyMzI3MDFaFw0yNTA3MDEwMDM0MDFaMDMxMTAvBgNV BAMTKEM2MTU1MjUyMDAyNzM3MEU2RTBENTBEN0Y3RTdGNkUwODQwM0ZGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpdZS6KGw/XsdufCxBmxGv7uA tLP7mW7Ex3Q+uebUCYKn43H7r3hTLlGQRUBKf/WoLKsyBgs90FDCnd8urOWXkn3G crNhRFIcFwIhXc2IUhLr3RIeDfqrHnqeROihD20D5o+N0nhmwI4zmY854ceIrUbu gAFSwWFUD7EVONpPFrmgGyzTymKnA3wK6C6xABT/fldYEPcu1aoqo2mA2Hnyx2m3 mDWA6+No6oC5cUEZFduQ2stuVkv/3Y1RPCoRXg7bHrEhlrStrIKXHfQxLnYcxsG4 DdsxZeRPfGiQteSI3MkPZk27mRfJth6lVwH92v82G7cD4Oq0RpQADzqj3V1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxhVSUgAnNw5uDVDX9+f24IQD/4swHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDU4nVEoWtsL2anmOEL3tzpS+P6eHScUbAu HssJprMrjN73bGFYn9cbUwYBpOY+ZMYhrnFXDiEMuIdCrvydn4YYmy8az1mMAQaH 5h18hrheXfFM//SnfXnv9UJN5LX5/kfvwuhF1PgFG0d55al9k/Qmy+KZtzc2AZKB TEH+XNzaU4cBoz15lF5UNRMjsRNfwTTBQtk/FGXBLDkCADAFQUmyKeikSW3GGaTn qVFWqo2RkAtb5yhsE7/FHo0agJd3ERPg1WwrLj+narDVCxWX1VHE3VUTozAETc7r RIWSDdDuqF6MSYEVcyp7H32t6N2ESNThqidNdpWzgj37Ml4Ykjk= -----END CERTIFICATE-----Generated at Mon Jun 30 00:38:15 2025 by rpki-client