$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: jRCfWodqQWdvdFR7lcrJLRv2ow4s5Sg/vk9Z3E5/koY= Subject key identifier: C6:34:34:CB:A7:ED:E2:3E:B7:28:E9:4E:3B:C3:81:62:75:A0:67:AD Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 1A3DD5E7B622E2F9F5EDAB88602D901D3587F061 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: AA Signing time: Sat 28 Jun 2025 21:40:38 +0000 Manifest this update: Sat 28 Jun 2025 21:35:38 +0000 Manifest next update: Wed 02 Jul 2025 00:32:38 +0000 Files and hashes: 1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) 2: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: ExVQJ4RPt5ept1byTkVtoPV+n5ddlUFbPdTBUMJpMxo=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3d:d5:e7:b6:22:e2:f9:f5:ed:ab:88:60:2d:90:1d:35:87:f0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Jun 28 21:35:38 2025 GMT Not After : Jul 2 00:32:38 2025 GMT Subject: CN=C63434CBA7EDE23EB728E94E3BC3816275A067AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:06:13:2b:29:f0:58:22:9e:a1:00:93:09: 64:0d:d4:4d:ff:60:bb:63:c4:ce:24:7d:a4:7a:f2: b5:a0:98:80:46:22:c1:bd:d1:92:59:af:80:b0:51: 6d:6c:95:70:fb:00:77:7e:68:ca:ee:63:dc:4d:09: 04:d4:9b:0f:74:65:6b:5e:95:5c:81:47:24:57:78: 77:39:39:10:ec:c1:90:7c:d6:b5:a0:5b:04:a1:05: 81:6b:37:ab:59:03:d6:77:6b:89:6d:99:1b:f5:06: a5:8d:cd:7f:d0:44:9d:b4:e6:83:21:98:98:b8:db: 8a:62:c4:93:6a:ef:65:6b:6e:f7:2e:a1:3b:34:d3: 1b:eb:0a:a4:a3:03:f0:1b:d1:56:c4:8b:55:2b:88: a2:1a:10:2b:66:f6:fc:37:05:58:66:bf:e5:6c:e1: 62:e0:c9:80:92:fe:36:f4:25:1a:07:f9:61:ff:49: 94:62:dd:c5:61:46:cd:42:93:cc:2e:6c:2e:22:3b: 29:1e:c7:56:e6:b6:4a:49:b9:4d:aa:6e:a2:53:ea: 97:6e:83:dc:ea:f7:2d:ac:38:87:e6:eb:67:d9:1d: c8:43:4b:d0:dd:f2:45:dc:f8:06:8a:70:42:bb:36: aa:b9:26:f7:65:db:33:59:61:af:ba:2a:5b:23:78: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:34:CB:A7:ED:E2:3E:B7:28:E9:4E:3B:C3:81:62:75:A0:67:AD X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:27:57:7c:e2:95:24:7b:3d:c2:30:db:07:11:c7:9e:df:75: 5e:6a:13:1a:cf:8e:f1:cf:2e:05:a4:fc:d2:6b:e3:4c:26:23: a0:f4:d1:8b:4c:39:a6:af:2c:42:1c:01:b0:2f:36:6c:38:ea: f7:fd:b4:82:d0:67:05:93:5b:04:b6:db:b1:50:7b:2f:f5:c3: b8:9c:81:d3:72:3a:05:dc:88:fe:d4:8a:e5:02:ee:64:67:83: 4a:08:fe:a4:c8:95:45:b7:3e:31:2a:9d:e1:f4:c9:32:5d:17: 7e:cb:4d:69:22:9d:92:c8:a6:ab:72:71:f1:e3:07:bf:4a:9e: d1:94:b6:21:9f:0f:44:8b:20:84:1c:a8:a6:db:c7:2b:d7:0f: 1b:d8:f6:a5:c8:4f:af:c7:6c:84:51:3c:91:68:33:5b:5f:dd: 9f:d0:ea:58:f2:b1:38:0c:9f:5f:b5:f5:27:3b:36:7b:0c:95: 80:d0:6c:e5:96:48:63:35:88:6f:99:7d:6b:e7:87:0a:57:cf: 9d:66:37:5f:95:08:bd:2a:c7:c3:ab:0b:82:bd:20:a2:ec:70: f0:6d:ba:11:97:90:2e:0d:98:6d:d6:33:64:a0:3f:dc:24:8f: 6b:08:58:2d:2f:56:84:51:90:d1:d5:ce:84:e6:4c:8f:3b:a6: a0:b2:84:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGj3V57Yi4vn17auIYC2QHTWH8GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA2MjgyMTM1MzhaFw0yNTA3MDIwMDMyMzhaMDMxMTAvBgNV BAMTKEM2MzQzNENCQTdFREUyM0VCNzI4RTk0RTNCQzM4MTYyNzVBMDY3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZswYTKynwWCKeoQCTCWQN1E3/ YLtjxM4kfaR68rWgmIBGIsG90ZJZr4CwUW1slXD7AHd+aMruY9xNCQTUmw90ZWte lVyBRyRXeHc5ORDswZB81rWgWwShBYFrN6tZA9Z3a4ltmRv1BqWNzX/QRJ205oMh mJi424pixJNq72VrbvcuoTs00xvrCqSjA/Ab0VbEi1UriKIaECtm9vw3BVhmv+Vs 4WLgyYCS/jb0JRoH+WH/SZRi3cVhRs1Ck8wubC4iOykex1bmtkpJuU2qbqJT6pdu g9zq9y2sOIfm62fZHchDS9Dd8kXc+AaKcEK7Nqq5Jvdl2zNZYa+6KlsjePnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxjQ0y6ft4j63KOlOO8OBYnWgZ60wHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0nV3zilSR7PcIw2wcRx57fdV5qExrPjvHP LgWk/NJr40wmI6D00YtMOaavLEIcAbAvNmw46vf9tILQZwWTWwS227FQey/1w7ic gdNyOgXciP7UiuUC7mRng0oI/qTIlUW3PjEqneH0yTJdF37LTWkinZLIpqtycfHj B79KntGUtiGfD0SLIIQcqKbbxyvXDxvY9qXIT6/HbIRRPJFoM1tf3Z/Q6ljysTgM n1+19Sc7NnsMlYDQbOWWSGM1iG+ZfWvnhwpXz51mN1+VCL0qx8OrC4K9IKLscPBt uhGXkC4NmG3WM2SgP9wkj2sIWC0vVoRRkNHVzoTmTI87pqCyhJQ= -----END CERTIFICATE-----Generated at Mon Jun 30 07:18:52 2025 by rpki-client