$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: F9FBNK6+w0QtMaGq86vRgCqdRlwPeIweSucdFrLaR30= Subject key identifier: 5A:6E:FE:99:51:B1:D2:37:C9:33:CC:C3:46:3B:08:0F:7D:06:80:FB Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 771E29D9AE022E406568989D1478FE20AD4DA612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 016A Signing time: Sun 29 Jun 2025 14:21:46 +0000 Manifest this update: Sun 29 Jun 2025 14:16:46 +0000 Manifest next update: Wed 02 Jul 2025 19:02:46 +0000 Files and hashes: 1: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: KTI3DLkY6Zw/QNZ6OOr2PK5jJkC81vR/b0yIl+5D4HU=) 2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1e:29:d9:ae:02:2e:40:65:68:98:9d:14:78:fe:20:ad:4d:a6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Jun 29 14:16:46 2025 GMT Not After : Jul 2 19:02:46 2025 GMT Subject: CN=5A6EFE9951B1D237C933CCC3463B080F7D0680FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:d4:c2:39:20:15:f9:8d:27:c9:e4:1c:30: a8:03:7b:ad:e9:28:4c:4c:28:f7:8e:44:0e:66:d9: 83:5d:dc:ea:c5:9a:c4:97:dc:e0:07:1c:ac:c0:97: f9:aa:81:e6:93:93:55:7f:d5:d9:4a:a4:ae:ff:67: b5:10:b3:43:a1:b8:52:1c:e5:c1:a6:2a:f8:be:60: 2d:e9:33:51:4c:b4:c7:b7:d8:7c:59:85:7d:af:a8: ed:f2:5e:b7:e6:ad:9a:24:a7:45:78:42:58:b5:d1: 74:72:2b:c1:fb:9a:c5:1f:c6:ca:60:93:44:52:b9: ca:ab:1d:55:53:d6:74:24:fd:a7:01:cf:30:c4:df: e9:3c:3f:56:a1:78:ba:ed:3d:e0:c4:e2:1a:4f:5a: 1c:f5:d3:56:75:b8:65:b3:8a:22:66:97:8a:2f:ae: f6:45:eb:75:36:98:f3:ad:e2:19:23:86:f9:c3:63: 9d:16:a5:98:b9:da:45:c5:dc:b0:77:19:1d:4d:0d: 76:2e:8f:56:57:c0:ff:e5:b4:70:42:a0:e5:23:c3: ee:a0:1f:65:c7:ba:1c:09:85:45:bd:cf:2b:57:68: 61:93:46:e0:82:75:e3:99:2e:e7:64:f9:76:b6:ce: 84:ec:22:b8:6a:65:37:bc:26:a2:08:7c:01:bc:55: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6E:FE:99:51:B1:D2:37:C9:33:CC:C3:46:3B:08:0F:7D:06:80:FB X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:86:a7:6b:ee:9b:ba:36:1b:d8:c6:84:f0:88:ef:d4:c7:01: e0:2e:47:25:72:26:2f:6a:ba:f3:d4:6c:4f:9d:66:a2:2e:d8: 37:16:55:98:dd:10:a0:1d:85:db:c8:72:e2:36:78:7a:f2:97: 59:96:d7:e3:03:34:46:c5:93:a4:d8:c7:a2:e4:39:fd:10:4c: c1:af:cf:b8:04:8d:40:8a:ea:a5:b2:8d:ec:73:85:22:ca:54: ea:0e:bd:0c:63:68:b1:e7:f9:3f:5b:f5:82:d2:2d:46:f7:81: d7:0b:40:c1:ba:2f:ba:2c:d2:b5:b1:2e:ac:e9:d5:22:4e:28: 76:41:f4:16:56:2e:5d:18:cf:25:42:81:f8:9f:9a:16:c3:c0: 84:c4:89:87:2b:a5:35:9b:bf:04:45:b1:6f:45:f9:8b:54:81: ce:ca:0a:1c:96:b4:29:6f:2c:9a:2b:c4:34:41:00:d3:69:e1: f0:b6:a2:d6:f8:e0:2c:19:77:34:4d:0d:ba:9e:bb:14:3c:57: 3f:92:8f:c1:0b:ee:e0:ed:46:b5:1d:93:34:49:93:d4:ef:94: 57:d6:7c:35:26:d8:2a:b6:17:8b:11:6a:e1:ee:f0:0c:16:7f: 7d:9e:6f:02:9a:fc:09:f1:a2:ca:bc:cf:06:6e:8b:31:d7:8b: 2f:3a:68:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdx4p2a4CLkBlaJidFHj+IK1NphIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTA2MjkxNDE2NDZaFw0yNTA3MDIxOTAyNDZaMDMxMTAvBgNV BAMTKDVBNkVGRTk5NTFCMUQyMzdDOTMzQ0NDMzQ2M0IwODBGN0QwNjgwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4tTCOSAV+Y0nyeQcMKgDe63p KExMKPeORA5m2YNd3OrFmsSX3OAHHKzAl/mqgeaTk1V/1dlKpK7/Z7UQs0OhuFIc 5cGmKvi+YC3pM1FMtMe32HxZhX2vqO3yXrfmrZokp0V4Qli10XRyK8H7msUfxspg k0RSucqrHVVT1nQk/acBzzDE3+k8P1aheLrtPeDE4hpPWhz101Z1uGWziiJml4ov rvZF63U2mPOt4hkjhvnDY50WpZi52kXF3LB3GR1NDXYuj1ZXwP/ltHBCoOUjw+6g H2XHuhwJhUW9zytXaGGTRuCCdeOZLudk+Xa2zoTsIrhqZTe8JqIIfAG8VQhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWm7+mVGx0jfJM8zDRjsID30GgPswHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOGp2vum7o2G9jGhPCI79THAeAuRyVyJi9q uvPUbE+dZqIu2DcWVZjdEKAdhdvIcuI2eHryl1mW1+MDNEbFk6TYx6LkOf0QTMGv z7gEjUCK6qWyjexzhSLKVOoOvQxjaLHn+T9b9YLSLUb3gdcLQMG6L7os0rWxLqzp 1SJOKHZB9BZWLl0YzyVCgfifmhbDwITEiYcrpTWbvwRFsW9F+YtUgc7KChyWtClv LJorxDRBANNp4fC2otb44CwZdzRNDbqeuxQ8Vz+Sj8EL7uDtRrUdkzRJk9TvlFfW fDUm2Cq2F4sRauHu8AwWf32ebwKa/Anxosq8zwZuizHXiy86aEw= -----END CERTIFICATE-----Generated at Sun Jun 29 22:06:44 2025 by rpki-client