$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: 80sHjhGQQGpC78I0eDqIILD+ljMM8X/+qd9LlkWH8Ug= Subject key identifier: 92:85:59:83:C8:5F:09:BC:A7:1C:41:1E:E2:30:95:B2:63:F0:7B:25 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 74A33C02A93C0C6E64B98FA4488CF83842E66E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 030E Signing time: Sat 28 Jun 2025 16:41:45 +0000 Manifest this update: Sat 28 Jun 2025 16:36:45 +0000 Manifest next update: Wed 02 Jul 2025 04:29:45 +0000 Files and hashes: 1: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 2: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 3: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) 4: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: 4qWqQ8ie6JFNuNMk/4fg9v1HnGcx96OlN6IeyhZH+zg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a3:3c:02:a9:3c:0c:6e:64:b9:8f:a4:48:8c:f8:38:42:e6:6e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Jun 28 16:36:45 2025 GMT Not After : Jul 2 04:29:45 2025 GMT Subject: CN=92855983C85F09BCA71C411EE23095B263F07B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:70:09:af:c8:a1:71:da:c8:a3:27:1f:05: f6:8d:bc:ec:df:4c:8c:fa:1a:36:1c:66:0f:00:40: d1:b6:ab:5d:c1:ae:c4:2d:ec:9b:85:e1:0e:12:db: 81:cc:da:a6:51:0f:77:ee:46:cc:53:b6:1f:2d:2a: 46:d1:bd:a2:92:ab:99:4f:ab:74:0b:24:d0:86:34: 60:e3:92:af:8f:98:1f:20:e9:63:b0:82:6e:15:e3: d0:2a:1d:c4:5e:5b:9c:3c:4d:50:ad:4f:3b:55:eb: 26:41:d5:33:97:e9:31:9e:b6:38:0e:4f:cb:18:13: c2:1b:41:fd:27:01:c4:02:7d:69:4b:79:22:9e:1f: a9:6b:d3:8c:21:22:ee:c7:3a:ac:1a:0f:bf:45:2f: 8b:14:18:94:9c:ca:da:36:a5:b9:e7:6c:39:b0:8a: 5c:87:fd:3b:de:a4:4d:d9:df:33:4f:ef:31:65:58: ac:2f:89:a7:45:c6:ac:49:1e:7d:c3:00:57:b0:a7: e9:ef:eb:5b:39:96:5c:00:6d:e5:11:1d:1b:d2:1f: 47:8a:f7:2c:c2:25:80:4a:6c:be:ba:b8:4c:95:37: 81:c0:e8:7d:03:f8:0e:ef:cb:c1:f4:ad:95:ea:47: 88:19:36:a3:9d:ce:5d:b1:40:9b:9b:a4:51:e9:d0: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:85:59:83:C8:5F:09:BC:A7:1C:41:1E:E2:30:95:B2:63:F0:7B:25 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b6:97:9e:2c:ee:ad:35:59:62:e8:1f:7a:60:94:ed:f0:b4: e1:08:93:9e:86:59:d0:66:4f:3d:13:d8:29:cb:88:88:16:8a: af:22:28:99:3a:68:e9:a4:18:70:1c:ca:cd:e6:11:c8:f7:11: 85:8f:b6:de:5c:5d:2e:e7:4f:46:7d:08:27:98:97:49:ba:8c: 1f:fd:09:5b:c8:b8:bf:da:9b:4d:46:a8:c9:f3:6c:ce:54:0a: 13:b6:6f:78:f1:28:28:b4:79:d5:f8:6a:e3:f7:37:f8:63:5e: ea:b8:7b:a6:b7:3b:e4:ab:54:77:d9:f7:b3:29:1c:9e:ea:ce: fd:3c:a3:48:e6:01:ac:dd:dc:be:12:53:b0:c9:cd:98:3c:41: 0f:28:e1:ba:db:2b:9f:b8:23:f1:c2:cf:32:2a:cd:30:f4:92: 21:0a:9d:a0:90:e8:3b:8a:1c:ef:44:c2:df:81:9b:a4:78:98: d7:fe:c6:26:f8:e8:bd:58:cf:e9:13:6d:33:dd:8a:cf:21:d2: 92:a2:e5:50:36:b1:7c:00:48:35:f8:93:27:75:74:08:91:8b: da:42:4f:12:c9:20:d2:48:53:5c:6a:9b:2d:cb:e4:21:ce:d7: 53:7e:aa:d1:4d:59:d8:de:04:e5:b7:ab:15:cd:1a:78:4e:99: 87:96:ba:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKM8Aqk8DG5kuY+kSIz4OELmbi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTA2MjgxNjM2NDVaFw0yNTA3MDIwNDI5NDVaMDMxMTAvBgNV BAMTKDkyODU1OTgzQzg1RjA5QkNBNzFDNDExRUUyMzA5NUIyNjNGMDdCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQXAJr8ihcdrIoycfBfaNvOzf TIz6GjYcZg8AQNG2q13BrsQt7JuF4Q4S24HM2qZRD3fuRsxTth8tKkbRvaKSq5lP q3QLJNCGNGDjkq+PmB8g6WOwgm4V49AqHcReW5w8TVCtTztV6yZB1TOX6TGetjgO T8sYE8IbQf0nAcQCfWlLeSKeH6lr04whIu7HOqwaD79FL4sUGJScyto2pbnnbDmw ilyH/TvepE3Z3zNP7zFlWKwviadFxqxJHn3DAFewp+nv61s5llwAbeURHRvSH0eK 9yzCJYBKbL66uEyVN4HA6H0D+A7vy8H0rZXqR4gZNqOdzl2xQJubpFHp0LBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkoVZg8hfCbynHEEe4jCVsmPweyUwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy2l54s7q01WWLoH3pglO3wtOEIk56GWdBm Tz0T2CnLiIgWiq8iKJk6aOmkGHAcys3mEcj3EYWPtt5cXS7nT0Z9CCeYl0m6jB/9 CVvIuL/am01GqMnzbM5UChO2b3jxKCi0edX4auP3N/hjXuq4e6a3O+SrVHfZ97Mp HJ7qzv08o0jmAazd3L4SU7DJzZg8QQ8o4brbK5+4I/HCzzIqzTD0kiEKnaCQ6DuK HO9Ewt+Bm6R4mNf+xib46L1Yz+kTbTPdis8h0pKi5VA2sXwASDX4kyd1dAiRi9pC TxLJINJIU1xqmy3L5CHO11N+qtFNWdjeBOW3qxXNGnhOmYeWuvw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:53 2025 by rpki-client