$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: caNBDCi3Eu1S7QNYAAjaEFt3XLy6RAKNfurl5pIoizA= Subject key identifier: A4:FD:07:AA:CE:E4:F4:E2:D5:C9:40:CD:44:84:52:16:07:E1:32:DC Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 1921A2FF073B568A5FBBED77990ED8A10EE05613 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 0162 Signing time: Mon 30 Jun 2025 18:51:29 +0000 Manifest this update: Mon 30 Jun 2025 18:46:29 +0000 Manifest next update: Fri 04 Jul 2025 02:01:29 +0000 Files and hashes: 1: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: 8a5xkRwgpN9naark/GidSrvrLtld6gelVvBpuL/IYJ4=) 2: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) 3: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) 4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:21:a2:ff:07:3b:56:8a:5f:bb:ed:77:99:0e:d8:a1:0e:e0:56:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Jun 30 18:46:29 2025 GMT Not After : Jul 4 02:01:29 2025 GMT Subject: CN=A4FD07AACEE4F4E2D5C940CD4484521607E132DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:ac:10:62:c9:e8:3c:06:fb:cb:04:51:07: fa:d0:d3:0e:29:b8:8b:ae:55:bd:d3:84:d4:6d:10: 7c:3a:66:c1:73:54:7b:3b:ab:d6:14:cc:0d:33:61: 29:c4:71:b3:68:39:b5:b0:14:f1:7c:89:1f:80:37: 6a:8e:af:13:3f:99:ff:ef:b2:c4:29:6f:9a:3f:86: 41:c9:c9:d2:51:58:4a:a6:54:8d:37:49:44:a7:8b: 61:3a:af:a9:43:46:d9:9d:30:f1:f9:0a:e0:27:f8: 00:3a:ed:99:c9:42:63:a0:c6:47:c8:01:be:c0:24: 4d:6c:67:65:f7:8d:90:e3:fb:f1:9f:b9:36:bf:06: 30:f3:c9:06:8a:a4:58:89:cf:0a:d4:0b:39:dd:93: d2:2c:0d:55:5b:3a:cc:9f:3e:ce:cd:f9:82:b0:67: ca:fa:60:e9:45:47:41:88:87:18:34:d8:02:d3:94: 30:d7:94:e5:1d:5c:c2:f6:bb:0c:a2:e5:23:0b:70: ec:03:7d:bb:b8:28:11:50:f5:40:76:9a:64:52:83: 76:5f:7d:73:43:47:16:16:a3:04:01:83:c1:d7:8c: 08:75:01:9f:2b:63:82:a6:15:32:e2:5a:cb:df:61: 20:d5:43:3c:01:bf:89:78:24:f6:c9:29:fb:9c:97: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:07:AA:CE:E4:F4:E2:D5:C9:40:CD:44:84:52:16:07:E1:32:DC X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ed:20:57:8e:45:1e:95:07:18:bc:4a:54:36:0e:4b:06:35: 9b:86:a1:b7:e8:08:70:23:63:f8:8d:bc:13:00:d6:8c:88:e8: 39:4a:5f:81:ba:e9:47:1b:00:65:ae:3c:39:bb:95:bf:db:99: 3b:0c:88:f0:4b:4b:8c:db:1b:ab:58:ee:71:5d:63:80:4b:7a: 15:7b:1d:2b:ab:33:fe:6f:23:fa:aa:8b:bf:05:59:85:34:94: cd:99:88:ca:ff:77:73:98:90:98:ba:52:a3:a8:70:8d:10:c8: b6:78:dd:e7:2c:95:99:ff:81:6a:39:3d:dd:e6:47:da:78:bf: c2:79:d2:16:03:ae:2c:ec:10:0a:72:1f:31:e6:0d:99:9b:32: 06:1c:be:d6:2a:5e:12:d8:49:a2:0a:e7:7e:b4:79:d9:14:67: b4:79:44:32:40:11:dc:fa:f5:7a:49:ba:e1:ea:3a:b8:56:98: e8:5e:8e:cf:32:74:47:30:99:92:1d:bf:ad:7d:56:78:bd:a1: 25:d2:f9:88:a6:d5:27:8b:36:4a:ab:a2:70:53:9e:5a:46:08: 46:18:75:6b:32:98:0f:7c:73:3d:6d:87:05:3f:9d:f1:15:bf: 61:3c:49:b7:53:1b:07:b8:c5:38:29:4e:86:e4:d5:bc:53:c7: 05:85:90:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSGi/wc7Vopfu+13mQ7YoQ7gVhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNTA2MzAxODQ2MjlaFw0yNTA3MDQwMjAxMjlaMDMxMTAvBgNV BAMTKEE0RkQwN0FBQ0VFNEY0RTJENUM5NDBDRDQ0ODQ1MjE2MDdFMTMyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspKwQYsnoPAb7ywRRB/rQ0w4p uIuuVb3ThNRtEHw6ZsFzVHs7q9YUzA0zYSnEcbNoObWwFPF8iR+AN2qOrxM/mf/v ssQpb5o/hkHJydJRWEqmVI03SUSni2E6r6lDRtmdMPH5CuAn+AA67ZnJQmOgxkfI Ab7AJE1sZ2X3jZDj+/GfuTa/BjDzyQaKpFiJzwrUCzndk9IsDVVbOsyfPs7N+YKw Z8r6YOlFR0GIhxg02ALTlDDXlOUdXML2uwyi5SMLcOwDfbu4KBFQ9UB2mmRSg3Zf fXNDRxYWowQBg8HXjAh1AZ8rY4KmFTLiWsvfYSDVQzwBv4l4JPbJKfucl6YLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpP0Hqs7k9OLVyUDNRIRSFgfhMtwwHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXtIFeORR6VBxi8SlQ2DksGNZuGobfoCHAj Y/iNvBMA1oyI6DlKX4G66UcbAGWuPDm7lb/bmTsMiPBLS4zbG6tY7nFdY4BLehV7 HSurM/5vI/qqi78FWYU0lM2ZiMr/d3OYkJi6UqOocI0QyLZ43ecslZn/gWo5Pd3m R9p4v8J50hYDrizsEApyHzHmDZmbMgYcvtYqXhLYSaIK5360edkUZ7R5RDJAEdz6 9XpJuuHqOrhWmOhejs8ydEcwmZIdv619Vni9oSXS+Yim1SeLNkqronBTnlpGCEYY dWsymA98cz1thwU/nfEVv2E8SbdTGwe4xTgpTobk1bxTxwWFkAk= -----END CERTIFICATE-----Generated at Tue Jul 1 08:45:53 2025 by rpki-client