$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: 3q6jNEgzdN3FVCSn8zsrPv+/33ybfEgES9jNX3rNBko= Subject key identifier: 94:AB:E4:E7:32:17:F3:F7:6B:52:A0:7B:76:47:5A:E3:C5:00:26:C1 Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 7D099E57F85325E12201B7E6B9CF27187A66BA1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: A3 Signing time: Sun 29 Jun 2025 04:52:04 +0000 Manifest this update: Sun 29 Jun 2025 04:47:04 +0000 Manifest next update: Wed 02 Jul 2025 05:22:04 +0000 Files and hashes: 1: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: RiUAKwtfeLJesemkalov6est14HtwqpBs/sf4SElNOY=) 2: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 4: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:09:9e:57:f8:53:25:e1:22:01:b7:e6:b9:cf:27:18:7a:66:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Jun 29 04:47:04 2025 GMT Not After : Jul 2 05:22:04 2025 GMT Subject: CN=94ABE4E73217F3F76B52A07B76475AE3C50026C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:99:7f:1f:bc:cf:10:a6:c7:70:ed:6d:4e: d1:80:6d:07:be:cf:ea:e7:4c:f7:6d:b0:91:36:e3: f2:da:21:81:1b:1b:c2:9a:d8:ef:97:63:95:f2:09: e8:e8:4c:90:d9:5d:2d:e0:13:f3:4c:4b:16:24:24: ef:ed:ef:b5:14:bb:f4:81:5d:a2:87:f1:14:55:d1: 26:5f:8b:58:4f:ec:96:73:4b:01:65:f8:21:b5:04: c5:e7:29:97:1f:d9:00:a8:75:f5:e9:bb:f5:d8:90: 97:b3:13:af:20:59:f9:2a:67:7e:51:98:ff:83:f3: 3d:a1:5c:d0:c2:9b:c9:d0:5d:a6:6b:dd:4d:6b:f5: 86:5e:7e:c4:3e:7e:70:dc:18:e8:14:49:77:c7:56: d3:96:27:9f:7f:1e:0e:44:8f:0d:75:97:98:eb:d7: fb:87:bb:28:c0:74:42:49:88:8a:9e:f3:c4:3e:59: f5:37:b6:25:1d:c6:6b:bf:e9:27:56:66:f1:7a:36: 9e:c5:88:b2:73:0a:54:d6:71:eb:eb:bd:2e:1e:a8: d6:c0:8d:1e:26:6e:d9:48:c7:bd:ae:d8:d7:b6:f3: 2d:a5:2e:d9:e9:44:a3:73:02:fa:5e:8f:1e:06:a3: 4f:1b:3c:c4:dc:70:5c:0f:dd:65:b0:2c:2a:a5:41: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AB:E4:E7:32:17:F3:F7:6B:52:A0:7B:76:47:5A:E3:C5:00:26:C1 X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0f:17:91:82:88:cf:bf:66:6f:7e:a1:3e:6b:0b:1c:e5:85: bb:1c:9d:97:54:a8:03:2f:fd:b6:58:ac:c2:36:54:93:64:a0: da:44:3d:17:3a:f3:d9:78:9c:12:49:a4:5f:ad:f7:23:b2:c4: ae:b7:be:e0:31:02:60:4b:19:39:19:02:06:48:97:e0:21:26: 60:1c:42:95:41:9b:fa:fe:17:fa:fa:a4:b2:9e:c5:d8:34:b2: bc:80:2d:60:aa:1a:b7:d2:24:8d:7d:f7:7b:dc:df:8e:26:6c: b1:87:62:72:e8:dd:fe:ad:05:6e:03:d0:50:7c:fd:f3:e7:42: f9:b6:d9:76:9f:78:b1:a8:84:e7:7c:d8:31:c4:ee:30:ab:ac: db:a2:91:02:cf:e7:b9:24:c1:84:af:84:0e:86:87:ba:5e:91: 44:20:63:26:30:6d:e7:a1:65:95:5b:07:09:d4:d6:62:6b:ee: 32:a0:47:3c:cf:05:a3:be:af:df:21:0b:61:84:d0:60:c9:11: 34:c9:fe:a7:8f:42:d6:5d:a1:3b:53:4a:48:79:34:51:3d:0d: 9d:11:ed:17:8f:d7:58:88:52:c3:72:1a:65:5f:b5:82:8d:a5: b5:85:dd:03:e7:48:a6:85:cc:14:49:0d:92:44:03:0c:ae:69: a4:32:9e:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQmeV/hTJeEiAbfmuc8nGHpmuhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTA2MjkwNDQ3MDRaFw0yNTA3MDIwNTIyMDRaMDMxMTAvBgNV BAMTKDk0QUJFNEU3MzIxN0YzRjc2QjUyQTA3Qjc2NDc1QUUzQzUwMDI2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWJl/H7zPEKbHcO1tTtGAbQe+ z+rnTPdtsJE24/LaIYEbG8Ka2O+XY5XyCejoTJDZXS3gE/NMSxYkJO/t77UUu/SB XaKH8RRV0SZfi1hP7JZzSwFl+CG1BMXnKZcf2QCodfXpu/XYkJezE68gWfkqZ35R mP+D8z2hXNDCm8nQXaZr3U1r9YZefsQ+fnDcGOgUSXfHVtOWJ59/Hg5Ejw11l5jr 1/uHuyjAdEJJiIqe88Q+WfU3tiUdxmu/6SdWZvF6Np7FiLJzClTWcevrvS4eqNbA jR4mbtlIx72u2Ne28y2lLtnpRKNzAvpejx4Go08bPMTccFwP3WWwLCqlQS1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlKvk5zIX8/drUqB7dkda48UAJsEwHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIPF5GCiM+/Zm9+oT5rCxzlhbscnZdUqAMv /bZYrMI2VJNkoNpEPRc689l4nBJJpF+t9yOyxK63vuAxAmBLGTkZAgZIl+AhJmAc QpVBm/r+F/r6pLKexdg0sryALWCqGrfSJI1993vc344mbLGHYnLo3f6tBW4D0FB8 /fPnQvm22XafeLGohOd82DHE7jCrrNuikQLP57kkwYSvhA6Gh7pekUQgYyYwbeeh ZZVbBwnU1mJr7jKgRzzPBaO+r98hC2GE0GDJETTJ/qePQtZdoTtTSkh5NFE9DZ0R 7ReP11iIUsNyGmVftYKNpbWF3QPnSKaFzBRJDZJEAwyuaaQynqM= -----END CERTIFICATE-----Generated at Mon Jun 30 07:24:43 2025 by rpki-client