$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: q5qbnL+Dd4LPLyVX8BzUfcE8SXimikb68xLA+yFpFIk= Subject key identifier: 6D:91:99:F9:48:00:7B:DC:DF:0E:2F:77:2A:E7:31:36:DD:AD:29:67 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 7095754D7761F3BDD117C56917D1E3F180B752B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 04B7 Signing time: Tue 01 Jul 2025 12:21:42 +0000 Manifest this update: Tue 01 Jul 2025 12:16:42 +0000 Manifest next update: Fri 04 Jul 2025 20:09:42 +0000 Files and hashes: 1: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: lMm04bbrV0DrDR/LfrROVfPhtdVsje7cFfAvFrg0iac=) 2: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: NnGhS5942iUh2In2wN/G/ik4G972UQFbjeiA9G8ItCM=) 3: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: t2JkAO4RGOdwgjllPAyKujK/HVSkrKZfup0TzzlD7iQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:75:4d:77:61:f3:bd:d1:17:c5:69:17:d1:e3:f1:80:b7:52:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Jul 1 12:16:42 2025 GMT Not After : Jul 4 20:09:42 2025 GMT Subject: CN=6D9199F948007BDCDF0E2F772AE73136DDAD2967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:01:01:61:83:5c:e5:96:39:0f:64:78:32: d5:5a:7a:89:4e:27:5e:09:7a:9d:87:44:24:00:b6: ed:b2:45:15:01:c6:01:a9:82:c5:9c:ab:28:69:a5: a8:0c:b1:c8:cf:6b:bb:5d:9f:2e:7a:ff:16:e4:8a: 6a:d7:c3:92:bf:59:35:94:70:ba:62:88:dd:eb:b0: 4f:e3:03:07:d6:23:3f:25:85:0c:7c:d2:c1:03:bb: 7a:f9:de:ca:e9:c5:5f:6c:e6:3b:32:41:33:3d:85: 0d:80:85:93:e1:62:aa:94:1f:c2:a9:61:2b:f6:82: 5e:a8:58:03:d1:ca:e1:d6:38:e7:1a:6a:3d:5d:4f: 73:25:eb:50:cf:92:df:2c:af:f9:d6:ec:22:6c:4a: 8d:b2:6c:72:59:54:d1:c3:20:85:d0:2a:ec:14:2b: 7a:78:a0:78:67:44:64:da:59:d4:d6:78:5a:7a:9a: 9d:80:e7:bf:1b:3b:77:2d:f7:cb:f5:7e:f4:fe:40: 5a:29:28:c5:80:0d:b0:e0:ea:14:82:29:0e:81:38: 57:3d:27:7f:13:cf:de:8a:f3:a6:62:a5:34:05:40: f1:00:f5:d0:f6:db:7f:3d:5a:b0:52:dd:04:20:a2: 85:24:f7:64:32:4b:78:aa:f0:08:68:6f:4d:fd:58: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:91:99:F9:48:00:7B:DC:DF:0E:2F:77:2A:E7:31:36:DD:AD:29:67 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f4:fa:e5:e8:50:b1:5b:23:39:a7:4c:88:ea:be:02:41:6d: 03:ec:ce:b8:7b:42:2a:43:4a:7a:c1:ef:0b:96:8f:7c:02:d4: e9:af:79:de:f1:98:8a:39:44:97:f5:f1:6d:d8:e1:87:05:22: d5:d1:76:bf:7c:02:ec:62:83:fb:80:17:26:c0:7d:18:7f:09: a0:1b:c2:47:1d:da:c5:fd:5f:11:b7:18:71:15:5c:25:51:62: f7:96:3d:3f:11:77:89:00:44:28:92:38:63:4a:d3:f6:2d:cb: b1:56:26:36:ab:06:f6:05:e9:20:34:29:3e:ef:30:df:65:44: b1:4f:b2:40:ed:29:53:39:d4:9e:fc:b7:3d:aa:56:66:fd:2c: b1:c1:53:fe:6e:49:4e:ba:32:a3:00:79:14:33:83:ce:5b:de: ce:3b:91:a5:aa:fd:0e:f5:07:d9:5d:b6:48:a7:e0:28:ba:d2: 65:81:58:99:20:46:22:74:22:09:d4:3d:1c:52:93:d8:eb:64: 55:87:57:4e:81:45:f2:6d:0f:a7:52:fa:c0:90:e0:89:20:74: 0c:e7:a1:f2:84:23:4b:76:83:39:39:00:68:a8:96:4e:6f:33: c1:ff:5b:3f:d0:fa:38:3a:5c:36:99:98:21:b7:28:98:f1:87: 42:80:e8:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJV1TXdh873RF8VpF9Hj8YC3UrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTA3MDExMjE2NDJaFw0yNTA3MDQyMDA5NDJaMDMxMTAvBgNV BAMTKDZEOTE5OUY5NDgwMDdCRENERjBFMkY3NzJBRTczMTM2RERBRDI5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0gEBYYNc5ZY5D2R4MtVaeolO J14Jep2HRCQAtu2yRRUBxgGpgsWcqyhppagMscjPa7tdny56/xbkimrXw5K/WTWU cLpiiN3rsE/jAwfWIz8lhQx80sEDu3r53srpxV9s5jsyQTM9hQ2AhZPhYqqUH8Kp YSv2gl6oWAPRyuHWOOcaaj1dT3Ml61DPkt8sr/nW7CJsSo2ybHJZVNHDIIXQKuwU K3p4oHhnRGTaWdTWeFp6mp2A578bO3ct98v1fvT+QFopKMWADbDg6hSCKQ6BOFc9 J38Tz96K86ZipTQFQPEA9dD22389WrBS3QQgooUk92QyS3iq8Ahob039WE+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZGZ+UgAe9zfDi93KucxNt2tKWcwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH30+uXoULFbIzmnTIjqvgJBbQPszrh7QipD SnrB7wuWj3wC1Omved7xmIo5RJf18W3Y4YcFItXRdr98Auxig/uAFybAfRh/CaAb wkcd2sX9XxG3GHEVXCVRYveWPT8Rd4kARCiSOGNK0/Yty7FWJjarBvYF6SA0KT7v MN9lRLFPskDtKVM51J78tz2qVmb9LLHBU/5uSU66MqMAeRQzg85b3s47kaWq/Q71 B9ldtkin4Ci60mWBWJkgRiJ0IgnUPRxSk9jrZFWHV06BRfJtD6dS+sCQ4IkgdAzn ofKEI0t2gzk5AGiolk5vM8H/Wz/Q+jg6XDaZmCG3KJjxh0KA6Kk= -----END CERTIFICATE-----Generated at Wed Jul 2 19:54:10 2025 by rpki-client