$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: XRovOmCzNtYrUY8/tMiYQfS0LGPmo6lwIRAYK6btVDQ= Subject key identifier: 04:BD:D7:14:1A:3B:89:77:78:E4:44:32:D0:A5:E8:2E:D3:E1:BB:B8 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 4A0BB2DE6F2FDBD3443E53118264BCB20C2F9E3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 21:20:03 +0000 Manifest this update: Sat 28 Jun 2025 21:15:03 +0000 Manifest next update: Tue 01 Jul 2025 22:29:03 +0000 Files and hashes: 1: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: X3WMGWOJeKfUL27lQz/7L0oG13qZ+UX+tj2ZavjLx6Q=) 2: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0b:b2:de:6f:2f:db:d3:44:3e:53:11:82:64:bc:b2:0c:2f:9e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Jun 28 21:15:03 2025 GMT Not After : Jul 1 22:29:03 2025 GMT Subject: CN=04BDD7141A3B897778E44432D0A5E82ED3E1BBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:df:19:a4:08:bc:6d:9e:9c:7d:b9:4c:f4: 2e:3d:a6:9b:c1:36:4f:a2:77:f5:68:f3:46:8c:bd: 41:34:7a:99:30:12:51:d5:4a:6f:7e:3b:66:a9:b2: a1:3a:b7:e3:58:05:14:01:c6:60:84:79:4d:8e:42: b6:5c:9c:36:08:e8:e9:09:20:8f:22:cd:6c:b8:6e: b7:2b:85:67:0d:b9:9f:59:14:1b:ee:20:48:54:0b: b7:f7:3a:e3:f1:76:ec:bf:95:af:cb:a2:48:9e:84: a9:d6:63:fc:15:98:80:54:d1:39:0a:77:9c:b0:f9: 24:be:e1:e5:bf:99:0e:13:2d:9e:13:3d:c8:d0:30: 07:5b:44:20:75:97:19:71:12:7a:69:dd:78:fd:c9: 37:be:67:12:74:f1:e0:d5:a1:93:6f:4a:9a:cd:46: bf:b4:f6:3a:56:f7:68:3d:30:7a:74:d1:27:5e:80: 15:69:12:ef:36:a0:1c:75:1d:f9:7c:49:ed:57:eb: 80:e1:2e:d9:d4:0e:be:f9:5d:a6:28:2f:16:e0:e3: 29:b2:9c:7b:2c:da:60:ff:a9:17:b0:22:70:7f:c8: 97:61:78:4b:63:25:68:7c:0f:8d:51:68:0e:53:fd: 62:4b:76:6d:bb:ed:12:bb:70:2a:c1:ca:3c:da:40: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BD:D7:14:1A:3B:89:77:78:E4:44:32:D0:A5:E8:2E:D3:E1:BB:B8 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b3:9f:1c:e2:38:b9:2d:9e:55:34:cd:cc:ed:5b:43:5a:ea: 5d:d7:62:1f:65:33:32:00:58:f2:49:36:d5:75:bb:db:68:18: 4b:bc:e5:56:d5:44:d3:5d:9b:de:9a:83:ef:79:25:7e:f9:a8: fa:4e:52:b0:97:3e:9a:52:b5:bf:fe:e9:0e:e7:e8:7e:dd:4c: dd:94:4b:ce:42:85:03:b8:05:df:48:93:d9:c1:08:7b:de:3a: 26:2b:29:4e:47:4d:37:42:5d:fd:44:60:35:88:ee:b0:ba:b9: c3:1c:5b:f0:b7:b3:16:52:3b:77:6b:03:be:00:90:1d:e3:38: b4:84:e4:dc:52:a6:4e:3a:3e:7b:7c:fc:ad:02:25:7d:16:ed: 4b:f6:dd:ef:59:02:03:94:d8:c6:d3:c0:ed:f5:18:d2:c4:a5: a9:11:e1:e8:21:d1:9a:d9:cc:d8:65:53:8a:4b:1b:88:d5:18: 58:2b:0c:e3:3e:6d:36:71:e8:1b:f3:e7:6b:f6:27:75:0e:b4: 18:bb:52:77:c1:6a:49:3c:11:23:bb:65:fe:b8:05:52:e5:8d: 28:0d:08:d6:34:f9:6c:e7:a9:5f:1c:ff:01:09:64:7b:2e:54: 06:85:1e:97:95:d1:4d:78:00:16:e8:06:25:44:14:ba:08:24: 7a:f3:31:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSguy3m8v29NEPlMRgmS8sgwvnj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA2MjgyMTE1MDNaFw0yNTA3MDEyMjI5MDNaMDMxMTAvBgNV BAMTKDA0QkRENzE0MUEzQjg5Nzc3OEU0NDQzMkQwQTVFODJFRDNFMUJCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0t8ZpAi8bZ6cfblM9C49ppvB Nk+id/Vo80aMvUE0epkwElHVSm9+O2apsqE6t+NYBRQBxmCEeU2OQrZcnDYI6OkJ II8izWy4brcrhWcNuZ9ZFBvuIEhUC7f3OuPxduy/la/LokiehKnWY/wVmIBU0TkK d5yw+SS+4eW/mQ4TLZ4TPcjQMAdbRCB1lxlxEnpp3Xj9yTe+ZxJ08eDVoZNvSprN Rr+09jpW92g9MHp00SdegBVpEu82oBx1Hfl8Se1X64DhLtnUDr75XaYoLxbg4ymy nHss2mD/qRewInB/yJdheEtjJWh8D41RaA5T/WJLdm277RK7cCrByjzaQL5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBL3XFBo7iXd45EQy0KXoLtPhu7gwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaznxziOLktnlU0zcztW0Na6l3XYh9lMzIA WPJJNtV1u9toGEu85VbVRNNdm96ag+95JX75qPpOUrCXPppStb/+6Q7n6H7dTN2U S85ChQO4Bd9Ik9nBCHveOiYrKU5HTTdCXf1EYDWI7rC6ucMcW/C3sxZSO3drA74A kB3jOLSE5NxSpk46Pnt8/K0CJX0W7Uv23e9ZAgOU2MbTwO31GNLEpakR4egh0ZrZ zNhlU4pLG4jVGFgrDOM+bTZx6Bvz52v2J3UOtBi7UnfBakk8ESO7Zf64BVLljSgN CNY0+WznqV8c/wEJZHsuVAaFHpeV0U14ABboBiVEFLoIJHrzMTw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:44:55 2025 by rpki-client