$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json) Hash identifier: Y55coghZ1/H5FEHiI8tcdbfCbMR5NctnzmD6SbCn3Ok= Subject key identifier: 69:17:0A:4B:C2:55:8C:50:FD:B9:90:5B:2D:D6:2F:0A:D3:E1:FB:2A Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Certificate serial: 78D7AE196F465B82D9B12B1C9D9148A7B5B691BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft Manifest number: 015F Signing time: Mon 30 Jun 2025 02:10:02 +0000 Manifest this update: Mon 30 Jun 2025 02:05:02 +0000 Manifest next update: Thu 03 Jul 2025 08:26:02 +0000 Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: DCx7j/PqY/+rgrc9ArlbSADHe4Cwa01sUUvNHN3T5RM=) 2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: F226mAY5eqyGbOEo/JH+oQJn4it/ZIiPdaCG2mLhYHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d7:ae:19:6f:46:5b:82:d9:b1:2b:1c:9d:91:48:a7:b5:b6:91:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7 Validity Not Before: Jun 30 02:05:02 2025 GMT Not After : Jul 3 08:26:02 2025 GMT Subject: CN=69170A4BC2558C50FDB9905B2DD62F0AD3E1FB2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3e:1a:07:c9:04:0e:e3:fd:a8:13:f3:ea:de: 5a:53:9c:bf:f9:e7:e3:c1:7d:2d:97:04:eb:ce:97: 59:1e:26:c8:3e:73:da:32:76:08:c3:d9:28:aa:45: 1a:f7:dd:ab:ac:a0:69:c4:89:e0:9a:8a:f3:a8:7e: 36:84:3d:6f:9b:8f:ee:af:f2:92:5f:20:35:72:c3: 6a:38:09:29:a2:ac:51:22:e8:f4:f2:19:13:58:c6: 7b:05:1e:51:bb:a4:42:79:24:38:d0:33:72:3f:25: d2:a8:96:1b:7f:5b:49:94:03:78:bc:6d:8c:96:00: 2f:52:36:63:19:2f:70:be:ff:af:02:6d:a8:ac:2b: ae:ef:7d:9f:1d:6c:ca:c9:a9:28:25:40:a7:d0:dc: 0f:dc:23:18:39:d2:c6:53:a1:ed:f6:cc:be:e0:5d: 0d:05:8c:74:ed:a0:33:aa:1a:16:47:dd:2c:fe:9e: 0b:17:ab:c0:3e:c7:15:11:f6:b4:70:0d:90:53:78: 36:dd:d9:98:67:18:1d:86:7d:69:e3:e6:ef:64:1c: ad:23:fc:29:c8:eb:e6:16:dd:f3:24:4e:bd:76:36: 57:42:8f:72:9f:46:85:02:a2:42:0a:8b:5b:aa:36: c6:f4:ff:ae:57:d3:33:91:92:0d:85:da:61:67:19: ec:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:17:0A:4B:C2:55:8C:50:FD:B9:90:5B:2D:D6:2F:0A:D3:E1:FB:2A X509v3 Authority Key Identifier: keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a7:ae:60:f6:74:da:e6:e7:89:61:94:5e:36:58:68:5f:1d: 24:40:81:f9:f5:ab:15:dc:e2:9b:d9:6e:38:ab:6f:d4:9d:94: c3:02:be:af:56:95:3c:64:92:83:15:52:71:c1:2f:9b:3a:ed: 26:b5:0e:7a:c8:87:37:6c:ad:13:5c:05:36:a4:6e:31:28:f6: e9:51:17:7c:77:44:bc:91:0c:e3:f0:f1:71:8d:55:9e:ca:48: 87:96:0c:5d:af:7d:f5:8f:3f:6a:f3:8a:57:34:c0:85:00:ee: e2:e5:f8:d5:51:cb:12:0a:73:a6:b8:5a:b5:0d:bf:59:0a:47: 30:12:51:56:ee:79:6e:14:c8:53:6f:e5:f4:63:dd:a1:f7:41: 58:55:b2:6e:55:5f:f7:c6:54:a9:31:25:4c:d7:c6:ef:bd:96: 68:ea:6d:42:ae:e8:af:6a:91:53:bb:7b:6a:96:63:c7:2a:6f: 91:6d:b5:54:97:da:db:1a:24:76:c9:8e:ef:cd:2b:92:fc:32: 49:4f:fd:11:9c:92:7e:19:14:d1:14:3c:11:98:15:db:c5:ea: 07:e2:ee:9c:17:48:72:40:fd:a4:58:4e:d6:b7:55:2c:e5:77: b9:34:2f:5f:ef:d8:53:c1:a8:64:55:58:cc:14:9b:a6:45:82: 42:b0:68:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNeuGW9GW4LZsSscnZFIp7W2kb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZF MDY3Q0FGNzAeFw0yNTA2MzAwMjA1MDJaFw0yNTA3MDMwODI2MDJaMDMxMTAvBgNV BAMTKDY5MTcwQTRCQzI1NThDNTBGREI5OTA1QjJERDYyRjBBRDNFMUZCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvPhoHyQQO4/2oE/Pq3lpTnL/5 5+PBfS2XBOvOl1keJsg+c9oydgjD2SiqRRr33ausoGnEieCaivOofjaEPW+bj+6v 8pJfIDVyw2o4CSmirFEi6PTyGRNYxnsFHlG7pEJ5JDjQM3I/JdKolht/W0mUA3i8 bYyWAC9SNmMZL3C+/68CbaisK67vfZ8dbMrJqSglQKfQ3A/cIxg50sZToe32zL7g XQ0FjHTtoDOqGhZH3Sz+ngsXq8A+xxUR9rRwDZBTeDbd2ZhnGB2GfWnj5u9kHK0j /CnI6+YW3fMkTr12NldCj3KfRoUCokIKi1uqNsb0/65X0zORkg2F2mFnGexRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaRcKS8JVjFD9uZBbLdYvCtPh+yowHwYDVR0j BBgwFoAUyBdefp4V5WX+aXKSo34Uv+BnyvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzZmZDU1MS02YWJhLTQyMjItOGEyNi05ODYzNDY4MjViMzgvMC9DODE3NUU3RTlF MTVFNTY1RkU2OTcyOTJBMzdFMTRCRkUwNjdDQUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0QkZFMDY3 Q0FGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM2ZmQ1NTEtNmFiYS00MjIyLThh MjYtOTg2MzQ2ODI1YjM4LzAvQzgxNzVFN0U5RTE1RTU2NUZFNjk3MjkyQTM3RTE0 QkZFMDY3Q0FGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABenrmD2dNrm54lhlF42WGhfHSRAgfn1qxXc 4pvZbjirb9SdlMMCvq9WlTxkkoMVUnHBL5s67Sa1DnrIhzdsrRNcBTakbjEo9ulR F3x3RLyRDOPw8XGNVZ7KSIeWDF2vffWPP2rzilc0wIUA7uLl+NVRyxIKc6a4WrUN v1kKRzASUVbueW4UyFNv5fRj3aH3QVhVsm5VX/fGVKkxJUzXxu+9lmjqbUKu6K9q kVO7e2qWY8cqb5FttVSX2tsaJHbJju/NK5L8MklP/RGckn4ZFNEUPBGYFdvF6gfi 7pwXSHJA/aRYTta3VSzld7k0L1/v2FPBqGRVWMwUm6ZFgkKwaEM= -----END CERTIFICATE-----Generated at Tue Jul 1 14:54:32 2025 by rpki-client