$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: QwHMtELpB5cljMK8mC0ihs38tPT+dpEZhVnY7twdA+s= Subject key identifier: 44:2B:22:9F:BA:7C:5C:00:30:77:DA:A0:1D:77:C6:96:57:22:BC:FF Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 0154F25616EC6E2240E65EB2D28C311954E8A4A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: A1 Signing time: Mon 30 Jun 2025 17:41:34 +0000 Manifest this update: Mon 30 Jun 2025 17:36:34 +0000 Manifest next update: Thu 03 Jul 2025 21:58:34 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: JoBMZegaROBmlXiJ2XaNJn48nmxDoDzATQx+R2b/qJI=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:54:f2:56:16:ec:6e:22:40:e6:5e:b2:d2:8c:31:19:54:e8:a4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Jun 30 17:36:34 2025 GMT Not After : Jul 3 21:58:34 2025 GMT Subject: CN=442B229FBA7C5C003077DAA01D77C6965722BCFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:c5:da:56:60:ee:f0:a8:a9:f6:8b:0a:2d: 3d:d2:63:f0:18:5e:e4:ec:05:e0:60:6b:ef:3a:69: e8:9d:78:4b:d9:46:eb:8a:f4:37:82:bd:7b:69:80: c8:9b:b9:86:dd:e3:31:08:88:91:9a:ea:9d:d6:52: 2b:5a:b7:f4:f6:ca:e2:b3:82:06:49:83:61:a9:40: c0:40:2b:ae:c2:86:09:c9:47:dc:71:b4:b8:d7:14: 80:e4:27:ad:b7:46:a9:81:f2:50:1b:17:e5:3b:f8: 4d:e8:f1:36:87:05:4c:8b:9d:d1:1e:48:ad:b7:84: de:cd:09:f2:59:99:8a:80:93:38:aa:82:8b:a2:e7: 6b:a7:c5:c3:de:74:6d:1a:e4:a5:5b:76:39:e8:01: a4:79:a3:86:72:fc:3a:5a:9b:89:e7:78:46:a7:29: f4:e5:6d:4c:73:31:25:f2:2a:3e:55:c1:6a:5a:c9: 63:a4:50:0c:42:2e:cf:b6:8e:3e:65:68:8a:16:cd: 2c:d6:8c:4a:8b:52:87:0c:2e:de:0f:d2:ea:1b:67: 6d:a8:f4:72:1f:bc:71:fe:7a:68:2f:84:33:e9:bf: 44:c4:59:7d:6d:e5:33:ba:35:0c:7b:9b:2d:24:e0: 9f:e3:51:dd:d5:51:a4:00:a3:75:87:c0:e2:de:ed: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:22:9F:BA:7C:5C:00:30:77:DA:A0:1D:77:C6:96:57:22:BC:FF X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:11:46:f1:f3:ad:cf:8c:3a:38:3e:fa:45:ed:8f:d0:30:c4: 92:2a:dc:dc:62:7d:09:b5:1e:d2:6a:00:44:1d:79:90:86:56: 9a:55:e6:10:95:c6:54:31:7f:a7:8b:93:34:c1:75:70:dc:d4: fc:c4:29:1b:79:09:ec:97:76:9c:76:86:c1:6f:a0:65:48:14: 12:1e:d9:0d:f1:26:7d:bf:7f:bb:ca:f6:d3:a1:df:36:cf:18: c7:ea:f5:e2:65:0b:12:55:be:7e:40:94:23:e3:1d:32:3a:bc: 73:65:ce:99:a8:e3:a5:75:b1:af:07:e5:fa:00:b1:46:ea:41: fd:f1:91:92:e0:63:cd:a2:0c:dc:a5:b9:16:9d:95:47:4a:67: 00:e7:0e:a6:ca:04:fa:10:3a:86:5f:d9:8c:3f:4e:f4:51:6e: e5:ac:23:87:f1:37:b7:aa:ec:e8:e9:87:ae:9b:ad:9e:65:c6: 42:62:52:db:47:7d:f3:05:4c:8b:30:b6:14:72:fd:c9:2b:22: ad:07:11:71:a0:a9:1b:09:2e:dd:a8:fe:b1:5c:53:27:b5:8d: c1:43:bf:42:e6:4c:48:a1:1f:5c:93:1f:fd:d1:78:78:fd:d7: 4a:58:1e:00:6c:8b:78:fb:4c:a8:e5:80:1f:23:04:38:bd:b2: a6:64:da:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVTyVhbsbiJA5l6y0owxGVTopKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA2MzAxNzM2MzRaFw0yNTA3MDMyMTU4MzRaMDMxMTAvBgNV BAMTKDQ0MkIyMjlGQkE3QzVDMDAzMDc3REFBMDFENzdDNjk2NTcyMkJDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3B8XaVmDu8Kip9osKLT3SY/AY XuTsBeBga+86aeideEvZRuuK9DeCvXtpgMibuYbd4zEIiJGa6p3WUitat/T2yuKz ggZJg2GpQMBAK67ChgnJR9xxtLjXFIDkJ623RqmB8lAbF+U7+E3o8TaHBUyLndEe SK23hN7NCfJZmYqAkziqgoui52unxcPedG0a5KVbdjnoAaR5o4Zy/Dpam4nneEan KfTlbUxzMSXyKj5VwWpayWOkUAxCLs+2jj5laIoWzSzWjEqLUocMLt4P0uobZ22o 9HIfvHH+emgvhDPpv0TEWX1t5TO6NQx7my0k4J/jUd3VUaQAo3WHwOLe7c/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURCsin7p8XAAwd9qgHXfGllcivP8wHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIRRvHzrc+MOjg++kXtj9AwxJIq3NxifQm1 HtJqAEQdeZCGVppV5hCVxlQxf6eLkzTBdXDc1PzEKRt5CeyXdpx2hsFvoGVIFBIe 2Q3xJn2/f7vK9tOh3zbPGMfq9eJlCxJVvn5AlCPjHTI6vHNlzpmo46V1sa8H5foA sUbqQf3xkZLgY82iDNyluRadlUdKZwDnDqbKBPoQOoZf2Yw/TvRRbuWsI4fxN7eq 7Ojph66brZ5lxkJiUttHffMFTIswthRy/ckrIq0HEXGgqRsJLt2o/rFcUye1jcFD v0LmTEihH1yTH/3ReHj910pYHgBsi3j7TKjlgB8jBDi9sqZk2tA= -----END CERTIFICATE-----Generated at Wed Jul 2 10:56:58 2025 by rpki-client