$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: nGPYv0SwusFBOSl4yO27xJFEPimlAgwajfguFFQXQWA= Subject key identifier: D3:11:81:1F:91:AB:F1:93:9E:35:55:94:8A:8F:03:01:37:E9:74:C7 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 52813CF377751EFC37E2093FAC89B3D8AD75913B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0220 Signing time: Tue 01 Jul 2025 07:31:39 +0000 Manifest this update: Tue 01 Jul 2025 07:26:39 +0000 Manifest next update: Fri 04 Jul 2025 14:48:39 +0000 Files and hashes: 1: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: odqeFCQkI1UACr8RXC1SehvYlwSk362MXsEZiCjxfXc=) 2: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) 3: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 4: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) 5: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 6: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 14:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:81:3c:f3:77:75:1e:fc:37:e2:09:3f:ac:89:b3:d8:ad:75:91:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Jul 1 07:26:39 2025 GMT Not After : Jul 4 14:48:39 2025 GMT Subject: CN=D311811F91ABF1939E3555948A8F030137E974C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7a:9e:e8:0c:cf:c9:48:9c:f8:c0:5a:20:16: 3c:8b:87:33:5d:b8:3a:2b:fb:9a:f3:5c:62:e4:ae: 80:82:9a:43:4c:67:eb:08:ea:1b:de:92:8a:69:5c: ce:93:09:fb:d4:e6:1d:0c:34:f4:50:bb:8f:ff:ce: ef:2e:c6:87:38:f0:7d:4a:49:81:e4:41:f3:25:6f: cb:b5:b3:e5:33:a1:39:dc:ec:d0:49:52:73:ab:3b: 80:0e:e7:ec:90:7b:a3:95:86:e8:80:f2:70:2e:c8: db:e2:d0:9b:d8:2b:45:b7:bf:41:b0:01:83:92:37: e4:93:84:f9:c0:5b:e5:bf:bc:81:01:3a:07:f8:a7: 36:1a:28:1e:e5:24:c4:73:d1:5e:d1:63:6f:02:68: d1:54:45:b4:94:43:e0:ed:70:1c:05:d6:86:6e:8f: 08:d3:ff:66:96:0a:f0:07:4c:c2:20:3b:a7:7c:20: 75:ae:19:48:30:93:87:5c:16:c4:d3:fd:ae:4b:3b: 0d:78:0f:86:bb:26:cf:6d:4f:d9:ad:42:44:7d:df: d0:19:46:59:34:a3:1f:71:35:ee:bb:88:34:f1:8b: eb:e2:a5:9e:73:e5:00:d5:5f:1c:0e:b3:f0:f0:f9: 7a:e5:1b:2d:d0:f3:f3:b2:be:01:c4:1c:71:e0:78: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:11:81:1F:91:AB:F1:93:9E:35:55:94:8A:8F:03:01:37:E9:74:C7 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4d:e6:5d:8d:59:a6:d2:ef:03:f6:95:0c:6e:ce:06:64:3a: e9:f2:77:94:10:bc:74:3f:80:62:cb:8a:c6:06:c3:e8:70:b4: 04:55:6d:20:6f:01:55:ce:4a:17:ba:d6:15:36:41:c9:5a:34: f3:e1:4d:50:8e:d1:42:c4:34:47:d2:11:b9:f3:fe:d5:e5:bd: 6f:ac:2b:35:8e:02:62:93:56:9f:cc:5e:eb:ba:e8:24:35:30: 68:c2:ff:ea:67:ab:8f:13:30:18:5e:cd:3d:4b:64:38:07:3f: 83:e8:f4:a6:81:dc:b8:ef:81:04:4f:b5:4f:f8:c9:ff:aa:7f: 28:d3:2c:dd:13:dd:c7:6c:62:d2:9d:8e:71:50:ed:82:75:36: 43:f7:b3:00:19:a7:8c:bd:5c:98:8c:f4:d7:3e:76:42:fa:62: f2:8f:af:1f:c1:e4:12:e7:fc:f3:d7:f7:1c:69:52:c3:5f:76: 58:fd:3f:8d:77:e0:63:d9:73:1f:4d:3f:5b:a4:e0:bb:55:9e: ff:63:49:9a:ef:e7:d0:ee:fe:e4:cc:ce:a2:9b:f1:7d:14:12: dc:1f:d9:cc:f8:49:9c:f8:24:8b:f4:a2:3d:27:45:7b:a1:fd: 9b:31:00:a4:62:31:a5:4a:a8:d7:20:49:88:85:1b:6d:19:d5: 10:fa:cf:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUoE883d1Hvw34gk/rImz2K11kTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTA3MDEwNzI2MzlaFw0yNTA3MDQxNDQ4MzlaMDMxMTAvBgNV BAMTKEQzMTE4MTFGOTFBQkYxOTM5RTM1NTU5NDhBOEYwMzAxMzdFOTc0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgep7oDM/JSJz4wFogFjyLhzNd uDor+5rzXGLkroCCmkNMZ+sI6hvekoppXM6TCfvU5h0MNPRQu4//zu8uxoc48H1K SYHkQfMlb8u1s+UzoTnc7NBJUnOrO4AO5+yQe6OVhuiA8nAuyNvi0JvYK0W3v0Gw AYOSN+SThPnAW+W/vIEBOgf4pzYaKB7lJMRz0V7RY28CaNFURbSUQ+DtcBwF1oZu jwjT/2aWCvAHTMIgO6d8IHWuGUgwk4dcFsTT/a5LOw14D4a7Js9tT9mtQkR939AZ Rlk0ox9xNe67iDTxi+vipZ5z5QDVXxwOs/Dw+XrlGy3Q8/OyvgHEHHHgeHSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xGBH5Gr8ZOeNVWUio8DATfpdMcwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1N5l2NWabS7wP2lQxuzgZkOunyd5QQvHQ/ gGLLisYGw+hwtARVbSBvAVXOShe61hU2QclaNPPhTVCO0ULENEfSEbnz/tXlvW+s KzWOAmKTVp/MXuu66CQ1MGjC/+pnq48TMBhezT1LZDgHP4Po9KaB3LjvgQRPtU/4 yf+qfyjTLN0T3cdsYtKdjnFQ7YJ1NkP3swAZp4y9XJiM9Nc+dkL6YvKPrx/B5BLn /PPX9xxpUsNfdlj9P4134GPZcx9NP1uk4LtVnv9jSZrv59Du/uTMzqKb8X0UEtwf 2cz4SZz4JIv0oj0nRXuh/ZsxAKRiMaVKqNcgSYiFG20Z1RD6zx4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:25:40 2025 by rpki-client