$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: CkYIYBrv16Z9drs5xtS0LgCjRaHWGeLvT95ZB6D2D24= Subject key identifier: 66:A6:61:53:E0:5B:53:1E:9E:1C:D4:4D:8B:A5:40:17:18:ED:73:02 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 3FE9AFECC256C4FAE828C3C7139E3F8D4ED47307 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 021B Signing time: Mon 30 Jun 2025 09:00:35 +0000 Manifest this update: Mon 30 Jun 2025 08:55:35 +0000 Manifest next update: Thu 03 Jul 2025 09:06:35 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 3: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: NYfzrKZMMGrPE8H9J9lNW/u6kAsnt675HfCELuIEeqE=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e9:af:ec:c2:56:c4:fa:e8:28:c3:c7:13:9e:3f:8d:4e:d4:73:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Jun 30 08:55:35 2025 GMT Not After : Jul 3 09:06:35 2025 GMT Subject: CN=66A66153E05B531E9E1CD44D8BA5401718ED7302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:59:ea:8f:b6:cc:df:e2:d3:91:7b:32:be: 43:3a:24:ef:28:89:de:ee:60:0e:70:bb:05:ea:e1: 45:d6:e8:b2:cb:01:a9:4a:61:ce:c5:39:b1:79:f7: a5:ce:4f:87:56:82:be:0c:e0:97:a2:63:ca:90:87: 58:94:91:7d:4c:fa:8e:a0:ce:41:0d:eb:4f:00:63: 4f:6e:df:7d:61:53:cc:9d:ab:1f:ac:2b:19:dc:f5: 76:b6:5c:39:6e:93:cd:34:a2:0c:f7:c9:bf:8e:4e: ca:b1:8d:66:58:55:93:69:77:a2:a6:cb:c5:74:3d: 92:9f:32:05:1c:ef:7c:dc:9c:c8:43:ff:1b:01:f6: 57:27:88:5b:d5:b0:6a:9b:b4:88:fd:ff:0b:4d:60: e5:30:df:89:2d:ad:d1:e8:41:01:9f:f1:84:7a:c2: c6:49:a9:cc:52:86:84:e9:44:11:03:e0:ee:76:f5: d8:e5:ff:a9:2b:de:82:8f:5a:5c:7f:41:e1:d5:af: cf:c0:77:48:12:2c:d9:21:23:3d:6a:c5:ca:b9:68: 44:7d:62:3a:7a:0e:a1:84:a5:fc:32:9d:b2:c7:ba: c3:5b:45:64:f2:e5:1a:a9:2d:93:40:03:38:1b:ae: c0:ee:b6:9c:1f:9f:6e:bf:68:da:52:5c:2b:c2:6a: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:61:53:E0:5B:53:1E:9E:1C:D4:4D:8B:A5:40:17:18:ED:73:02 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c8:9a:e4:dd:60:fe:df:8c:b3:3f:16:41:9a:45:18:30:df: e1:93:bb:3b:e5:09:8f:5d:3d:57:10:f6:17:40:5e:d8:7e:4e: f2:bc:ce:f1:a5:15:ea:a3:7e:69:91:d1:95:56:80:fc:42:5e: 5b:48:bc:81:2f:f8:e4:0f:56:93:7c:50:66:8f:29:ef:59:c7: 5d:e0:19:31:01:71:ab:af:f7:e8:9c:8e:ac:27:c9:f9:91:a7: cf:ee:12:07:f2:fc:c2:6e:d0:79:65:cd:16:cd:ab:12:a0:7f: 00:59:fe:d2:6b:67:3d:f3:5e:46:63:98:ce:76:c5:f4:4c:3e: 42:c4:e9:d5:60:68:3b:1c:dd:c2:63:c3:bc:87:3a:11:74:fd: 58:7d:79:7a:ac:ba:6e:5c:97:a5:e0:e3:48:3b:b5:8a:83:15: 6f:e5:a7:39:d2:d0:90:47:06:5a:1c:f1:9b:8a:61:6d:39:fe: 76:ba:a7:e6:bb:60:b1:a1:39:98:af:70:cc:98:d3:af:5d:de: 79:b2:96:a1:4c:bb:af:3b:26:1f:04:87:a1:ce:80:dc:18:4f: 94:c5:84:9e:4e:82:08:9f:d6:a0:50:04:76:13:4c:69:6c:f1: b7:2b:f5:65:4d:bf:87:c9:90:fe:2a:68:77:9a:24:1a:d5:a4: 38:c0:7d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+mv7MJWxProKMPHE54/jU7UcwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA2MzAwODU1MzVaFw0yNTA3MDMwOTA2MzVaMDMxMTAvBgNV BAMTKDY2QTY2MTUzRTA1QjUzMUU5RTFDRDQ0RDhCQTU0MDE3MThFRDczMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBi1nqj7bM3+LTkXsyvkM6JO8o id7uYA5wuwXq4UXW6LLLAalKYc7FObF596XOT4dWgr4M4JeiY8qQh1iUkX1M+o6g zkEN608AY09u331hU8ydqx+sKxnc9Xa2XDluk800ogz3yb+OTsqxjWZYVZNpd6Km y8V0PZKfMgUc73zcnMhD/xsB9lcniFvVsGqbtIj9/wtNYOUw34ktrdHoQQGf8YR6 wsZJqcxShoTpRBED4O529djl/6kr3oKPWlx/QeHVr8/Ad0gSLNkhIz1qxcq5aER9 Yjp6DqGEpfwynbLHusNbRWTy5RqpLZNAAzgbrsDutpwfn26/aNpSXCvCar7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqZhU+BbUx6eHNRNi6VAFxjtcwIwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXImuTdYP7fjLM/FkGaRRgw3+GTuzvlCY9d PVcQ9hdAXth+TvK8zvGlFeqjfmmR0ZVWgPxCXltIvIEv+OQPVpN8UGaPKe9Zx13g GTEBcauv9+icjqwnyfmRp8/uEgfy/MJu0HllzRbNqxKgfwBZ/tJrZz3zXkZjmM52 xfRMPkLE6dVgaDsc3cJjw7yHOhF0/Vh9eXqsum5cl6Xg40g7tYqDFW/lpznS0JBH Bloc8ZuKYW05/na6p+a7YLGhOZivcMyY069d3nmylqFMu687Jh8Eh6HOgNwYT5TF hJ5Oggif1qBQBHYTTGls8bcr9WVNv4fJkP4qaHeaJBrVpDjAfWU= -----END CERTIFICATE-----Generated at Mon Jun 30 19:45:24 2025 by rpki-client