$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: 4jCznvfb2Apoam8iVzuZx28cWL0rwb+McXl1rgomKG8= Subject key identifier: 94:64:48:0E:11:D8:54:65:82:78:AB:F2:A1:E5:64:12:AF:91:B4:9B Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 37ED0DB060F86A12E43DD9E8D138404CAF84C2A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01DE Signing time: Sat 28 Jun 2025 09:02:08 +0000 Manifest this update: Sat 28 Jun 2025 08:57:08 +0000 Manifest next update: Tue 01 Jul 2025 15:55:08 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: loGSObqLQ/akQwSRUkHdT8uAROYeUokKTnp2r0f+a5c=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ed:0d:b0:60:f8:6a:12:e4:3d:d9:e8:d1:38:40:4c:af:84:c2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Jun 28 08:57:08 2025 GMT Not After : Jul 1 15:55:08 2025 GMT Subject: CN=9464480E11D854658278ABF2A1E56412AF91B49B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:20:19:79:29:5c:13:3c:46:37:01:ce:eb: d0:99:60:20:ef:2c:d0:96:74:05:35:d6:a8:15:ef: 4d:85:70:f5:95:1b:d7:53:83:63:79:3a:69:13:0a: 72:38:4e:51:cd:74:77:e9:66:b1:32:55:35:4b:1b: c9:28:35:5b:76:6f:38:9a:e3:e0:88:72:90:b6:d4: 35:fc:e6:41:b2:84:1b:fb:ef:73:43:61:af:a4:51: 6d:ae:fc:1b:fa:07:54:1d:34:0f:a0:b4:ac:ec:db: 71:e3:53:01:2d:b2:7a:7b:76:c0:5d:5a:85:e5:80: 48:3d:6e:85:2f:07:24:25:6d:64:5e:c3:6b:3f:9c: 66:81:b8:46:6c:2d:6e:83:2c:cb:10:95:67:1d:db: 5d:05:b0:6d:bb:0b:89:a9:97:06:bc:2f:b1:64:f5: bb:6c:4f:cb:ca:4d:73:eb:f8:fd:69:4f:fd:e4:c8: 0f:c8:da:56:bc:de:87:61:de:82:19:16:dc:54:22: 76:0a:ab:1f:74:a2:52:d5:bc:7b:35:85:79:11:0d: 06:43:1a:64:03:6e:93:aa:d0:1d:cb:d6:47:bf:3e: d1:32:c5:f7:06:33:65:1c:46:43:d0:96:ef:5d:61: 05:44:d4:50:da:97:77:7f:c4:e8:ed:12:20:8a:7c: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:64:48:0E:11:D8:54:65:82:78:AB:F2:A1:E5:64:12:AF:91:B4:9B X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d1:f4:2e:7d:2b:b5:d0:c7:b0:82:31:90:02:e8:02:8b:ff: dd:05:bc:15:8f:cf:ef:82:fd:d6:08:87:a4:08:b8:57:9d:18: 8e:03:ff:ef:52:d5:91:58:31:f5:88:d3:63:94:72:4b:82:a8: a0:02:14:f5:23:2b:c9:62:64:f5:67:07:80:6d:b5:0a:eb:3a: f5:15:16:de:2b:1c:c8:f4:16:b6:f5:c6:7b:f2:da:21:9a:eb: 46:17:2c:8e:87:6d:4c:d7:72:43:69:0e:bf:d0:7f:40:a6:d5: 9b:e9:3d:e7:13:4d:69:80:34:b0:a8:f4:f8:b5:37:ba:5d:56: 9e:25:c3:fe:ba:58:8f:da:00:95:32:73:a7:bb:1b:36:5a:b8: cc:3f:6a:c2:68:24:27:c2:d2:12:4c:d8:c9:ef:2b:43:95:a4: dd:75:31:5f:d2:b5:92:36:68:93:ab:24:ff:57:f1:5c:2f:d6: 4c:e9:1c:3c:3b:7c:f5:ef:70:ec:04:27:98:16:b9:d9:e7:27: ed:55:07:e4:98:af:f3:cc:33:a3:ee:0f:a5:80:45:3f:03:e4: fc:52:47:33:db:56:46:02:8c:98:a6:b8:01:6e:a5:45:9e:ac: c1:4c:01:73:3b:11:87:ee:f9:3e:95:54:26:90:10:ae:0f:d2: 57:3d:35:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+0NsGD4ahLkPdno0ThATK+EwqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA2MjgwODU3MDhaFw0yNTA3MDExNTU1MDhaMDMxMTAvBgNV BAMTKDk0NjQ0ODBFMTFEODU0NjU4Mjc4QUJGMkExRTU2NDEyQUY5MUI0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqiAZeSlcEzxGNwHO69CZYCDv LNCWdAU11qgV702FcPWVG9dTg2N5OmkTCnI4TlHNdHfpZrEyVTVLG8koNVt2bzia 4+CIcpC21DX85kGyhBv773NDYa+kUW2u/Bv6B1QdNA+gtKzs23HjUwEtsnp7dsBd WoXlgEg9boUvByQlbWRew2s/nGaBuEZsLW6DLMsQlWcd210FsG27C4mplwa8L7Fk 9btsT8vKTXPr+P1pT/3kyA/I2la83odh3oIZFtxUInYKqx90olLVvHs1hXkRDQZD GmQDbpOq0B3L1ke/PtEyxfcGM2UcRkPQlu9dYQVE1FDal3d/xOjtEiCKfFj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGRIDhHYVGWCeKvyoeVkEq+RtJswHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHR9C59K7XQx7CCMZAC6AKL/90FvBWPz++C /dYIh6QIuFedGI4D/+9S1ZFYMfWI02OUckuCqKACFPUjK8liZPVnB4BttQrrOvUV Ft4rHMj0Frb1xnvy2iGa60YXLI6HbUzXckNpDr/Qf0Cm1ZvpPecTTWmANLCo9Pi1 N7pdVp4lw/66WI/aAJUyc6e7GzZauMw/asJoJCfC0hJM2MnvK0OVpN11MV/StZI2 aJOrJP9X8Vwv1kzpHDw7fPXvcOwEJ5gWudnnJ+1VB+SYr/PMM6PuD6WART8D5PxS RzPbVkYCjJimuAFupUWerMFMAXM7EYfu+T6VVCaQEK4P0lc9Naw= -----END CERTIFICATE-----Generated at Mon Jun 30 07:35:07 2025 by rpki-client