$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: srULyaXF9KdtOYX57UvDqxLcbympP4ZrdqlLG7hcD2Y= Subject key identifier: AF:84:C4:07:B0:2B:6E:CD:48:CF:14:DA:A8:23:B1:E1:79:10:57:6F Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 17136922C07163A60A4D31FEEA1FA6217FF8E18E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01CD Signing time: Sun 29 Jun 2025 12:20:34 +0000 Manifest this update: Sun 29 Jun 2025 12:15:34 +0000 Manifest next update: Wed 02 Jul 2025 16:36:34 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 2: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 3: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 4: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 5: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: XCYoyLsPhwvxtGK65frClMJMHeLxruL4x4zFwi0i5mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:13:69:22:c0:71:63:a6:0a:4d:31:fe:ea:1f:a6:21:7f:f8:e1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Jun 29 12:15:34 2025 GMT Not After : Jul 2 16:36:34 2025 GMT Subject: CN=AF84C407B02B6ECD48CF14DAA823B1E17910576F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2f:42:25:5f:b6:2d:32:48:88:68:28:13:79: 38:d8:0b:fe:cc:2f:08:12:c1:aa:a4:12:b6:f4:c6: d2:0a:bf:58:6c:0e:7d:28:50:4e:ab:95:1f:26:44: 1b:5d:ee:06:37:b8:a7:1d:d2:a2:7b:c3:01:84:d9: 81:95:1c:8e:59:4d:3c:d4:6e:b0:e5:3c:2c:71:e0: df:79:e6:be:15:36:fe:19:86:df:eb:d8:8a:84:a1: 58:26:11:dc:e3:08:b9:5e:4d:7c:0c:db:b5:2e:da: e0:6a:8c:ed:17:ac:9e:36:14:af:16:89:25:7d:3d: d8:b6:1b:27:be:c7:d3:fc:37:ab:0a:c9:29:6b:96: bc:60:8c:4f:5c:f8:44:f0:87:b7:ab:27:05:24:c4: d0:c7:16:a9:b1:20:e7:3e:41:3a:15:77:ff:45:bf: a9:a5:7a:e9:f3:e8:06:ad:8a:a4:d9:52:6a:01:43: ea:19:4a:a8:fa:78:d5:ef:c2:d7:8a:25:ee:85:ed: 3b:d4:19:22:64:32:92:8b:c9:5b:81:2d:1a:16:18: 7c:e6:fc:ad:5a:32:a8:a3:ea:37:f0:ba:93:46:bb: 8d:0d:b0:41:dd:01:3a:c3:d5:90:0f:e7:16:9d:21: bf:f9:ce:42:b3:3e:78:14:22:ed:97:14:e1:d6:78: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:84:C4:07:B0:2B:6E:CD:48:CF:14:DA:A8:23:B1:E1:79:10:57:6F X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e0:3b:35:ef:7a:0c:5a:07:9b:4a:c2:b1:e2:c7:29:bc:5b: 58:5a:e9:72:36:45:93:e9:86:f3:79:a0:dd:60:e0:b9:5d:f9: f9:16:f5:f7:cb:6c:87:b7:86:70:3f:99:ca:3d:5f:ac:6b:49: 00:db:08:52:ab:d9:fd:55:0d:a3:05:7b:c6:55:4b:aa:91:8b: 6b:e3:b2:fc:d8:54:e6:94:c1:38:61:19:0d:84:0d:20:38:05: 0f:a9:0f:5f:61:96:bf:4c:75:10:77:a0:91:0e:4f:78:e5:25: da:2e:47:06:f9:91:8f:bc:b4:8a:4f:ae:4a:d9:1b:92:5c:8e: ba:15:77:00:bb:13:5e:e3:76:df:10:da:91:f0:cf:8e:40:f2: 5f:a7:2f:8e:94:83:97:7d:52:61:e2:d1:1b:32:73:14:5b:77: df:ae:cb:65:b1:17:32:97:7e:2b:11:de:a7:98:12:6c:ef:97: b7:31:35:b6:3b:c8:67:c0:5d:f6:6a:11:e2:14:d4:76:bb:7f: 81:bb:ad:6a:38:60:11:03:56:19:e0:43:52:c5:5c:ef:8a:42: 27:9e:c4:4a:ea:f5:d5:17:b2:d7:bd:d2:e6:43:16:33:55:fc: 84:d8:6d:ef:42:cb:a2:2d:f9:ba:b7:51:70:89:8b:8a:68:96: ea:e5:13:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxNpIsBxY6YKTTH+6h+mIX/44Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA2MjkxMjE1MzRaFw0yNTA3MDIxNjM2MzRaMDMxMTAvBgNV BAMTKEFGODRDNDA3QjAyQjZFQ0Q0OENGMTREQUE4MjNCMUUxNzkxMDU3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpL0IlX7YtMkiIaCgTeTjYC/7M LwgSwaqkErb0xtIKv1hsDn0oUE6rlR8mRBtd7gY3uKcd0qJ7wwGE2YGVHI5ZTTzU brDlPCxx4N955r4VNv4Zht/r2IqEoVgmEdzjCLleTXwM27Uu2uBqjO0XrJ42FK8W iSV9Pdi2Gye+x9P8N6sKySlrlrxgjE9c+ETwh7erJwUkxNDHFqmxIOc+QToVd/9F v6mleunz6AatiqTZUmoBQ+oZSqj6eNXvwteKJe6F7TvUGSJkMpKLyVuBLRoWGHzm /K1aMqij6jfwupNGu40NsEHdATrD1ZAP5xadIb/5zkKzPngUIu2XFOHWeLvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr4TEB7Arbs1IzxTaqCOx4XkQV28wHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7gOzXvegxaB5tKwrHixym8W1ha6XI2RZPp hvN5oN1g4Lld+fkW9ffLbIe3hnA/mco9X6xrSQDbCFKr2f1VDaMFe8ZVS6qRi2vj svzYVOaUwThhGQ2EDSA4BQ+pD19hlr9MdRB3oJEOT3jlJdouRwb5kY+8tIpPrkrZ G5JcjroVdwC7E17jdt8Q2pHwz45A8l+nL46Ug5d9UmHi0RsycxRbd9+uy2WxFzKX fisR3qeYEmzvl7cxNbY7yGfAXfZqEeIU1Ha7f4G7rWo4YBEDVhngQ1LFXO+KQiee xErq9dUXste90uZDFjNV/ITYbe9Cy6It+bq3UXCJi4polurlE2s= -----END CERTIFICATE-----Generated at Mon Jun 30 01:22:18 2025 by rpki-client