$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: Eqed0bBWtL+CkIyPNNXYMYwZ7B2KcOcPKOGE+UnK2po= Subject key identifier: 0F:A5:92:E0:96:00:08:7C:E2:73:CA:85:EF:EA:C9:F6:89:B3:70:80 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 70BA0FD5DEEC54371948E3A0AF734CC9E28432FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0325 Signing time: Sat 28 Jun 2025 12:20:57 +0000 Manifest this update: Sat 28 Jun 2025 12:15:57 +0000 Manifest next update: Tue 01 Jul 2025 17:18:57 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 2: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 3: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 4: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 5: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 6: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 7: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: uTEI9GxPT57lFG+Ds/a913AnJNh23Ti5mU8dkUS5esU=) 8: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 9: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ba:0f:d5:de:ec:54:37:19:48:e3:a0:af:73:4c:c9:e2:84:32:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Jun 28 12:15:57 2025 GMT Not After : Jul 1 17:18:57 2025 GMT Subject: CN=0FA592E09600087CE273CA85EFEAC9F689B37080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:01:4f:a7:d8:5e:25:2f:97:df:81:5e:a8: 5d:86:b9:b3:22:e8:f5:80:cd:ce:16:43:69:5e:ae: ca:a2:14:fa:fd:54:e3:7c:e1:b7:32:f5:74:80:82: fd:03:41:de:81:4d:bb:6c:3a:a0:cd:8d:24:e0:84: c7:0e:82:78:1f:46:1e:88:70:b9:12:df:51:b1:2f: 79:10:26:58:3f:29:76:d7:f4:81:1d:0d:74:5a:36: a0:97:85:a9:97:c0:78:ab:68:2e:54:34:82:20:fa: cd:96:66:a6:6c:3a:06:0a:dc:3d:13:d7:c0:c4:bd: 87:15:32:9d:8a:66:85:73:9f:fd:44:b3:c0:eb:23: 27:e3:24:d4:1f:28:a7:76:02:f5:34:6e:64:2d:b0: d1:9d:e1:c0:43:ce:e4:2b:5f:9c:d5:c0:4b:0e:06: b4:d7:e3:ea:ee:79:53:31:8b:b3:95:4b:c1:dd:93: e3:41:af:84:5b:b5:77:63:b6:27:af:c2:d6:58:e0: a5:22:a3:b7:31:75:95:7e:6d:aa:19:73:3e:0a:05: ab:de:b7:a0:04:06:3a:ac:5a:7a:ea:f6:df:47:b7: 97:91:e1:5c:67:ab:ef:58:98:84:6b:f6:32:be:bc: f8:08:37:29:a3:3f:51:a9:7c:dd:11:2e:06:82:a3: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A5:92:E0:96:00:08:7C:E2:73:CA:85:EF:EA:C9:F6:89:B3:70:80 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:75:30:c7:34:67:38:bf:d3:24:6b:d1:2d:36:13:f2:18:5b: c0:d9:51:50:8a:be:78:28:6c:c3:07:d5:2b:c2:d3:b4:41:2a: bb:22:08:90:63:4b:a9:63:f6:ac:c5:64:e8:1d:3e:c8:b0:be: 4d:91:03:27:e4:0a:56:be:54:68:15:2c:cc:3b:ea:a9:02:c9: 0a:d6:38:90:4f:07:c6:6b:77:45:0e:c4:f7:96:9f:01:c2:32: 7f:19:3b:16:ea:33:d2:6b:a4:bb:07:24:be:51:b3:bc:0f:f2: 1c:69:cb:e8:65:bb:6a:7f:81:fe:87:eb:ad:2c:44:40:b5:c6: 73:63:f6:65:37:8b:e4:23:49:d3:98:7c:31:14:e6:0a:d1:9c: 94:a0:b1:49:5d:d2:1d:de:a3:8b:d9:13:d9:d6:fb:14:b6:1b: 2a:0b:f2:2d:88:7d:51:71:73:f4:1c:eb:c1:d6:fa:02:2c:fe: 39:58:75:a9:1a:89:2b:d6:49:6d:db:29:6d:3c:1b:13:a1:81: 5c:5f:10:ce:9c:97:f4:65:dd:6f:9e:6d:d8:48:b2:33:33:eb: 58:b7:7f:da:43:46:eb:c4:4a:b2:bb:97:42:7e:2e:e8:57:9a: 3d:66:9f:6d:4a:6b:92:80:8f:92:62:e6:3c:05:ca:f7:3e:3e: 11:b4:ef:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLoP1d7sVDcZSOOgr3NMyeKEMvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA2MjgxMjE1NTdaFw0yNTA3MDExNzE4NTdaMDMxMTAvBgNV BAMTKDBGQTU5MkUwOTYwMDA4N0NFMjczQ0E4NUVGRUFDOUY2ODlCMzcwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71QFPp9heJS+X34FeqF2GubMi 6PWAzc4WQ2lersqiFPr9VON84bcy9XSAgv0DQd6BTbtsOqDNjSTghMcOgngfRh6I cLkS31GxL3kQJlg/KXbX9IEdDXRaNqCXhamXwHiraC5UNIIg+s2WZqZsOgYK3D0T 18DEvYcVMp2KZoVzn/1Es8DrIyfjJNQfKKd2AvU0bmQtsNGd4cBDzuQrX5zVwEsO BrTX4+rueVMxi7OVS8Hdk+NBr4RbtXdjtievwtZY4KUio7cxdZV+baoZcz4KBave t6AEBjqsWnrq9t9Ht5eR4Vxnq+9YmIRr9jK+vPgINymjP1GpfN0RLgaCo3PVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD6WS4JYACHzic8qF7+rJ9omzcIAwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl1MMc0Zzi/0yRr0S02E/IYW8DZUVCKvngo bMMH1SvC07RBKrsiCJBjS6lj9qzFZOgdPsiwvk2RAyfkCla+VGgVLMw76qkCyQrW OJBPB8Zrd0UOxPeWnwHCMn8ZOxbqM9JrpLsHJL5Rs7wP8hxpy+hlu2p/gf6H660s REC1xnNj9mU3i+QjSdOYfDEU5grRnJSgsUld0h3eo4vZE9nW+xS2GyoL8i2IfVFx c/Qc68HW+gIs/jlYdakaiSvWSW3bKW08GxOhgVxfEM6cl/Rl3W+ebdhIsjMz61i3 f9pDRuvESrK7l0J+LuhXmj1mn21Ka5KAj5Ji5jwFyvc+PhG070g= -----END CERTIFICATE-----Generated at Sun Jun 29 23:43:43 2025 by rpki-client