$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: IQ8mqtgHUARsazdHKTNAkKSJDDeZbL2as1QYDfVNE+I= Subject key identifier: D6:D2:B9:48:80:7E:40:B3:F4:18:EF:41:9C:86:AF:AC:C4:DA:86:17 Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 22FA0397AEE03A69C3995072E48ED446D28BFD32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 035E Signing time: Mon 16 Jun 2025 20:12:05 +0000 Manifest this update: Mon 16 Jun 2025 20:07:05 +0000 Manifest next update: Thu 19 Jun 2025 20:13:05 +0000 Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 2: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: Q74AT7t5GeXZW1jOMu4XuD/3i/0ORPH+4NnLcxwdLAI=) 3: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fa:03:97:ae:e0:3a:69:c3:99:50:72:e4:8e:d4:46:d2:8b:fd:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Jun 16 20:07:05 2025 GMT Not After : Jun 19 20:13:05 2025 GMT Subject: CN=D6D2B948807E40B3F418EF419C86AFACC4DA8617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:55:3f:58:31:dd:4f:69:31:c1:27:c9:1e: 02:e9:fd:e2:7e:9c:93:90:52:bf:9c:09:67:9b:40: 44:0a:ec:d8:33:23:3d:a6:9b:b3:63:01:eb:38:08: 9d:e4:0b:9e:65:65:74:d9:89:ac:aa:c7:e9:e6:a2: 24:1f:9e:b7:b4:5d:1f:c7:23:e2:53:37:1a:36:17: 51:da:f1:3c:93:37:b9:49:a5:fc:17:06:a1:87:18: dc:35:f1:25:dc:c0:0e:a5:0e:03:c4:5a:ff:36:ca: 67:1b:dc:93:ba:5c:32:e9:76:bd:4f:3e:1f:6d:5f: 59:5f:23:76:26:9c:48:c0:62:79:d4:b9:ce:9d:40: 09:5e:f8:e3:b0:19:6e:a4:90:66:5d:22:52:2d:55: 26:b3:a7:22:1b:48:82:fd:a4:76:4e:7a:96:71:25: 58:3d:de:fa:63:5e:c0:d9:bc:a3:fe:b0:44:ae:08: 4c:88:92:9b:f1:88:3b:07:11:23:cf:e2:95:c9:5b: f6:4e:cc:73:4d:5a:8f:86:88:f0:a7:93:47:89:9f: f5:d9:1f:07:e9:b0:02:f6:e8:fd:0d:2b:05:cb:3b: 4a:fe:c4:0e:9c:9d:4e:a0:03:90:f4:7c:96:cb:68: 0b:27:79:06:76:94:d0:fe:4c:86:4d:8a:f0:57:46: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:B9:48:80:7E:40:B3:F4:18:EF:41:9C:86:AF:AC:C4:DA:86:17 X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2e:9f:25:10:08:5f:a1:0f:a7:7b:07:a6:0d:93:62:76:3d: 1f:bc:23:88:88:98:b3:3c:a2:ad:ed:40:99:19:cc:c5:2c:7d: 65:54:f0:ef:b4:40:39:04:a4:34:db:64:c1:1b:71:70:ba:39: 6e:5d:38:0f:9a:97:97:76:a2:1c:5c:c8:d9:c0:a3:f5:ed:36: 60:19:5f:9a:2e:cd:5d:ee:50:ca:77:99:17:ec:66:e4:3a:9f: 0c:ff:03:c8:5b:48:2d:0d:91:c1:28:ab:e0:a4:b0:d4:20:79: 5a:6e:0a:5e:47:a5:df:e2:33:0f:48:3d:73:b0:ac:37:bb:50: f5:f4:c6:f1:e6:14:48:f3:69:76:b6:c5:eb:d7:7a:10:3d:9f: 64:ea:dc:ba:44:ac:ca:47:d5:2a:30:48:5f:48:c2:23:c5:36: 12:2c:7b:47:b8:8f:6e:67:fb:98:9c:42:8c:06:f9:00:7a:cc: bc:b7:bf:e4:17:8a:87:83:57:3c:eb:31:11:1b:cf:dd:f9:c0: a2:a5:c7:1b:5c:77:11:1d:97:87:59:95:b2:95:21:86:7d:48: 53:7d:41:04:2b:0a:94:09:20:5e:f9:75:52:4a:ef:12:76:fe: 62:c1:ac:c9:1f:64:9f:23:25:ed:79:c5:0a:c4:01:00:24:4e: f6:1b:72:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvoDl67gOmnDmVBy5I7URtKL/TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNTA2MTYyMDA3MDVaFw0yNTA2MTkyMDEzMDVaMDMxMTAvBgNV BAMTKEQ2RDJCOTQ4ODA3RTQwQjNGNDE4RUY0MTlDODZBRkFDQzREQTg2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p1U/WDHdT2kxwSfJHgLp/eJ+ nJOQUr+cCWebQEQK7NgzIz2mm7NjAes4CJ3kC55lZXTZiayqx+nmoiQfnre0XR/H I+JTNxo2F1Ha8TyTN7lJpfwXBqGHGNw18SXcwA6lDgPEWv82ymcb3JO6XDLpdr1P Ph9tX1lfI3YmnEjAYnnUuc6dQAle+OOwGW6kkGZdIlItVSazpyIbSIL9pHZOepZx JVg93vpjXsDZvKP+sESuCEyIkpvxiDsHESPP4pXJW/ZOzHNNWo+GiPCnk0eJn/XZ HwfpsAL26P0NKwXLO0r+xA6cnU6gA5D0fJbLaAsneQZ2lND+TIZNivBXRv71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1tK5SIB+QLP0GO9BnIavrMTahhcwHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYunyUQCF+hD6d7B6YNk2J2PR+8I4iImLM8 oq3tQJkZzMUsfWVU8O+0QDkEpDTbZMEbcXC6OW5dOA+al5d2ohxcyNnAo/XtNmAZ X5ouzV3uUMp3mRfsZuQ6nwz/A8hbSC0NkcEoq+CksNQgeVpuCl5Hpd/iMw9IPXOw rDe7UPX0xvHmFEjzaXa2xevXehA9n2Tq3LpErMpH1SowSF9IwiPFNhIse0e4j25n +5icQowG+QB6zLy3v+QXioeDVzzrMREbz935wKKlxxtcdxEdl4dZlbKVIYZ9SFN9 QQQrCpQJIF75dVJK7xJ2/mLBrMkfZJ8jJe15xQrEAQAkTvYbcp4= -----END CERTIFICATE-----Generated at Wed Jun 18 05:20:10 2025 by rpki-client