$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: t5nY98VI46Kv4OCiaefN5FG2RgLW4DUDFf13I83eSQE= Subject key identifier: 83:4C:29:69:A9:7B:5B:20:4B:FD:7E:A9:D1:56:A0:AD:27:03:FA:87 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 7C0E2450247AE6D649C9A2AD975652BFA26D7435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: BB Signing time: Sat 23 Aug 2025 03:42:07 +0000 Manifest this update: Sat 23 Aug 2025 03:37:07 +0000 Manifest next update: Tue 26 Aug 2025 10:55:07 +0000 Files and hashes: 1: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 2: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 3: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: 2mjzHZBBCQDvVdKlIhHAvDMQsFMCLKk50P1dOu/Le2E=) 4: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0e:24:50:24:7a:e6:d6:49:c9:a2:ad:97:56:52:bf:a2:6d:74:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Aug 23 03:37:07 2025 GMT Not After : Aug 26 10:55:07 2025 GMT Subject: CN=834C2969A97B5B204BFD7EA9D156A0AD2703FA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:19:f4:38:4c:99:44:88:db:6d:12:2c:a7: 9f:fb:bd:a4:9f:f8:dc:e1:d4:b7:ca:cd:51:f8:91: c0:e8:4e:0e:60:ea:16:f1:77:1d:61:3e:1f:c8:8a: fb:69:b5:67:99:d4:2a:d7:41:1c:51:a7:6f:86:a2: 10:73:a8:b7:d7:05:97:72:c7:02:14:37:0d:d7:ee: 00:f1:4d:c0:68:bf:54:43:94:29:0d:63:83:d0:8a: 2a:34:41:65:b4:6c:6a:93:0b:fd:c8:e3:de:34:73: b6:69:a3:82:ca:6a:22:12:33:a2:0b:3e:d2:0b:3b: 18:52:83:96:ab:13:41:c6:91:ad:08:f5:f0:6a:bc: ec:48:d3:3d:99:ab:b6:38:81:4e:be:ac:cf:03:4f: a1:62:d6:77:c9:27:53:f6:7f:ff:d3:19:7b:90:d5: d0:6e:cf:63:53:8c:91:44:81:41:28:d9:04:02:75: fc:bc:3b:ca:67:6f:b7:09:48:ae:f4:78:6e:df:ed: 54:43:bd:7e:27:27:3b:0c:57:5a:18:0a:79:b7:27: fe:71:1d:b1:49:12:38:aa:6d:f6:4a:19:91:8c:9e: 69:1a:ec:52:be:fc:d6:be:98:ac:75:13:fe:de:29: 28:dd:c2:57:27:f1:7d:11:8b:f4:17:24:d7:c8:44: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4C:29:69:A9:7B:5B:20:4B:FD:7E:A9:D1:56:A0:AD:27:03:FA:87 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ee:d0:86:c9:60:85:99:2b:83:17:5a:b0:b8:33:e8:7e:35: 37:4b:fe:51:6e:c7:a2:f7:94:a7:99:14:7a:43:84:f0:04:5c: 60:82:55:68:95:30:42:ca:d1:28:fa:e7:37:0d:3e:e8:e5:b1: b3:f9:d2:69:38:90:8f:e1:3d:4e:77:b4:4b:47:16:e1:1d:a7: aa:ab:c1:50:8f:be:d6:7d:3d:0b:e4:6a:b8:0a:a4:2d:58:46: dd:27:5e:d4:aa:42:44:a5:e8:a2:74:8e:1e:d8:1d:83:d2:a7: ee:2e:01:73:81:c6:2c:bd:55:1f:fa:eb:24:75:26:dc:60:7a: a7:c2:62:af:ce:2f:bb:28:ae:b9:2a:1e:c5:9f:cb:4d:ff:c3: bb:de:e4:a0:a8:e4:f7:9c:93:8d:88:e6:46:c3:3e:6c:e1:af: 4c:20:17:10:2f:38:f5:75:01:2a:92:b4:3b:d9:c3:40:cd:d2: 12:89:f9:62:a6:12:71:52:3c:d7:95:0a:68:a6:87:d4:a8:ba: d3:35:c7:9d:d8:25:4e:e5:a7:27:9f:76:2e:be:0c:f0:e6:a4: 44:4e:e8:b9:22:aa:0b:bf:26:b4:40:53:6d:77:8c:37:6f:29: 1d:3f:9a:cf:04:e1:26:db:d6:00:55:1f:5a:12:d5:ab:84:be: 85:26:11:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfA4kUCR65tZJyaKtl1ZSv6JtdDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTA4MjMwMzM3MDdaFw0yNTA4MjYxMDU1MDdaMDMxMTAvBgNV BAMTKDgzNEMyOTY5QTk3QjVCMjA0QkZEN0VBOUQxNTZBMEFEMjcwM0ZBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+xn0OEyZRIjbbRIsp5/7vaSf +Nzh1LfKzVH4kcDoTg5g6hbxdx1hPh/IivtptWeZ1CrXQRxRp2+GohBzqLfXBZdy xwIUNw3X7gDxTcBov1RDlCkNY4PQiio0QWW0bGqTC/3I4940c7Zpo4LKaiISM6IL PtILOxhSg5arE0HGka0I9fBqvOxI0z2Zq7Y4gU6+rM8DT6Fi1nfJJ1P2f//TGXuQ 1dBuz2NTjJFEgUEo2QQCdfy8O8pnb7cJSK70eG7f7VRDvX4nJzsMV1oYCnm3J/5x HbFJEjiqbfZKGZGMnmka7FK+/Na+mKx1E/7eKSjdwlcn8X0Ri/QXJNfIRKiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg0wpaal7WyBL/X6p0VagrScD+ocwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXu0IbJYIWZK4MXWrC4M+h+NTdL/lFux6L3 lKeZFHpDhPAEXGCCVWiVMELK0Sj65zcNPujlsbP50mk4kI/hPU53tEtHFuEdp6qr wVCPvtZ9PQvkargKpC1YRt0nXtSqQkSl6KJ0jh7YHYPSp+4uAXOBxiy9VR/66yR1 JtxgeqfCYq/OL7sorrkqHsWfy03/w7ve5KCo5Peck42I5kbDPmzhr0wgFxAvOPV1 ASqStDvZw0DN0hKJ+WKmEnFSPNeVCmimh9SoutM1x53YJU7lpyefdi6+DPDmpERO 6Lkiqgu/JrRAU213jDdvKR0/ms8E4Sbb1gBVH1oS1auEvoUmEYs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:10:40 2025 by rpki-client