$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: GEZrkikw/l4gHPaSn4rE2rs0Lx9Oy8JIFAVlH7f7GG8= Subject key identifier: 7E:EC:7E:05:B3:0A:34:96:DD:41:9A:41:BA:3D:37:CB:32:93:F5:21 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 27ED7EFDF7E499CCCE5CAF95600CEFDCB0D86558 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: A3 Signing time: Sun 29 Jun 2025 19:01:45 +0000 Manifest this update: Sun 29 Jun 2025 18:56:45 +0000 Manifest next update: Wed 02 Jul 2025 19:29:45 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: TWA9G+3FMF7iTKExFUGEfsfl8qj2gIO383eCncQz7eo=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ed:7e:fd:f7:e4:99:cc:ce:5c:af:95:60:0c:ef:dc:b0:d8:65:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Jun 29 18:56:45 2025 GMT Not After : Jul 2 19:29:45 2025 GMT Subject: CN=7EEC7E05B30A3496DD419A41BA3D37CB3293F521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:eb:86:67:ed:92:f4:aa:be:4b:e9:09:04: 3e:da:83:13:4f:3c:c6:3c:24:06:2a:85:c7:b6:8a: 75:e4:de:54:86:e5:dd:83:80:12:ce:89:33:c7:42: 3b:05:6f:a4:bd:f1:11:a1:11:69:c1:ab:43:fd:49: 82:c6:f5:b3:17:ac:cf:ec:fc:f8:df:a2:f2:94:55: 07:45:2a:3c:14:c7:62:a7:d3:54:f0:0f:b0:2c:a6: 2f:b7:61:8a:5f:dd:e8:59:fd:16:92:89:a7:c6:a9: e8:5f:84:02:71:b8:5f:47:aa:df:d4:ae:c1:51:cf: 8c:ac:b8:63:46:a9:c4:c8:e5:2c:d7:9e:17:ba:1e: 3e:bc:81:e2:21:a0:66:ee:8f:54:d8:0a:bb:db:a7: a8:82:47:ea:04:ae:ed:b0:ef:ce:2d:d4:0b:2d:59: 6d:19:4f:02:f5:8b:f6:cc:fb:0b:d2:2d:0f:46:45: 91:68:7b:44:78:5a:00:c5:46:64:7d:89:0d:f8:b7: 16:40:5e:38:90:73:35:dd:f5:47:50:91:19:9b:47: c1:f8:16:5b:fb:49:a2:18:dd:ab:45:ab:01:86:1c: b2:15:b8:1c:8f:c8:79:85:84:74:a7:95:c2:bb:a4: 78:5c:ea:ac:a7:74:b9:1e:3d:81:1e:4f:c1:ea:64: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:7E:05:B3:0A:34:96:DD:41:9A:41:BA:3D:37:CB:32:93:F5:21 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c0:82:5e:01:da:4c:27:88:5f:d1:4f:de:d7:1f:86:9f:c8: 4b:b5:de:0f:d4:32:39:05:69:f9:0b:29:8d:d0:59:6d:c6:a4: 93:d7:86:e6:3b:37:2f:5d:27:b6:54:ed:60:09:73:e3:50:c6: 84:db:15:8c:48:87:34:5c:f6:79:e4:af:32:4e:dd:8e:b7:0d: 48:ff:80:b0:1d:65:76:fa:c3:d3:ab:88:4a:6c:53:0b:6f:d6: ec:60:50:08:5f:92:86:0d:0e:73:95:7d:01:de:66:db:65:91: f4:fe:a4:82:f1:13:ea:43:cd:29:0c:37:5e:a9:3b:05:45:06: 29:b7:6a:30:ab:ca:62:db:0e:99:57:49:65:e7:10:29:ce:e8: c7:d8:a3:8f:d0:1d:a4:0f:8d:4c:dc:3e:9c:c8:6c:5b:8a:20: 16:b5:7b:29:a5:9c:8f:db:d8:83:85:d5:78:b1:a0:36:39:58: 62:18:06:b0:1b:6f:73:50:31:e1:2b:e4:6b:c7:83:ae:86:14: 3b:b7:a1:cb:48:31:97:d4:8d:af:02:4a:76:1a:25:4d:96:f8: b3:09:e1:c2:aa:84:fd:ec:ad:5d:8a:b8:64:96:74:a1:6d:1a: d0:a1:da:75:be:e0:f0:8d:c1:61:1e:99:63:20:ac:25:01:99: e9:89:2e:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+1+/ffkmczOXK+VYAzv3LDYZVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTA2MjkxODU2NDVaFw0yNTA3MDIxOTI5NDVaMDMxMTAvBgNV BAMTKDdFRUM3RTA1QjMwQTM0OTZERDQxOUE0MUJBM0QzN0NCMzI5M0Y1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+OuGZ+2S9Kq+S+kJBD7agxNP PMY8JAYqhce2inXk3lSG5d2DgBLOiTPHQjsFb6S98RGhEWnBq0P9SYLG9bMXrM/s /PjfovKUVQdFKjwUx2Kn01TwD7Aspi+3YYpf3ehZ/RaSiafGqehfhAJxuF9Hqt/U rsFRz4ysuGNGqcTI5SzXnhe6Hj68geIhoGbuj1TYCrvbp6iCR+oEru2w784t1Ast WW0ZTwL1i/bM+wvSLQ9GRZFoe0R4WgDFRmR9iQ34txZAXjiQczXd9UdQkRmbR8H4 Flv7SaIY3atFqwGGHLIVuByPyHmFhHSnlcK7pHhc6qyndLkePYEeT8HqZOGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfux+BbMKNJbdQZpBuj03yzKT9SEwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITAgl4B2kwniF/RT97XH4afyEu13g/UMjkF afkLKY3QWW3GpJPXhuY7Ny9dJ7ZU7WAJc+NQxoTbFYxIhzRc9nnkrzJO3Y63DUj/ gLAdZXb6w9OriEpsUwtv1uxgUAhfkoYNDnOVfQHeZttlkfT+pILxE+pDzSkMN16p OwVFBim3ajCrymLbDplXSWXnECnO6MfYo4/QHaQPjUzcPpzIbFuKIBa1eymlnI/b 2IOF1XixoDY5WGIYBrAbb3NQMeEr5GvHg66GFDu3octIMZfUja8CSnYaJU2W+LMJ 4cKqhP3srV2KuGSWdKFtGtCh2nW+4PCNwWEemWMgrCUBmemJLng= -----END CERTIFICATE-----Generated at Sun Jun 29 21:36:54 2025 by rpki-client