$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: 4/ZcuoVlOOa6AmmutZ2dwNADzLX4boj38YpJ8aO2zxs= Subject key identifier: 28:C6:CE:98:64:10:71:E3:88:61:FE:CE:D0:A2:B8:E2:2E:03:0E:55 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 7043BD6E27F90B6E6D68DEF3B14E53C51B56F6B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: DB Signing time: Wed 02 Jul 2025 11:22:15 +0000 Manifest this update: Wed 02 Jul 2025 11:17:15 +0000 Manifest next update: Sat 05 Jul 2025 19:24:15 +0000 Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) 2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: 8OQjioNimnp0YF353Ci7wjfuZ1FJiYSNiWKOGg8E2Is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:43:bd:6e:27:f9:0b:6e:6d:68:de:f3:b1:4e:53:c5:1b:56:f6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Jul 2 11:17:15 2025 GMT Not After : Jul 5 19:24:15 2025 GMT Subject: CN=28C6CE98641071E38861FECED0A2B8E22E030E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:0b:43:25:56:eb:1e:f7:88:8c:c6:b0:83: 96:a2:9b:e6:c8:69:d7:1c:09:59:cd:ac:75:96:44: e4:6b:94:b0:1e:00:99:7f:6f:4e:d8:c9:12:ca:1e: fd:c8:ee:e3:ae:c0:8d:a9:e6:37:4f:d7:4c:ce:6b: 45:50:59:2c:65:95:5a:37:44:e4:ee:be:be:2d:d9: af:85:62:61:05:e7:ea:55:59:ef:44:1b:aa:a8:0f: c2:1f:cb:d1:b9:1c:f1:b3:83:a6:5e:38:06:12:91: 9a:5a:32:ae:16:1c:28:10:5a:e9:f4:23:2f:46:ba: b4:60:3c:05:b0:53:cc:2b:7e:dc:c8:9b:db:df:d7: 68:08:3d:d5:93:91:2f:00:a6:ce:72:4a:5f:09:7a: 09:57:5d:8f:cc:05:1a:1c:cf:d7:cc:27:28:42:99: 8b:2c:4f:c7:42:2b:db:b0:82:69:af:78:06:d6:30: be:d0:6f:4b:2e:f2:14:f4:06:e2:0f:61:10:e8:b6: a4:b7:71:c7:5d:12:21:4b:d1:2c:40:09:d2:89:eb: e0:e4:ac:b9:30:ba:34:c8:2f:c4:b6:9f:1c:71:e7: c8:49:76:5e:7c:c3:13:e3:a1:d2:57:90:2f:d8:03: b3:8f:c5:8a:ae:1f:5c:82:87:dc:2d:a4:c9:80:d9: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C6:CE:98:64:10:71:E3:88:61:FE:CE:D0:A2:B8:E2:2E:03:0E:55 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2e:94:17:38:2b:4a:34:97:46:53:13:31:35:93:b4:24:90: fa:73:72:99:55:45:cc:77:91:70:1a:70:76:31:1b:98:a0:05: 5b:9f:a0:dd:9d:06:b3:cf:29:ee:f3:34:2e:46:b0:ce:8d:bb: 0c:a2:89:41:14:0d:b2:0f:a6:65:da:8a:82:a5:a9:fb:fc:41: e3:e1:94:0b:65:89:f7:33:70:54:05:21:14:d6:97:9d:f7:eb: 50:00:46:fa:b0:2d:55:2c:61:1d:59:61:3a:dc:85:30:fe:18: 36:85:39:47:20:5a:ea:96:15:0e:26:e9:63:c0:7f:14:6e:67: b2:8b:d5:06:2c:fb:2c:34:32:75:be:0a:fd:11:25:6d:1f:38: 31:dd:25:74:72:6a:e7:ef:38:9c:7f:73:c1:b3:9a:23:ab:c8: 42:ea:9e:d7:ec:ca:22:a7:1e:67:af:1c:39:32:50:95:36:50: 28:0c:76:b7:47:34:6e:5a:8a:7a:80:57:0f:f4:9e:58:3e:bd: 97:7a:d1:4e:07:e8:45:28:0a:7c:9f:18:4a:5e:c4:d0:15:94: b8:c5:04:e3:c2:53:1c:08:1b:ad:25:18:4b:ff:55:85:48:f6: c4:9c:e6:3a:75:35:97:bb:c1:ca:56:9c:13:05:0e:f5:4b:4a: 63:c0:81:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEO9bif5C25taN7zsU5TxRtW9rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTA3MDIxMTE3MTVaFw0yNTA3MDUxOTI0MTVaMDMxMTAvBgNV BAMTKDI4QzZDRTk4NjQxMDcxRTM4ODYxRkVDRUQwQTJCOEUyMkUwMzBFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxgtDJVbrHveIjMawg5aim+bI adccCVnNrHWWRORrlLAeAJl/b07YyRLKHv3I7uOuwI2p5jdP10zOa0VQWSxllVo3 ROTuvr4t2a+FYmEF5+pVWe9EG6qoD8Ify9G5HPGzg6ZeOAYSkZpaMq4WHCgQWun0 Iy9GurRgPAWwU8wrftzIm9vf12gIPdWTkS8Aps5ySl8JeglXXY/MBRocz9fMJyhC mYssT8dCK9uwgmmveAbWML7Qb0su8hT0BuIPYRDotqS3ccddEiFL0SxACdKJ6+Dk rLkwujTIL8S2nxxx58hJdl58wxPjodJXkC/YA7OPxYquH1yCh9wtpMmA2VbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMbOmGQQceOIYf7O0KK44i4DDlUwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAulBc4K0o0l0ZTEzE1k7QkkPpzcplVRcx3 kXAacHYxG5igBVufoN2dBrPPKe7zNC5GsM6NuwyiiUEUDbIPpmXaioKlqfv8QePh lAtlifczcFQFIRTWl53361AARvqwLVUsYR1ZYTrchTD+GDaFOUcgWuqWFQ4m6WPA fxRuZ7KL1QYs+yw0MnW+Cv0RJW0fODHdJXRyaufvOJx/c8GzmiOryELqntfsyiKn HmevHDkyUJU2UCgMdrdHNG5ainqAVw/0nlg+vZd60U4H6EUoCnyfGEpexNAVlLjF BOPCUxwIG60lGEv/VYVI9sSc5jp1NZe7wcpWnBMFDvVLSmPAgco= -----END CERTIFICATE-----Generated at Thu Jul 3 03:46:04 2025 by rpki-client