$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: PAvQ/gOQLy9+gXfBCN6vqGomLqKYKwi00JrZLxyoDfA= Subject key identifier: 57:6C:88:58:EB:8E:6E:94:86:3B:B1:35:D2:FA:B5:17:3C:70:51:1D Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 53D1AEE9D113935972B184A354C310081CF8B594 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 018D Signing time: Sun 29 Jun 2025 11:30:00 +0000 Manifest this update: Sun 29 Jun 2025 11:25:00 +0000 Manifest next update: Wed 02 Jul 2025 22:37:00 +0000 Files and hashes: 1: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: oxyDXrOoZ/zCFS3Gztc4WC6OS30QoAhbYVI4h5EBUSY=) 2: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: LHo1zMaie53AFYRQsAMBj1avC34kq9NJCGSH/LsdSnI=) 3: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: 9I1YAD4+QIhTiVDMa5D7Ak8qaH1FPNSTadXmUnfXAGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d1:ae:e9:d1:13:93:59:72:b1:84:a3:54:c3:10:08:1c:f8:b5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Jun 29 11:25:00 2025 GMT Not After : Jul 2 22:37:00 2025 GMT Subject: CN=576C8858EB8E6E94863BB135D2FAB5173C70511D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:33:3c:f4:8e:a0:ec:8a:f7:62:80:ae:9c: e3:2e:2c:df:ce:db:a6:33:ca:ce:8b:de:67:53:b5: 19:2c:c9:2d:56:52:e8:3f:ab:72:9b:0d:a5:a7:7d: d7:d5:5c:8a:15:ad:25:7f:ea:03:56:76:0e:63:cb: 05:4d:2c:b3:a4:6d:3c:7d:b9:4e:80:74:9c:03:11: 87:69:0a:aa:2d:90:5b:af:66:89:93:82:f3:6d:c4: 59:30:6b:37:5f:25:6d:a0:7b:12:9e:e9:b2:be:f1: 03:91:e9:40:3a:fd:3e:c3:04:4b:f2:61:8f:fb:9f: 83:54:ce:be:d8:22:8c:af:12:e9:63:7e:c3:f2:84: b8:59:1a:4a:89:3e:e0:a0:ba:75:c4:35:03:7e:9b: ef:1b:fc:4d:fc:30:80:83:fd:78:bc:14:29:ec:c6: 72:e8:4f:03:de:a1:b4:65:10:97:d6:e2:ab:c4:13: 19:52:d9:25:85:f7:2a:ae:8e:25:0f:96:0e:73:66: 5f:96:d4:15:9a:f9:c5:dc:f2:d2:74:29:26:cc:06: 1d:f2:96:41:18:7d:da:bb:96:f1:db:88:75:de:26: 5e:db:40:06:14:0a:91:0c:ad:fc:2f:9c:46:f1:c7: 9f:42:dd:da:f2:d2:a7:7a:d4:2c:19:45:fa:de:fa: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6C:88:58:EB:8E:6E:94:86:3B:B1:35:D2:FA:B5:17:3C:70:51:1D X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2a:ed:d8:7f:97:92:67:0c:47:52:65:58:4a:1c:f8:3f:ae: ba:d9:b7:f2:27:6d:b7:4c:52:d4:8e:f1:c3:7f:2e:ae:a5:ed: 3c:d5:34:4c:33:76:78:b1:d8:8b:18:5f:08:31:0a:3b:b3:d0: 60:31:33:e2:4f:ab:16:02:8f:1e:4d:c2:69:68:40:a6:99:ec: 01:87:e0:c2:0e:2d:ce:2d:0d:b9:d2:c4:fb:89:2b:0c:b6:bd: 35:4d:69:a8:04:05:cf:7b:92:ea:a0:eb:62:73:c6:03:b2:51: 97:40:21:ab:5c:1c:ad:89:5b:01:36:6a:78:52:e5:59:8d:30: 0c:27:d8:4c:54:be:8f:d5:18:8a:fc:14:4b:fa:bd:ba:75:45: d8:73:1d:73:b3:08:05:5c:0f:15:0b:0c:df:ae:3b:fa:88:1f: c5:35:86:3f:ee:c3:e8:45:d6:60:59:81:ce:84:18:82:10:54: eb:a9:19:a9:58:65:b3:02:50:c6:e1:59:8e:6b:9d:c7:b5:1b: 5a:26:0b:64:7d:59:b7:61:3b:3c:e7:de:c1:25:d9:67:6e:e6: 83:b1:c0:f5:23:6c:f1:30:53:f9:30:e7:ec:26:25:14:a1:cb: a2:ca:87:0d:1d:d2:b6:47:87:63:23:71:29:bf:f7:41:f3:09: 56:fc:5c:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9Gu6dETk1lysYSjVMMQCBz4tZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTA2MjkxMTI1MDBaFw0yNTA3MDIyMjM3MDBaMDMxMTAvBgNV BAMTKDU3NkM4ODU4RUI4RTZFOTQ4NjNCQjEzNUQyRkFCNTE3M0M3MDUxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rDM89I6g7Ir3YoCunOMuLN/O 26Yzys6L3mdTtRksyS1WUug/q3KbDaWnfdfVXIoVrSV/6gNWdg5jywVNLLOkbTx9 uU6AdJwDEYdpCqotkFuvZomTgvNtxFkwazdfJW2gexKe6bK+8QOR6UA6/T7DBEvy YY/7n4NUzr7YIoyvEuljfsPyhLhZGkqJPuCgunXENQN+m+8b/E38MICD/Xi8FCns xnLoTwPeobRlEJfW4qvEExlS2SWF9yqujiUPlg5zZl+W1BWa+cXc8tJ0KSbMBh3y lkEYfdq7lvHbiHXeJl7bQAYUCpEMrfwvnEbxx59C3dry0qd61CwZRfre+p2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2yIWOuObpSGO7E10vq1FzxwUR0wHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4q7dh/l5JnDEdSZVhKHPg/rrrZt/InbbdM UtSO8cN/Lq6l7TzVNEwzdnix2IsYXwgxCjuz0GAxM+JPqxYCjx5NwmloQKaZ7AGH 4MIOLc4tDbnSxPuJKwy2vTVNaagEBc97kuqg62JzxgOyUZdAIatcHK2JWwE2anhS 5VmNMAwn2ExUvo/VGIr8FEv6vbp1RdhzHXOzCAVcDxULDN+uO/qIH8U1hj/uw+hF 1mBZgc6EGIIQVOupGalYZbMCUMbhWY5rnce1G1omC2R9WbdhOzzn3sEl2Wdu5oOx wPUjbPEwU/kw5+wmJRShy6LKhw0d0rZHh2MjcSm/90HzCVb8XAI= -----END CERTIFICATE-----Generated at Mon Jun 30 05:23:26 2025 by rpki-client