$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft File: 232967D03C1169374A898D1C8991F1ABE7744870.mft (raw, json) Hash identifier: mFTYhEwhfCuDLXShRBsyil5l3/XGh1RS4bMzBmL7v2w= Subject key identifier: D7:69:29:64:E1:6F:9B:F3:5D:7A:0D:AE:D7:B4:EB:E9:39:FB:64:61 Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 3A4F2B031E2DBB8649DACE9D7BFEC80B5357C68A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft Manifest number: 0279 Signing time: Tue 01 Jul 2025 10:11:31 +0000 Manifest this update: Tue 01 Jul 2025 10:06:31 +0000 Manifest next update: Fri 04 Jul 2025 18:51:31 +0000 Files and hashes: 1: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (hash: 8k4I9alM31pB+adpaudK4H7ty0suQjHEpsCjRwS0mmE=) 2: 232967D03C1169374A898D1C8991F1ABE7744870.crl (hash: OEc/DTuc7zu8oUvW3tjwCNCtvBucKgevwYsQMsK9gfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 18:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4f:2b:03:1e:2d:bb:86:49:da:ce:9d:7b:fe:c8:0b:53:57:c6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Jul 1 10:06:31 2025 GMT Not After : Jul 4 18:51:31 2025 GMT Subject: CN=D7692964E16F9BF35D7A0DAED7B4EBE939FB6461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:17:ce:e8:06:b4:0d:e2:fb:fd:6f:e2:bd: 70:da:7a:1c:5c:da:c4:0d:b1:20:2b:65:24:d2:3d: d8:d4:36:11:a4:f0:bb:85:26:9a:b5:ac:9f:82:a3: 6a:98:3d:5e:04:54:c0:9f:b9:58:fd:82:db:9c:69: 3f:c9:9e:94:20:82:4c:ca:cd:0f:69:11:2e:68:43: be:98:e3:5e:1b:2c:3e:cd:0f:e0:b1:d8:21:03:f3: de:ab:e5:d0:33:8f:2a:38:7a:8f:9c:a9:28:ea:bc: 7c:d5:a0:1a:56:cb:53:db:42:10:03:bc:a8:93:ac: 5b:3b:fb:66:96:82:38:4d:96:60:00:f7:ad:99:94: 64:1a:bd:cc:2a:24:94:b5:7d:64:23:4e:a0:e0:e1: c5:18:b2:db:bd:84:7e:2a:c6:cd:9d:1c:67:0a:85: 3f:90:ff:a6:3b:c5:03:56:57:c5:a2:76:eb:d7:bf: 44:ec:2a:4e:76:89:17:a7:fa:d9:15:11:4c:19:f0: a7:81:1c:6c:93:90:b2:f2:b1:fb:f7:a8:c3:02:cb: 6b:6c:c4:4e:0a:a1:c5:46:ad:41:3c:da:d2:2b:ae: c8:a5:26:75:32:4d:86:66:8d:b1:a2:a3:42:bb:c7: 9f:3c:ac:6d:e4:1e:71:e5:e3:31:7d:76:34:be:de: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:29:64:E1:6F:9B:F3:5D:7A:0D:AE:D7:B4:EB:E9:39:FB:64:61 X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:96:49:91:fa:c9:e2:f2:4a:06:81:4e:0a:f5:03:7e:c1:72: 03:97:36:0c:7f:cb:07:36:be:d7:40:09:0e:7e:9f:f5:fc:dc: 3d:f4:a6:9e:a0:30:82:4c:10:45:7a:8b:03:1c:8d:0e:07:e2: 49:20:70:15:59:1b:d6:eb:81:89:b3:0c:7d:9c:eb:09:30:3d: a2:9d:8c:26:31:51:93:f6:6c:59:f0:f8:0c:5e:f0:58:08:74: 7c:03:fb:40:98:ca:a5:b4:da:ba:37:30:0d:41:13:cd:77:14: 70:39:ff:b0:d8:0f:8a:03:a1:e3:df:74:7a:d8:b7:0c:ad:06: ae:d6:d0:a3:c1:66:ac:e3:6a:88:a4:bd:b1:df:30:ec:12:ae: 40:2d:83:82:99:b9:08:57:c2:ec:78:12:14:5a:f1:77:43:9b: a8:9d:29:68:56:65:79:d1:37:6c:aa:6e:aa:43:3e:14:84:5b: 5a:f3:9d:81:5b:f0:3d:94:87:04:d7:cc:d1:d1:b5:62:29:e4: 18:fc:6d:7a:94:fd:de:44:b2:e7:52:6e:83:e1:7b:72:2e:62: e2:92:f8:f4:75:3b:6d:eb:6c:3e:13:6d:db:97:d9:9d:22:a2: 5e:71:9c:58:2a:21:55:5f:17:9c:62:f3:c1:c7:f2:96:98:e8: 7a:57:1e:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOk8rAx4tu4ZJ2s6de/7IC1NXxoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yNTA3MDExMDA2MzFaFw0yNTA3MDQxODUxMzFaMDMxMTAvBgNV BAMTKEQ3NjkyOTY0RTE2RjlCRjM1RDdBMERBRUQ3QjRFQkU5MzlGQjY0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MhfO6Aa0DeL7/W/ivXDaehxc 2sQNsSArZSTSPdjUNhGk8LuFJpq1rJ+Co2qYPV4EVMCfuVj9gtucaT/JnpQggkzK zQ9pES5oQ76Y414bLD7ND+Cx2CED896r5dAzjyo4eo+cqSjqvHzVoBpWy1PbQhAD vKiTrFs7+2aWgjhNlmAA962ZlGQavcwqJJS1fWQjTqDg4cUYstu9hH4qxs2dHGcK hT+Q/6Y7xQNWV8WiduvXv0TsKk52iRen+tkVEUwZ8KeBHGyTkLLysfv3qMMCy2ts xE4KocVGrUE82tIrrsilJnUyTYZmjbGio0K7x588rG3kHnHl4zF9djS+3kINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12kpZOFvm/Ndeg2u17Tr6Tn7ZGEwHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlM2U5ODEtYmYzOS00MmUwLWEy ZjYtY2Y4N2M3NTdmODI3LzAvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYx QUJFNzc0NDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSWSZH6yeLySgaBTgr1A37BcgOXNgx/ywc2 vtdACQ5+n/X83D30pp6gMIJMEEV6iwMcjQ4H4kkgcBVZG9brgYmzDH2c6wkwPaKd jCYxUZP2bFnw+Axe8FgIdHwD+0CYyqW02ro3MA1BE813FHA5/7DYD4oDoePfdHrY twytBq7W0KPBZqzjaoikvbHfMOwSrkAtg4KZuQhXwux4EhRa8XdDm6idKWhWZXnR N2yqbqpDPhSEW1rznYFb8D2UhwTXzNHRtWIp5Bj8bXqU/d5EsudSboPhe3IuYuKS +PR1O23rbD4TbduX2Z0iol5xnFgqIVVfF5xi88HH8paY6HpXHvM= -----END CERTIFICATE-----Generated at Thu Jul 3 00:36:29 2025 by rpki-client