$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: HAtD/OR+JYVZmiQMoVZoijknOe2rJPDYWLeStnztE84= Subject key identifier: A3:E5:F7:90:B9:73:90:DF:CF:D8:C6:0C:7F:C2:4E:6C:28:40:A0:93 Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 4C1793E966AD1FC856277C8802ECF8606919C20E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 01DD Signing time: Fri 27 Jun 2025 18:10:00 +0000 Manifest this update: Fri 27 Jun 2025 18:05:00 +0000 Manifest next update: Tue 01 Jul 2025 05:30:00 +0000 Files and hashes: 1: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: Haq+0duYxx7SmAMT9zB+BA0ZBnEE1QhcP/4o/gUKAtQ=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:17:93:e9:66:ad:1f:c8:56:27:7c:88:02:ec:f8:60:69:19:c2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: Jun 27 18:05:00 2025 GMT Not After : Jul 1 05:30:00 2025 GMT Subject: CN=A3E5F790B97390DFCFD8C60C7FC24E6C2840A093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:2b:5f:98:62:80:37:d3:0b:0d:45:cd:2f: 6c:4d:9d:7d:c9:dc:8d:9b:8a:3e:b7:f1:4b:c2:9f: 48:dc:82:03:f2:ab:85:19:af:35:11:84:dd:8a:91: 77:e1:45:f8:7d:0f:a0:72:03:6e:62:0c:c6:82:1f: d0:07:3f:8c:5e:19:68:14:cc:c9:65:2c:e1:b0:6e: df:17:33:6b:60:de:f5:c4:92:25:75:64:a3:a9:9c: a9:a3:80:e5:b1:5b:93:28:cb:c4:f6:a4:ef:4e:fa: c8:01:3d:a0:bb:ff:31:d9:7f:84:68:9f:69:83:d5: 12:54:f7:b3:94:70:51:b1:20:ba:14:79:27:ec:73: fb:a0:f4:44:a9:59:1c:f3:df:e9:f0:fa:e3:75:87: 6f:17:2e:9b:7c:a3:26:de:f3:4e:48:30:b6:cd:31: a3:4b:7d:53:8f:14:d9:bf:1a:e2:12:9d:6b:38:a9: 5d:9a:c6:57:99:38:c2:57:93:d3:d7:fa:51:e4:e7: 87:b7:eb:be:2e:2f:c4:12:07:4f:20:8b:92:c7:bc: 09:4c:b3:13:2c:5f:bd:fa:c2:2f:c9:67:18:73:b1: 44:01:ee:29:17:54:d0:6f:b2:72:47:6e:d7:77:2c: 0d:80:15:f1:b8:e7:11:8f:2b:dc:1e:6e:db:de:11: 3d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:F7:90:B9:73:90:DF:CF:D8:C6:0C:7F:C2:4E:6C:28:40:A0:93 X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:60:27:33:32:6a:5e:2f:7e:bf:0b:44:97:a3:02:5e:ce:12: 46:dc:56:d0:53:42:8f:86:87:89:be:55:e9:0b:3f:a0:2b:42: b8:32:c4:de:c3:cb:8e:2f:e2:dd:16:50:31:54:c0:95:4f:d1: 49:40:61:12:45:9f:14:71:2b:3a:35:3b:e3:dd:d0:d8:8c:c1: f1:5f:8b:69:19:16:7f:4d:0e:dd:c2:fe:53:3e:f1:24:4a:42: 72:90:2a:16:81:6b:9b:aa:06:9f:61:d0:4b:91:63:84:3a:b8: 2f:c7:5c:80:e8:17:93:b2:05:da:1e:7b:f1:a6:52:b9:3f:c8: 83:e5:57:3e:06:ce:8f:c2:2f:17:df:cd:87:4f:2d:e9:54:1b: 5a:08:12:d6:ae:47:a9:d6:ff:96:25:1d:df:d9:22:d3:2b:c8: 3a:ef:3b:f1:e9:d6:f4:9b:93:43:d7:1d:1b:08:36:fe:23:bd: 9a:56:21:08:95:f9:66:e0:bb:e6:55:6b:9f:aa:87:35:6f:6b: 5d:6b:e7:ef:5d:60:cf:a3:68:a8:84:0e:10:0a:78:97:72:09: 32:5c:cb:ab:47:a1:ef:f6:76:5d:a5:41:38:41:e0:96:6b:3e: af:09:8e:65:0d:78:20:45:fa:1f:56:24:ca:b0:17:d1:aa:45: 7d:9c:8b:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBeT6WatH8hWJ3yIAuz4YGkZwg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNTA2MjcxODA1MDBaFw0yNTA3MDEwNTMwMDBaMDMxMTAvBgNV BAMTKEEzRTVGNzkwQjk3MzkwREZDRkQ4QzYwQzdGQzI0RTZDMjg0MEEwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwCtfmGKAN9MLDUXNL2xNnX3J 3I2bij638UvCn0jcggPyq4UZrzURhN2KkXfhRfh9D6ByA25iDMaCH9AHP4xeGWgU zMllLOGwbt8XM2tg3vXEkiV1ZKOpnKmjgOWxW5Moy8T2pO9O+sgBPaC7/zHZf4Ro n2mD1RJU97OUcFGxILoUeSfsc/ug9ESpWRzz3+nw+uN1h28XLpt8oybe805IMLbN MaNLfVOPFNm/GuISnWs4qV2axleZOMJXk9PX+lHk54e3674uL8QSB08gi5LHvAlM sxMsX736wi/JZxhzsUQB7ikXVNBvsnJHbtd3LA2AFfG45xGPK9webtveET0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+X3kLlzkN/P2MYMf8JObChAoJMwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBgJzMyal4vfr8LRJejAl7OEkbcVtBTQo+G h4m+VekLP6ArQrgyxN7Dy44v4t0WUDFUwJVP0UlAYRJFnxRxKzo1O+Pd0NiMwfFf i2kZFn9NDt3C/lM+8SRKQnKQKhaBa5uqBp9h0EuRY4Q6uC/HXIDoF5OyBdoee/Gm Urk/yIPlVz4Gzo/CLxffzYdPLelUG1oIEtauR6nW/5YlHd/ZItMryDrvO/Hp1vSb k0PXHRsINv4jvZpWIQiV+Wbgu+ZVa5+qhzVva11r5+9dYM+jaKiEDhAKeJdyCTJc y6tHoe/2dl2lQThB4JZrPq8JjmUNeCBF+h9WJMqwF9GqRX2ciwg= -----END CERTIFICATE-----Generated at Mon Jun 30 03:20:01 2025 by rpki-client