$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: YxTE43QSW7AESa7JysohXNgnP5XXLSqtzJcsIj+uPM8= Subject key identifier: 51:FF:49:D3:E8:F0:AD:2B:FE:0B:38:99:BE:59:AE:8C:62:78:B6:E5 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 6312F09189C0F78005A50356689796938ED4CF98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 01C3 Signing time: Sat 28 Jun 2025 21:22:13 +0000 Manifest this update: Sat 28 Jun 2025 21:17:13 +0000 Manifest next update: Tue 01 Jul 2025 23:05:13 +0000 Files and hashes: 1: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=) 2: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=) 3: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: q2JzAJ4KWuMy8UNkflOx1INP6Nh24QMXd1+kRMj9Nio=) 4: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: DPykOYeFqNoag7xb92W8/PrEblwWpE1eWB5cwaAPFZY=) 5: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=) 6: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=) 7: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: fGk+lv9Sabe14MUSlmah2cnTe9n4fCWHXLFvR8sH2XU=) 8: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) 9: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:12:f0:91:89:c0:f7:80:05:a5:03:56:68:97:96:93:8e:d4:cf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Jun 28 21:17:13 2025 GMT Not After : Jul 1 23:05:13 2025 GMT Subject: CN=51FF49D3E8F0AD2BFE0B3899BE59AE8C6278B6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:61:b8:a0:3d:a6:df:b1:c2:77:8f:db:99: aa:44:77:55:50:2a:b1:2f:97:a2:07:96:b0:75:82: 44:0e:ed:29:86:33:a5:11:d4:87:86:aa:ed:db:ad: 8f:15:48:43:08:cb:4c:2d:84:f4:b3:c4:76:c3:55: 64:83:b2:bf:45:80:d0:5b:ef:84:a7:a4:0c:fe:04: 39:bc:2b:e3:d5:4b:0a:21:3b:ee:4f:8e:f3:c2:5c: 89:0d:a8:c7:01:f3:bb:d1:16:68:a5:5a:93:ef:5b: 28:a7:27:e7:8f:1e:5d:02:ab:2c:1b:ff:4f:04:94: 35:c9:a6:02:dc:79:ac:b3:4a:91:d9:23:77:ff:20: a0:c7:6d:1e:70:74:6b:f8:21:3f:bf:73:69:df:b5: 73:04:7c:c2:c4:e4:42:aa:16:c3:22:c5:fd:8d:74: 0c:45:6f:d7:9d:60:39:ba:3e:34:b3:ab:88:8e:70: d2:5e:fa:4d:c5:8d:4c:68:07:b1:ed:c6:f6:38:28: 2e:16:0a:ab:94:e4:e2:2d:5c:8d:b3:96:6e:38:a5: 86:16:2d:d1:fd:43:a7:b0:04:b7:6c:e3:62:f3:65: 39:b6:fa:24:41:97:91:76:8d:26:5d:40:e1:44:f1: 53:ff:bd:01:53:5d:be:b9:61:a6:da:55:c8:bc:ff: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:49:D3:E8:F0:AD:2B:FE:0B:38:99:BE:59:AE:8C:62:78:B6:E5 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:64:58:3f:15:b0:06:02:ef:26:94:90:85:03:23:8e:c3:4a: 83:f8:4a:ab:8d:cf:14:d2:ac:e9:e7:4e:89:04:92:b1:ad:f0: da:d1:49:15:a9:a2:be:fb:68:9c:2e:54:4a:64:89:2a:e6:3e: 1b:48:1e:6f:3d:a6:da:db:12:e1:6d:ba:88:99:6c:c4:f8:16: 24:5c:da:54:42:2f:31:fe:d9:66:97:68:5e:be:f5:8e:a8:fe: 8f:f3:a4:05:4e:f1:db:ef:55:c3:c4:e4:c6:e7:a7:ac:d9:02: f9:81:63:73:56:92:14:f6:25:3e:67:53:09:7d:3d:05:74:e7: 12:fd:e6:35:72:dc:61:a8:62:a5:73:c5:e5:36:14:00:b9:df: 9f:f5:10:ad:08:8f:74:d8:80:08:00:d8:6f:96:e1:d0:57:3a: bc:06:e6:cb:bc:14:de:6c:4b:19:89:b7:14:6e:bf:9a:a8:fd: bc:a5:8c:24:66:66:8a:1c:d9:2c:7f:57:8d:c3:3d:1e:47:3a: 12:79:8f:31:a6:a8:dd:28:d2:91:9a:b9:3a:bd:fb:c0:f1:b4: 5b:3d:18:43:5a:e7:8b:f7:4d:8d:2b:28:5e:80:27:a0:f4:09: 5d:43:c3:60:f6:4a:31:55:9d:d4:90:0a:e7:33:a8:2a:4f:49: 0a:69:fb:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxLwkYnA94AFpQNWaJeWk47Uz5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTA2MjgyMTE3MTNaFw0yNTA3MDEyMzA1MTNaMDMxMTAvBgNV BAMTKDUxRkY0OUQzRThGMEFEMkJGRTBCMzg5OUJFNTlBRThDNjI3OEI2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqmG4oD2m37HCd4/bmapEd1VQ KrEvl6IHlrB1gkQO7SmGM6UR1IeGqu3brY8VSEMIy0wthPSzxHbDVWSDsr9FgNBb 74SnpAz+BDm8K+PVSwohO+5PjvPCXIkNqMcB87vRFmilWpPvWyinJ+ePHl0Cqywb /08ElDXJpgLceayzSpHZI3f/IKDHbR5wdGv4IT+/c2nftXMEfMLE5EKqFsMixf2N dAxFb9edYDm6PjSzq4iOcNJe+k3FjUxoB7HtxvY4KC4WCquU5OItXI2zlm44pYYW LdH9Q6ewBLds42LzZTm2+iRBl5F2jSZdQOFE8VP/vQFTXb65YabaVci8/4G/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUf9J0+jwrSv+CziZvlmujGJ4tuUwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVkWD8VsAYC7yaUkIUDI47DSoP4SquNzxTS rOnnTokEkrGt8NrRSRWpor77aJwuVEpkiSrmPhtIHm89ptrbEuFtuoiZbMT4FiRc 2lRCLzH+2WaXaF6+9Y6o/o/zpAVO8dvvVcPE5Mbnp6zZAvmBY3NWkhT2JT5nUwl9 PQV05xL95jVy3GGoYqVzxeU2FAC535/1EK0Ij3TYgAgA2G+W4dBXOrwG5su8FN5s SxmJtxRuv5qo/byljCRmZooc2Sx/V43DPR5HOhJ5jzGmqN0o0pGauTq9+8DxtFs9 GENa54v3TY0rKF6AJ6D0CV1Dw2D2SjFVndSQCuczqCpPSQpp+wA= -----END CERTIFICATE-----Generated at Mon Jun 30 13:19:01 2025 by rpki-client