$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: xeNIpWtq6IB/GP6cvoheKRmWiPi0Ko9m8JSdsOOYZ0A= Subject key identifier: 76:26:CC:10:D6:B7:D4:17:41:29:07:EE:AB:D1:91:EB:06:9B:26:E5 Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 172085D4233430D9DDC25BDAAC95F3375D1BC99F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01CD Signing time: Sat 28 Jun 2025 12:11:44 +0000 Manifest this update: Sat 28 Jun 2025 12:06:44 +0000 Manifest next update: Tue 01 Jul 2025 22:43:44 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: ATeRABIVJV2p7zW796CEmU7HxbgoD8RSV0uLAOxbyeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:20:85:d4:23:34:30:d9:dd:c2:5b:da:ac:95:f3:37:5d:1b:c9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Jun 28 12:06:44 2025 GMT Not After : Jul 1 22:43:44 2025 GMT Subject: CN=7626CC10D6B7D417412907EEABD191EB069B26E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:68:a2:5c:67:a7:54:27:bd:e8:b3:47:b8: e6:34:fa:a5:62:a3:15:9f:81:5b:87:7c:d1:93:57: c6:9d:a5:0a:03:cf:bc:63:91:c9:fd:cd:bb:f2:8f: cc:42:a5:df:e6:e6:b6:5e:63:f5:15:08:62:3c:20: 10:ff:e7:44:f0:69:ca:6d:cd:f6:30:b2:95:6d:95: 16:b2:06:a9:72:c0:48:f8:fb:54:7c:ad:95:30:8c: 17:25:ac:7f:01:f1:5e:d1:1e:42:39:68:d2:bd:92: 78:00:3f:12:52:68:e2:e5:22:a2:85:3d:db:a3:62: a1:bb:49:f1:03:62:00:23:6a:fb:f9:af:00:b2:8d: 88:cc:6c:43:f3:14:8c:97:2a:8f:44:15:a2:0c:c9: 9b:4b:49:83:b2:28:34:d0:66:14:30:22:ab:e0:32: 7f:03:14:91:4d:c9:79:d0:78:ba:88:fa:77:f3:71: 3a:ba:f9:3f:ee:8f:bd:d5:47:7c:cf:c5:f9:92:c9: 6b:a9:0d:3e:72:3b:35:5c:9c:05:b4:ed:32:be:07: 1c:df:51:01:0c:46:72:ff:db:d3:50:dd:f2:30:b7: 4c:a3:c9:ce:b5:21:b5:fc:34:3a:28:31:f1:58:0f: 67:1a:92:fa:d6:5c:be:0f:d3:ab:de:11:21:ff:a3: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:26:CC:10:D6:B7:D4:17:41:29:07:EE:AB:D1:91:EB:06:9B:26:E5 X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:67:fe:17:ed:61:ea:97:14:f3:b5:1a:b1:75:00:17:6b:89: 0e:4e:d8:dd:77:80:00:eb:cb:f7:79:01:04:92:ca:34:14:c3: 67:47:c4:c1:5d:e8:60:64:37:e2:15:cf:3a:3b:b8:24:76:38: b9:6d:8b:9f:6c:ba:55:c5:f3:af:5e:e8:66:c6:1a:07:45:0c: c8:14:7f:42:4c:c8:82:04:79:b4:c5:91:10:a5:b7:ab:17:ca: d5:c5:ed:95:c6:22:59:57:77:5e:9d:96:ce:b6:6c:25:ef:ea: d2:38:3c:94:d8:21:1d:4f:4e:a6:a3:c0:b8:7c:b0:c9:c8:f4: e1:89:a5:72:de:bd:63:b7:3e:c0:00:b1:0f:a2:ad:4d:84:73: ea:59:b7:4f:db:be:3c:68:c5:9e:1f:19:ea:c7:f7:8f:ac:8c: 24:30:49:6d:ec:2a:82:e9:e1:78:62:fd:c6:36:f5:13:e5:c9: 09:d4:ad:7a:c8:d3:6d:fe:1e:1c:42:8b:47:c4:13:8b:cf:8c: 23:fe:94:03:0b:e9:b6:88:44:2c:e3:48:bf:3b:67:4c:09:f3: d1:1c:40:92:2f:f7:ec:81:13:f1:73:64:07:fa:12:4b:42:02: 47:b8:ab:6c:5f:41:a8:1d:54:c5:02:70:76:62:5d:bd:02:aa: 18:3b:c5:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyCF1CM0MNndwlvarJXzN10byZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTA2MjgxMjA2NDRaFw0yNTA3MDEyMjQzNDRaMDMxMTAvBgNV BAMTKDc2MjZDQzEwRDZCN0Q0MTc0MTI5MDdFRUFCRDE5MUVCMDY5QjI2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkGiiXGenVCe96LNHuOY0+qVi oxWfgVuHfNGTV8adpQoDz7xjkcn9zbvyj8xCpd/m5rZeY/UVCGI8IBD/50Twacpt zfYwspVtlRayBqlywEj4+1R8rZUwjBclrH8B8V7RHkI5aNK9kngAPxJSaOLlIqKF PdujYqG7SfEDYgAjavv5rwCyjYjMbEPzFIyXKo9EFaIMyZtLSYOyKDTQZhQwIqvg Mn8DFJFNyXnQeLqI+nfzcTq6+T/uj73VR3zPxfmSyWupDT5yOzVcnAW07TK+Bxzf UQEMRnL/29NQ3fIwt0yjyc61IbX8NDooMfFYD2cakvrWXL4P06veESH/o8XVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdibMENa31BdBKQfuq9GR6wabJuUwHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVn/hftYeqXFPO1GrF1ABdriQ5O2N13gADr y/d5AQSSyjQUw2dHxMFd6GBkN+IVzzo7uCR2OLlti59sulXF869e6GbGGgdFDMgU f0JMyIIEebTFkRClt6sXytXF7ZXGIllXd16dls62bCXv6tI4PJTYIR1PTqajwLh8 sMnI9OGJpXLevWO3PsAAsQ+irU2Ec+pZt0/bvjxoxZ4fGerH94+sjCQwSW3sKoLp 4Xhi/cY29RPlyQnUrXrI023+HhxCi0fEE4vPjCP+lAML6baIRCzjSL87Z0wJ89Ec QJIv9+yBE/FzZAf6EktCAke4q2xfQagdVMUCcHZiXb0Cqhg7xaU= -----END CERTIFICATE-----Generated at Mon Jun 30 11:35:36 2025 by rpki-client