$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json) Hash identifier: l00r/27mPVlOVkKj4oY5qwX1jEix88ItfPA2camq3SA= Subject key identifier: 72:30:8B:D7:98:9A:15:B6:F1:C0:B1:5F:4A:57:C7:D8:ED:95:52:99 Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Certificate serial: 529D1C1CD3423B8AEF8B11A162A84B25A2753B23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft Manifest number: 9F Signing time: Sat 28 Jun 2025 07:11:32 +0000 Manifest this update: Sat 28 Jun 2025 07:06:32 +0000 Manifest next update: Tue 01 Jul 2025 10:15:32 +0000 Files and hashes: 1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=) 2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: HWPvOkCI9V73e0meEafQwYnOOsZahOakdJgXDZefxMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9d:1c:1c:d3:42:3b:8a:ef:8b:11:a1:62:a8:4b:25:a2:75:3b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Validity Not Before: Jun 28 07:06:32 2025 GMT Not After : Jul 1 10:15:32 2025 GMT Subject: CN=72308BD7989A15B6F1C0B15F4A57C7D8ED955299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:3f:01:43:03:0f:07:94:d6:26:14:ae:58: 70:39:0f:dc:93:3a:c3:ee:71:1d:7b:b1:70:1c:f9: 0f:6a:ff:9c:4e:e4:b3:a3:4b:bd:4e:e6:cb:ea:8d: 1b:f3:88:99:f0:59:04:10:4d:54:61:1f:cd:06:8a: 9a:a7:bc:86:2f:37:c3:ab:d5:fb:c4:b4:04:e8:61: 48:8d:0f:80:0e:e7:f4:f3:e4:18:86:49:64:67:eb: 63:23:4b:8a:c9:54:5b:94:8a:c2:54:c0:bc:42:74: 3f:5e:73:af:f9:82:a3:a5:c9:a8:6a:87:1a:cf:ee: 90:9b:cd:ab:dd:6f:cd:70:ba:80:fa:86:47:59:83: eb:1e:dc:00:eb:60:d5:20:52:3b:d4:f7:04:68:b7: bf:85:49:ae:04:e5:1c:b0:a0:0a:0b:9f:8e:bc:78: 16:89:b2:c5:7c:2b:59:36:5e:9f:92:75:de:20:8f: 01:3b:e9:02:39:25:2b:77:cd:80:1e:5e:c4:87:3b: 71:33:cf:b2:5c:1e:eb:1f:f7:b6:81:e5:e2:2a:00: cf:1d:83:53:8f:47:3f:37:c1:4a:41:e8:3e:57:96: 8b:12:34:d0:88:d2:92:6f:37:48:3c:03:de:af:bf: 72:82:e0:ee:ac:92:66:ef:d6:70:78:f8:31:33:02: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:30:8B:D7:98:9A:15:B6:F1:C0:B1:5F:4A:57:C7:D8:ED:95:52:99 X509v3 Authority Key Identifier: keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:ae:29:10:0c:5a:97:38:e8:5d:c4:be:7b:e0:e4:6e:d4:43: 8f:c7:a4:ea:8d:25:2d:46:3c:e4:7f:4f:1f:02:49:99:dc:6e: d0:1b:fb:a7:1d:3b:ca:d8:90:1b:0e:96:19:00:48:3c:57:03: c4:a3:97:fd:d4:9f:c4:f2:59:d7:13:dc:87:c5:ff:ce:e3:4c: 75:de:4c:40:80:e7:91:3c:c6:c0:51:4b:d0:6d:a7:b1:f4:22: c3:89:4d:ff:54:dd:0b:25:db:e0:e3:24:7e:b5:ae:4c:d4:29: e3:d2:7a:0e:ef:45:d1:da:53:cf:2f:fc:26:58:fa:fb:3e:0e: 72:4b:8c:18:99:c5:12:99:eb:b4:75:50:17:b9:65:9f:dd:4a: 2a:fa:f1:81:8e:b3:75:a3:78:78:4a:81:bb:d3:54:41:eb:ac: 51:2f:43:1a:c1:07:75:f3:51:3b:a4:40:59:53:0f:ef:2f:a9: 7c:09:3a:0e:2f:c0:e9:8d:b2:46:cb:4d:50:42:d7:48:39:6e: f7:d4:36:0c:b6:1a:34:ff:e9:e1:0f:70:f7:80:96:3b:a2:d1: 4c:b8:04:2f:c2:65:be:0d:8a:40:eb:a8:ea:55:97:2d:de:a2: 43:f6:b3:1f:02:76:70:99:a5:5f:3a:66:54:64:e0:d5:d3:05: dd:ba:cc:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUp0cHNNCO4rvixGhYqhLJaJ1OyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYw MkUyQjdDMTAeFw0yNTA2MjgwNzA2MzJaFw0yNTA3MDExMDE1MzJaMDMxMTAvBgNV BAMTKDcyMzA4QkQ3OTg5QTE1QjZGMUMwQjE1RjRBNTdDN0Q4RUQ5NTUyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUz8BQwMPB5TWJhSuWHA5D9yT OsPucR17sXAc+Q9q/5xO5LOjS71O5svqjRvziJnwWQQQTVRhH80GipqnvIYvN8Or 1fvEtAToYUiND4AO5/Tz5BiGSWRn62MjS4rJVFuUisJUwLxCdD9ec6/5gqOlyahq hxrP7pCbzavdb81wuoD6hkdZg+se3ADrYNUgUjvU9wRot7+FSa4E5RywoAoLn468 eBaJssV8K1k2Xp+Sdd4gjwE76QI5JSt3zYAeXsSHO3Ezz7JcHusf97aB5eIqAM8d g1OPRz83wUpB6D5XlosSNNCI0pJvN0g8A96vv3KC4O6skmbv1nB4+DEzAkBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjCL15iaFbbxwLFfSlfH2O2VUpkwHwYDVR0j BBgwFoAUxGMimeAW0mkWT6QK75nMhgLit8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC9DNDYzMjI5OUUw MTZEMjY5MTY0RkE0MEFFRjk5Q0M4NjAyRTJCN0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYwMkUy QjdDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0 YjQtZWE3MmQ5YjJhNjBhLzAvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUND ODYwMkUyQjdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6uKRAMWpc46F3Evnvg5G7UQ4/HpOqNJS1G POR/Tx8CSZncbtAb+6cdO8rYkBsOlhkASDxXA8Sjl/3Un8TyWdcT3IfF/87jTHXe TECA55E8xsBRS9Btp7H0IsOJTf9U3Qsl2+DjJH61rkzUKePSeg7vRdHaU88v/CZY +vs+DnJLjBiZxRKZ67R1UBe5ZZ/dSir68YGOs3WjeHhKgbvTVEHrrFEvQxrBB3Xz UTukQFlTD+8vqXwJOg4vwOmNskbLTVBC10g5bvfUNgy2GjT/6eEPcPeAljui0Uy4 BC/CZb4NikDrqOpVly3eokP2sx8CdnCZpV86ZlRk4NXTBd26zL0= -----END CERTIFICATE-----Generated at Mon Jun 30 07:12:58 2025 by rpki-client