$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: 6deUnR9O2fZiGghXl1sQmprv+YA/OFrArb65GhVxZKE= Subject key identifier: 03:60:DD:25:54:13:C2:DE:C6:C6:07:45:29:CE:DF:37:0B:EE:E6:D5 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 136CD723CF9249904FF2BEB41007E300B93439A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: C6 Signing time: Mon 04 Aug 2025 20:42:03 +0000 Manifest this update: Mon 04 Aug 2025 20:37:03 +0000 Manifest next update: Fri 08 Aug 2025 04:37:03 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 4: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: yMcasqpKkHe6BBomX2k3Btc8TAN8Ur4YQsdLKo9GqNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6c:d7:23:cf:92:49:90:4f:f2:be:b4:10:07:e3:00:b9:34:39:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Aug 4 20:37:03 2025 GMT Not After : Aug 8 04:37:03 2025 GMT Subject: CN=0360DD255413C2DEC6C6074529CEDF370BEEE6D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:6c:cf:db:26:b4:fd:08:25:21:95:bf:14: d3:81:26:65:ee:1c:64:8f:6f:64:29:5a:31:7b:b0: 79:bb:f4:b5:2d:c6:ac:e0:b8:f9:f5:b8:99:80:32: 27:cf:a1:85:80:3d:2c:09:9e:76:fa:60:e9:ed:b4: 33:25:f1:67:63:b6:1d:9d:c9:58:f0:f0:7b:67:29: fc:80:a0:ad:ec:7e:74:2a:e1:53:8d:19:44:9b:cc: 57:5a:1f:28:ff:33:38:7d:d9:12:a0:04:90:cc:5f: 1d:a5:96:c4:39:d6:d8:5d:1d:03:ee:b8:b5:ad:db: 31:13:47:07:a3:aa:19:4d:0f:bd:49:68:a3:f6:c2: f4:42:c4:b4:87:c5:94:d4:d3:07:fb:e7:10:0a:f8: 78:f3:62:73:87:3a:c4:c7:8b:3e:39:96:96:16:53: 5b:94:3d:8f:da:55:ac:76:2f:62:2f:fa:de:33:2d: 6f:5c:ec:a7:e7:19:76:6e:76:db:2a:30:56:33:67: e1:b0:e0:dc:87:39:a2:7b:d4:82:f1:50:78:81:25: e0:d9:8a:3f:50:df:20:33:5d:85:3f:ed:20:d4:e1: 48:eb:d4:90:40:30:77:2b:7e:13:d6:b3:a1:2e:fd: ca:9a:65:a5:5d:95:c2:ed:20:f2:70:58:fa:7a:e3: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:60:DD:25:54:13:C2:DE:C6:C6:07:45:29:CE:DF:37:0B:EE:E6:D5 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:3c:2b:9f:4d:05:23:4f:b0:1d:01:e5:a4:cd:69:d1:44: ec:36:af:ee:a5:a5:14:3d:a2:38:53:cb:3f:fd:01:5c:3a:22: 09:92:78:8a:0c:ac:c7:e5:c9:55:32:e3:12:2c:b7:65:d2:cb: 77:ac:86:21:2c:8a:1a:bd:28:f8:ef:b4:2c:e9:7b:1a:5d:71: b3:f8:76:76:eb:94:cc:6a:aa:82:4a:5a:4f:30:ac:07:b4:e0: f1:4e:8e:11:44:db:dd:09:1d:9b:cf:3a:8c:54:9a:21:88:ef: b3:eb:be:48:24:22:b5:de:d3:fb:b7:de:27:4d:5f:75:12:dd: 10:59:22:f8:35:f8:9d:07:bc:7f:d1:05:74:79:39:01:69:dd: d2:db:dc:68:f8:6e:29:dc:88:4f:94:2e:d5:0a:d3:99:71:0f: 95:40:6c:82:f3:38:b0:3c:54:b6:55:09:a9:49:bb:5f:66:85: 9e:da:07:22:20:dd:72:3f:51:6d:78:1b:77:37:4f:f6:85:6d: fe:70:5d:4a:4b:df:be:92:7e:ac:b2:26:5f:c5:5d:68:ef:b0: d8:c3:0f:c1:e6:c5:fd:3e:d4:e7:a2:ae:bd:9b:6d:12:5c:18: 15:43:b0:4a:2a:7f:d6:db:81:99:0c:6a:bf:20:90:e7:09:91: 22:d1:73:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2zXI8+SSZBP8r60EAfjALk0OaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTA4MDQyMDM3MDNaFw0yNTA4MDgwNDM3MDNaMDMxMTAvBgNV BAMTKDAzNjBERDI1NTQxM0MyREVDNkM2MDc0NTI5Q0VERjM3MEJFRUU2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8WzP2ya0/QglIZW/FNOBJmXu HGSPb2QpWjF7sHm79LUtxqzguPn1uJmAMifPoYWAPSwJnnb6YOnttDMl8Wdjth2d yVjw8HtnKfyAoK3sfnQq4VONGUSbzFdaHyj/Mzh92RKgBJDMXx2llsQ51thdHQPu uLWt2zETRwejqhlND71JaKP2wvRCxLSHxZTU0wf75xAK+HjzYnOHOsTHiz45lpYW U1uUPY/aVax2L2Iv+t4zLW9c7KfnGXZudtsqMFYzZ+Gw4NyHOaJ71ILxUHiBJeDZ ij9Q3yAzXYU/7SDU4Ujr1JBAMHcrfhPWs6Eu/cqaZaVdlcLtIPJwWPp647pLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA2DdJVQTwt7GxgdFKc7fNwvu5tUwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3DPCufTQUjT7AdAeWkzWnRROw2r+6lpRQ9 ojhTyz/9AVw6IgmSeIoMrMflyVUy4xIst2XSy3eshiEsihq9KPjvtCzpexpdcbP4 dnbrlMxqqoJKWk8wrAe04PFOjhFE290JHZvPOoxUmiGI77PrvkgkIrXe0/u33idN X3US3RBZIvg1+J0HvH/RBXR5OQFp3dLb3Gj4binciE+ULtUK05lxD5VAbILzOLA8 VLZVCalJu19mhZ7aByIg3XI/UW14G3c3T/aFbf5wXUpL376SfqyyJl/FXWjvsNjD D8Hmxf0+1Oeirr2bbRJcGBVDsEoqf9bbgZkMar8gkOcJkSLRc0A= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:29 2025 by rpki-client