$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: ZzC3+xu+yhS6TWwXFuTz7/nWKCwDu9DtDK8VSk5Drnc= Subject key identifier: F7:CD:38:4D:5B:1B:58:46:2D:67:76:13:B9:4D:BC:2F:FE:1E:CF:CD Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 148CB1843F1FDFB419E4420998DDAF5ADAE60457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: AF Signing time: Sun 29 Jun 2025 07:51:27 +0000 Manifest this update: Sun 29 Jun 2025 07:46:27 +0000 Manifest next update: Wed 02 Jul 2025 09:06:27 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: PmqWRovt0aNtnXZUtlUcCIUXgJ6TNY4s6IPkSznWHUc=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8c:b1:84:3f:1f:df:b4:19:e4:42:09:98:dd:af:5a:da:e6:04:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jun 29 07:46:27 2025 GMT Not After : Jul 2 09:06:27 2025 GMT Subject: CN=F7CD384D5B1B58462D677613B94DBC2FFE1ECFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:9d:f6:d7:7a:04:85:92:0d:15:b9:af:bf: b8:92:ee:dc:2e:d3:bc:9d:f2:0f:ee:85:2e:b8:dc: fb:8c:c6:03:88:7c:00:49:18:f1:04:ca:18:2a:1a: c3:89:4a:35:86:4e:af:01:3f:d5:18:37:73:94:48: 3d:cc:2c:fd:65:15:18:e8:80:15:ab:33:93:e0:70: 9d:9a:0c:01:73:c2:e7:66:e7:32:6f:26:d8:fd:ce: 43:bf:55:0f:08:39:6f:28:31:b8:d6:1f:9e:ef:20: ba:41:84:6c:81:04:95:cd:76:12:1c:e7:5b:08:68: f6:fc:a5:f7:2a:f9:ee:47:a2:c3:e2:de:2e:04:c8: fc:d0:6b:7e:a5:91:fb:ea:36:dc:4f:24:67:2e:4f: 6c:17:db:32:60:35:13:94:0c:1e:66:f3:52:07:d9: 6c:35:ce:3a:00:b1:86:9e:11:8a:87:f7:2c:df:fa: 44:9b:92:b0:cc:90:96:f9:47:eb:ff:01:a7:c1:1f: e3:dd:e0:07:b8:29:1e:33:3a:a5:8b:4e:40:26:af: 57:6f:0f:fe:a0:7f:79:e3:43:ce:57:b1:75:17:2a: 10:b0:90:89:c6:2c:b7:c1:39:76:aa:b4:36:73:21: 0d:20:e9:3c:7d:e1:15:19:e2:bf:58:09:f9:96:f8: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:38:4D:5B:1B:58:46:2D:67:76:13:B9:4D:BC:2F:FE:1E:CF:CD X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6c:f9:ff:f0:13:a8:13:7d:81:4a:33:75:ae:ff:61:d1:6a: 17:dc:ea:cb:92:07:7a:88:c4:aa:40:b3:9b:c9:3a:b3:d2:2d: 64:d4:72:98:e6:bc:1c:e3:07:d8:9d:12:49:bb:8d:41:06:81: 65:59:5c:44:65:39:a3:b4:72:82:33:a2:57:cb:69:c6:be:7e: ff:2f:57:49:0a:a7:04:38:9d:23:82:d4:e5:67:f1:4c:4f:74: bb:18:2b:21:c4:23:05:8b:14:11:43:20:be:6d:13:58:23:ca: 92:da:fb:c1:71:43:8d:1d:db:9d:1d:a5:40:ef:9a:14:76:34: c7:12:cc:8b:85:21:34:6e:db:02:5c:8b:a1:b3:96:65:59:50: 60:83:95:62:5b:d3:49:c0:71:3f:b7:f3:64:4e:a3:0e:e1:57: 60:ad:39:4f:48:bd:1d:5d:8d:43:e0:77:66:c2:68:34:b4:81: 78:db:52:8a:8c:f9:1b:b9:f0:9c:ff:d2:3a:0c:00:d2:bf:d8: e2:d6:07:69:26:ff:3d:77:a8:71:7e:ef:2c:03:68:ea:02:50: aa:0d:9f:90:dd:41:e0:f2:76:39:f5:cb:7f:28:dc:2e:11:82: a2:6e:d9:23:ec:9c:4a:75:9e:47:98:b4:dd:3a:e9:98:63:da: 71:41:79:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIyxhD8f37QZ5EIJmN2vWtrmBFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNTA2MjkwNzQ2MjdaFw0yNTA3MDIwOTA2MjdaMDMxMTAvBgNV BAMTKEY3Q0QzODRENUIxQjU4NDYyRDY3NzYxM0I5NERCQzJGRkUxRUNGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5J3213oEhZINFbmvv7iS7twu 07yd8g/uhS643PuMxgOIfABJGPEEyhgqGsOJSjWGTq8BP9UYN3OUSD3MLP1lFRjo gBWrM5PgcJ2aDAFzwudm5zJvJtj9zkO/VQ8IOW8oMbjWH57vILpBhGyBBJXNdhIc 51sIaPb8pfcq+e5HosPi3i4EyPzQa36lkfvqNtxPJGcuT2wX2zJgNROUDB5m81IH 2Ww1zjoAsYaeEYqH9yzf+kSbkrDMkJb5R+v/AafBH+Pd4Ae4KR4zOqWLTkAmr1dv D/6gf3njQ85XsXUXKhCwkInGLLfBOXaqtDZzIQ0g6Tx94RUZ4r9YCfmW+EtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9804TVsbWEYtZ3YTuU28L/4ez80wHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAds+f/wE6gTfYFKM3Wu/2HRahfc6suSB3qI xKpAs5vJOrPSLWTUcpjmvBzjB9idEkm7jUEGgWVZXERlOaO0coIzolfLaca+fv8v V0kKpwQ4nSOC1OVn8UxPdLsYKyHEIwWLFBFDIL5tE1gjypLa+8FxQ40d250dpUDv mhR2NMcSzIuFITRu2wJci6GzlmVZUGCDlWJb00nAcT+382ROow7hV2CtOU9IvR1d jUPgd2bCaDS0gXjbUoqM+Ru58Jz/0joMANK/2OLWB2km/z13qHF+7ywDaOoCUKoN n5DdQeDydjn1y38o3C4RgqJu2SPsnEp1nkeYtN066Zhj2nFBeWQ= -----END CERTIFICATE-----Generated at Sun Jun 29 19:50:23 2025 by rpki-client