$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: q1JwPurnOfErjJ0JDR96CTDDsYWFvlMpBuDI+jDm1iE= Subject key identifier: D4:0F:49:8D:26:C9:23:1D:F9:9E:7A:3F:72:51:64:7C:97:A0:1A:00 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 0C535E60C3890D349B43E69F2C744C0EEF8166B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: 57 Signing time: Mon 30 Jun 2025 08:52:19 +0000 Manifest this update: Mon 30 Jun 2025 08:47:19 +0000 Manifest next update: Thu 03 Jul 2025 19:52:19 +0000 Files and hashes: 1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: 6Gg/XqjVPykysaF1Jj0WyAr8mENlPWghRUdU3hkPjVs=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:53:5e:60:c3:89:0d:34:9b:43:e6:9f:2c:74:4c:0e:ef:81:66:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Jun 30 08:47:19 2025 GMT Not After : Jul 3 19:52:19 2025 GMT Subject: CN=D40F498D26C9231DF99E7A3F7251647C97A01A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:4b:bb:56:93:05:e7:46:c1:d5:0f:3a:ef: ae:8e:96:10:4a:d2:94:21:48:c6:28:14:e9:5b:47: 07:36:e3:8f:68:8a:ee:dc:45:bf:f4:f0:f5:47:cf: ff:e9:d8:d2:bc:3c:08:a7:71:4e:f3:7b:4a:a0:fe: fb:28:51:27:cb:49:12:cb:06:cf:50:41:51:b8:50: 14:35:05:02:54:38:68:ec:70:c8:f5:d0:df:4f:13: 20:f0:32:62:99:29:35:3f:14:52:f3:9d:f8:f4:92: b9:5b:4d:ad:3a:50:3a:53:eb:5a:6f:cc:17:9a:09: c7:5d:f0:8d:a7:f4:d1:49:7c:9a:02:d7:70:70:56: 68:af:80:00:0d:8b:ec:f5:d0:7f:9c:71:b6:ea:95: 39:6c:90:5d:a4:b6:38:69:24:68:f3:db:d1:21:48: e5:4c:cd:56:74:3b:3c:aa:a1:54:22:b3:0c:c7:a2: f0:e4:14:ed:97:bd:87:e6:d9:02:44:70:37:72:5c: 29:6d:f7:86:0b:15:f3:69:97:d6:88:6b:bd:1c:99: 55:12:7e:42:cd:ce:99:48:94:d4:1f:1b:3d:0b:1d: 61:ac:66:e6:49:78:f4:b2:a4:ef:74:53:37:6b:ba: fa:bc:14:a9:05:ba:e3:c1:57:b7:48:3f:8d:f9:85: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:49:8D:26:C9:23:1D:F9:9E:7A:3F:72:51:64:7C:97:A0:1A:00 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:82:1f:e1:33:72:08:e3:13:00:1e:58:6b:96:99:f1:2f:27: 3f:87:6a:72:f9:84:60:3c:7a:87:f2:b0:47:4f:af:9f:c5:90: 4d:07:98:4b:27:87:2a:a6:5d:2e:e3:e6:2b:50:85:91:27:49: 85:02:f0:b3:75:d0:6e:b6:25:a5:45:f7:37:c9:09:d2:24:33: d8:86:9d:93:c3:2a:e9:7c:f7:35:88:5d:2f:2a:06:e1:fe:ab: c3:6b:c5:07:49:e3:32:c2:b9:6a:cf:74:c5:c6:a7:d6:b4:f7: 56:12:4a:b8:04:6b:82:d0:ff:09:ec:13:d1:ea:4a:6d:73:3b: da:91:5b:41:20:09:be:07:7d:22:19:34:c2:c9:21:0c:cf:9d: 05:1a:20:42:51:70:96:83:fc:1a:b3:0f:2e:e6:b3:fd:b6:8b: 66:5e:6a:b8:59:53:b6:0d:3a:b5:f9:84:62:80:43:0d:90:57: 2b:ce:a9:60:99:57:91:e4:4e:27:32:db:dc:ab:65:88:c3:00: e1:8a:7f:c2:93:66:b4:b1:9b:56:4f:07:04:8f:37:55:62:c5: 9a:c1:96:98:f9:f5:1f:8b:05:ad:f7:98:37:c5:51:51:ec:1b: 17:5a:f2:3b:19:86:ba:70:b1:0d:dd:33:3c:a7:53:72:c2:fe: a8:cc:ff:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFNeYMOJDTSbQ+afLHRMDu+BZrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTA2MzAwODQ3MTlaFw0yNTA3MDMxOTUyMTlaMDMxMTAvBgNV BAMTKEQ0MEY0OThEMjZDOTIzMURGOTlFN0EzRjcyNTE2NDdDOTdBMDFBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkku7VpMF50bB1Q86766OlhBK 0pQhSMYoFOlbRwc2449oiu7cRb/08PVHz//p2NK8PAincU7ze0qg/vsoUSfLSRLL Bs9QQVG4UBQ1BQJUOGjscMj10N9PEyDwMmKZKTU/FFLznfj0krlbTa06UDpT61pv zBeaCcdd8I2n9NFJfJoC13BwVmivgAANi+z10H+ccbbqlTlskF2ktjhpJGjz29Eh SOVMzVZ0OzyqoVQiswzHovDkFO2XvYfm2QJEcDdyXClt94YLFfNpl9aIa70cmVUS fkLNzplIlNQfGz0LHWGsZuZJePSypO90Uzdruvq8FKkFuuPBV7dIP435hUX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1A9JjSbJIx35nno/clFkfJegGgAwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiCH+EzcgjjEwAeWGuWmfEvJz+HanL5hGA8 eofysEdPr5/FkE0HmEsnhyqmXS7j5itQhZEnSYUC8LN10G62JaVF9zfJCdIkM9iG nZPDKul89zWIXS8qBuH+q8NrxQdJ4zLCuWrPdMXGp9a091YSSrgEa4LQ/wnsE9Hq Sm1zO9qRW0EgCb4HfSIZNMLJIQzPnQUaIEJRcJaD/BqzDy7ms/22i2ZearhZU7YN OrX5hGKAQw2QVyvOqWCZV5HkTicy29yrZYjDAOGKf8KTZrSxm1ZPBwSPN1VixZrB lpj59R+LBa33mDfFUVHsGxda8jsZhrpwsQ3dMzynU3LC/qjM/xg= -----END CERTIFICATE-----Generated at Wed Jul 2 04:08:42 2025 by rpki-client