$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: 3+/TAHvTJAsMJY9HsHqfgfRif2C6G3wH7m17HfUV59I= Subject key identifier: 1C:6E:34:51:B2:71:4A:A3:21:6D:37:63:E6:78:13:A8:EF:51:70:BA Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 2EC20D15A4AA2429E102CB6711F657E11018A7AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 5F Signing time: Sat 28 Jun 2025 09:41:21 +0000 Manifest this update: Sat 28 Jun 2025 09:36:21 +0000 Manifest next update: Tue 01 Jul 2025 16:59:21 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 4: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: adgJscF9ZlryqqlJKwgTTXLWli7Ezj0K5b9LnFVFlks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c2:0d:15:a4:aa:24:29:e1:02:cb:67:11:f6:57:e1:10:18:a7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Jun 28 09:36:21 2025 GMT Not After : Jul 1 16:59:21 2025 GMT Subject: CN=1C6E3451B2714AA3216D3763E67813A8EF5170BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:83:3b:70:12:3b:95:e8:bc:a8:f1:ce:27: b3:1e:e1:40:9e:38:b0:d8:20:99:b6:8c:ad:f4:50: 7a:08:45:66:2f:f7:0f:e1:d6:9f:a3:61:8d:31:58: ce:2b:9c:c2:3b:10:d9:81:54:51:81:39:4e:61:15: 59:3d:2b:b4:c2:71:ef:97:5e:1a:7d:49:76:4a:4f: 8a:9a:ec:d6:9c:30:1c:c4:aa:6e:17:16:66:88:d8: 20:89:a0:21:be:6f:db:90:48:a3:d3:cb:2a:b0:1e: 1d:7a:da:58:61:f1:31:02:e4:38:ba:0b:48:28:60: f6:e2:16:23:8d:05:b8:6a:f5:88:f3:7e:80:40:3d: 37:78:4c:71:34:71:1e:ca:ef:55:35:18:40:bf:3e: 6e:7d:88:f8:25:f1:61:24:1b:e2:9d:22:4f:e6:3d: 3b:fc:f1:90:6e:eb:f1:3a:6f:8f:06:ca:fa:a0:aa: 23:05:bd:d8:3d:a7:64:b6:c7:aa:33:67:4c:9f:f7: fe:af:a7:9f:7f:5e:f3:dc:b9:62:7c:98:a8:3c:fd: 0f:18:63:87:00:f1:18:0e:d5:57:59:e0:61:90:1d: 5e:d3:62:5c:d0:13:04:ed:0f:54:e1:fa:48:a7:89: ef:88:4e:41:3e:0c:01:d1:78:d9:ac:3e:51:9d:53: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:34:51:B2:71:4A:A3:21:6D:37:63:E6:78:13:A8:EF:51:70:BA X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b9:f5:d0:87:62:23:5c:58:1d:8e:4a:3a:4d:76:56:b0:21: 3b:23:01:98:9e:83:f4:7c:30:e9:33:a0:67:68:9f:07:37:5f: 84:a8:fa:f3:2a:30:92:8c:89:9d:9f:9f:df:86:40:4b:7d:8a: 56:b9:3c:9a:32:96:74:d8:5c:c0:6e:69:79:40:8f:c3:b1:db: 32:a2:f3:43:b5:9e:69:aa:53:68:19:13:ed:2f:e5:6c:7d:b2: 59:5e:58:1f:62:da:52:96:2f:43:08:f8:4f:41:b2:8e:f0:7d: 79:92:57:c4:13:f3:63:44:f3:51:d6:93:6a:71:f2:e5:db:c2: 30:1b:28:02:79:56:09:c6:24:9d:59:3f:69:14:01:9b:52:54: 3a:7f:db:31:ff:09:bf:88:4b:67:da:78:8b:81:bb:27:db:db: 8a:ee:8d:4f:69:19:48:47:33:ae:8d:24:61:e2:48:24:b6:ed: 90:6a:5a:bd:55:55:c5:78:ea:75:e4:ca:90:d4:59:2f:04:95: 3f:62:11:40:4c:fa:c9:4b:03:bc:c1:6d:76:05:23:2a:0c:1a: 1b:2b:d7:ef:f7:75:1a:6d:37:26:ec:c9:79:57:fc:7b:c1:23: 02:ab:7f:45:0a:18:b9:b9:c9:24:f3:76:65:d6:e0:a1:6d:b4: 87:a4:d0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsINFaSqJCnhAstnEfZX4RAYp68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA2MjgwOTM2MjFaFw0yNTA3MDExNjU5MjFaMDMxMTAvBgNV BAMTKDFDNkUzNDUxQjI3MTRBQTMyMTZEMzc2M0U2NzgxM0E4RUY1MTcwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TYM7cBI7lei8qPHOJ7Me4UCe OLDYIJm2jK30UHoIRWYv9w/h1p+jYY0xWM4rnMI7ENmBVFGBOU5hFVk9K7TCce+X Xhp9SXZKT4qa7NacMBzEqm4XFmaI2CCJoCG+b9uQSKPTyyqwHh162lhh8TEC5Di6 C0goYPbiFiONBbhq9YjzfoBAPTd4THE0cR7K71U1GEC/Pm59iPgl8WEkG+KdIk/m PTv88ZBu6/E6b48GyvqgqiMFvdg9p2S2x6ozZ0yf9/6vp59/XvPcuWJ8mKg8/Q8Y Y4cA8RgO1VdZ4GGQHV7TYlzQEwTtD1Th+kinie+ITkE+DAHReNmsPlGdU4a9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHG40UbJxSqMhbTdj5ngTqO9RcLowHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI259dCHYiNcWB2OSjpNdlawITsjAZieg/R8 MOkzoGdonwc3X4So+vMqMJKMiZ2fn9+GQEt9ila5PJoylnTYXMBuaXlAj8Ox2zKi 80O1nmmqU2gZE+0v5Wx9slleWB9i2lKWL0MI+E9Bso7wfXmSV8QT82NE81HWk2px 8uXbwjAbKAJ5VgnGJJ1ZP2kUAZtSVDp/2zH/Cb+IS2faeIuBuyfb24rujU9pGUhH M66NJGHiSCS27ZBqWr1VVcV46nXkypDUWS8ElT9iEUBM+slLA7zBbXYFIyoMGhsr 1+/3dRptNybsyXlX/HvBIwKrf0UKGLm5ySTzdmXW4KFttIek0Cc= -----END CERTIFICATE-----Generated at Mon Jun 30 07:19:05 2025 by rpki-client