$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json) Hash identifier: XPZxFOz4AjCZLeua3/wNz9WuX5Sktjq9deLyieShY7k= Subject key identifier: 1B:C2:91:C1:B7:C6:6E:9C:45:04:93:24:D9:DC:46:24:13:1E:59:62 Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Certificate serial: 670AC9169AE842DE7303188478285FAC590BEB77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft Manifest number: 01B1 Signing time: Sat 14 Jun 2025 10:11:37 +0000 Manifest this update: Sat 14 Jun 2025 10:06:36 +0000 Manifest next update: Tue 17 Jun 2025 20:36:36 +0000 Files and hashes: 1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: ZU6cyNYkIUPGF40k5MNIL/bcfaMQCK3GLUO1mmc7O+4=) 2: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: 7IB6HnSfm+K+ekqDdAvWL73BeRhXy7rRRqTfw3qA7FI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0a:c9:16:9a:e8:42:de:73:03:18:84:78:28:5f:ac:59:0b:eb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Validity Not Before: Jun 14 10:06:36 2025 GMT Not After : Jun 17 20:36:36 2025 GMT Subject: CN=1BC291C1B7C66E9C45049324D9DC4624131E5962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:0f:65:24:e3:29:4e:6a:15:b2:9d:01:f4: cd:cc:45:3a:fb:62:d6:3d:b3:71:58:09:25:08:ae: 19:12:1b:ff:78:12:27:88:7b:32:0c:9e:1f:0b:e3: 30:3e:86:82:18:09:a3:0a:f8:13:f1:86:11:5e:fe: 76:15:46:21:71:57:14:a2:74:92:f8:39:e1:68:8a: ba:45:55:5f:8f:f9:29:ca:7e:da:68:e9:1e:c9:79: 0f:02:1c:d9:cb:13:d9:6a:67:85:63:65:17:38:ad: cf:15:8c:e9:21:a2:95:db:fe:c8:38:98:59:5d:a4: b7:d7:75:2f:02:8b:d8:57:0b:be:1a:73:ec:53:a7: 86:89:6e:c3:62:20:93:ff:f6:17:7b:77:6b:b3:1b: b4:1f:73:c6:18:f7:2c:ff:a1:10:8b:cf:cf:48:c2: 5c:e8:cf:92:ad:db:ce:1f:69:8e:31:cd:c7:24:8c: 18:3a:2e:d5:b6:50:61:a6:2d:0f:25:f8:15:74:e8: dd:15:64:5f:33:79:c6:da:32:f9:9d:1d:b3:7d:5d: 26:b1:47:c3:a7:42:fa:c9:22:43:3f:e0:4f:8d:c7: ad:ea:46:ad:3e:89:7c:7e:f3:bb:31:17:ee:bc:d8: 64:54:ab:5f:d6:ba:5b:7a:f4:4e:a8:c0:b2:76:01: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:91:C1:B7:C6:6E:9C:45:04:93:24:D9:DC:46:24:13:1E:59:62 X509v3 Authority Key Identifier: keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:91:b7:45:14:79:dd:5d:8d:5c:6b:41:07:2f:b9:ba:f6:53: 85:56:33:16:bd:98:7a:4e:59:68:e1:e9:ca:92:10:c6:44:cb: 5c:b9:45:c7:01:cc:5f:4e:3b:5a:ff:5d:ce:0c:05:56:39:49: ac:07:ba:70:87:34:45:cb:e7:e6:53:86:84:09:f6:11:cf:bd: 52:1b:c2:f6:dc:0b:df:ce:94:85:5f:58:27:d6:8b:64:bb:9a: dd:0e:e9:11:ea:77:3b:b5:ae:7c:ee:2e:53:b8:34:ac:44:4e: c0:a8:4f:74:cb:d2:4e:ca:09:00:7b:ea:41:4d:82:1d:d5:98: 58:21:07:42:df:63:69:ab:7e:ef:cc:e4:f0:42:9e:9b:76:c1: a7:25:f6:08:ed:8d:43:e6:d4:c9:48:fe:e1:7c:2a:bc:3f:d5: c8:c8:d0:f6:c4:08:9c:3d:39:36:9c:2d:0a:5b:9c:c4:2b:a8: 80:5c:5e:36:43:16:24:6f:9f:9f:09:12:9e:06:7f:10:46:77: 9c:ed:28:48:af:99:24:03:a7:df:fb:81:ed:b9:58:d7:e6:d4: 7a:87:8f:4c:04:b5:b0:3c:a5:38:99:93:8f:42:e7:82:24:35: c1:eb:e0:fb:75:eb:69:95:09:33:aa:02:59:37:d4:65:e6:67: 84:ef:65:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwrJFproQt5zAxiEeChfrFkL63cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE OTFEQkY5QzAeFw0yNTA2MTQxMDA2MzZaFw0yNTA2MTcyMDM2MzZaMDMxMTAvBgNV BAMTKDFCQzI5MUMxQjdDNjZFOUM0NTA0OTMyNEQ5REM0NjI0MTMxRTU5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPQ9lJOMpTmoVsp0B9M3MRTr7 YtY9s3FYCSUIrhkSG/94EieIezIMnh8L4zA+hoIYCaMK+BPxhhFe/nYVRiFxVxSi dJL4OeFoirpFVV+P+SnKftpo6R7JeQ8CHNnLE9lqZ4VjZRc4rc8VjOkhopXb/sg4 mFldpLfXdS8Ci9hXC74ac+xTp4aJbsNiIJP/9hd7d2uzG7Qfc8YY9yz/oRCLz89I wlzoz5Kt284faY4xzcckjBg6LtW2UGGmLQ8l+BV06N0VZF8zecbaMvmdHbN9XSax R8OnQvrJIkM/4E+Nx63qRq0+iXx+87sxF+682GRUq1/Wult69E6owLJ2ARGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8KRwbfGbpxFBJMk2dxGJBMeWWIwHwYDVR0j BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4 NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Rt0UUed1djVxrQQcvubr2U4VWMxa9mHpO WWjh6cqSEMZEy1y5RccBzF9OO1r/Xc4MBVY5SawHunCHNEXL5+ZThoQJ9hHPvVIb wvbcC9/OlIVfWCfWi2S7mt0O6RHqdzu1rnzuLlO4NKxETsCoT3TL0k7KCQB76kFN gh3VmFghB0LfY2mrfu/M5PBCnpt2wacl9gjtjUPm1MlI/uF8Krw/1cjI0PbECJw9 OTacLQpbnMQrqIBcXjZDFiRvn58JEp4GfxBGd5ztKEivmSQDp9/7ge25WNfm1HqH j0wEtbA8pTiZk49C54IkNcHr4Pt162mVCTOqAlk31GXmZ4TvZXg= -----END CERTIFICATE-----Generated at Mon Jun 16 05:34:11 2025 by rpki-client