$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: vCoo/jAwQBsarxG6XDyIx8GyjEweleYVImVbLr4BmlA= Subject key identifier: 91:F7:D0:D8:87:9D:E4:BC:56:AC:62:51:2B:87:ED:AB:0C:51:49:71 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 13B91EFB3EDF79F49F754FE8E8FA9DB2F5EAC3C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: B9 Signing time: Sun 29 Jun 2025 12:42:14 +0000 Manifest this update: Sun 29 Jun 2025 12:37:14 +0000 Manifest next update: Wed 02 Jul 2025 13:58:14 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) 2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: FXbjDHdrhFVfIbuMpPcIzTe0EExwqAIiRVRe6EAtqoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b9:1e:fb:3e:df:79:f4:9f:75:4f:e8:e8:fa:9d:b2:f5:ea:c3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Jun 29 12:37:14 2025 GMT Not After : Jul 2 13:58:14 2025 GMT Subject: CN=91F7D0D8879DE4BC56AC62512B87EDAB0C514971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:92:22:e3:66:18:63:a3:6a:82:16:dd:ff: 14:a9:4f:ba:02:27:8b:a8:c8:ca:37:dc:18:57:35: 10:14:c5:e9:ae:7e:5c:1a:e7:d4:a7:9a:e3:35:7b: e2:e1:17:89:b0:5d:1b:28:7e:d4:17:ff:4f:a7:02: 49:1c:29:b4:85:f4:05:1d:0a:3b:22:10:6d:f6:08: 40:98:b9:e8:7c:f3:f3:ba:51:d7:38:c0:60:6b:ef: b8:8f:3a:da:59:a9:7f:e8:26:91:36:13:de:1d:ea: 4f:33:24:89:fc:bf:fb:9c:c1:b3:e7:4c:64:39:f2: f9:c0:8e:b3:6a:46:62:e3:52:93:40:9f:3b:f3:06: d7:87:f8:86:93:78:9e:3a:77:ea:13:7c:38:0a:5e: 9f:ea:94:6b:a0:26:27:05:1f:28:fd:75:2b:59:4c: c2:25:11:71:f2:c4:26:a1:a3:28:05:94:4d:c1:2b: 36:1e:9c:82:4c:4e:a0:4c:f3:a4:e7:6b:09:8c:70: f7:c9:84:8a:1a:c5:cf:3e:5d:eb:02:45:be:5c:11: 93:80:fa:24:99:37:12:58:43:7d:08:73:12:9b:df: dc:d5:a8:3c:f1:5f:f1:31:f9:bd:33:b0:28:cd:a8: b0:de:07:ab:c9:52:fc:c2:d7:31:98:db:a8:07:86: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F7:D0:D8:87:9D:E4:BC:56:AC:62:51:2B:87:ED:AB:0C:51:49:71 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a7:5a:19:a6:43:ee:bf:10:ef:72:ce:6d:3b:07:0a:36:7a: 39:53:84:2f:99:f7:99:53:48:15:2d:f2:99:66:a9:ed:d4:5c: a8:83:2a:15:30:5a:81:10:78:04:d6:ac:1a:87:be:aa:fa:69: 68:86:67:5c:67:17:4a:b3:be:7e:82:87:02:f4:3f:5f:7b:92: 42:6c:8d:45:9c:ef:cd:27:b7:6d:d4:75:1d:ab:4e:2e:47:59: 28:cd:be:ed:75:61:61:43:85:5c:1a:b1:54:2e:0c:18:08:b4: b7:24:4b:bc:b3:67:f1:a4:b2:8e:79:39:04:8a:b6:17:a4:68: 8d:ee:7a:48:df:08:77:5c:65:b2:57:8d:99:d2:e8:8b:7b:3e: 0a:18:34:58:59:39:42:db:00:f6:05:54:a6:9a:f7:09:22:18: 3c:2f:69:95:df:88:17:52:b2:34:85:77:f3:0c:6c:07:69:1e: a0:7a:5a:29:2f:6c:6e:50:fd:b3:87:38:2e:d5:65:79:64:09: 4b:63:88:35:1b:0f:c2:cd:7c:b9:fc:34:13:b5:22:22:6a:1a: 4f:25:a0:13:f1:8c:4b:0c:c3:46:30:fe:b5:05:c0:1e:75:eb: 7d:ed:b4:d4:82:d7:15:14:86:82:80:08:13:62:cd:1f:43:2e: 05:4d:64:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7ke+z7fefSfdU/o6PqdsvXqw8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA2MjkxMjM3MTRaFw0yNTA3MDIxMzU4MTRaMDMxMTAvBgNV BAMTKDkxRjdEMEQ4ODc5REU0QkM1NkFDNjI1MTJCODdFREFCMEM1MTQ5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpJIi42YYY6Nqghbd/xSpT7oC J4uoyMo33BhXNRAUxemuflwa59SnmuM1e+LhF4mwXRsoftQX/0+nAkkcKbSF9AUd CjsiEG32CECYueh88/O6Udc4wGBr77iPOtpZqX/oJpE2E94d6k8zJIn8v/ucwbPn TGQ58vnAjrNqRmLjUpNAnzvzBteH+IaTeJ46d+oTfDgKXp/qlGugJicFHyj9dStZ TMIlEXHyxCahoygFlE3BKzYenIJMTqBM86TnawmMcPfJhIoaxc8+XesCRb5cEZOA +iSZNxJYQ30IcxKb39zVqDzxX/Ex+b0zsCjNqLDeB6vJUvzC1zGY26gHhu03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkffQ2Ied5LxWrGJRK4ftqwxRSXEwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICnWhmmQ+6/EO9yzm07Bwo2ejlThC+Z95lT SBUt8plmqe3UXKiDKhUwWoEQeATWrBqHvqr6aWiGZ1xnF0qzvn6ChwL0P197kkJs jUWc780nt23UdR2rTi5HWSjNvu11YWFDhVwasVQuDBgItLckS7yzZ/Gkso55OQSK thekaI3uekjfCHdcZbJXjZnS6It7PgoYNFhZOULbAPYFVKaa9wkiGDwvaZXfiBdS sjSFd/MMbAdpHqB6WikvbG5Q/bOHOC7VZXlkCUtjiDUbD8LNfLn8NBO1IiJqGk8l oBPxjEsMw0Yw/rUFwB51633ttNSC1xUUhoKACBNizR9DLgVNZAE= -----END CERTIFICATE-----Generated at Sun Jun 29 21:25:46 2025 by rpki-client