$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: vSMDG6U14ilUhKghSlnb6am+uYboqLhStwr20/x8FHI= Subject key identifier: B3:06:34:30:27:8A:C9:41:5E:60:EB:0B:1C:07:B6:CB:0E:38:F7:F1 Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 5C60763A246D46D09375A9E6F4D283A38C32E28C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: BB Signing time: Tue 01 Jul 2025 15:51:54 +0000 Manifest this update: Tue 01 Jul 2025 15:46:54 +0000 Manifest next update: Sat 05 Jul 2025 01:07:54 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: x6RLu1PqX4o6MwpoE7E63cOY2e0lNxp+RKDSgvi2rMY=) 2: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) 3: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 01:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:60:76:3a:24:6d:46:d0:93:75:a9:e6:f4:d2:83:a3:8c:32:e2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Jul 1 15:46:54 2025 GMT Not After : Jul 5 01:07:54 2025 GMT Subject: CN=B3063430278AC9415E60EB0B1C07B6CB0E38F7F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:ed:3c:cb:4c:e5:a5:b2:b7:f2:a9:81:8e: 6e:63:63:90:73:b0:d7:d8:78:b2:4c:95:68:dd:c9: b4:57:23:f8:cd:63:a3:76:b1:2d:fb:88:2e:3f:94: b2:64:44:99:52:5a:60:ac:f0:23:53:59:ec:37:19: 8d:cf:6d:de:b5:bd:f8:85:01:79:e7:db:61:58:6b: 96:ed:4f:1f:95:a9:5c:c2:41:0c:8d:1d:f9:0b:59: b9:00:6e:af:16:cb:b8:83:cf:ea:01:b7:e2:2b:c2: bf:96:da:b0:99:8e:8d:4c:6d:81:3c:38:df:0d:f6: 55:86:bd:69:d5:ac:c1:ab:e6:ae:5f:a8:d1:46:67: 08:f9:d7:cc:2c:78:cc:9b:9e:7b:9a:61:0f:61:fa: d6:58:2d:e4:a5:3c:ca:ab:3e:ca:73:48:da:bf:a6: f8:82:77:f0:6d:d3:65:48:07:88:a6:ee:69:5f:c1: cc:a3:16:24:c3:e4:66:fc:92:de:4d:f3:0d:df:8c: 20:0b:5b:24:ff:78:b9:1f:38:dc:de:49:f2:ea:a8: 10:1b:d2:3c:04:a1:0f:70:b4:56:2a:bb:6b:fc:e0: b9:26:32:dc:a2:dd:61:17:a8:91:88:0d:df:9b:4a: b7:86:63:42:f1:24:d9:93:dd:00:81:cc:9e:bb:8a: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:34:30:27:8A:C9:41:5E:60:EB:0B:1C:07:B6:CB:0E:38:F7:F1 X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:92:48:b6:7d:bf:c4:4a:5c:ba:9f:e1:a4:06:c6:af:56:4d: 98:5f:43:8a:59:27:42:ae:6b:84:43:c2:1c:52:14:4d:63:ac: 4a:bf:89:97:f0:21:1b:9f:d7:8f:c4:e1:3d:3b:fb:51:c2:34: 5a:db:aa:07:07:a5:b9:61:ff:85:9c:ef:4a:05:45:8d:6c:47: 01:07:df:31:5a:f5:c5:16:82:32:f8:e7:36:0e:7d:05:21:a5: 49:29:73:d6:d5:3d:43:4a:c4:85:97:32:42:fb:3e:6d:27:59: 14:bb:25:38:a2:c6:8a:c5:01:1d:ea:3c:c8:a4:06:10:c1:91: e5:5d:7e:03:76:1f:64:f6:a3:e8:17:fc:99:b4:3c:c9:3b:20: ff:66:33:e9:ac:01:11:52:80:28:45:32:7f:6e:20:cf:4e:a3: 49:7b:1d:ed:b1:30:fe:1d:89:75:43:1e:29:6d:82:14:5c:a0: 66:08:71:88:9f:63:35:fe:dc:8a:9b:db:d0:ed:25:02:bf:9b: a3:44:c5:48:83:2c:3f:e4:d9:49:4f:c6:cc:d0:7f:f1:b7:58: cc:2b:92:d2:8b:da:60:b4:a5:d0:5b:ed:20:d9:75:bb:3c:35: 1a:52:43:b8:41:1b:75:3f:5a:07:e5:6c:ef:8b:90:cd:9f:b6: 5c:3e:91:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGB2OiRtRtCTdanm9NKDo4wy4owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA3MDExNTQ2NTRaFw0yNTA3MDUwMTA3NTRaMDMxMTAvBgNV BAMTKEIzMDYzNDMwMjc4QUM5NDE1RTYwRUIwQjFDMDdCNkNCMEUzOEY3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ie08y0zlpbK38qmBjm5jY5Bz sNfYeLJMlWjdybRXI/jNY6N2sS37iC4/lLJkRJlSWmCs8CNTWew3GY3Pbd61vfiF AXnn22FYa5btTx+VqVzCQQyNHfkLWbkAbq8Wy7iDz+oBt+Irwr+W2rCZjo1MbYE8 ON8N9lWGvWnVrMGr5q5fqNFGZwj518wseMybnnuaYQ9h+tZYLeSlPMqrPspzSNq/ pviCd/Bt02VIB4im7mlfwcyjFiTD5Gb8kt5N8w3fjCALWyT/eLkfONzeSfLqqBAb 0jwEoQ9wtFYqu2v84LkmMtyi3WEXqJGIDd+bSreGY0LxJNmT3QCBzJ67ik2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUswY0MCeKyUFeYOsLHAe2yw449/EwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOSSLZ9v8RKXLqf4aQGxq9WTZhfQ4pZJ0Ku a4RDwhxSFE1jrEq/iZfwIRuf14/E4T07+1HCNFrbqgcHpblh/4Wc70oFRY1sRwEH 3zFa9cUWgjL45zYOfQUhpUkpc9bVPUNKxIWXMkL7Pm0nWRS7JTiixorFAR3qPMik BhDBkeVdfgN2H2T2o+gX/Jm0PMk7IP9mM+msARFSgChFMn9uIM9Oo0l7He2xMP4d iXVDHiltghRcoGYIcYifYzX+3Iqb29DtJQK/m6NExUiDLD/k2UlPxszQf/G3WMwr ktKL2mC0pdBb7SDZdbs8NRpSQ7hBG3U/WgflbO+LkM2ftlw+keE= -----END CERTIFICATE-----Generated at Wed Jul 2 21:22:09 2025 by rpki-client