$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: yFCmMjmnsZxGdmrYfPImgjMoH9Qa7s3xa3ta6xu/b04= Subject key identifier: 1E:4C:B3:CD:94:CA:2B:7D:B7:31:FD:D2:59:89:1E:E2:AD:85:80:B1 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 6C8A45766A113B92DB90828519FF305B90958494 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: CC Signing time: Sun 29 Jun 2025 17:12:17 +0000 Manifest this update: Sun 29 Jun 2025 17:07:17 +0000 Manifest next update: Wed 02 Jul 2025 18:57:17 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 3: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 4: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: 7EWzc2Z1MyBpY6FzI7p3SFRQmkcXf3cqCOdBkRh3SDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8a:45:76:6a:11:3b:92:db:90:82:85:19:ff:30:5b:90:95:84:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Jun 29 17:07:17 2025 GMT Not After : Jul 2 18:57:17 2025 GMT Subject: CN=1E4CB3CD94CA2B7DB731FDD259891EE2AD8580B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:dc:30:66:5b:62:ad:c3:2d:25:89:31:d9: 1e:36:50:87:91:5d:da:38:cb:09:91:aa:11:af:2d: 91:da:18:65:98:7a:8b:20:32:0e:9d:f6:1e:20:ae: a4:6c:f8:58:22:12:9a:77:75:47:a3:7c:8f:84:0c: 4a:d6:68:cf:49:fd:40:92:c4:c4:0e:7d:18:b6:99: 87:41:13:ea:de:f6:9c:24:aa:b8:28:3a:65:e8:c1: 17:36:a0:f6:ae:35:2e:0b:d5:96:71:cf:87:65:74: 28:8c:e0:0c:eb:ed:09:65:ab:a5:5d:c1:59:be:aa: 3e:25:fc:2c:7d:6c:20:95:29:b5:0a:45:5d:03:67: 53:b9:31:02:f3:b9:25:10:f2:4e:38:43:72:90:79: 9f:4f:ea:61:66:b4:a0:10:7e:41:19:2d:bb:a9:df: cb:c2:fb:41:fd:1c:56:bd:94:d5:e6:b2:46:47:47: d2:1f:a9:d5:c8:c2:55:78:c2:64:f1:6b:7e:12:d9: c0:3e:fa:75:4c:9c:ae:ef:20:3d:ef:c4:1e:10:a5: d1:55:94:0e:4c:08:c9:e5:b5:f8:5c:81:9e:06:be: 77:cd:96:e2:4d:54:13:30:c6:72:bf:e9:e0:4e:4c: fd:37:6e:8c:39:c9:ab:0c:b4:80:f0:a7:4b:13:e7: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4C:B3:CD:94:CA:2B:7D:B7:31:FD:D2:59:89:1E:E2:AD:85:80:B1 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:26:6a:db:33:7e:09:d0:cb:6a:39:5e:a8:6d:aa:f3:c1:84: d3:d7:90:1c:66:8a:97:ae:b2:ee:4e:a9:ce:bc:58:42:f7:20: 33:ea:2e:ca:56:c9:8b:ba:63:4e:95:4d:e3:93:cc:a1:1b:24: e4:1a:e3:09:f6:f0:ad:44:56:eb:f7:ed:b6:cb:fd:c4:50:ff: e9:77:c8:27:52:af:9e:d7:54:64:3d:6d:a1:9c:45:3a:32:9e: 7b:d4:6f:66:6f:28:fe:e3:44:47:89:b5:3a:5f:bf:30:cf:9e: 73:13:f8:5d:4f:78:df:e9:ef:b8:26:20:15:db:ed:de:91:b6: 81:d5:f0:e7:a4:ab:8d:7e:71:e6:f3:96:00:8e:e9:57:dd:f2: d4:6b:56:ee:ef:f5:c9:cf:d4:72:25:02:56:d8:fd:84:eb:6a: 1c:af:b4:ab:55:e1:7f:bc:18:19:40:00:fc:93:de:b3:81:95: 56:3c:e6:79:af:51:8c:f5:87:35:85:25:36:27:1a:f8:e4:71: 7d:6d:06:0b:0a:aa:d5:31:ef:03:ef:f6:98:4c:80:8c:e0:e5: df:2d:59:dd:c3:4b:c7:6e:fc:d9:a3:ba:f2:0f:d4:63:6d:d1: 39:8e:1b:b0:3e:7c:38:51:32:4f:0f:9c:24:78:52:34:1d:db: 83:76:bd:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIpFdmoRO5LbkIKFGf8wW5CVhJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTA2MjkxNzA3MTdaFw0yNTA3MDIxODU3MTdaMDMxMTAvBgNV BAMTKDFFNENCM0NEOTRDQTJCN0RCNzMxRkREMjU5ODkxRUUyQUQ4NTgwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiptwwZltircMtJYkx2R42UIeR Xdo4ywmRqhGvLZHaGGWYeosgMg6d9h4grqRs+FgiEpp3dUejfI+EDErWaM9J/UCS xMQOfRi2mYdBE+re9pwkqrgoOmXowRc2oPauNS4L1ZZxz4dldCiM4Azr7Qllq6Vd wVm+qj4l/Cx9bCCVKbUKRV0DZ1O5MQLzuSUQ8k44Q3KQeZ9P6mFmtKAQfkEZLbup 38vC+0H9HFa9lNXmskZHR9IfqdXIwlV4wmTxa34S2cA++nVMnK7vID3vxB4QpdFV lA5MCMnltfhcgZ4GvnfNluJNVBMwxnK/6eBOTP03bow5yasMtIDwp0sT58kJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkyzzZTKK323Mf3SWYke4q2FgLEwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsmatszfgnQy2o5XqhtqvPBhNPXkBxmipeu su5Oqc68WEL3IDPqLspWyYu6Y06VTeOTzKEbJOQa4wn28K1EVuv37bbL/cRQ/+l3 yCdSr57XVGQ9baGcRToynnvUb2ZvKP7jREeJtTpfvzDPnnMT+F1PeN/p77gmIBXb 7d6RtoHV8Oekq41+cebzlgCO6Vfd8tRrVu7v9cnP1HIlAlbY/YTrahyvtKtV4X+8 GBlAAPyT3rOBlVY85nmvUYz1hzWFJTYnGvjkcX1tBgsKqtUx7wPv9phMgIzg5d8t Wd3DS8du/NmjuvIP1GNt0TmOG7A+fDhRMk8PnCR4UjQd24N2vf4= -----END CERTIFICATE-----Generated at Sun Jun 29 21:11:48 2025 by rpki-client