$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: lhkvJ+qHV0gjJqI4EJF4Yzkab9dIDE0kvdiNUXcoyVw= Subject key identifier: A8:B5:99:DC:9F:FD:D5:00:AC:05:8E:9F:8A:8F:0F:65:89:20:17:68 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 018FA0D687ECF63A4F63EB7355369A4B40417695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 04E3 Signing time: Sun 29 Jun 2025 07:01:11 +0000 Manifest this update: Sun 29 Jun 2025 06:56:11 +0000 Manifest next update: Wed 02 Jul 2025 15:44:11 +0000 Files and hashes: 1: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: OVIY5UbApgb8lt8Pt5gysgG8du1+YTeX2w80el4Jhuk=) 2: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) 3: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 4: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) 5: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 6: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a0:d6:87:ec:f6:3a:4f:63:eb:73:55:36:9a:4b:40:41:76:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Jun 29 06:56:11 2025 GMT Not After : Jul 2 15:44:11 2025 GMT Subject: CN=A8B599DC9FFDD500AC058E9F8A8F0F6589201768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:21:fa:72:f5:8b:c1:05:f9:46:21:45:ce: 09:6b:6b:57:8a:8f:a6:6b:a6:9b:cc:1d:c4:18:6f: 68:36:00:a9:00:f5:55:f8:ff:88:88:d7:f3:df:92: 23:a1:fa:47:47:00:5b:df:b9:24:01:6c:4e:b1:7e: 5a:fd:d3:d7:8d:5b:66:13:32:c3:59:31:ad:9a:b4: 2b:11:fe:5e:20:58:8e:55:7d:4e:61:c6:7e:89:a9: 76:44:88:81:f8:0f:e4:23:5b:c8:e2:86:96:f6:28: 53:dc:0b:70:a8:89:6b:2a:9a:13:6b:0d:de:4d:d8: f3:6c:df:0b:e3:e9:cc:69:64:35:b1:bd:ff:65:39: e9:ef:04:63:99:b9:f5:af:64:8d:a2:70:6c:68:e3: 26:dd:fd:5a:94:22:b7:f1:42:6f:44:3c:fc:ff:f4: d1:60:0c:5a:d6:d7:49:89:c8:9e:ea:2a:40:1a:cb: 72:b0:54:43:18:bc:c8:e4:72:6c:33:00:ed:16:61: 60:9b:9c:9a:3f:53:8d:2e:ca:e7:73:c5:54:37:1c: 7d:f4:7c:2f:dc:41:cf:c5:69:79:d7:54:04:c7:9d: 4e:48:13:58:fa:96:46:11:bf:4b:f6:42:0e:21:cf: b5:2f:38:80:2b:91:5d:74:0d:52:2b:2d:a6:31:ad: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:99:DC:9F:FD:D5:00:AC:05:8E:9F:8A:8F:0F:65:89:20:17:68 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b9:8d:64:06:a5:79:55:9e:6b:0d:2c:84:49:ec:d9:50:a8: a0:ba:cb:88:56:d7:be:de:2d:c9:49:f0:07:c9:39:a6:c2:f3: 38:5d:59:ec:21:e2:0b:cd:20:97:cb:5e:7b:1e:73:af:08:a9: 1a:44:91:00:7b:b6:87:b0:b9:38:42:ff:94:5d:8d:c1:bf:df: 47:39:5a:9d:68:40:dd:70:ca:e2:65:f7:0e:e9:4d:5f:ef:bf: 97:c3:5f:cf:64:ab:2e:e4:8f:21:55:45:fd:3c:21:35:d6:20: ad:20:47:bb:33:33:71:ed:fc:57:2a:90:21:2a:8a:a6:9c:11: a2:56:80:97:2a:a0:81:85:d0:b3:02:5c:b4:ec:54:cf:20:bd: 2f:3b:16:b8:62:fc:76:6d:08:a1:56:53:f5:54:da:82:55:e6: bf:3b:43:42:28:41:fe:4f:57:82:a2:8c:e6:28:9f:95:33:47: 75:1e:0d:8b:35:2b:b8:73:e5:72:df:10:aa:f3:c5:4d:5c:78: eb:ce:0c:9b:f0:77:dd:5e:8e:4f:87:06:74:8a:98:73:af:de: 39:86:f6:1b:5d:94:5f:2b:b7:6c:c9:2e:a8:53:f1:34:92:49: 16:e6:c4:3f:d1:9c:1f:ed:8f:50:cf:ce:41:73:c5:da:5d:37: 22:76:fa:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAY+g1ofs9jpPY+tzVTaaS0BBdpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTA2MjkwNjU2MTFaFw0yNTA3MDIxNTQ0MTFaMDMxMTAvBgNV BAMTKEE4QjU5OURDOUZGREQ1MDBBQzA1OEU5RjhBOEYwRjY1ODkyMDE3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7CH6cvWLwQX5RiFFzglra1eK j6ZrppvMHcQYb2g2AKkA9VX4/4iI1/PfkiOh+kdHAFvfuSQBbE6xflr909eNW2YT MsNZMa2atCsR/l4gWI5VfU5hxn6JqXZEiIH4D+QjW8jihpb2KFPcC3CoiWsqmhNr Dd5N2PNs3wvj6cxpZDWxvf9lOenvBGOZufWvZI2icGxo4ybd/VqUIrfxQm9EPPz/ 9NFgDFrW10mJyJ7qKkAay3KwVEMYvMjkcmwzAO0WYWCbnJo/U40uyudzxVQ3HH30 fC/cQc/FaXnXVATHnU5IE1j6lkYRv0v2Qg4hz7UvOIArkV10DVIrLaYxrZlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLWZ3J/91QCsBY6fio8PZYkgF2gwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm5jWQGpXlVnmsNLIRJ7NlQqKC6y4hW177e LclJ8AfJOabC8zhdWewh4gvNIJfLXnsec68IqRpEkQB7toewuThC/5RdjcG/30c5 Wp1oQN1wyuJl9w7pTV/vv5fDX89kqy7kjyFVRf08ITXWIK0gR7szM3Ht/FcqkCEq iqacEaJWgJcqoIGF0LMCXLTsVM8gvS87Frhi/HZtCKFWU/VU2oJV5r87Q0IoQf5P V4KijOYon5UzR3UeDYs1K7hz5XLfEKrzxU1ceOvODJvwd91ejk+HBnSKmHOv3jmG 9htdlF8rt2zJLqhT8TSSSRbmxD/RnB/tj1DPzkFzxdpdNyJ2+j8= -----END CERTIFICATE-----Generated at Mon Jun 30 00:48:37 2025 by rpki-client