$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: 1wIFgQtAZ/4sBWY4IJioIhaVnwsn6eeOAdT33usouXI= Subject key identifier: 9D:B3:AB:6D:70:02:9A:84:9C:1C:E7:2C:68:C2:B1:5B:8E:23:5B:7E Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 7FDD953DF19B58A3398C14B7F26E42E1C64DE44F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 0109 Signing time: Sat 28 Jun 2025 09:00:43 +0000 Manifest this update: Sat 28 Jun 2025 08:55:43 +0000 Manifest next update: Tue 01 Jul 2025 13:18:43 +0000 Files and hashes: 1: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 0vbyY37xfecmYZZ06+vwEcy+Hnbk4rhg/muBGmLCtEA=) 2: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: GdFQ16ys5THdsOt0JvI+f1x6ys8/DZCpLZHhWmZPVdg=) 3: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: 8rRzKbXxM7JbqlliFf/wDyC7Rc9CVk2AoWCVylO5lhs=) 4: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: hJsHNiouHUO3Ka+NLytHqPtJeyZ8ec5QRv3RG/XjQrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:dd:95:3d:f1:9b:58:a3:39:8c:14:b7:f2:6e:42:e1:c6:4d:e4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Jun 28 08:55:43 2025 GMT Not After : Jul 1 13:18:43 2025 GMT Subject: CN=9DB3AB6D70029A849C1CE72C68C2B15B8E235B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:db:fc:f1:23:56:9b:33:b9:2d:1a:ff:fb: 84:8f:80:ba:a6:b4:59:9c:c2:2d:a9:33:bb:c1:a5: 95:9b:53:b7:f6:2d:63:81:71:fa:6b:e3:f0:ba:99: 3d:d0:d5:84:ff:ee:b7:78:b9:52:e4:af:f1:b0:0a: 6e:2d:a0:3a:59:aa:8d:0d:1a:47:13:47:76:d6:ff: 24:f8:13:09:95:8d:14:41:c6:ab:66:13:6f:2a:4a: c2:61:1d:7d:46:d8:45:92:70:98:55:c3:00:bd:22: 19:93:9d:f3:23:f6:37:94:4a:36:50:c7:df:0e:aa: a7:49:e8:6b:ce:bf:7e:51:71:3d:9e:0e:32:8a:09: 79:04:b7:97:2b:8f:d2:d1:d3:6e:8b:77:3c:ed:7d: 8e:1d:de:ce:98:8e:56:be:d7:06:55:7b:b5:6f:f1: 0f:ef:b8:4d:5b:99:57:9e:23:2d:b4:73:14:cc:0b: c5:13:79:e0:4d:a0:8b:82:16:d2:5b:19:36:32:5f: 9c:ba:0d:68:08:8d:be:9f:62:74:9a:b4:a3:7f:d2: f5:c9:1b:45:c4:30:fc:89:d7:98:ed:a7:ae:15:a7: cc:d3:50:31:27:c4:54:21:ea:63:16:38:0e:5d:d5: 53:03:c2:2c:60:75:45:5d:0c:35:83:3b:59:36:a5: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B3:AB:6D:70:02:9A:84:9C:1C:E7:2C:68:C2:B1:5B:8E:23:5B:7E X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:dd:e4:e1:7a:fa:81:2d:ac:56:1b:e4:7a:67:66:e2:d4: 85:14:4d:33:9a:35:a9:f0:08:8e:47:2d:22:40:1b:01:d4:9a: f5:92:e3:78:f8:84:f3:2f:33:f4:cc:df:5d:4f:9a:de:ec:37: 86:a2:68:b8:88:a2:83:9e:65:de:1b:1a:16:ca:9f:3c:3e:cc: 37:1a:30:1f:74:89:28:9a:b8:f3:4c:b3:75:f6:84:e2:b0:f3: ea:2b:2b:4d:b0:5a:40:3c:c4:17:ab:12:d2:f4:d2:39:f1:6d: 93:17:5d:b4:db:47:f0:23:2b:b6:ec:ab:f1:b1:fb:dc:9d:8e: bd:71:6e:85:d2:af:dc:94:9b:5b:55:c8:66:a9:9b:c2:92:b9: b8:bd:0a:b8:e3:aa:55:a8:93:94:a9:bc:55:b2:aa:56:6b:e9: e6:ca:04:4c:4f:1b:89:12:6b:23:12:51:78:44:5b:8b:cf:4c: 60:f1:a8:6d:d1:4f:da:23:d0:95:a8:56:fc:ba:4f:99:d0:02: c1:0a:4c:1a:b5:0d:d7:ea:7e:b5:68:d4:5d:35:7b:51:77:dc: 66:61:5e:39:6b:22:63:8e:9f:29:c7:a7:f4:6d:ef:a4:ac:31: 2e:82:f1:3c:fa:d7:65:56:28:7f:a8:51:96:bd:a7:5e:9e:04: f8:f0:0b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf92VPfGbWKM5jBS38m5C4cZN5E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTA2MjgwODU1NDNaFw0yNTA3MDExMzE4NDNaMDMxMTAvBgNV BAMTKDlEQjNBQjZENzAwMjlBODQ5QzFDRTcyQzY4QzJCMTVCOEUyMzVCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwNv88SNWmzO5LRr/+4SPgLqm tFmcwi2pM7vBpZWbU7f2LWOBcfpr4/C6mT3Q1YT/7rd4uVLkr/GwCm4toDpZqo0N GkcTR3bW/yT4EwmVjRRBxqtmE28qSsJhHX1G2EWScJhVwwC9IhmTnfMj9jeUSjZQ x98OqqdJ6GvOv35RcT2eDjKKCXkEt5crj9LR026LdzztfY4d3s6Yjla+1wZVe7Vv 8Q/vuE1bmVeeIy20cxTMC8UTeeBNoIuCFtJbGTYyX5y6DWgIjb6fYnSatKN/0vXJ G0XEMPyJ15jtp64Vp8zTUDEnxFQh6mMWOA5d1VMDwixgdUVdDDWDO1k2pc8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnbOrbXACmoScHOcsaMKxW44jW34wHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgG3eThevqBLaxWG+R6Z2bi1IUUTTOaNanw CI5HLSJAGwHUmvWS43j4hPMvM/TM311Pmt7sN4aiaLiIooOeZd4bGhbKnzw+zDca MB90iSiauPNMs3X2hOKw8+orK02wWkA8xBerEtL00jnxbZMXXbTbR/AjK7bsq/Gx +9ydjr1xboXSr9yUm1tVyGapm8KSubi9CrjjqlWok5SpvFWyqlZr6ebKBExPG4kS ayMSUXhEW4vPTGDxqG3RT9oj0JWoVvy6T5nQAsEKTBq1DdfqfrVo1F01e1F33GZh XjlrImOOnynHp/Rt76SsMS6C8Tz612VWKH+oUZa9p16eBPjwC7E= -----END CERTIFICATE-----Generated at Sun Jun 29 19:51:47 2025 by rpki-client