$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: UNo3eRD4zNukQLBmsKcqJRa3yykAsmsMQTviSiGI16Q= Subject key identifier: 0F:86:11:B6:D5:63:93:B2:AB:F7:3B:DB:CF:EC:86:81:DE:A5:CA:30 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 45F12FAAB7AA8DAA479573BA88F4F40F41D7C4D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0222 Signing time: Sun 15 Jun 2025 20:52:12 +0000 Manifest this update: Sun 15 Jun 2025 20:47:12 +0000 Manifest next update: Thu 19 Jun 2025 05:33:12 +0000 Files and hashes: 1: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: pv46umGHBz522gzgRKxmDfqhJrxS9tehuBvEZeMil8Y=) 2: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 05:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f1:2f:aa:b7:aa:8d:aa:47:95:73:ba:88:f4:f4:0f:41:d7:c4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Jun 15 20:47:12 2025 GMT Not After : Jun 19 05:33:12 2025 GMT Subject: CN=0F8611B6D56393B2ABF73BDBCFEC8681DEA5CA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:7b:5b:bd:21:c8:7b:b1:5a:90:64:4b:3b: d6:01:06:79:5c:b3:31:bc:c5:82:12:06:57:0e:7a: c5:27:e9:78:c7:61:f0:f4:0e:13:64:20:01:ae:c8: e8:e9:8a:ba:39:ad:cc:90:b5:20:ca:bc:13:1b:4a: 72:b3:8a:cc:a6:59:01:96:ee:0a:83:fd:fb:fd:69: 19:71:9e:92:83:74:4c:41:45:66:7f:9b:d2:d9:d8: 84:c2:e4:c0:64:37:5b:fd:33:ee:bd:19:32:1e:67: 2e:a2:f3:fb:7a:2f:ba:98:d1:bb:b6:72:4a:ae:da: b2:26:b6:40:f4:49:a0:38:d4:11:35:e5:5f:ca:d4: 4b:83:52:f6:a2:e3:52:04:e7:31:66:b3:fb:28:76: 32:72:09:76:86:a2:35:9d:8a:02:89:30:fa:70:84: 93:83:f1:95:af:c3:0e:77:d5:44:ef:9f:47:3b:d3: 2a:d1:36:3f:70:66:82:0d:41:a9:d6:50:a5:7d:ed: 63:81:04:01:af:77:0d:5b:2b:cc:9a:99:7d:28:19: 66:c1:28:a7:44:70:b4:32:b1:3c:fd:25:d9:db:92: 26:56:37:bf:51:d6:09:c0:02:b5:46:df:f5:86:ed: 22:b0:a8:1b:e7:f2:46:08:49:07:2b:5e:dc:b2:d7: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:86:11:B6:D5:63:93:B2:AB:F7:3B:DB:CF:EC:86:81:DE:A5:CA:30 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2e:87:d9:2c:ad:71:0e:05:3c:e3:90:69:90:a6:9d:75:dd: 5d:8b:c4:0f:7d:2d:c9:2e:78:77:21:be:cb:97:ef:da:42:af: 99:17:06:ac:59:b3:99:6c:03:b9:c0:ea:79:89:5b:f1:ee:0b: 8b:32:12:1f:a1:60:76:fa:72:47:a1:67:6b:fe:c8:4c:9f:6d: 49:14:dc:e0:d3:83:c6:f9:51:2f:15:88:cf:c8:71:91:66:f8: 59:4c:8e:38:b7:e6:ed:62:64:64:d0:bc:ad:fc:41:8d:71:b5: 02:24:6c:a3:90:f5:cb:36:96:0e:96:4c:8c:ad:1e:d5:bd:c7: 52:2c:62:4f:85:3d:1b:f6:dc:24:82:5e:bc:c4:55:28:b7:84: a8:01:7e:bb:1e:ea:9a:90:13:fe:51:94:9e:c1:1c:f9:4d:4b: 62:ad:6c:6b:62:7d:26:7a:32:4f:60:78:4f:d2:48:7b:ed:08: 7b:eb:de:7f:ae:d0:94:68:03:6e:7b:21:62:53:20:38:bb:a2: fb:6b:80:c2:fb:5b:fe:18:7e:98:93:d1:b6:b7:f3:c4:9c:e4: a5:9c:29:3d:25:29:6c:f8:43:bf:c8:e1:b2:c2:db:2e:26:58: 9e:89:90:b1:d2:2b:6d:01:0b:bb:3e:92:5f:d1:17:73:8b:44: 1c:19:b6:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfEvqreqjapHlXO6iPT0D0HXxNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA2MTUyMDQ3MTJaFw0yNTA2MTkwNTMzMTJaMDMxMTAvBgNV BAMTKDBGODYxMUI2RDU2MzkzQjJBQkY3M0JEQkNGRUM4NjgxREVBNUNBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1S3tbvSHIe7FakGRLO9YBBnlc szG8xYISBlcOesUn6XjHYfD0DhNkIAGuyOjpiro5rcyQtSDKvBMbSnKzisymWQGW 7gqD/fv9aRlxnpKDdExBRWZ/m9LZ2ITC5MBkN1v9M+69GTIeZy6i8/t6L7qY0bu2 ckqu2rImtkD0SaA41BE15V/K1EuDUvai41IE5zFms/sodjJyCXaGojWdigKJMPpw hJOD8ZWvww531UTvn0c70yrRNj9wZoINQanWUKV97WOBBAGvdw1bK8yamX0oGWbB KKdEcLQysTz9JdnbkiZWN79R1gnAArVG3/WG7SKwqBvn8kYISQcrXtyy150zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4YRttVjk7Kr9zvbz+yGgd6lyjAwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8uh9ksrXEOBTzjkGmQpp113V2LxA99Lcku eHchvsuX79pCr5kXBqxZs5lsA7nA6nmJW/HuC4syEh+hYHb6ckehZ2v+yEyfbUkU 3ODTg8b5US8ViM/IcZFm+FlMjji35u1iZGTQvK38QY1xtQIkbKOQ9cs2lg6WTIyt HtW9x1IsYk+FPRv23CSCXrzEVSi3hKgBfrse6pqQE/5RlJ7BHPlNS2KtbGtifSZ6 Mk9geE/SSHvtCHvr3n+u0JRoA257IWJTIDi7ovtrgML7W/4YfpiT0ba388Sc5KWc KT0lKWz4Q7/I4bLC2y4mWJ6JkLHSK20BC7s+kl/RF3OLRBwZtvI= -----END CERTIFICATE-----Generated at Mon Jun 16 03:20:31 2025 by rpki-client