$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: c2fB8TeMB52RMrvW+P2yQ22NdBUdacGQbH934xmmtg4= Subject key identifier: 3E:91:B4:C4:F3:DC:A7:20:7B:8B:85:45:DB:6D:AD:8F:53:92:2F:D5 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 054ED85B2BE099E8574C2F8B65C01E9CB2753511 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 0503 Signing time: Sun 29 Jun 2025 20:10:41 +0000 Manifest this update: Sun 29 Jun 2025 20:05:41 +0000 Manifest next update: Thu 03 Jul 2025 00:03:41 +0000 Files and hashes: 1: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) 2: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) 3: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 4: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: 2WJHEohnuZnjQuo72PEOQQxRJ6bW4BO37UtFdqB/IE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4e:d8:5b:2b:e0:99:e8:57:4c:2f:8b:65:c0:1e:9c:b2:75:35:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Jun 29 20:05:41 2025 GMT Not After : Jul 3 00:03:41 2025 GMT Subject: CN=3E91B4C4F3DCA7207B8B8545DB6DAD8F53922FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:48:9c:b9:69:f2:09:0c:d5:93:8d:f8:38: 7d:5e:19:57:1c:4b:aa:9f:be:bf:60:0e:75:52:3e: 11:3e:c9:6c:7b:8e:f7:b7:cd:d0:10:17:81:e6:8b: 67:fd:41:42:08:d2:99:74:f2:4d:a3:07:85:d5:6e: 6f:08:59:af:8d:d9:2f:ea:b0:3d:91:f0:44:25:ab: 21:8d:63:8b:d3:47:4f:e1:21:9f:99:c4:7f:c1:f9: c5:f1:dd:3a:b1:0a:0b:4d:a8:f7:9a:6b:39:34:3d: c8:f5:23:06:8a:6b:df:42:9c:44:47:0f:ce:a8:32: 1a:74:88:37:f8:ed:16:9c:c6:22:19:79:5f:4b:6c: 6f:f6:92:f6:42:f4:c0:fc:df:a0:68:8b:73:b0:30: 99:d8:89:86:22:1d:7d:57:bb:fa:76:06:a9:fd:0b: 71:09:7e:3f:de:73:83:4b:be:a3:d5:e2:96:b7:91: 20:cd:0a:c5:43:c7:8a:fe:79:45:5b:d1:85:bd:3c: 84:85:02:ff:6f:75:dd:f8:c1:54:84:4c:5d:8d:71: fc:8f:5d:2e:96:16:34:b7:7c:33:42:ac:24:1e:76: ee:0f:35:ff:1b:1a:d4:ac:76:e4:eb:8d:27:be:5b: 51:53:69:11:ee:05:a3:a3:b0:b4:5d:f8:72:a9:7e: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:B4:C4:F3:DC:A7:20:7B:8B:85:45:DB:6D:AD:8F:53:92:2F:D5 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d7:a4:70:90:9a:61:4f:eb:9c:1d:c3:41:46:6b:67:9a:00: bf:7a:cf:29:1d:e1:22:3e:e9:d9:53:4c:48:a3:cf:f7:68:62: b9:b0:f4:12:b5:6a:f0:03:f7:eb:b5:71:5a:d5:bf:b6:66:9d: 50:4e:25:91:7b:bd:a7:01:d3:3b:38:57:4a:e9:b1:98:07:96: 94:ca:6f:06:ee:84:4c:8b:ad:8d:0f:b7:76:75:30:78:eb:db: 94:80:7a:ec:aa:62:bb:e6:0a:47:f2:ba:be:68:94:56:1e:c5: d5:55:5c:e9:96:fa:9d:24:e3:35:39:25:23:06:ed:e5:1d:df: 77:db:e1:8c:46:e1:ad:56:ed:ea:52:fc:f8:ea:b4:dc:fe:67: ec:9c:48:6c:b3:40:cd:81:b9:da:2d:98:86:3e:49:93:44:ab: 24:82:db:9d:81:c3:be:a7:46:d0:ac:72:ef:37:db:65:30:98: fa:98:1f:0e:c9:9b:d7:f3:ca:1c:fb:de:7a:7a:fd:76:f2:43: 01:c6:3f:ed:cc:9a:d6:d2:ea:65:95:83:e1:5a:62:f5:54:2b: dd:25:14:f9:e6:02:a5:83:f6:fc:70:a8:77:b5:02:e0:ac:4d: 51:8f:79:16:08:ab:a1:3b:a6:61:ea:b4:a2:41:ec:40:da:76: f0:6d:51:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBU7YWyvgmehXTC+LZcAenLJ1NREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA2MjkyMDA1NDFaFw0yNTA3MDMwMDAzNDFaMDMxMTAvBgNV BAMTKDNFOTFCNEM0RjNEQ0E3MjA3QjhCODU0NURCNkRBRDhGNTM5MjJGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtkicuWnyCQzVk434OH1eGVcc S6qfvr9gDnVSPhE+yWx7jve3zdAQF4Hmi2f9QUII0pl08k2jB4XVbm8IWa+N2S/q sD2R8EQlqyGNY4vTR0/hIZ+ZxH/B+cXx3TqxCgtNqPeaazk0Pcj1IwaKa99CnERH D86oMhp0iDf47RacxiIZeV9LbG/2kvZC9MD836Boi3OwMJnYiYYiHX1Xu/p2Bqn9 C3EJfj/ec4NLvqPV4pa3kSDNCsVDx4r+eUVb0YW9PISFAv9vdd34wVSETF2NcfyP XS6WFjS3fDNCrCQedu4PNf8bGtSsduTrjSe+W1FTaRHuBaOjsLRd+HKpfuMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpG0xPPcpyB7i4VF222tj1OSL9UwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPXpHCQmmFP65wdw0FGa2eaAL96zykd4SI+ 6dlTTEijz/doYrmw9BK1avAD9+u1cVrVv7ZmnVBOJZF7vacB0zs4V0rpsZgHlpTK bwbuhEyLrY0Pt3Z1MHjr25SAeuyqYrvmCkfyur5olFYexdVVXOmW+p0k4zU5JSMG 7eUd33fb4YxG4a1W7epS/PjqtNz+Z+ycSGyzQM2BudotmIY+SZNEqySC252Bw76n RtCscu8322UwmPqYHw7Jm9fzyhz73np6/XbyQwHGP+3MmtbS6mWVg+FaYvVUK90l FPnmAqWD9vxwqHe1AuCsTVGPeRYIq6E7pmHqtKJB7EDadvBtUe0= -----END CERTIFICATE-----Generated at Sun Jun 29 22:20:13 2025 by rpki-client