$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: oLdYE1pMv3Nj7CK/7Jeq04w0q5rl/hbMpX8nt367Ze0= Subject key identifier: 96:06:42:01:C7:E6:92:19:E0:AD:50:23:A2:A2:BF:37:92:90:EB:68 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 7518ACDB1A41CD2C7E01636AAAA5E2361063955F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: B8 Signing time: Sat 28 Jun 2025 19:31:22 +0000 Manifest this update: Sat 28 Jun 2025 19:26:22 +0000 Manifest next update: Wed 02 Jul 2025 07:01:22 +0000 Files and hashes: 1: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 2: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: EDmgc8Z2wbkYNqkvwlPF/d2Gslk1MMP0zQ/swfgbG1I=) 3: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 4: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:18:ac:db:1a:41:cd:2c:7e:01:63:6a:aa:a5:e2:36:10:63:95:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Jun 28 19:26:22 2025 GMT Not After : Jul 2 07:01:22 2025 GMT Subject: CN=96064201C7E69219E0AD5023A2A2BF379290EB68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:44:d8:ab:57:ab:fa:cc:72:c8:2b:16:71: 04:ed:87:79:e2:29:63:ae:eb:69:b3:df:6d:62:79: 49:1e:45:96:6a:d1:1e:1b:ee:6d:03:c0:75:ca:a3: 40:e9:fe:48:4a:b1:7e:8b:31:5b:0d:84:b5:01:f1: a3:d8:9b:4a:8a:ca:4b:cf:0c:00:22:d5:45:0c:5f: 84:bb:32:19:42:7c:10:7e:a9:5a:f6:88:e6:11:44: 4d:36:36:85:23:72:1b:4b:8b:b0:d0:f9:59:e2:8c: 6f:f0:4e:39:a9:ef:53:52:0d:67:77:b9:0c:2e:b3: 5e:a2:7f:24:83:fd:b5:ce:71:94:df:8e:d7:d6:f5: 8c:24:bd:7b:a7:36:84:0b:5f:0f:12:61:4d:74:7f: a6:7c:6a:aa:c8:14:e7:d3:b3:c9:03:9d:64:8c:6d: 28:cc:3b:4a:08:32:e2:f5:f7:bf:5d:5e:70:c9:e7: 17:15:e1:f8:fb:74:5d:3c:e5:50:91:74:39:e2:ad: c9:ae:c0:c5:e0:d2:7d:44:b8:5b:74:3c:de:4f:9a: 31:6b:09:35:d9:eb:ad:4b:78:65:48:ba:40:aa:15: 01:1d:50:ed:ad:1a:05:76:99:23:5a:2d:1c:cc:9e: 2a:60:57:6e:48:d3:71:5f:b6:c7:89:9e:ed:10:ef: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:06:42:01:C7:E6:92:19:E0:AD:50:23:A2:A2:BF:37:92:90:EB:68 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8e:01:64:c5:a3:4a:2b:31:fa:20:f0:ec:a1:f0:df:d4:60: 2c:b3:13:50:dd:ff:0a:9c:6e:51:29:a7:f3:60:8b:db:54:ce: e3:b4:b5:f8:f2:dd:a8:84:88:b0:c3:05:f8:10:e4:b5:7a:00: d2:8a:58:76:a5:90:1f:62:0b:1a:a0:19:97:df:0b:7d:6b:d3: 60:4a:64:cb:58:ca:2b:99:83:74:c3:b0:f8:57:e6:72:7b:ec: 57:6c:23:fd:f4:77:cb:7c:4e:ac:61:d4:c5:ed:cd:aa:ee:93: c8:0a:7a:ae:82:4f:f4:7a:4e:d6:0b:8e:3b:b1:10:45:32:39: 46:c6:fc:17:b1:e0:83:93:45:88:8a:8f:6d:4d:e2:dd:d9:2e: eb:6e:7b:ff:18:8b:82:ea:53:5d:ab:24:a0:5e:cb:ca:5d:0b: 04:46:f7:5e:01:b2:0b:6a:70:19:94:16:8e:74:fd:a2:01:c0: 3f:8b:db:6b:63:55:8b:7f:df:80:79:60:0f:9b:a9:06:f5:4f: e8:3b:42:a6:13:d6:cd:b0:11:60:05:63:97:a3:91:ec:76:f0: 90:8c:ce:84:65:3f:86:a3:4b:71:4b:56:2a:f3:4e:cc:d2:4c: 05:45:57:06:e0:2d:1f:72:01:82:e0:3a:b6:0e:1c:57:c9:4f: 70:8e:00:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRis2xpBzSx+AWNqqqXiNhBjlV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTA2MjgxOTI2MjJaFw0yNTA3MDIwNzAxMjJaMDMxMTAvBgNV BAMTKDk2MDY0MjAxQzdFNjkyMTlFMEFENTAyM0EyQTJCRjM3OTI5MEVCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM90TYq1er+sxyyCsWcQTth3ni KWOu62mz321ieUkeRZZq0R4b7m0DwHXKo0Dp/khKsX6LMVsNhLUB8aPYm0qKykvP DAAi1UUMX4S7MhlCfBB+qVr2iOYRRE02NoUjchtLi7DQ+VnijG/wTjmp71NSDWd3 uQwus16ifySD/bXOcZTfjtfW9YwkvXunNoQLXw8SYU10f6Z8aqrIFOfTs8kDnWSM bSjMO0oIMuL1979dXnDJ5xcV4fj7dF085VCRdDnircmuwMXg0n1EuFt0PN5PmjFr CTXZ661LeGVIukCqFQEdUO2tGgV2mSNaLRzMnipgV25I03FftseJnu0Q77n5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgZCAcfmkhngrVAjoqK/N5KQ62gwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+OAWTFo0orMfog8Oyh8N/UYCyzE1Dd/wqc blEpp/Ngi9tUzuO0tfjy3aiEiLDDBfgQ5LV6ANKKWHalkB9iCxqgGZffC31r02BK ZMtYyiuZg3TDsPhX5nJ77FdsI/30d8t8Tqxh1MXtzaruk8gKeq6CT/R6TtYLjjux EEUyOUbG/Bex4IOTRYiKj21N4t3ZLutue/8Yi4LqU12rJKBey8pdCwRG914Bsgtq cBmUFo50/aIBwD+L22tjVYt/34B5YA+bqQb1T+g7QqYT1s2wEWAFY5ejkex28JCM zoRlP4ajS3FLVirzTszSTAVFVwbgLR9yAYLgOrYOHFfJT3COAPo= -----END CERTIFICATE-----Generated at Mon Jun 30 10:17:35 2025 by rpki-client