$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: x4qlP/0nKICYn3BlfjWA6MnvYN5H7IreNUVlNEX0egY= Subject key identifier: 1E:C7:C2:86:7C:98:E9:16:EB:42:FE:EC:86:5B:AF:4C:15:AA:AC:A5 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 174F1337DD7B510CA15000EA943349AB50F3360F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: A4 Signing time: Sun 15 Jun 2025 17:00:40 +0000 Manifest this update: Sun 15 Jun 2025 16:55:40 +0000 Manifest next update: Wed 18 Jun 2025 17:41:40 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: BOlYyNH0vI3DXUd1CaxONvMCYizg/dYudYV0oPkjUbI=) 2: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) 3: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4f:13:37:dd:7b:51:0c:a1:50:00:ea:94:33:49:ab:50:f3:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Jun 15 16:55:40 2025 GMT Not After : Jun 18 17:41:40 2025 GMT Subject: CN=1EC7C2867C98E916EB42FEEC865BAF4C15AAACA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:7a:04:42:46:58:c7:16:24:18:21:dc:5f: a1:2f:62:48:ae:2d:23:67:62:3b:82:2d:09:88:f6: 9a:0f:5d:c0:53:ed:98:8c:ee:92:ef:aa:97:63:1f: 61:62:a0:65:59:ef:b3:75:27:c2:c6:71:7e:67:3a: b2:3c:4d:7e:68:2b:72:10:f8:cc:2f:6d:9c:a8:de: 4c:97:9a:2a:8a:46:6f:89:72:e2:70:bf:99:1b:08: 89:a6:5b:47:2c:89:c1:36:10:b4:b9:51:fc:21:6a: e5:34:80:2c:df:74:f9:7d:12:2d:5d:f1:33:01:d8: 38:66:e6:31:6f:ee:d6:eb:2f:4d:c9:f2:77:a2:1b: 0f:7c:b3:19:44:ac:5b:70:21:25:69:47:12:bd:15: 7f:04:c9:35:db:04:dc:5e:5c:d2:3f:08:ea:3d:c3: ae:af:d8:eb:37:84:36:43:3c:42:86:1c:70:d6:fb: 87:04:69:e4:53:63:29:6d:f6:0f:08:f9:f0:05:d7: ca:a0:1f:b8:ac:b8:f0:d3:13:58:df:5b:2e:cb:33: 97:bf:f4:fd:4b:d0:d1:e4:d0:6a:31:11:2b:d7:e6: 9e:35:6c:a0:a2:20:52:cf:db:34:c3:19:0f:bb:0d: df:f6:a1:f1:b9:f6:df:0c:51:15:51:1b:55:6a:1f: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C7:C2:86:7C:98:E9:16:EB:42:FE:EC:86:5B:AF:4C:15:AA:AC:A5 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:92:c6:be:b8:2e:b7:01:c7:83:8c:9a:dd:8e:09:30:5d:41: fb:15:2c:fb:a1:18:09:29:8b:11:1b:8a:27:77:fc:ba:40:57: 96:10:77:e0:45:84:dc:a3:52:56:a5:22:fd:c1:80:00:c3:c0: 0d:2d:f5:97:9f:c0:23:21:5c:aa:72:f3:3f:5f:e7:d3:95:b3: 24:28:95:45:17:bf:23:d9:91:49:9e:7c:48:c4:d9:10:42:b8: 9c:a1:94:99:fc:ae:ba:2e:25:2a:23:a3:a0:c0:88:47:d2:2f: ca:a8:d5:12:c0:49:c2:c1:88:0b:e7:fe:f8:da:d1:d1:c0:32: e6:df:03:53:2a:ac:d0:7b:f5:b6:51:a0:70:bd:64:e5:87:1f: b5:2b:fd:61:7d:c9:7d:fa:76:48:08:a8:4d:48:34:50:e9:65: 9e:9b:db:19:1f:0f:ff:e4:88:46:0d:7e:85:51:2b:07:86:05: 87:cd:26:07:c7:67:b3:f4:ea:54:b7:21:09:05:02:8d:e3:92: d8:2e:23:20:c6:1f:1b:65:0a:fc:f1:dc:2e:e7:34:1d:75:42: 6b:57:d7:e9:99:b3:43:17:61:76:dd:78:70:54:d0:fc:f5:72: 0c:f5:95:eb:51:6b:db:a9:71:22:b0:a8:ce:36:e2:49:9b:0b: 60:fa:ab:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF08TN917UQyhUADqlDNJq1DzNg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA2MTUxNjU1NDBaFw0yNTA2MTgxNzQxNDBaMDMxMTAvBgNV BAMTKDFFQzdDMjg2N0M5OEU5MTZFQjQyRkVFQzg2NUJBRjRDMTVBQUFDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2inoEQkZYxxYkGCHcX6EvYkiu LSNnYjuCLQmI9poPXcBT7ZiM7pLvqpdjH2FioGVZ77N1J8LGcX5nOrI8TX5oK3IQ +MwvbZyo3kyXmiqKRm+JcuJwv5kbCImmW0csicE2ELS5UfwhauU0gCzfdPl9Ei1d 8TMB2Dhm5jFv7tbrL03J8neiGw98sxlErFtwISVpRxK9FX8EyTXbBNxeXNI/COo9 w66v2Os3hDZDPEKGHHDW+4cEaeRTYylt9g8I+fAF18qgH7isuPDTE1jfWy7LM5e/ 9P1L0NHk0GoxESvX5p41bKCiIFLP2zTDGQ+7Dd/2ofG59t8MURVRG1VqH3k3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHsfChnyY6RbrQv7shluvTBWqrKUwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWSxr64LrcBx4OMmt2OCTBdQfsVLPuhGAkp ixEbiid3/LpAV5YQd+BFhNyjUlalIv3BgADDwA0t9ZefwCMhXKpy8z9f59OVsyQo lUUXvyPZkUmefEjE2RBCuJyhlJn8rrouJSojo6DAiEfSL8qo1RLAScLBiAvn/vja 0dHAMubfA1MqrNB79bZRoHC9ZOWHH7Ur/WF9yX36dkgIqE1INFDpZZ6b2xkfD//k iEYNfoVRKweGBYfNJgfHZ7P06lS3IQkFAo3jktguIyDGHxtlCvzx3C7nNB11QmtX 1+mZs0MXYXbdeHBU0Pz1cgz1letRa9upcSKwqM424kmbC2D6q/M= -----END CERTIFICATE-----Generated at Mon Jun 16 15:40:04 2025 by rpki-client