$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: IQmd54+DGdYV9yaiXYVK/TWOlUcdFtFVi6l7U1svsjk= Subject key identifier: 05:C2:DB:95:1C:59:DB:EC:A4:91:7C:06:49:57:15:6A:F7:0A:9D:6E Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 44E156FD018ED6216CE0F85765E38A3254D925BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0227 Signing time: Fri 27 Jun 2025 11:12:05 +0000 Manifest this update: Fri 27 Jun 2025 11:07:05 +0000 Manifest next update: Mon 30 Jun 2025 20:45:05 +0000 Files and hashes: 1: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: MmhFaSbWBVKr/X5WoR6+fhEoizSvvcztALV5Eand1cY=) 2: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 20:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e1:56:fd:01:8e:d6:21:6c:e0:f8:57:65:e3:8a:32:54:d9:25:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Jun 27 11:07:05 2025 GMT Not After : Jun 30 20:45:05 2025 GMT Subject: CN=05C2DB951C59DBECA4917C064957156AF70A9D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:fc:12:35:69:4f:14:d0:53:38:28:a1:03: 2c:b8:4b:24:ca:24:be:93:c5:c5:70:db:c0:48:01: fb:ac:8d:71:45:0a:06:f8:b5:a1:df:99:54:63:ab: ca:2f:0a:ed:e0:1f:09:76:1c:15:ef:a5:0d:c5:28: bb:65:36:46:e5:64:51:ad:45:d1:d8:a9:68:ae:bf: e8:31:35:ab:65:b2:f1:3b:5c:40:5e:0b:df:cf:c2: 82:3c:79:45:32:38:fa:23:60:35:1f:ed:60:ad:cf: dd:45:89:63:ab:55:6e:40:45:ce:c5:e7:bf:13:3f: 63:a0:cf:fc:6e:33:df:69:6b:94:96:4a:60:80:6f: 3c:0e:7e:6d:7c:13:8b:29:57:6e:1d:8d:2f:4f:ef: 41:de:da:78:1c:fd:0c:d6:92:da:4a:11:39:5b:ed: d3:25:39:c1:f3:4c:68:03:84:e6:8f:01:c2:2a:c2: bd:f5:32:db:d0:39:ce:16:41:21:13:95:df:ef:e6: 3c:d6:87:f8:7a:0b:68:b1:55:02:bb:5a:d6:6e:ef: 85:4b:fd:92:22:d0:db:93:25:d0:89:5c:d3:2a:f7: 77:f6:8f:ed:24:9c:a4:22:64:48:bd:9d:4c:4f:fd: 6f:66:ce:54:04:27:fe:05:be:69:69:10:40:f8:ad: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:DB:95:1C:59:DB:EC:A4:91:7C:06:49:57:15:6A:F7:0A:9D:6E X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:69:1f:65:89:a2:cf:74:92:a6:ac:47:7e:03:d2:b0:b1:8c: 8a:9c:21:26:3b:96:b2:8c:45:d8:d7:a8:4a:45:2f:f5:50:59: 69:87:3e:05:be:2f:4f:a8:d0:18:6e:c0:19:8f:c2:6f:20:4e: 98:74:81:1b:43:e5:ec:4a:58:d3:df:8d:5e:a7:bb:1e:e8:4b: 93:03:8b:2b:5e:2f:34:7c:8b:55:62:5e:b7:c2:76:de:39:2b: 06:f4:96:b0:e4:14:eb:ca:09:dd:4e:f7:35:50:b2:c2:2f:38: 39:06:5c:41:be:2f:b2:15:c9:c5:22:d3:f4:b5:6b:ff:e3:e4: da:9c:27:72:a5:3b:e8:7f:65:23:7f:b3:5a:cb:25:04:c6:74: 58:41:8e:9b:2d:12:82:7b:61:7f:ea:cb:7f:7c:cd:66:00:fa: 42:cd:fa:8e:6b:51:c3:fc:e4:be:27:3c:9a:17:62:2c:f7:aa: 89:e2:2a:5d:d1:6f:16:2e:58:c2:4d:a6:03:47:36:8b:c9:17: 1e:99:90:83:ae:02:04:93:76:31:0f:9d:6b:73:8c:d4:b0:74: 9b:12:4a:0f:74:53:00:ef:40:c4:40:2e:2b:ef:ab:e0:53:c2: 3a:9c:54:6a:f1:76:c0:f7:73:65:54:fa:16:76:39:41:18:69: 43:4f:59:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROFW/QGO1iFs4PhXZeOKMlTZJb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA2MjcxMTA3MDVaFw0yNTA2MzAyMDQ1MDVaMDMxMTAvBgNV BAMTKDA1QzJEQjk1MUM1OURCRUNBNDkxN0MwNjQ5NTcxNTZBRjcwQTlENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkX/wSNWlPFNBTOCihAyy4SyTK JL6TxcVw28BIAfusjXFFCgb4taHfmVRjq8ovCu3gHwl2HBXvpQ3FKLtlNkblZFGt RdHYqWiuv+gxNatlsvE7XEBeC9/PwoI8eUUyOPojYDUf7WCtz91FiWOrVW5ARc7F 578TP2Ogz/xuM99pa5SWSmCAbzwOfm18E4spV24djS9P70He2ngc/QzWktpKETlb 7dMlOcHzTGgDhOaPAcIqwr31MtvQOc4WQSETld/v5jzWh/h6C2ixVQK7WtZu74VL /ZIi0NuTJdCJXNMq93f2j+0knKQiZEi9nUxP/W9mzlQEJ/4FvmlpEED4rQbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcLblRxZ2+ykkXwGSVcVavcKnW4wHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBpH2WJos90kqasR34D0rCxjIqcISY7lrKM RdjXqEpFL/VQWWmHPgW+L0+o0BhuwBmPwm8gTph0gRtD5exKWNPfjV6nux7oS5MD iyteLzR8i1ViXrfCdt45Kwb0lrDkFOvKCd1O9zVQssIvODkGXEG+L7IVycUi0/S1 a//j5NqcJ3KlO+h/ZSN/s1rLJQTGdFhBjpstEoJ7YX/qy398zWYA+kLN+o5rUcP8 5L4nPJoXYiz3qoniKl3RbxYuWMJNpgNHNovJFx6ZkIOuAgSTdjEPnWtzjNSwdJsS Sg90UwDvQMRALivvq+BTwjqcVGrxdsD3c2VU+hZ2OUEYaUNPWa4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:29 2025 by rpki-client