$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: cv8oB+frWGtuwVNTFHxXiCGWy8PxWVVJ5aioAkGnHaI= Subject key identifier: 1B:26:D8:C5:B3:DF:02:D1:1A:3C:2B:81:74:0E:3A:AA:A3:51:49:5B Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 050D9D85369D324D6992D7542E531F4225A03FA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 0184 Signing time: Sat 28 Jun 2025 20:11:06 +0000 Manifest this update: Sat 28 Jun 2025 20:06:06 +0000 Manifest next update: Tue 01 Jul 2025 21:58:06 +0000 Files and hashes: 1: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=) 2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=) 3: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: 5PVPaz/o2w+ipZZSTrjLLuAagjKjK/7F4Z/5oVv5FdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0d:9d:85:36:9d:32:4d:69:92:d7:54:2e:53:1f:42:25:a0:3f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Jun 28 20:06:06 2025 GMT Not After : Jul 1 21:58:06 2025 GMT Subject: CN=1B26D8C5B3DF02D11A3C2B81740E3AAAA351495B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:c6:f2:fa:74:1b:b7:ef:20:4f:15:30:71: fa:1a:5e:01:aa:93:cb:33:a7:da:3b:c6:ad:81:83: 12:7c:ca:8d:16:94:4d:0a:0b:16:f3:fe:ea:6d:7b: 2b:99:d3:e4:c5:03:ba:d7:9d:9b:02:07:27:ee:eb: 98:89:a2:15:de:98:2b:44:32:b8:1a:f2:7f:d6:13: 8b:5a:08:89:40:ed:c0:19:1a:31:28:84:21:ff:31: b5:a1:03:fb:ac:9a:be:08:3b:b9:b1:80:47:26:62: fd:0f:d5:3f:d4:17:25:30:8e:c7:07:d1:9b:2c:72: e6:25:b1:3d:54:1a:7d:6a:b1:31:b0:8a:88:8f:61: 49:e0:ae:f5:e2:8a:9e:b0:14:82:9f:15:81:66:f8: 54:55:95:41:8c:cf:8d:1b:de:2f:d5:95:d6:38:e4: 4d:ca:1d:5a:ca:89:df:87:df:c4:36:c7:ba:84:96: 0f:6a:63:53:88:3a:c8:78:71:45:ae:98:37:60:ff: 45:64:14:ce:8d:1e:f0:87:6e:01:70:6d:a3:d9:af: 13:35:f2:26:62:9e:8f:47:3a:3c:cf:74:01:09:30: ea:bd:d0:b9:4d:8e:e9:50:d3:2e:3c:b8:55:f6:89: 96:0d:b8:ac:86:95:66:0b:5b:05:ca:b9:de:eb:2f: 26:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:26:D8:C5:B3:DF:02:D1:1A:3C:2B:81:74:0E:3A:AA:A3:51:49:5B X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5c:fb:c6:93:14:e8:d7:d6:79:3f:2d:57:c9:99:07:d8:54: c5:d4:a0:49:45:bd:f9:0b:e0:08:3f:6e:aa:4b:4b:67:07:9f: 87:73:52:c1:1d:05:76:cc:7f:28:07:13:82:7e:27:d1:1b:34: 77:98:cc:b7:17:61:79:f0:bd:f5:db:eb:21:c3:de:61:c7:87: a9:83:a6:1c:04:98:01:57:5d:8e:1e:a5:6c:ee:f2:d3:31:1e: e1:a4:a6:4e:36:f1:89:0d:64:0f:73:80:04:d4:0c:45:42:44: 35:d5:a4:66:ee:1f:79:75:69:a0:8c:13:13:55:2e:25:cb:fc: ab:b9:a1:96:d8:c4:52:ec:80:ef:ea:2f:da:f0:50:d6:d7:48: 3f:e4:b2:de:28:1c:9a:cf:d3:74:47:d4:f3:46:86:1a:44:5e: 6b:a7:9a:03:55:4b:73:75:e6:e8:45:31:d9:28:da:42:dc:fd: 0a:50:bf:ff:2a:70:2c:02:4c:0e:0f:de:68:7a:d3:2d:60:e2: af:df:d9:4f:cc:1d:5d:af:b7:3f:c1:56:9a:9f:a7:2f:cf:20: 0f:7f:44:22:39:33:99:be:41:46:8a:b5:0e:f5:5f:8b:72:71: ff:ef:b5:29:4a:b1:66:94:c7:26:ff:d6:22:23:30:24:d1:fa: d8:84:59:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQ2dhTadMk1pktdULlMfQiWgP6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTA2MjgyMDA2MDZaFw0yNTA3MDEyMTU4MDZaMDMxMTAvBgNV BAMTKDFCMjZEOEM1QjNERjAyRDExQTNDMkI4MTc0MEUzQUFBQTM1MTQ5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI08by+nQbt+8gTxUwcfoaXgGq k8szp9o7xq2BgxJ8yo0WlE0KCxbz/upteyuZ0+TFA7rXnZsCByfu65iJohXemCtE Mrga8n/WE4taCIlA7cAZGjEohCH/MbWhA/usmr4IO7mxgEcmYv0P1T/UFyUwjscH 0ZsscuYlsT1UGn1qsTGwioiPYUngrvXiip6wFIKfFYFm+FRVlUGMz40b3i/VldY4 5E3KHVrKid+H38Q2x7qElg9qY1OIOsh4cUWumDdg/0VkFM6NHvCHbgFwbaPZrxM1 8iZino9HOjzPdAEJMOq90LlNjulQ0y48uFX2iZYNuKyGlWYLWwXKud7rLyaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGybYxbPfAtEaPCuBdA46qqNRSVswHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxc+8aTFOjX1nk/LVfJmQfYVMXUoElFvfkL 4Ag/bqpLS2cHn4dzUsEdBXbMfygHE4J+J9EbNHeYzLcXYXnwvfXb6yHD3mHHh6mD phwEmAFXXY4epWzu8tMxHuGkpk428YkNZA9zgATUDEVCRDXVpGbuH3l1aaCMExNV LiXL/Ku5oZbYxFLsgO/qL9rwUNbXSD/kst4oHJrP03RH1PNGhhpEXmunmgNVS3N1 5uhFMdko2kLc/QpQv/8qcCwCTA4P3mh60y1g4q/f2U/MHV2vtz/BVpqfpy/PIA9/ RCI5M5m+QUaKtQ71X4tycf/vtSlKsWaUxyb/1iIjMCTR+tiEWYA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:49 2025 by rpki-client