$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: g1SPwhtcFVXmevgRG+j4498SoEhUTpwwD6Eij5xNb90= Subject key identifier: 9B:F2:20:1B:E4:50:F2:5A:A6:5B:A2:D8:DA:DD:CA:50:40:7B:7B:3A Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 2F4386123C033A4C4E19CC210362D49EE6367518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 020A Signing time: Sun 29 Jun 2025 00:41:40 +0000 Manifest this update: Sun 29 Jun 2025 00:36:40 +0000 Manifest next update: Wed 02 Jul 2025 02:44:40 +0000 Files and hashes: 1: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 2: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 3: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: HztNjcFKLg0fA6Vn5yjGlj6MCddkRNSD9cPHRpD5gAk=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 5: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 6: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:43:86:12:3c:03:3a:4c:4e:19:cc:21:03:62:d4:9e:e6:36:75:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Jun 29 00:36:40 2025 GMT Not After : Jul 2 02:44:40 2025 GMT Subject: CN=9BF2201BE450F25AA65BA2D8DADDCA50407B7B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:03:e6:0f:bd:96:c4:88:2d:fd:6e:d1:ee: 9c:a2:d6:ee:f8:f2:38:2e:91:b4:af:27:27:f6:d4: a9:2f:82:3e:a2:01:2c:09:7e:cb:46:09:69:2c:62: 82:94:ee:de:42:15:d2:0e:cf:38:71:b3:7f:be:88: ed:62:22:58:5e:a3:59:0d:5e:f6:69:cc:b1:23:91: 68:cf:13:9a:33:d6:4d:99:b6:10:b3:00:fb:bd:5a: 72:c8:76:f1:33:97:49:a2:82:19:cc:d0:e4:81:ec: a0:43:c8:3d:3f:05:63:82:ac:15:23:2a:4f:61:29: 0d:3e:f7:88:d8:8c:ca:b9:35:99:34:0f:68:35:5f: 5e:11:62:71:e0:fb:d5:8d:6c:c4:98:be:be:08:fb: 3d:37:31:b9:4a:76:b8:8a:95:f8:d4:8d:aa:d4:84: 5c:55:c1:3d:1c:e0:5b:12:e9:d2:76:28:ae:0a:3e: 0e:e4:60:b6:52:e3:7d:6a:5c:1e:f0:11:ae:e2:fe: 09:76:f7:bd:16:4d:e4:c5:be:bc:3c:b4:d4:39:3d: f5:8c:f6:09:3a:a6:55:75:ae:cb:00:00:36:74:d5: 0e:be:74:88:0a:be:03:b1:08:d5:12:bc:4f:80:9a: ec:30:60:0e:60:ab:ab:7c:01:60:b5:e3:71:11:3c: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:20:1B:E4:50:F2:5A:A6:5B:A2:D8:DA:DD:CA:50:40:7B:7B:3A X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:75:66:55:5f:3d:3a:f8:b2:4a:f2:6c:8b:9c:db:36:e8:09: 95:4d:68:11:de:e3:92:37:6b:65:d1:4d:ad:a3:a8:b9:46:b9: 4f:70:04:2c:5a:05:de:3e:4a:a6:6d:85:90:63:43:8d:a8:a9: 65:f5:fc:c0:d3:76:1f:8a:a5:8f:ad:38:84:8c:a7:b7:02:30: eb:f8:45:a0:9a:49:f1:a1:6f:96:ce:59:8f:cf:00:83:06:97: 67:06:b3:37:ee:47:d0:05:55:a0:d1:60:d5:c1:da:50:1e:3e: 6f:ec:0b:2d:53:28:97:db:8d:e4:17:bb:e3:5e:b8:83:ac:e3: 06:70:9b:69:2d:e6:8a:c5:d4:bb:f1:52:b7:0e:82:b5:f2:cf: 86:93:01:f8:fb:6f:ad:0e:ad:ac:96:54:e6:06:65:3c:e6:cd: 29:a2:0e:f3:b6:08:63:d6:9d:e6:21:d7:6e:f8:1c:0e:c0:09: 7a:89:33:6f:53:2a:e5:fc:c8:c0:0b:50:51:d0:8f:4c:22:e0: e7:8a:dd:10:59:f1:c5:a9:2e:34:5b:18:3f:95:8b:a3:31:e7: 05:b6:d8:ba:34:61:af:81:fb:72:9d:6d:8d:c1:d9:7f:bd:0d: dd:be:66:1b:1b:6a:f4:0c:5b:00:8c:8d:1a:d7:bb:38:90:2d: 53:8c:52:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0OGEjwDOkxOGcwhA2LUnuY2dRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTA2MjkwMDM2NDBaFw0yNTA3MDIwMjQ0NDBaMDMxMTAvBgNV BAMTKDlCRjIyMDFCRTQ1MEYyNUFBNjVCQTJEOERBRERDQTUwNDA3QjdCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0QPmD72WxIgt/W7R7pyi1u74 8jgukbSvJyf21Kkvgj6iASwJfstGCWksYoKU7t5CFdIOzzhxs3++iO1iIlheo1kN XvZpzLEjkWjPE5oz1k2ZthCzAPu9WnLIdvEzl0mighnM0OSB7KBDyD0/BWOCrBUj Kk9hKQ0+94jYjMq5NZk0D2g1X14RYnHg+9WNbMSYvr4I+z03MblKdriKlfjUjarU hFxVwT0c4FsS6dJ2KK4KPg7kYLZS431qXB7wEa7i/gl2970WTeTFvrw8tNQ5PfWM 9gk6plV1rssAADZ01Q6+dIgKvgOxCNUSvE+AmuwwYA5gq6t8AWC143ERPLVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/IgG+RQ8lqmW6LY2t3KUEB7ezowHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABp1ZlVfPTr4skrybIuc2zboCZVNaBHe45I3 a2XRTa2jqLlGuU9wBCxaBd4+SqZthZBjQ42oqWX1/MDTdh+KpY+tOISMp7cCMOv4 RaCaSfGhb5bOWY/PAIMGl2cGszfuR9AFVaDRYNXB2lAePm/sCy1TKJfbjeQXu+Ne uIOs4wZwm2kt5orF1LvxUrcOgrXyz4aTAfj7b60OrayWVOYGZTzmzSmiDvO2CGPW neYh1274HA7ACXqJM29TKuX8yMALUFHQj0wi4OeK3RBZ8cWpLjRbGD+Vi6Mx5wW2 2Lo0Ya+B+3KdbY3B2X+9Dd2+ZhsbavQMWwCMjRrXuziQLVOMUtw= -----END CERTIFICATE-----Generated at Mon Jun 30 21:52:19 2025 by rpki-client