$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: D5fqAFFExHDCjly3/KhHtkxE1KPztVzpBxYjriGjUXU= Subject key identifier: 53:C2:78:45:B6:C8:4E:CE:F3:15:27:D7:52:30:0D:99:48:AE:49:82 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 19708F49353AB6165FE52B525F89FBFFD211C809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 017A Signing time: Fri 27 Jun 2025 21:11:05 +0000 Manifest this update: Fri 27 Jun 2025 21:06:05 +0000 Manifest next update: Tue 01 Jul 2025 00:42:05 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) 2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: mGYCyqX3HI7+1KPBd5IiWRlPXnnobWjpbFJ9lP6KCTg=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:70:8f:49:35:3a:b6:16:5f:e5:2b:52:5f:89:fb:ff:d2:11:c8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Jun 27 21:06:05 2025 GMT Not After : Jul 1 00:42:05 2025 GMT Subject: CN=53C27845B6C84ECEF31527D752300D9948AE4982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:af:25:9b:68:b7:5b:35:9e:1e:c0:28:04: 30:66:bc:56:89:b5:03:65:c5:d4:36:48:b3:89:ab: ef:9b:db:5a:82:86:24:03:e8:68:16:f3:d1:43:01: cd:f9:a8:9d:41:8c:cb:26:df:c1:96:0d:68:54:5d: 42:7c:e9:4a:e8:11:74:65:15:86:1f:34:c8:26:3a: 9d:cf:68:c5:0a:98:e6:e3:34:05:dc:a2:c0:3c:6e: 75:b6:05:1b:15:ea:a3:47:6a:31:a9:ef:90:bb:29: 39:2f:ad:a5:b2:34:b5:7c:42:33:d7:58:d0:95:b8: 75:a1:fe:46:d4:34:e1:0f:22:ed:a8:bf:8f:c3:ae: d9:17:f6:ed:6b:ec:40:26:64:df:2c:e3:75:d7:b7: 73:9e:d3:c7:f2:2e:2d:04:49:ab:6d:e5:ee:30:0e: 17:6a:b8:08:5c:34:28:b9:86:08:90:f5:88:f5:7f: 7b:ad:3e:8c:31:fe:f1:ff:6e:f9:4c:e0:e6:1e:0b: 71:f1:fa:6a:3f:43:62:f1:7e:d5:5b:e7:d0:be:de: ca:2a:47:7f:7e:53:60:97:c1:81:0e:0c:5d:8f:cf: 68:d4:5e:61:85:5b:24:d9:b5:4d:e0:f6:2e:00:db: 36:c2:e6:cb:97:cb:26:75:0e:1b:58:94:27:8b:a8: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C2:78:45:B6:C8:4E:CE:F3:15:27:D7:52:30:0D:99:48:AE:49:82 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:0b:9c:d8:d7:d9:4a:c1:c6:a3:19:b7:1d:ed:49:74:78: a2:7b:b2:64:2d:cf:ea:f6:10:5f:12:11:1b:f5:75:c5:a8:8f: f8:77:84:9e:2e:c4:96:c1:bb:3f:66:75:a9:57:8b:6e:3f:25: ef:62:6e:13:00:d9:9c:86:ce:83:ac:8e:27:37:c4:48:f8:b4: e1:02:c8:c0:18:47:9e:2f:9a:64:23:10:6e:3c:b9:e2:1f:3d: 44:53:37:43:7b:c2:69:34:b9:81:17:c3:ea:65:98:cb:0c:4e: 0f:97:f1:29:44:b6:fa:7b:be:35:6c:50:b2:b1:e9:50:cb:37: a0:20:06:c6:c6:4e:1d:3f:15:55:05:04:f5:35:e2:e7:92:4e: 8f:89:28:63:fb:84:24:16:68:79:0a:54:42:64:e2:e0:b2:00: 0d:91:d4:38:6d:62:48:13:bc:09:b8:35:e4:55:6d:10:66:72: c6:e9:66:aa:2d:cd:64:49:fd:9b:90:c5:15:90:76:e3:5f:9a: 9f:fe:f1:ec:30:80:82:06:58:5b:90:d2:b7:ce:1b:1b:8e:d8: 24:83:e6:59:06:dd:ff:d3:01:6e:1d:6e:61:52:b8:5e:0a:d9: fc:d0:38:fe:5a:d6:ad:51:f7:aa:8e:b2:33:e6:77:ba:0f:bf: d0:38:cf:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXCPSTU6thZf5StSX4n7/9IRyAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTA2MjcyMTA2MDVaFw0yNTA3MDEwMDQyMDVaMDMxMTAvBgNV BAMTKDUzQzI3ODQ1QjZDODRFQ0VGMzE1MjdENzUyMzAwRDk5NDhBRTQ5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJa8lm2i3WzWeHsAoBDBmvFaJ tQNlxdQ2SLOJq++b21qChiQD6GgW89FDAc35qJ1BjMsm38GWDWhUXUJ86UroEXRl FYYfNMgmOp3PaMUKmObjNAXcosA8bnW2BRsV6qNHajGp75C7KTkvraWyNLV8QjPX WNCVuHWh/kbUNOEPIu2ov4/DrtkX9u1r7EAmZN8s43XXt3Oe08fyLi0ESatt5e4w DhdquAhcNCi5hgiQ9Yj1f3utPowx/vH/bvlM4OYeC3Hx+mo/Q2LxftVb59C+3soq R39+U2CXwYEODF2Pz2jUXmGFWyTZtU3g9i4A2zbC5suXyyZ1DhtYlCeLqN+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8J4RbbITs7zFSfXUjANmUiuSYIwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFovC5zY19lKwcajGbcd7Ul0eKJ7smQtz+r2 EF8SERv1dcWoj/h3hJ4uxJbBuz9mdalXi24/Je9ibhMA2ZyGzoOsjic3xEj4tOEC yMAYR54vmmQjEG48ueIfPURTN0N7wmk0uYEXw+plmMsMTg+X8SlEtvp7vjVsULKx 6VDLN6AgBsbGTh0/FVUFBPU14ueSTo+JKGP7hCQWaHkKVEJk4uCyAA2R1DhtYkgT vAm4NeRVbRBmcsbpZqotzWRJ/ZuQxRWQduNfmp/+8ewwgIIGWFuQ0rfOGxuO2CSD 5lkG3f/TAW4dbmFSuF4K2fzQOP5a1q1R96qOsjPmd7oPv9A4z6w= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:08 2025 by rpki-client