$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: X0artrsYeGBWqVwRwOrgh6+qQ7/fJjve58yg6XioIRY= Subject key identifier: CC:DF:CA:7E:9D:D0:F8:8C:C7:8D:9B:32:A6:EF:DE:E8:CF:34:0E:03 Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 2CDE1E3FDE0792A901D9523C2D3CD4C439631426 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 0177 Signing time: Fri 13 Jun 2025 20:31:12 +0000 Manifest this update: Fri 13 Jun 2025 20:26:12 +0000 Manifest next update: Tue 17 Jun 2025 06:00:12 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) 2: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: p3A905/wy864H96jIngE12pvV9Co08L/S5sX/k+WUvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:de:1e:3f:de:07:92:a9:01:d9:52:3c:2d:3c:d4:c4:39:63:14:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Jun 13 20:26:12 2025 GMT Not After : Jun 17 06:00:12 2025 GMT Subject: CN=CCDFCA7E9DD0F88CC78D9B32A6EFDEE8CF340E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:2b:ba:dd:0e:a6:1e:01:76:08:26:bf:8f: 55:7a:06:01:00:21:0e:08:ce:2c:f1:ca:47:b4:e4: c8:ec:d3:91:7d:ca:8a:5e:ea:79:1f:51:5f:c3:b0: 5d:59:cf:57:ae:94:0a:51:48:20:94:e2:ad:e7:5a: 06:fd:a1:59:8b:e9:84:9e:02:56:e4:0d:67:17:cd: a3:e5:10:4e:fa:5a:c9:48:65:db:ee:f2:05:97:ae: 42:67:8d:6f:71:b2:ef:c8:19:a8:00:7f:fd:0f:2f: e5:99:fd:4c:fb:df:d2:ae:b8:dd:13:74:f6:78:40: 6a:f3:f1:04:26:39:7e:d9:61:b6:ea:71:33:65:31: 93:cc:69:b6:b3:2f:c3:30:7f:41:46:3e:ba:ba:1e: f6:6d:f1:1c:0a:a6:73:1f:9f:41:bd:40:7d:b1:db: e4:1e:f0:e5:a3:5c:a6:4c:ae:37:39:b5:14:f6:2a: 62:f5:f1:c5:76:ec:ee:88:41:5c:b7:20:3e:b9:bc: 6d:d3:05:6c:78:70:33:20:2b:1c:ae:3c:82:4a:be: c6:7a:0c:77:3e:96:28:25:91:02:7c:dd:06:c7:0e: 4f:9c:88:09:ad:15:70:45:f6:19:55:1e:fd:01:2f: e9:06:81:81:08:82:8e:d6:bf:51:af:1b:55:b6:1a: e6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DF:CA:7E:9D:D0:F8:8C:C7:8D:9B:32:A6:EF:DE:E8:CF:34:0E:03 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:64:c6:d9:b4:37:b5:78:77:28:a8:96:5d:72:45:b5:4e:38: 4f:b5:87:6b:99:38:89:2b:50:b5:b7:df:49:40:ea:06:af:38: f9:b3:ec:84:a5:71:e5:de:f1:34:d2:a6:d7:07:5d:98:1d:d4: da:39:f8:cc:96:6c:c8:7e:1b:2f:23:62:0e:1a:ab:4a:c3:e5: 53:b8:f4:1d:42:46:f1:3c:ad:46:de:ac:bf:14:7f:a2:bd:b4: f3:7d:c3:0c:2b:95:47:cb:bb:a3:23:d8:87:91:2b:37:7b:0c: 9f:c0:5f:31:f6:d4:96:ae:39:a4:39:03:4f:ff:c1:3c:f3:a6: 35:ef:91:4d:fc:b6:de:b0:17:12:f1:60:21:1f:74:2d:42:43: d1:bb:39:1e:f3:7b:7f:bd:23:cf:79:95:d2:16:32:fc:3c:4c: a8:86:f0:55:6f:34:1c:7a:53:8d:32:08:e6:ce:fe:1c:35:e2: d3:62:fd:b7:16:70:c2:2d:5b:c7:9c:de:95:33:37:c3:f3:62: fd:07:fc:9b:52:32:0b:ab:bd:2b:07:21:77:6f:6f:bd:5b:e1: 8f:29:f5:0d:41:5c:a9:cc:cf:34:aa:18:a6:88:a0:5e:08:f5: 0e:19:03:90:1b:7c:71:05:f6:d5:a1:14:57:e0:28:59:87:1a: 0b:34:58:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULN4eP94HkqkB2VI8LTzUxDljFCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTA2MTMyMDI2MTJaFw0yNTA2MTcwNjAwMTJaMDMxMTAvBgNV BAMTKENDREZDQTdFOUREMEY4OENDNzhEOUIzMkE2RUZERUU4Q0YzNDBFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbSu63Q6mHgF2CCa/j1V6BgEA IQ4Izizxyke05Mjs05F9yope6nkfUV/DsF1Zz1eulApRSCCU4q3nWgb9oVmL6YSe AlbkDWcXzaPlEE76WslIZdvu8gWXrkJnjW9xsu/IGagAf/0PL+WZ/Uz739KuuN0T dPZ4QGrz8QQmOX7ZYbbqcTNlMZPMabazL8Mwf0FGPrq6HvZt8RwKpnMfn0G9QH2x 2+Qe8OWjXKZMrjc5tRT2KmL18cV27O6IQVy3ID65vG3TBWx4cDMgKxyuPIJKvsZ6 DHc+liglkQJ83QbHDk+ciAmtFXBF9hlVHv0BL+kGgYEIgo7Wv1GvG1W2GuZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzN/Kfp3Q+IzHjZsypu/e6M80DgMwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1kxtm0N7V4dyioll1yRbVOOE+1h2uZOIkr ULW330lA6gavOPmz7ISlceXe8TTSptcHXZgd1No5+MyWbMh+Gy8jYg4aq0rD5VO4 9B1CRvE8rUberL8Uf6K9tPN9wwwrlUfLu6Mj2IeRKzd7DJ/AXzH21JauOaQ5A0// wTzzpjXvkU38tt6wFxLxYCEfdC1CQ9G7OR7ze3+9I895ldIWMvw8TKiG8FVvNBx6 U40yCObO/hw14tNi/bcWcMItW8ec3pUzN8PzYv0H/JtSMgurvSsHIXdvb71b4Y8p 9Q1BXKnMzzSqGKaIoF4I9Q4ZA5AbfHEF9tWhFFfgKFmHGgs0WFA= -----END CERTIFICATE-----Generated at Mon Jun 16 02:07:48 2025 by rpki-client