$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: DNSogJlZXSeMU7Sg6Q90k1ys7rqlBd0w1mUeBdZguG8= Subject key identifier: A7:6B:77:6D:66:14:BE:78:08:D4:24:A3:97:5F:2E:3A:BC:92:3F:74 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 70945F1267CD7007F20FAA5657B14274577CB60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 0356 Signing time: Sat 28 Jun 2025 06:41:40 +0000 Manifest this update: Sat 28 Jun 2025 06:36:40 +0000 Manifest next update: Tue 01 Jul 2025 13:43:40 +0000 Files and hashes: 1: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: tQGYtF7z/BTA2bwHZWz2WlGOE/5mNFO8rOxpUI/bfyY=) 2: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 13:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:94:5f:12:67:cd:70:07:f2:0f:aa:56:57:b1:42:74:57:7c:b6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Jun 28 06:36:40 2025 GMT Not After : Jul 1 13:43:40 2025 GMT Subject: CN=A76B776D6614BE7808D424A3975F2E3ABC923F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:43:38:27:98:19:7a:71:91:8b:33:91:08: 38:f5:89:c1:0a:69:08:97:f1:70:06:b7:b4:74:dd: f5:2f:1d:2a:14:2f:a7:39:19:ff:ef:db:d7:3b:60: 7b:d8:a1:65:0c:16:b7:4c:84:16:5c:0f:b1:30:d2: de:c7:b8:14:99:85:49:7d:0a:4f:63:1e:3f:65:5e: cc:27:83:ba:76:33:53:bb:a7:ab:a2:a2:7c:ea:13: 53:98:0d:19:8b:dc:3e:36:c2:9f:2a:e2:ca:c8:e3: 6f:05:6b:55:a8:40:07:0c:81:05:22:4b:d6:22:8e: dc:dd:df:7e:d9:b3:fb:d7:0b:ed:bb:e6:a1:1e:f2: 05:0b:4d:78:6b:50:cf:c6:68:86:0c:18:db:ec:a9: 81:1c:b0:fd:c6:56:03:e7:3a:5a:4e:28:f7:15:cd: 2f:de:cc:fd:19:94:fd:31:14:2d:e2:4f:fa:8b:b2: 05:8a:73:19:4e:39:e6:1d:b5:db:68:08:fc:b3:f3: 64:23:fb:6b:31:99:ff:dc:be:32:a2:db:42:a8:0d: 35:92:a0:a6:97:60:81:0b:69:02:4d:06:47:91:62: e0:68:04:db:76:2e:9e:4e:c8:41:3e:e9:2b:5f:8d: 95:bd:78:52:ca:7a:0c:65:4a:23:79:9d:b7:ef:8e: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6B:77:6D:66:14:BE:78:08:D4:24:A3:97:5F:2E:3A:BC:92:3F:74 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d8:1f:ed:16:02:b4:22:8d:99:49:50:96:d3:31:70:88:71: 94:23:e5:2d:25:36:2c:bf:49:dd:23:e7:8e:e8:b0:c1:aa:fa: a0:10:6b:6f:ec:71:f7:fc:aa:25:71:bc:a2:35:91:ca:da:c0: c5:81:60:f8:ba:43:44:9a:da:17:8b:6a:90:62:ee:cb:a0:35: 10:3f:4e:0b:11:ef:c4:66:f0:5f:ad:28:e4:4c:15:ac:d2:29: 2a:0d:45:92:b3:7f:0a:bc:0d:f3:0b:a5:6c:23:d6:12:3e:f7: 3b:10:11:0e:f2:03:a0:9f:8e:b2:72:fd:fb:d3:52:40:c7:a0: a9:36:9f:3f:d9:14:0e:f1:9a:12:5f:20:e3:18:fd:b2:82:00: dc:34:09:f8:fd:40:de:ca:1d:a7:e8:a5:a7:75:ae:21:75:7f: 36:a5:7e:f4:22:5d:a2:88:a9:d1:36:fc:4e:6b:a2:1c:ca:ff: 5f:39:cd:2c:83:65:78:f2:09:77:77:82:8e:5c:e5:c7:aa:5f: a7:a9:b0:e6:c2:85:99:4c:82:95:4f:f6:36:ac:85:0a:9b:b6: b8:d2:a4:66:3c:30:87:ce:4b:1b:88:af:80:76:06:6d:63:50: d9:47:92:d6:65:9f:37:91:46:b9:ad:87:63:a7:80:66:c8:35: a4:be:57:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJRfEmfNcAfyD6pWV7FCdFd8tgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTA2MjgwNjM2NDBaFw0yNTA3MDExMzQzNDBaMDMxMTAvBgNV BAMTKEE3NkI3NzZENjYxNEJFNzgwOEQ0MjRBMzk3NUYyRTNBQkM5MjNGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsd0M4J5gZenGRizORCDj1icEK aQiX8XAGt7R03fUvHSoUL6c5Gf/v29c7YHvYoWUMFrdMhBZcD7Ew0t7HuBSZhUl9 Ck9jHj9lXswng7p2M1O7p6uionzqE1OYDRmL3D42wp8q4srI428Fa1WoQAcMgQUi S9Yijtzd337Zs/vXC+275qEe8gULTXhrUM/GaIYMGNvsqYEcsP3GVgPnOlpOKPcV zS/ezP0ZlP0xFC3iT/qLsgWKcxlOOeYdtdtoCPyz82Qj+2sxmf/cvjKi20KoDTWS oKaXYIELaQJNBkeRYuBoBNt2Lp5OyEE+6StfjZW9eFLKegxlSiN5nbfvjlcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2t3bWYUvngI1CSjl18uOrySP3QwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHYH+0WArQijZlJUJbTMXCIcZQj5S0lNiy/ Sd0j547osMGq+qAQa2/scff8qiVxvKI1kcrawMWBYPi6Q0Sa2heLapBi7sugNRA/ TgsR78Rm8F+tKORMFazSKSoNRZKzfwq8DfMLpWwj1hI+9zsQEQ7yA6CfjrJy/fvT UkDHoKk2nz/ZFA7xmhJfIOMY/bKCANw0Cfj9QN7KHafopad1riF1fzalfvQiXaKI qdE2/E5rohzK/185zSyDZXjyCXd3go5c5ceqX6epsObChZlMgpVP9jashQqbtrjS pGY8MIfOSxuIr4B2Bm1jUNlHktZlnzeRRrmth2OngGbINaS+Vws= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:10 2025 by rpki-client