$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: R7qnxdUHsI6OyrLMSwgY4bbWy+mXEyuN2EW2rjsFay0= Subject key identifier: DE:99:24:6D:92:92:02:B3:B2:A6:73:7F:B7:7D:FA:DF:BD:91:BC:6B Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 6E6B94B852D72C8EA4576A976974321B95A9C503 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: 9D Signing time: Sun 29 Jun 2025 21:01:28 +0000 Manifest this update: Sun 29 Jun 2025 20:56:28 +0000 Manifest next update: Thu 03 Jul 2025 00:43:28 +0000 Files and hashes: 1: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 2: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 4: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: P2mtC//Ms6fEjb7BrLqHN4BXhlisiDzUCZ1W1xy9BAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6b:94:b8:52:d7:2c:8e:a4:57:6a:97:69:74:32:1b:95:a9:c5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Jun 29 20:56:28 2025 GMT Not After : Jul 3 00:43:28 2025 GMT Subject: CN=DE99246D929202B3B2A6737FB77DFADFBD91BC6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:77:58:e5:28:f8:bf:b0:cd:79:74:e7:e1:4e: 49:86:3d:bb:57:c2:6e:f6:27:04:4c:5f:e0:eb:6b: 35:6f:4f:d4:f1:41:1a:8b:4f:33:23:60:02:99:26: ed:05:7b:a8:12:87:93:46:eb:6e:5c:ad:5f:49:de: 77:a5:bd:ff:6e:f0:12:ef:d7:fc:55:79:c2:1f:dd: d4:09:a2:d0:4e:4e:7b:ef:ad:61:5d:88:0f:f2:d1: bc:bc:dc:44:5a:2f:3b:91:4b:3d:a9:79:da:ca:87: 48:3a:2e:23:85:35:bc:10:d6:8e:57:61:c8:9f:e4: 27:54:e9:e4:3b:66:90:ef:47:b7:b5:ea:f0:04:5c: ca:ce:65:0c:3c:18:b6:2e:c3:c6:ad:ca:f5:e9:84: 2c:c1:03:ce:94:34:54:41:4a:16:44:e4:83:03:20: a1:67:dc:06:90:9b:d6:4c:ef:74:cf:67:d6:6f:97: 06:df:22:b2:1d:6e:6d:95:a7:dd:7f:4c:9e:da:a3: 7a:f0:c3:63:a2:47:13:78:4c:ca:19:e3:a5:87:34: f3:1c:b4:b0:e9:ee:47:e6:e9:f1:9d:c6:0c:d5:dd: 39:ef:38:bf:67:3b:3d:59:f9:08:8b:f6:51:1b:8b: d6:fe:bc:ed:e5:92:12:cb:b6:48:8c:51:4b:94:b3: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:24:6D:92:92:02:B3:B2:A6:73:7F:B7:7D:FA:DF:BD:91:BC:6B X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bc:fd:6f:43:5b:67:67:a9:eb:69:23:93:83:33:c1:a3:b4: 66:45:e2:a0:6c:3b:2b:ec:38:33:61:ba:38:1f:08:0b:f7:cd: 4b:58:f9:4e:d2:85:59:0e:27:af:66:c0:3f:7f:e0:12:8c:57: 9b:3a:c6:6d:dd:2b:1c:69:d5:bc:6e:80:d1:ea:10:b1:00:ef: aa:24:3c:e8:9a:7e:b5:66:83:b5:ea:51:6b:83:a2:b6:94:40: 01:12:16:64:6b:8d:db:a0:d1:93:66:e3:3b:49:ee:75:9c:90: be:a1:0d:6f:83:ff:1a:39:25:03:1e:63:71:78:e3:b9:29:25: 82:5c:93:b0:d0:94:ee:95:99:c2:63:a1:2d:a2:38:0e:63:46: ac:53:35:0b:75:ac:41:94:11:6e:1f:a6:2d:c6:04:20:af:55: 19:bc:f4:c2:c5:32:c9:83:d7:77:f4:69:26:53:51:87:bd:8a: d7:55:d2:8c:63:b0:80:70:51:f6:1f:61:fe:1c:3e:2f:cf:7c: 9b:ac:7e:05:93:10:aa:64:1d:f7:fe:4b:2d:0d:f2:6f:db:1f: 7f:6e:b3:19:b5:97:f1:30:a1:4d:9e:72:8a:31:4e:55:73:2a: 8b:27:4b:6e:29:f2:4a:4c:b8:11:ad:da:41:29:4a:e9:80:a6: a9:02:36:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmuUuFLXLI6kV2qXaXQyG5WpxQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTA2MjkyMDU2MjhaFw0yNTA3MDMwMDQzMjhaMDMxMTAvBgNV BAMTKERFOTkyNDZEOTI5MjAyQjNCMkE2NzM3RkI3N0RGQURGQkQ5MUJDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzd1jlKPi/sM15dOfhTkmGPbtX wm72JwRMX+DrazVvT9TxQRqLTzMjYAKZJu0Fe6gSh5NG625crV9J3nelvf9u8BLv 1/xVecIf3dQJotBOTnvvrWFdiA/y0by83ERaLzuRSz2pedrKh0g6LiOFNbwQ1o5X Ycif5CdU6eQ7ZpDvR7e16vAEXMrOZQw8GLYuw8atyvXphCzBA86UNFRBShZE5IMD IKFn3AaQm9ZM73TPZ9ZvlwbfIrIdbm2Vp91/TJ7ao3rww2OiRxN4TMoZ46WHNPMc tLDp7kfm6fGdxgzV3TnvOL9nOz1Z+QiL9lEbi9b+vO3lkhLLtkiMUUuUs9RvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pkkbZKSArOypnN/t336372RvGswHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm8/W9DW2dnqetpI5ODM8GjtGZF4qBsOyvs ODNhujgfCAv3zUtY+U7ShVkOJ69mwD9/4BKMV5s6xm3dKxxp1bxugNHqELEA76ok POiafrVmg7XqUWuDoraUQAESFmRrjdug0ZNm4ztJ7nWckL6hDW+D/xo5JQMeY3F4 47kpJYJck7DQlO6VmcJjoS2iOA5jRqxTNQt1rEGUEW4fpi3GBCCvVRm89MLFMsmD 13f0aSZTUYe9itdV0oxjsIBwUfYfYf4cPi/PfJusfgWTEKpkHff+Sy0N8m/bH39u sxm1l/EwoU2ecooxTlVzKosnS24p8kpMuBGt2kEpSumApqkCNnc= -----END CERTIFICATE-----Generated at Mon Jun 30 03:53:40 2025 by rpki-client