$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: 42HpszExoq80a0SiUWbgGkCioE5XMZiQCmoUhc58omA= Subject key identifier: 8B:F1:2B:D5:78:4B:FC:1F:91:E8:AD:7E:2B:69:B3:71:12:4F:78:21 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 1DA83106A472DD3210223FBE8EB5477CDBBBAA75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 016D Signing time: Sun 29 Jun 2025 06:20:59 +0000 Manifest this update: Sun 29 Jun 2025 06:15:59 +0000 Manifest next update: Wed 02 Jul 2025 17:13:59 +0000 Files and hashes: 1: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: vPQmEvXDKan7BlTdbcSkdf2VtMc7o+WFMPYs1E8p+Ds=) 2: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: 17ChIozSdmJ+qCeyTnh6PolCU0A1lGl43AAQ9utL0Ec=) 3: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 4: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a8:31:06:a4:72:dd:32:10:22:3f:be:8e:b5:47:7c:db:bb:aa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Jun 29 06:15:59 2025 GMT Not After : Jul 2 17:13:59 2025 GMT Subject: CN=8BF12BD5784BFC1F91E8AD7E2B69B371124F7821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:53:03:bb:ee:17:21:07:61:fd:86:eb:4e: 62:f1:aa:34:45:b2:d3:20:8c:ee:23:54:a8:db:b8: 6e:4d:46:07:de:b6:f6:6f:fb:2a:fb:28:c2:29:22: b5:c8:16:22:3e:1b:b0:e1:62:e9:e4:12:d7:bc:3d: 67:9f:ca:0b:1e:96:d6:87:96:55:a2:8e:4c:ff:62: 3c:3b:7e:41:fe:c8:75:e2:d0:15:ff:2a:fc:0d:1d: a3:27:42:98:ac:04:86:9c:f3:3f:7c:2c:8d:52:3c: ee:e3:a4:a8:b5:bf:f8:91:a7:04:38:32:b0:4d:c5: e7:d0:d1:48:57:0b:c1:bc:49:6f:02:1f:67:9a:f8: 05:23:32:65:31:97:af:ad:e3:27:cf:45:04:c2:f7: 6b:41:a9:60:04:97:5a:cb:08:95:29:16:44:6c:c9: 1c:74:33:9a:a1:09:e8:00:52:8b:64:db:b1:79:5c: 92:a1:eb:19:67:a5:2b:f7:b8:23:6f:2a:88:c8:92: 35:e6:c6:ee:58:96:c5:09:6b:35:54:65:09:57:cc: 16:22:f9:da:71:fe:54:0f:26:83:b3:2a:9c:1b:a6: a7:60:01:2e:d4:e2:2c:a2:af:c6:61:02:56:7b:f5: 71:0b:9f:87:7c:26:e4:3e:7f:3f:18:b1:44:63:96: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F1:2B:D5:78:4B:FC:1F:91:E8:AD:7E:2B:69:B3:71:12:4F:78:21 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7e:fc:0a:25:00:79:69:14:d8:92:5a:39:70:a5:9f:4e:1d: 74:80:5d:b0:0d:db:5c:30:ca:16:59:94:6b:19:3f:bf:b5:a8: 38:04:5c:6c:a4:06:7f:ae:25:91:55:06:44:86:a2:d4:97:70: 28:76:e9:11:c9:9b:41:ea:89:87:c2:f9:20:43:6d:3b:fe:e3: 71:92:e3:fb:bf:95:e6:05:ec:b3:68:15:57:66:4e:4d:a9:2a: e5:b1:23:42:50:ba:3c:2f:4e:78:0c:47:3c:fe:e8:a2:6c:49: 6c:c7:75:e7:ff:f3:21:aa:54:96:5a:82:28:bc:6b:f2:d3:d2: a4:38:93:3c:d8:7d:65:44:ec:40:28:44:3a:a4:e4:07:ef:4d: 6e:b1:6b:1b:36:88:ec:38:99:38:6d:f9:43:da:01:78:2b:06: 02:43:57:e8:9b:22:cb:c9:06:b2:3c:bd:45:27:ff:8a:a3:ad: 18:60:91:37:41:1c:94:3d:89:7f:f8:06:16:50:32:2c:ee:35: 8b:41:02:d0:a3:fd:11:8d:32:dd:b5:f4:86:84:92:9c:f1:e0: ef:bf:c3:1b:61:c3:39:58:f5:21:c6:50:ae:f4:6b:2d:f3:c7: 23:24:4f:3b:d2:39:6f:03:e2:0f:0b:3a:f8:09:d1:9a:64:a9: 7a:9b:0b:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHagxBqRy3TIQIj++jrVHfNu7qnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTA2MjkwNjE1NTlaFw0yNTA3MDIxNzEzNTlaMDMxMTAvBgNV BAMTKDhCRjEyQkQ1Nzg0QkZDMUY5MUU4QUQ3RTJCNjlCMzcxMTI0Rjc4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+S1MDu+4XIQdh/YbrTmLxqjRF stMgjO4jVKjbuG5NRgfetvZv+yr7KMIpIrXIFiI+G7DhYunkEte8PWefygseltaH llWijkz/Yjw7fkH+yHXi0BX/KvwNHaMnQpisBIac8z98LI1SPO7jpKi1v/iRpwQ4 MrBNxefQ0UhXC8G8SW8CH2ea+AUjMmUxl6+t4yfPRQTC92tBqWAEl1rLCJUpFkRs yRx0M5qhCegAUotk27F5XJKh6xlnpSv3uCNvKojIkjXmxu5YlsUJazVUZQlXzBYi +dpx/lQPJoOzKpwbpqdgAS7U4iyir8ZhAlZ79XELn4d8JuQ+fz8YsURjlu8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/Er1XhL/B+R6K1+K2mzcRJPeCEwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN+/AolAHlpFNiSWjlwpZ9OHXSAXbAN21ww yhZZlGsZP7+1qDgEXGykBn+uJZFVBkSGotSXcCh26RHJm0HqiYfC+SBDbTv+43GS 4/u/leYF7LNoFVdmTk2pKuWxI0JQujwvTngMRzz+6KJsSWzHdef/8yGqVJZagii8 a/LT0qQ4kzzYfWVE7EAoRDqk5AfvTW6xaxs2iOw4mTht+UPaAXgrBgJDV+ibIsvJ BrI8vUUn/4qjrRhgkTdBHJQ9iX/4BhZQMizuNYtBAtCj/RGNMt219IaEkpzx4O+/ wxthwzlY9SHGUK70ay3zxyMkTzvSOW8D4g8LOvgJ0ZpkqXqbCwU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:33 2025 by rpki-client