$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: PgrNXQv6JdpQuZzJqEav/9FeE1N9ohpzTXLjnOjGwDc= Subject key identifier: 74:BE:0B:5C:F8:F7:B1:54:9B:FB:9C:1B:9B:43:8D:A0:A2:F0:6F:2E Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 2CB16782DBE1638FCE87FFF95688BC37F73AB1A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 01C6 Signing time: Wed 02 Jul 2025 03:40:42 +0000 Manifest this update: Wed 02 Jul 2025 03:35:42 +0000 Manifest next update: Sat 05 Jul 2025 07:41:42 +0000 Files and hashes: 1: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: I9PcRASXz3r7htCyW9wD1F4TBZuNgz3sXOjQrZnzuNc=) 2: 3130332e34312e3234392e302f32342d3234203d3e20313530323736.roa (hash: vy4zhIdLEqZCtXS9+fGip5FORyw2IGWmyRchCzclHqY=) 3: 3130332e34312e3234382e302f32342d3234203d3e20313530323736.roa (hash: sdEV/rX6xPiB6f5qiFa9ouK5Ut6ycF59qx3vu3jtOiw=) 4: 3130332e34312e3234382e302f32332d3234203d3e20313530323736.roa (hash: 8uxRYWUgHIUfwr7n9e7HylSwtUQGrI8/5t+zL346WDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b1:67:82:db:e1:63:8f:ce:87:ff:f9:56:88:bc:37:f7:3a:b1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Jul 2 03:35:42 2025 GMT Not After : Jul 5 07:41:42 2025 GMT Subject: CN=74BE0B5CF8F7B1549BFB9C1B9B438DA0A2F06F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:0f:15:78:98:75:6f:8d:2b:e0:5d:43:f4: a2:a6:68:82:67:be:f1:f9:d2:46:59:54:e7:f8:ea: 71:d4:ff:04:be:4a:3a:11:d4:0b:48:bb:7b:94:0d: a9:07:52:a7:97:51:d1:da:48:9e:3a:90:1c:37:2a: e4:3d:41:2f:8b:11:dd:9f:d0:0c:de:b9:f8:92:b2: 76:fc:f7:62:b6:e9:57:7c:ee:e4:cc:26:45:e4:a5: 01:66:ec:43:b6:0d:16:89:9b:14:e0:ec:10:55:a0: cf:73:cc:57:2f:24:9b:6e:5f:bb:fe:f4:80:13:56: b0:07:bf:d5:54:0e:a3:24:e0:f1:c8:33:da:77:f3: 4c:dd:42:ae:3c:8f:d9:c3:0f:34:77:3a:9d:b6:b5: 69:41:83:90:01:2f:60:6e:70:7c:17:90:6d:c7:2b: b2:3d:32:0e:7e:cb:d2:88:46:62:05:d7:cf:20:ad: 9a:c9:0d:42:41:71:40:66:fc:7c:b8:d1:a3:fb:3c: 04:f4:f8:e5:06:7c:05:c2:0b:1b:5f:50:76:2e:b2: 54:2c:15:51:bb:16:d9:28:d7:66:42:ed:d8:d5:f7: a7:a5:1e:f8:f4:8c:35:ef:f9:39:47:51:2d:12:80: ca:a4:75:67:ca:fc:d4:14:4a:31:8b:0e:c1:43:89: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BE:0B:5C:F8:F7:B1:54:9B:FB:9C:1B:9B:43:8D:A0:A2:F0:6F:2E X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8b:bd:fb:19:9b:e2:46:7f:5e:66:f4:62:32:ba:fb:1c:d0: 88:88:5a:ea:48:da:9b:f4:5a:e2:26:ac:4a:69:ba:ce:c6:99: ac:e4:dc:91:05:da:5c:2a:8f:57:14:9c:cd:da:af:8a:ac:5d: 14:35:36:01:aa:55:eb:c7:52:89:2c:75:43:62:0b:87:b8:89: a1:dc:02:10:cc:b3:ef:12:4a:55:b9:06:99:16:c9:69:36:e4: 13:61:4c:14:03:24:b7:46:0d:2b:f8:00:bf:ad:46:e3:3a:10: cc:fa:ac:e2:92:6c:d0:6d:a5:0c:61:c1:f2:c8:a5:d9:1c:e6: 79:a2:af:dd:d1:e4:a2:4a:c9:e5:44:25:92:04:db:49:5a:7c: 91:75:08:55:0f:4b:79:7d:43:4f:37:67:fc:e3:16:9c:4a:79: 4d:70:d9:4f:04:58:0c:b6:03:aa:18:76:10:a7:2e:ef:ad:3c: 4f:f7:e5:c6:e5:7d:71:7d:16:53:61:e5:ed:5e:3f:3b:3a:d9: 7c:74:d2:95:a8:e1:cf:b1:98:38:ac:59:73:7d:e6:f9:73:77: 7e:98:b6:e9:55:e9:6e:f8:83:3b:86:9a:86:11:d2:30:6e:dc: 1b:63:de:87:a4:de:ae:fa:ad:09:9b:f3:ba:34:a7:50:55:30: b2:f5:39:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLFngtvhY4/Oh//5Voi8N/c6saIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTA3MDIwMzM1NDJaFw0yNTA3MDUwNzQxNDJaMDMxMTAvBgNV BAMTKDc0QkUwQjVDRjhGN0IxNTQ5QkZCOUMxQjlCNDM4REEwQTJGMDZGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJA8VeJh1b40r4F1D9KKmaIJn vvH50kZZVOf46nHU/wS+SjoR1AtIu3uUDakHUqeXUdHaSJ46kBw3KuQ9QS+LEd2f 0AzeufiSsnb892K26Vd87uTMJkXkpQFm7EO2DRaJmxTg7BBVoM9zzFcvJJtuX7v+ 9IATVrAHv9VUDqMk4PHIM9p380zdQq48j9nDDzR3Op22tWlBg5ABL2BucHwXkG3H K7I9Mg5+y9KIRmIF188grZrJDUJBcUBm/Hy40aP7PAT0+OUGfAXCCxtfUHYuslQs FVG7Ftko12ZC7djV96elHvj0jDXv+TlHUS0SgMqkdWfK/NQUSjGLDsFDiYIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdL4LXPj3sVSb+5wbm0ONoKLwby4wHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGLvfsZm+JGf15m9GIyuvsc0IiIWupI2pv0 WuImrEppus7Gmazk3JEF2lwqj1cUnM3ar4qsXRQ1NgGqVevHUoksdUNiC4e4iaHc AhDMs+8SSlW5BpkWyWk25BNhTBQDJLdGDSv4AL+tRuM6EMz6rOKSbNBtpQxhwfLI pdkc5nmir93R5KJKyeVEJZIE20lafJF1CFUPS3l9Q083Z/zjFpxKeU1w2U8EWAy2 A6oYdhCnLu+tPE/35cblfXF9FlNh5e1ePzs62Xx00pWo4c+xmDisWXN95vlzd36Y tulV6W74gzuGmoYR0jBu3Btj3oek3q76rQmb87o0p1BVMLL1Ocs= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:18 2025 by rpki-client