$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: 538ePfX6Mc2z3A/5Te5BJYS1dHVO/W/FjyvfKRneAWA= Subject key identifier: D9:BC:29:2E:97:93:64:47:F0:69:A2:89:1D:69:02:72:57:61:D0:88 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 5863517A377FA41D01A8F27049721A4E1485C0EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 01EA Signing time: Sat 28 Jun 2025 12:30:39 +0000 Manifest this update: Sat 28 Jun 2025 12:25:39 +0000 Manifest next update: Tue 01 Jul 2025 21:18:39 +0000 Files and hashes: 1: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: 921PvHw8yBRc2ta9Fl3zEddf9I/ZNcm5JC2bfy0rHYk=) 2: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 3: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 4: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:63:51:7a:37:7f:a4:1d:01:a8:f2:70:49:72:1a:4e:14:85:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Jun 28 12:25:39 2025 GMT Not After : Jul 1 21:18:39 2025 GMT Subject: CN=D9BC292E97936447F069A2891D6902725761D088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:e0:56:e9:b5:65:8e:f8:78:1f:43:5b:b0: 04:c3:64:fd:fa:5b:94:b6:76:10:a2:63:13:62:27: 8a:41:ac:76:e0:15:85:7e:a8:2f:3f:ac:9b:84:68: ff:37:0b:8f:95:ae:f9:3d:75:25:65:42:ee:4f:9b: 7e:6b:23:e0:ca:b0:ec:f2:a7:86:92:cd:f0:a0:57: ac:76:e3:dc:ff:ee:3b:c6:ea:2b:a1:a4:2b:b6:b3: 86:07:db:25:4e:35:70:1b:85:dd:88:17:53:1b:c2: 83:67:e6:d9:8d:1d:61:57:a9:a5:62:38:65:08:ac: 2c:db:3f:da:ad:8a:74:78:0c:7b:11:e1:94:b8:6a: a6:35:29:64:e9:b1:e9:22:9e:ff:b1:a0:60:73:ab: 4c:78:83:f6:92:7e:19:b0:4d:29:15:6a:3f:3f:b1: 1f:4b:f7:b1:12:6f:aa:a5:42:bb:a1:82:c1:c4:fd: a9:4a:8a:aa:85:f0:27:ce:34:02:7f:a1:72:37:d4: ba:da:9d:5d:01:a3:70:28:b8:16:85:a4:83:78:b0: 6d:ed:dd:e9:34:30:c0:ba:f4:2f:4c:3d:45:6a:e0: c5:9b:55:26:08:86:0f:79:99:5e:4c:d4:5b:96:69: b2:f4:f8:da:1f:34:36:55:09:80:1e:85:0a:73:1c: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BC:29:2E:97:93:64:47:F0:69:A2:89:1D:69:02:72:57:61:D0:88 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a8:1a:3b:8f:e3:f6:21:31:be:7a:6a:65:a8:86:f7:c8:ea: 20:70:b1:a6:11:65:4b:38:09:42:0e:28:33:4d:eb:18:ea:af: 7d:f2:97:ad:e6:37:8a:6e:7a:86:0e:c5:4c:2f:74:18:bb:56: 14:d5:20:10:02:62:f7:c6:db:aa:cd:b3:90:f8:76:23:6b:3c: 64:b4:d1:c2:ab:6e:ed:00:f0:6d:49:ff:18:b9:ee:5e:af:eb: 8b:00:14:a2:b2:ad:78:b3:9e:ae:e1:b1:af:94:5f:90:ff:27: a3:94:66:4d:99:70:88:50:a4:38:7e:ad:f2:18:c7:b8:9c:ae: 04:80:b7:57:2f:a9:c1:16:0d:27:40:b7:c5:66:81:e0:7b:bf: 03:dd:5c:f2:33:ce:28:63:2a:9a:52:70:65:cf:62:59:d3:14: 90:52:8a:d3:39:bb:f1:01:5f:f3:2b:d3:3c:01:51:c1:72:57: b7:21:69:1a:cf:07:56:c4:dd:55:bf:dd:c8:3b:90:63:7f:17: 0c:21:6d:d2:1a:ad:3c:fc:a5:59:e5:22:9d:86:cb:c9:1d:4b: d0:8e:e3:82:7e:54:0c:d0:96:69:b9:e8:fa:90:07:e5:57:1a: be:ba:31:16:02:36:df:ef:c2:a4:fb:e6:f9:e0:c2:cd:a1:4f: f2:47:70:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGNRejd/pB0BqPJwSXIaThSFwO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTA2MjgxMjI1MzlaFw0yNTA3MDEyMTE4MzlaMDMxMTAvBgNV BAMTKEQ5QkMyOTJFOTc5MzY0NDdGMDY5QTI4OTFENjkwMjcyNTc2MUQwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PuBW6bVljvh4H0NbsATDZP36 W5S2dhCiYxNiJ4pBrHbgFYV+qC8/rJuEaP83C4+Vrvk9dSVlQu5Pm35rI+DKsOzy p4aSzfCgV6x249z/7jvG6iuhpCu2s4YH2yVONXAbhd2IF1MbwoNn5tmNHWFXqaVi OGUIrCzbP9qtinR4DHsR4ZS4aqY1KWTpsekinv+xoGBzq0x4g/aSfhmwTSkVaj8/ sR9L97ESb6qlQruhgsHE/alKiqqF8CfONAJ/oXI31LranV0Bo3AouBaFpIN4sG3t 3ek0MMC69C9MPUVq4MWbVSYIhg95mV5M1FuWabL0+NofNDZVCYAehQpzHDa3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2bwpLpeTZEfwaaKJHWkCcldh0IgwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOoGjuP4/YhMb56amWohvfI6iBwsaYRZUs4 CUIOKDNN6xjqr33yl63mN4pueoYOxUwvdBi7VhTVIBACYvfG26rNs5D4diNrPGS0 0cKrbu0A8G1J/xi57l6v64sAFKKyrXiznq7hsa+UX5D/J6OUZk2ZcIhQpDh+rfIY x7icrgSAt1cvqcEWDSdAt8VmgeB7vwPdXPIzzihjKppScGXPYlnTFJBSitM5u/EB X/Mr0zwBUcFyV7chaRrPB1bE3VW/3cg7kGN/FwwhbdIarTz8pVnlIp2Gy8kdS9CO 44J+VAzQlmm56PqQB+VXGr66MRYCNt/vwqT75vngws2hT/JHcPo= -----END CERTIFICATE-----Generated at Mon Jun 30 10:40:07 2025 by rpki-client