$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: 9LeVAEpAw6K0zqAzO25AEdEnjhZun2tzPICIhvoI1HE= Subject key identifier: EC:E4:64:93:38:3E:04:B7:FE:59:43:1D:1D:C5:E1:B1:AF:FF:91:7A Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 7C88201DC80842E38D11BDD0ED4638077E04A625 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: D5 Signing time: Wed 02 Jul 2025 03:20:43 +0000 Manifest this update: Wed 02 Jul 2025 03:15:43 +0000 Manifest next update: Sat 05 Jul 2025 04:22:43 +0000 Files and hashes: 1: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) 2: 08435803278DC5796EE67697996454D656195D4C.crl (hash: R3S8jHRa66IgpALP3LuYD1GcjenuQovO6tkvC3nxZN4=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 04:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:88:20:1d:c8:08:42:e3:8d:11:bd:d0:ed:46:38:07:7e:04:a6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Jul 2 03:15:43 2025 GMT Not After : Jul 5 04:22:43 2025 GMT Subject: CN=ECE46493383E04B7FE59431D1DC5E1B1AFFF917A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:50:cd:c4:b9:fd:3b:94:9e:dd:c6:7c:94: ab:9e:57:a9:dc:a0:40:9b:d1:36:6d:cd:a1:83:2a: e5:ad:4b:79:26:09:29:53:de:b2:4a:52:9c:41:80: 97:b3:5e:f2:04:1c:f7:53:37:b8:ea:95:24:49:a7: 9c:4a:49:90:c2:bf:e7:38:7a:df:25:01:0c:6a:d1: b6:f9:eb:94:b6:1a:ee:b5:58:43:17:8f:55:16:a6: ff:7f:ea:fd:a2:2b:1d:e6:05:5d:60:51:ad:6e:86: 04:1a:12:36:26:72:b8:83:b2:55:f9:9d:69:8c:f1: 07:dd:86:51:6b:a2:9d:b3:b9:2c:f5:a4:05:a8:db: 52:9f:14:8d:dc:55:50:a8:41:17:63:f7:f9:b1:54: 86:f5:ce:6c:f6:1c:f7:0f:33:57:70:6b:1a:ae:7b: 8f:c9:47:35:2b:a3:30:61:f5:34:0d:1f:af:f2:ac: 7a:11:6c:82:b3:b4:bc:9c:54:cc:49:0d:ec:65:ea: fa:a6:1a:38:94:c3:dd:60:7b:51:85:ae:92:59:bd: 06:37:85:ba:70:fa:d7:14:69:7f:8e:f5:0e:3e:3b: 4b:70:65:68:d0:8e:f3:b3:4a:fb:3b:11:21:27:bd: 00:75:f5:31:db:15:7d:a3:93:21:50:f9:8b:0a:08: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E4:64:93:38:3E:04:B7:FE:59:43:1D:1D:C5:E1:B1:AF:FF:91:7A X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6e:76:d6:be:b8:d3:07:66:dc:d5:0b:c1:9d:67:af:57:55: 58:89:6b:2b:17:f0:7d:fa:e7:1a:d7:f8:22:8e:0a:12:d0:bb: f6:a1:54:fc:00:c6:25:c8:e2:81:bf:c8:20:b0:25:4f:39:41: 12:73:7a:b3:99:74:37:f1:dd:3b:66:6c:b3:d0:0f:48:59:9e: 4f:f0:dd:99:41:9c:a9:f7:9d:46:56:4c:43:03:0d:07:7a:2a: 0d:4a:18:f3:f8:ed:15:1e:1e:2a:db:9f:7c:38:d9:28:86:bb: 91:1b:e1:22:ce:fb:2e:e9:ee:00:da:b0:08:29:d0:62:42:92: 86:44:83:5f:ba:c8:a0:2d:4b:3d:b6:97:87:18:cc:17:41:95: f6:03:77:11:f5:a1:c2:02:1d:b5:1e:85:dd:ca:05:52:5b:34: 93:ed:bb:85:f1:7e:81:65:e0:70:e5:7c:3f:8e:d6:75:2c:4a: f5:cd:ce:cf:8b:3d:c1:71:91:90:ba:6d:15:ea:14:8e:0e:49: 37:f3:98:f9:1a:2f:6a:e0:28:2b:4e:6d:be:88:ac:22:68:d2: 7d:f4:8b:f9:cc:93:4d:f4:59:b6:ab:47:0e:48:20:31:72:0b: 1c:fa:14:e7:b4:35:90:13:b9:72:66:70:85:59:f9:62:1f:08: 22:e8:c6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIggHcgIQuONEb3Q7UY4B34EpiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTA3MDIwMzE1NDNaFw0yNTA3MDUwNDIyNDNaMDMxMTAvBgNV BAMTKEVDRTQ2NDkzMzgzRTA0QjdGRTU5NDMxRDFEQzVFMUIxQUZGRjkxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCx1DNxLn9O5Se3cZ8lKueV6nc oECb0TZtzaGDKuWtS3kmCSlT3rJKUpxBgJezXvIEHPdTN7jqlSRJp5xKSZDCv+c4 et8lAQxq0bb565S2Gu61WEMXj1UWpv9/6v2iKx3mBV1gUa1uhgQaEjYmcriDslX5 nWmM8QfdhlFrop2zuSz1pAWo21KfFI3cVVCoQRdj9/mxVIb1zmz2HPcPM1dwaxqu e4/JRzUrozBh9TQNH6/yrHoRbIKztLycVMxJDexl6vqmGjiUw91ge1GFrpJZvQY3 hbpw+tcUaX+O9Q4+O0twZWjQjvOzSvs7ESEnvQB19THbFX2jkyFQ+YsKCFZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ORkkzg+BLf+WUMdHcXhsa//kXowHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtudta+uNMHZtzVC8GdZ69XVViJaysX8H36 5xrX+CKOChLQu/ahVPwAxiXI4oG/yCCwJU85QRJzerOZdDfx3TtmbLPQD0hZnk/w 3ZlBnKn3nUZWTEMDDQd6Kg1KGPP47RUeHirbn3w42SiGu5Eb4SLO+y7p7gDasAgp 0GJCkoZEg1+6yKAtSz22l4cYzBdBlfYDdxH1ocICHbUehd3KBVJbNJPtu4XxfoFl 4HDlfD+O1nUsSvXNzs+LPcFxkZC6bRXqFI4OSTfzmPkaL2rgKCtObb6IrCJo0n30 i/nMk030WbarRw5IIDFyCxz6FOe0NZATuXJmcIVZ+WIfCCLoxpU= -----END CERTIFICATE-----Generated at Thu Jul 3 10:04:16 2025 by rpki-client