$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: /SUU1Ze4xmh6JQwTSjrs0P+fmjCHzGmJ85iTKh5f3pY= Subject key identifier: B5:77:30:9E:18:0D:3D:DD:BB:34:A9:7A:9E:00:C7:AE:BF:3E:BA:35 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 5F8ACDE31F81EFCBF5A9AC3945F76F93A1AB6419 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 03D4 Signing time: Sun 29 Jun 2025 23:21:55 +0000 Manifest this update: Sun 29 Jun 2025 23:16:55 +0000 Manifest next update: Thu 03 Jul 2025 06:13:55 +0000 Files and hashes: 1: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) 2: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) 3: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: HX3JFrO6Gs5MqKdBARVVdXgL32leeC6n+dpyj6IL6PA=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:cd:e3:1f:81:ef:cb:f5:a9:ac:39:45:f7:6f:93:a1:ab:64:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Jun 29 23:16:55 2025 GMT Not After : Jul 3 06:13:55 2025 GMT Subject: CN=B577309E180D3DDDBB34A97A9E00C7AEBF3EBA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:9a:14:20:02:6f:89:6c:82:97:96:f2:2d: 1e:8c:64:1a:66:26:dc:3f:f4:aa:2c:76:ca:fc:6a: 40:22:5b:ec:6c:c5:c2:63:4b:48:87:5b:ba:bd:7b: fa:45:ce:60:0b:2f:b1:70:2a:9e:ce:3a:4f:ea:17: 97:f0:ca:5a:b7:e1:c2:fa:9e:ab:ce:0f:71:9c:ad: 02:cc:d8:fb:a6:82:48:01:01:91:f9:0d:19:90:32: fa:a1:dd:96:78:94:4f:80:a8:b2:2c:cf:c8:0a:68: a0:e9:8b:44:71:af:e8:7a:e6:7e:d2:0b:1d:49:06: fb:3f:4c:20:c2:4d:48:38:33:9b:a3:02:51:f9:e3: a7:70:c4:5f:ee:62:e1:89:88:42:ae:47:c2:21:6f: 62:55:c4:13:fa:9b:02:05:ea:6f:0e:39:e8:3d:0f: bb:ef:bb:5d:64:69:86:78:1b:bb:25:a1:1a:06:c7: de:f5:c2:4e:34:a6:58:1d:22:d1:1c:3c:05:5f:03: c5:81:47:a8:a8:ae:5f:0b:79:57:09:4b:d7:e6:f2: d1:1e:87:ca:12:ca:1d:68:48:32:c7:9b:29:43:83: 8e:c7:1e:2b:77:60:e0:1e:df:bc:ed:93:c5:0f:a2: 36:cf:06:90:b6:14:3b:94:71:9c:65:08:22:de:38: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:77:30:9E:18:0D:3D:DD:BB:34:A9:7A:9E:00:C7:AE:BF:3E:BA:35 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:11:07:7e:a2:90:bd:f7:17:dc:6d:fa:b8:9e:84:b6:5e:79: 07:03:d9:16:2c:f1:51:1f:93:46:13:a6:30:cc:f2:9a:98:4c: ea:5a:be:1f:da:de:77:77:d4:eb:8d:0f:0c:3d:d6:a1:f3:c2: 0e:c6:54:e1:9e:8e:df:fb:f1:f5:01:71:4e:39:82:40:d2:f2: 3d:2f:d8:70:5e:2b:20:e2:17:56:66:56:e3:0d:bf:e4:c0:6b: 36:3b:08:2b:71:05:dc:bd:34:11:a1:f3:47:52:86:83:44:1f: 4f:b3:12:2c:1a:cb:8d:c7:5e:1e:34:a9:28:5f:d7:00:a9:c0: 7d:3d:83:fc:05:a0:df:43:0f:45:0c:50:04:94:47:8e:10:bc: cd:e1:5e:ee:79:e6:47:6e:5f:30:3d:5c:3f:73:8a:5b:7b:16: f3:22:81:31:5d:2e:60:47:81:f7:4c:33:dc:04:e5:88:d7:c3: f6:d4:2d:cf:fa:64:37:2e:57:04:ab:7d:e5:68:2d:93:30:ad: 7c:0a:9c:42:45:07:0b:7d:0e:18:c4:55:6b:20:26:9d:bb:ec: bc:30:88:35:32:78:27:3c:d6:70:ff:6c:10:2c:3d:3f:e5:6a: 1f:c2:80:c7:98:08:7d:cd:a2:48:ce:50:2c:c8:8d:5d:f5:e5: 90:31:11:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4rN4x+B78v1qaw5Rfdvk6GrZBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTA2MjkyMzE2NTVaFw0yNTA3MDMwNjEzNTVaMDMxMTAvBgNV BAMTKEI1NzczMDlFMTgwRDNERERCQjM0QTk3QTlFMDBDN0FFQkYzRUJBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1JoUIAJviWyCl5byLR6MZBpm Jtw/9Kosdsr8akAiW+xsxcJjS0iHW7q9e/pFzmALL7FwKp7OOk/qF5fwylq34cL6 nqvOD3GcrQLM2PumgkgBAZH5DRmQMvqh3ZZ4lE+AqLIsz8gKaKDpi0Rxr+h65n7S Cx1JBvs/TCDCTUg4M5ujAlH546dwxF/uYuGJiEKuR8Ihb2JVxBP6mwIF6m8OOeg9 D7vvu11kaYZ4G7sloRoGx971wk40plgdItEcPAVfA8WBR6iorl8LeVcJS9fm8tEe h8oSyh1oSDLHmylDg47HHit3YOAe37ztk8UPojbPBpC2FDuUcZxlCCLeOBdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXcwnhgNPd27NKl6ngDHrr8+ujUwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwRB36ikL33F9xt+riehLZeeQcD2RYs8VEf k0YTpjDM8pqYTOpavh/a3nd31OuNDww91qHzwg7GVOGejt/78fUBcU45gkDS8j0v 2HBeKyDiF1ZmVuMNv+TAazY7CCtxBdy9NBGh80dShoNEH0+zEiway43HXh40qShf 1wCpwH09g/wFoN9DD0UMUASUR44QvM3hXu555kduXzA9XD9zilt7FvMigTFdLmBH gfdMM9wE5YjXw/bULc/6ZDcuVwSrfeVoLZMwrXwKnEJFBwt9DhjEVWsgJp277Lww iDUyeCc81nD/bBAsPT/lah/CgMeYCH3NokjOUCzIjV315ZAxEdM= -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:11 2025 by rpki-client