$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: v66PlC1ofVGw5ugJwMAYIqm+p701jxrHO3EqFi9vHTo= Subject key identifier: 54:CA:A4:33:53:F0:44:03:01:65:C8:BA:4A:37:4E:96:3E:8C:4F:00 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 1372841DA9A97009754A0CDA495AD5D3C25797BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 010A Signing time: Thu 03 Jul 2025 04:02:15 +0000 Manifest this update: Thu 03 Jul 2025 03:57:15 +0000 Manifest next update: Sun 06 Jul 2025 13:19:15 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: O4DpGVN8LqoizWtZBMnxs1vxAR97PKz8rAHYKOHMPwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 13:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:72:84:1d:a9:a9:70:09:75:4a:0c:da:49:5a:d5:d3:c2:57:97:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Jul 3 03:57:15 2025 GMT Not After : Jul 6 13:19:15 2025 GMT Subject: CN=54CAA43353F044030165C8BA4A374E963E8C4F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:74:ec:0e:58:30:09:23:b1:dd:a0:db:72:f7: 98:e5:e3:89:87:d4:ac:7d:fd:24:7c:7a:69:05:43: bd:a1:a2:36:95:1d:f5:12:05:b8:5d:f6:b7:3e:94: de:09:96:e7:85:96:ed:4a:b7:fb:38:79:78:31:40: b7:26:19:9f:dd:1d:57:5e:27:91:8f:aa:17:cb:57: 96:57:9a:2a:53:fa:29:0c:80:08:07:c5:a1:eb:86: 65:d2:d1:6e:eb:fa:0c:fc:25:eb:e8:34:b2:0b:26: 87:67:66:f7:ed:13:28:58:ef:de:29:c1:15:fd:0f: 04:2f:1f:60:1d:76:79:5d:ca:d7:aa:f5:35:1a:87: 32:15:1f:de:12:79:f4:04:89:22:05:1a:80:12:f0: 35:25:24:1d:4a:7c:cd:0b:5f:6b:0f:19:c6:9f:59: f8:f5:dd:94:f7:06:f4:59:70:5c:86:56:4c:77:d5: 82:67:ec:ab:8a:21:f8:1b:94:e1:63:68:fa:79:86: 7e:a1:41:b3:db:77:58:9b:20:52:91:5f:82:1d:19: de:19:78:59:77:cb:1f:f0:e5:cb:17:34:50:d0:53: ee:43:54:53:d0:0e:a6:62:df:4a:33:e7:c2:21:0c: 65:1d:aa:68:3f:2e:a4:1a:51:d3:9a:73:5a:53:44: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:A4:33:53:F0:44:03:01:65:C8:BA:4A:37:4E:96:3E:8C:4F:00 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:23:e7:5d:12:0a:6a:20:ca:3a:1a:2d:51:4e:4a:dd:d8:28: 8d:40:58:27:fd:17:62:82:b2:f7:9e:b8:6c:25:ba:c0:67:5b: 09:b0:0c:08:4a:22:93:cf:ab:61:e0:cf:99:69:2c:f0:c0:ec: 51:90:b4:97:74:e8:9d:59:d1:4b:15:91:ba:92:36:00:e6:ae: f2:7b:21:6e:99:6b:73:3c:13:12:31:bb:d7:6a:4a:d0:b0:5f: a9:b0:8b:84:94:03:33:9b:2d:b3:48:e1:65:a9:51:ec:f5:00: 78:03:db:a0:fe:27:0d:ef:22:1b:b2:57:ef:f6:7f:e6:f9:bc: a3:23:3f:af:12:2f:f6:a3:f0:f7:96:d9:6b:12:ab:cf:61:b8: b0:7f:ae:7b:35:09:69:47:6e:96:26:77:de:f5:fc:8e:2c:82: 3a:82:6b:8f:88:9e:f4:14:77:eb:45:8b:dc:24:54:60:58:4d: 82:5d:d9:9e:32:01:2c:33:18:30:52:1a:b9:55:aa:50:b8:db: 23:59:a5:4f:3f:99:8d:b2:0e:40:1f:0e:e5:de:34:42:1d:d8: f3:89:ff:da:67:a1:eb:2d:23:aa:50:ce:6e:f5:93:99:a2:79: c4:87:32:48:65:2b:ce:0c:26:77:4f:8f:38:f0:fd:7d:78:d8: 05:f8:62:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3KEHampcAl1SgzaSVrV08JXl78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA3MDMwMzU3MTVaFw0yNTA3MDYxMzE5MTVaMDMxMTAvBgNV BAMTKDU0Q0FBNDMzNTNGMDQ0MDMwMTY1QzhCQTRBMzc0RTk2M0U4QzRGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrdOwOWDAJI7HdoNty95jl44mH 1Kx9/SR8emkFQ72hojaVHfUSBbhd9rc+lN4JlueFlu1Kt/s4eXgxQLcmGZ/dHVde J5GPqhfLV5ZXmipT+ikMgAgHxaHrhmXS0W7r+gz8JevoNLILJodnZvftEyhY794p wRX9DwQvH2Addnldyteq9TUahzIVH94SefQEiSIFGoAS8DUlJB1KfM0LX2sPGcaf Wfj13ZT3BvRZcFyGVkx31YJn7KuKIfgblOFjaPp5hn6hQbPbd1ibIFKRX4IdGd4Z eFl3yx/w5csXNFDQU+5DVFPQDqZi30oz58IhDGUdqmg/LqQaUdOac1pTRGq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVMqkM1PwRAMBZci6SjdOlj6MTwAwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUj510SCmogyjoaLVFOSt3YKI1AWCf9F2KC sveeuGwlusBnWwmwDAhKIpPPq2Hgz5lpLPDA7FGQtJd06J1Z0UsVkbqSNgDmrvJ7 IW6Za3M8ExIxu9dqStCwX6mwi4SUAzObLbNI4WWpUez1AHgD26D+Jw3vIhuyV+/2 f+b5vKMjP68SL/aj8PeW2WsSq89huLB/rns1CWlHbpYmd971/I4sgjqCa4+InvQU d+tFi9wkVGBYTYJd2Z4yASwzGDBSGrlVqlC42yNZpU8/mY2yDkAfDuXeNEId2POJ /9pnoestI6pQzm71k5miecSHMkhlK84MJndPjzjw/X142AX4YkA= -----END CERTIFICATE-----Generated at Fri Jul 4 17:51:37 2025 by rpki-client