$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: nFZTIb6Pub/OCq5R5RqK8ppVaiDvgdJfjXXRijNQcBU= Subject key identifier: 53:91:C6:EE:1B:AB:BB:FA:DD:58:BF:EE:97:C4:23:BF:52:45:92:84 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 392FF515F8200648B6FB7A5E4838EC59A499588F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: FB Signing time: Sun 29 Jun 2025 13:51:00 +0000 Manifest this update: Sun 29 Jun 2025 13:46:00 +0000 Manifest next update: Wed 02 Jul 2025 14:11:00 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: C2qKa+NTpVxAyZFI3fiy3LUZZdrYEZLBeeTC8Oaukpo=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: k7T1WAVGcP47xdl7c6BR+kqOTO8TZ63OjE6rrNOkvf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2f:f5:15:f8:20:06:48:b6:fb:7a:5e:48:38:ec:59:a4:99:58:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Jun 29 13:46:00 2025 GMT Not After : Jul 2 14:11:00 2025 GMT Subject: CN=5391C6EE1BABBBFADD58BFEE97C423BF52459284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:05:bf:40:b6:0c:b4:bb:1d:e4:71:96:b4:97: 2f:8b:1e:7d:ea:ca:e2:d8:9c:a6:4d:ce:be:ac:10: 99:ff:1a:b5:35:b5:15:b0:e1:c4:33:b7:18:94:04: f1:64:0c:9e:fa:61:38:02:f1:9f:b2:58:10:59:e6: 4a:cb:14:75:fb:c3:6a:d3:af:e4:0c:3a:02:8f:cf: f2:93:4a:f9:87:17:94:7a:4c:76:d2:bf:8d:db:34: d8:64:c8:a9:76:34:b5:a9:41:69:18:37:97:7f:c4: 71:e8:f3:96:18:95:f2:b3:55:cd:f4:74:3e:f6:fd: 73:ff:9d:b9:09:36:7a:67:81:fa:35:64:2a:dc:27: 5d:66:45:53:d4:7d:4a:c5:4f:74:25:85:d1:1b:1b: 6c:41:e4:53:fe:c0:8b:42:9b:2e:36:c8:81:2b:bc: 0d:ad:5b:e4:a4:9f:85:ee:3f:22:f3:a2:c0:45:e8: 41:be:87:be:65:e6:4f:22:c0:47:04:9d:e8:a7:32: b9:6d:88:43:ed:c3:be:d9:f8:9b:74:b8:c3:d4:ee: 4c:06:30:20:f8:fb:fd:b7:d7:ea:b5:52:19:3c:86: 97:e3:17:13:54:e7:0b:cd:4e:3f:97:e3:f6:ac:68: 15:ae:8c:38:dc:e9:28:ae:98:0b:4c:c8:d0:d1:46: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:C6:EE:1B:AB:BB:FA:DD:58:BF:EE:97:C4:23:BF:52:45:92:84 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:32:24:9a:ac:d6:af:65:81:62:bb:f4:6a:69:1c:2a:06:e8: 45:c8:d5:65:1f:6b:59:c5:70:f8:eb:5f:26:22:87:43:c1:02: f6:89:72:a2:06:1c:1e:9d:c2:90:4c:75:16:a9:40:e4:cc:b9: de:e9:11:0f:b0:62:e2:0d:f2:04:13:22:95:17:d5:97:e2:16: a9:39:c9:44:ef:35:13:56:65:66:3d:99:8f:2e:d9:13:f3:c1: 0d:6e:5a:84:4d:1f:cd:3d:98:a8:4b:74:d1:14:9b:d3:40:fe: 8a:e5:77:24:dd:12:e8:11:73:5c:95:66:5d:55:2e:c5:c1:b6: 55:40:3c:75:67:ec:da:77:82:01:ec:c6:52:6a:35:7f:4a:82: fc:aa:b0:f3:d8:cd:95:0b:f9:65:cb:58:0c:4c:51:cf:e3:17: 6d:2a:f9:80:04:18:57:51:8b:ad:01:dd:26:1b:a9:3d:44:fe: 61:9e:43:63:7c:13:26:07:77:e3:53:76:38:8e:31:09:fc:f8: 8f:bf:dd:42:e9:21:4f:b7:c6:3c:e8:a1:94:0d:d9:6b:cc:c0: e9:f2:94:37:7a:76:a9:4b:04:48:a6:59:a7:82:32:69:67:7a: db:b7:eb:22:92:7e:c6:46:0c:17:85:21:3a:a4:ac:26:c0:95: 35:1c:85:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOS/1FfggBki2+3peSDjsWaSZWI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTA2MjkxMzQ2MDBaFw0yNTA3MDIxNDExMDBaMDMxMTAvBgNV BAMTKDUzOTFDNkVFMUJBQkJCRkFERDU4QkZFRTk3QzQyM0JGNTI0NTkyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBb9Atgy0ux3kcZa0ly+LHn3q yuLYnKZNzr6sEJn/GrU1tRWw4cQztxiUBPFkDJ76YTgC8Z+yWBBZ5krLFHX7w2rT r+QMOgKPz/KTSvmHF5R6THbSv43bNNhkyKl2NLWpQWkYN5d/xHHo85YYlfKzVc30 dD72/XP/nbkJNnpngfo1ZCrcJ11mRVPUfUrFT3QlhdEbG2xB5FP+wItCmy42yIEr vA2tW+Skn4XuPyLzosBF6EG+h75l5k8iwEcEneinMrltiEPtw77Z+Jt0uMPU7kwG MCD4+/231+q1Uhk8hpfjFxNU5wvNTj+X4/asaBWujDjc6SiumAtMyNDRRmfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU5HG7huru/rdWL/ul8Qjv1JFkoQwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEyJJqs1q9lgWK79GppHCoG6EXI1WUfa1nF cPjrXyYih0PBAvaJcqIGHB6dwpBMdRapQOTMud7pEQ+wYuIN8gQTIpUX1ZfiFqk5 yUTvNRNWZWY9mY8u2RPzwQ1uWoRNH809mKhLdNEUm9NA/orldyTdEugRc1yVZl1V LsXBtlVAPHVn7Np3ggHsxlJqNX9KgvyqsPPYzZUL+WXLWAxMUc/jF20q+YAEGFdR i60B3SYbqT1E/mGeQ2N8EyYHd+NTdjiOMQn8+I+/3ULpIU+3xjzooZQN2WvMwOny lDd6dqlLBEimWaeCMmlnetu36yKSfsZGDBeFITqkrCbAlTUchUo= -----END CERTIFICATE-----Generated at Mon Jun 30 01:15:17 2025 by rpki-client