$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: B2yGbhmO+7dxjlrrmE/zecgknEu7YLDJpRgV2wC8xvk= Subject key identifier: C3:16:A8:CE:1E:D2:0C:0D:86:01:D9:5A:F7:92:B6:DC:08:2E:FB:2E Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 60A029C2AFBA48F7C59B51FE76E54581FC6097E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: B3 Signing time: Sun 15 Jun 2025 14:12:15 +0000 Manifest this update: Sun 15 Jun 2025 14:07:15 +0000 Manifest next update: Thu 19 Jun 2025 01:23:15 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) 2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: ll37LDlOyPf7O+OszsaRF/hMXq/nK/H/2ir8/aZEE38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a0:29:c2:af:ba:48:f7:c5:9b:51:fe:76:e5:45:81:fc:60:97:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Jun 15 14:07:15 2025 GMT Not After : Jun 19 01:23:15 2025 GMT Subject: CN=C316A8CE1ED20C0D8601D95AF792B6DC082EFB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:36:fc:d6:0c:48:57:b9:29:20:16:50:01:20: 56:30:da:fa:5d:d9:ab:19:0f:30:32:dd:63:9e:fd: c8:bf:56:1a:c2:81:5c:ff:5f:1e:dd:6a:fa:a5:22: 51:72:59:18:21:26:69:3e:3c:d2:2e:60:de:9b:5a: 52:fe:aa:ee:c3:5f:91:ca:5f:a3:30:2a:6d:d5:73: b6:f3:92:a7:aa:10:b6:48:e3:38:13:1e:e1:e0:d6: f0:f8:6c:7f:f7:5e:23:93:c0:21:b8:a0:6c:c1:01: a9:f5:c5:d3:81:f9:dd:b9:22:95:11:0c:54:89:ef: c3:2d:87:46:5c:37:ea:cf:d5:20:14:07:96:c8:97: 2a:2b:ca:c2:9d:89:b9:1f:07:25:1b:0d:8c:e4:75: 97:2c:01:5f:2e:47:df:9c:be:d8:a0:d8:8d:51:d4: d3:99:f6:97:74:41:12:38:42:fe:fc:9a:f5:df:56: 9f:0b:4f:04:67:65:05:7d:8c:ab:84:89:52:8b:46: b9:fa:0b:31:97:8a:45:0f:e7:ed:1e:c4:9f:fb:07: 55:3e:de:c2:fa:64:0c:30:69:70:3a:d5:cc:1d:94: af:20:26:3e:c7:84:d6:45:01:2b:5d:e8:3d:a6:1b: bd:9f:6d:96:c9:d3:60:b7:56:41:b9:f7:5e:82:99: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:16:A8:CE:1E:D2:0C:0D:86:01:D9:5A:F7:92:B6:DC:08:2E:FB:2E X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0a:b5:0b:34:2f:91:2a:68:22:54:c2:9e:91:3c:92:0c:d8: 03:e1:d4:cb:59:8d:f0:38:4e:01:08:b8:dc:c3:ef:4d:45:d7: dd:e3:20:90:b0:6e:e8:48:de:bd:89:46:8c:b2:cd:14:01:f3: 34:c8:1b:90:84:95:79:03:3c:69:3d:f5:28:03:20:b4:4c:28: 64:54:e9:c9:1c:c9:cb:be:15:ee:d5:18:d1:1d:90:8b:b6:a8: 19:92:cb:56:cb:13:c3:b5:2e:c9:e9:2f:82:52:e4:07:fe:cb: 4c:3b:11:33:a4:e3:28:b9:e6:35:70:46:38:5b:45:58:d1:b1: d3:ec:de:ba:3e:c7:c6:99:42:02:a4:42:79:96:27:6b:74:86: 5a:76:49:10:86:47:a9:d6:20:05:43:1b:3c:5a:72:f8:29:aa: ef:c4:7c:94:96:2c:fe:07:76:ff:5a:f8:1d:ea:ac:18:f3:bd: f6:00:f7:62:3f:2b:e6:dd:5a:b3:e2:74:6c:38:5f:fa:91:ca: f1:50:ff:ca:8c:88:6c:ec:dc:df:71:ee:20:3b:dc:e6:ca:7f: 47:8a:60:2c:08:15:07:b5:87:9b:89:2f:4c:d5:71:05:82:92: 94:07:0f:c8:50:73:60:1f:12:7f:97:d7:ce:40:e1:14:6b:19: cc:24:f1:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKApwq+6SPfFm1H+duVFgfxgl+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA2MTUxNDA3MTVaFw0yNTA2MTkwMTIzMTVaMDMxMTAvBgNV BAMTKEMzMTZBOENFMUVEMjBDMEQ4NjAxRDk1QUY3OTJCNkRDMDgyRUZCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvNvzWDEhXuSkgFlABIFYw2vpd 2asZDzAy3WOe/ci/VhrCgVz/Xx7davqlIlFyWRghJmk+PNIuYN6bWlL+qu7DX5HK X6MwKm3Vc7bzkqeqELZI4zgTHuHg1vD4bH/3XiOTwCG4oGzBAan1xdOB+d25IpUR DFSJ78Mth0ZcN+rP1SAUB5bIlyorysKdibkfByUbDYzkdZcsAV8uR9+cvtig2I1R 1NOZ9pd0QRI4Qv78mvXfVp8LTwRnZQV9jKuEiVKLRrn6CzGXikUP5+0exJ/7B1U+ 3sL6ZAwwaXA61cwdlK8gJj7HhNZFAStd6D2mG72fbZbJ02C3VkG5916CmR2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxaozh7SDA2GAdla95K23Agu+y4wHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEKtQs0L5EqaCJUwp6RPJIM2APh1MtZjfA4 TgEIuNzD701F193jIJCwbuhI3r2JRoyyzRQB8zTIG5CElXkDPGk99SgDILRMKGRU 6ckcycu+Fe7VGNEdkIu2qBmSy1bLE8O1LsnpL4JS5Af+y0w7ETOk4yi55jVwRjhb RVjRsdPs3ro+x8aZQgKkQnmWJ2t0hlp2SRCGR6nWIAVDGzxacvgpqu/EfJSWLP4H dv9a+B3qrBjzvfYA92I/K+bdWrPidGw4X/qRyvFQ/8qMiGzs3N9x7iA73ObKf0eK YCwIFQe1h5uJL0zVcQWCkpQHD8hQc2AfEn+X185A4RRrGcwk8RQ= -----END CERTIFICATE-----Generated at Sun Jun 15 23:56:32 2025 by rpki-client