$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: /ktA1wmdagTOK/vScAz3ZjynbLgnErf4N81sWClNbI4= Subject key identifier: F9:42:CD:69:E9:7D:45:7E:2A:78:BE:93:D3:12:D7:8C:E9:70:30:00 Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 5D9CA11A934F3DB717D0C2ADA13B5EC5FD340748 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 0180 Signing time: Sun 29 Jun 2025 01:01:55 +0000 Manifest this update: Sun 29 Jun 2025 00:56:55 +0000 Manifest next update: Wed 02 Jul 2025 05:00:55 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: 0B0nHXwPPvf0LRwMrnZ4p2f4bNKrhB7vZSU6Auwu/SA=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9c:a1:1a:93:4f:3d:b7:17:d0:c2:ad:a1:3b:5e:c5:fd:34:07:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Jun 29 00:56:55 2025 GMT Not After : Jul 2 05:00:55 2025 GMT Subject: CN=F942CD69E97D457E2A78BE93D312D78CE9703000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:b6:ce:98:83:0d:af:60:17:be:dc:22:f2: 93:4b:bb:6b:7a:f5:ab:a5:2e:7a:2b:e1:87:21:0b: 7c:d5:ac:cc:68:f4:33:52:74:00:3b:a3:7a:d9:f1: c6:e3:b7:86:9c:0c:04:ad:7d:2f:90:aa:ab:53:0b: ee:37:86:97:60:ee:27:84:4e:50:08:11:14:c6:92: 47:0d:7f:a5:9b:b7:0b:18:49:04:ee:6b:3a:6a:f7: 44:98:0e:f9:90:a0:ca:23:e2:3e:52:0f:2e:9b:ce: aa:9b:84:e0:41:d8:ab:fb:27:b2:4f:b9:91:96:69: b2:50:3f:74:bb:ca:2a:fb:a0:95:36:66:be:11:7d: 2a:c8:84:f1:1e:22:ae:2a:f2:b0:0d:64:36:4a:61: 10:1b:20:71:13:cc:54:19:ec:1c:1b:47:26:85:00: 7b:7e:2d:69:d9:69:d3:43:1f:d1:97:6b:35:59:17: 0e:d7:10:d3:19:6f:61:ad:c0:28:1d:05:e6:fd:4a: 04:a2:77:71:75:80:4a:c0:5f:a6:e4:96:b5:8f:f0: bd:b1:e2:a8:3e:0d:ce:e4:14:f7:ad:15:64:57:92: d3:1d:d0:bd:57:a2:bc:71:89:34:1d:be:d8:03:55: b4:d9:15:a7:4c:53:a0:f5:d6:05:2d:67:31:c0:24: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:CD:69:E9:7D:45:7E:2A:78:BE:93:D3:12:D7:8C:E9:70:30:00 X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3f:60:8d:71:81:8c:75:bc:e4:89:f1:a6:c6:ef:f9:af:00: 87:6f:60:76:cb:41:fd:2f:d4:55:ee:e5:a7:68:6c:e1:d3:ec: ce:d4:f1:36:41:ab:be:d0:2e:2e:75:cb:db:c4:55:c3:5f:80: 95:a8:ae:a7:b3:16:d3:10:d7:0a:81:67:e8:c7:71:c0:06:f5: 7b:94:15:01:48:9e:cc:b7:70:7e:58:8f:91:42:87:00:35:21: cd:89:5a:06:71:e9:e8:77:b3:9f:0d:47:9a:1f:91:a4:52:7f: a9:68:75:2f:df:d4:d9:49:f8:92:5c:75:93:c5:d4:c4:2e:cb: 84:a4:21:c6:33:05:33:5a:09:ef:49:6c:d1:17:45:24:33:84: 7d:26:e3:ea:8d:e8:3c:bf:d0:6f:5b:22:a5:66:6d:8f:6e:4a: 4a:ae:41:21:d7:ad:51:9a:40:3c:3b:d7:58:bb:ff:2d:af:fc: 35:bf:54:9d:df:57:bc:71:8c:0f:b4:00:09:8d:18:3f:ea:ee: 03:85:38:bc:a1:1d:96:ba:7d:a0:2b:9e:81:68:94:81:2d:f9: 28:22:b2:33:3d:4f:21:ec:06:ee:d0:98:cf:78:b3:ac:e2:5f: 8c:a0:49:4c:4b:23:fe:56:1c:31:75:d2:18:16:83:94:b2:d8: cc:00:0d:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZyhGpNPPbcX0MKtoTtexf00B0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTA2MjkwMDU2NTVaFw0yNTA3MDIwNTAwNTVaMDMxMTAvBgNV BAMTKEY5NDJDRDY5RTk3RDQ1N0UyQTc4QkU5M0QzMTJENzhDRTk3MDMwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYbbOmIMNr2AXvtwi8pNLu2t6 9aulLnor4YchC3zVrMxo9DNSdAA7o3rZ8cbjt4acDAStfS+QqqtTC+43hpdg7ieE TlAIERTGkkcNf6WbtwsYSQTuazpq90SYDvmQoMoj4j5SDy6bzqqbhOBB2Kv7J7JP uZGWabJQP3S7yir7oJU2Zr4RfSrIhPEeIq4q8rANZDZKYRAbIHETzFQZ7BwbRyaF AHt+LWnZadNDH9GXazVZFw7XENMZb2GtwCgdBeb9SgSid3F1gErAX6bklrWP8L2x 4qg+Dc7kFPetFWRXktMd0L1XorxxiTQdvtgDVbTZFadMU6D11gUtZzHAJO23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ULNael9RX4qeL6T0xLXjOlwMAAwHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg/YI1xgYx1vOSJ8abG7/mvAIdvYHbLQf0v 1FXu5adobOHT7M7U8TZBq77QLi51y9vEVcNfgJWorqezFtMQ1wqBZ+jHccAG9XuU FQFInsy3cH5Yj5FChwA1Ic2JWgZx6eh3s58NR5ofkaRSf6lodS/f1NlJ+JJcdZPF 1MQuy4SkIcYzBTNaCe9JbNEXRSQzhH0m4+qN6Dy/0G9bIqVmbY9uSkquQSHXrVGa QDw711i7/y2v/DW/VJ3fV7xxjA+0AAmNGD/q7gOFOLyhHZa6faArnoFolIEt+Sgi sjM9TyHsBu7QmM94s6ziX4ygSUxLI/5WHDF10hgWg5Sy2MwADWQ= -----END CERTIFICATE-----Generated at Mon Jun 30 16:23:34 2025 by rpki-client