$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft File: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft (raw, json) Hash identifier: 7xhDR/FPUXD7ADrdGPsVuAj6Fqi2RpFYVGlOlyZoYQ4= Subject key identifier: 62:46:9E:48:D1:C0:12:DA:F8:B3:2D:DF:79:AD:05:32:17:FD:FD:EA Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 Certificate issuer: /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Certificate serial: 1C3AE6CC64BDB4C6B4D256A50509EC57B510F0BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft Manifest number: B3 Signing time: Mon 04 Aug 2025 21:52:10 +0000 Manifest this update: Mon 04 Aug 2025 21:47:10 +0000 Manifest next update: Fri 08 Aug 2025 08:08:10 +0000 Files and hashes: 1: 6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl (hash: APMIqx0IkM9biQusQFrQrLVSeJW9tYxCl94mzUGQE0g=) 2: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: S3VXhgYtvhONpM//oPKshJPEJR4sGwHoBTyv1ewhA6c=) 3: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: HY612DFm89Ly6o4e92rrpvg8mrv7ex72DLbVFNfFY0s=) 4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: RZavabWdjUisE5dZEMsjEGsR8uhGqkdjSJ50UHfdWw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3a:e6:cc:64:bd:b4:c6:b4:d2:56:a5:05:09:ec:57:b5:10:f0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28 Validity Not Before: Aug 4 21:47:10 2025 GMT Not After : Aug 8 08:08:10 2025 GMT Subject: CN=62469E48D1C012DAF8B32DDF79AD053217FDFDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:12:6e:2e:9e:58:87:12:34:f2:a7:18:f8: f1:bb:20:06:f9:9f:34:01:a7:54:15:fa:f9:f5:69: 53:6a:c7:a2:03:76:0a:17:e7:ae:1e:95:20:e5:ca: 82:f8:81:98:b9:a7:d2:24:7c:2f:9b:96:e7:27:8d: 47:b9:e5:ad:ba:04:14:fa:39:d7:f5:c6:0c:d6:12: fc:41:0a:8b:27:71:f5:26:5d:e1:11:d9:fb:22:f4: ae:38:ce:ae:e3:65:ea:12:59:d3:df:0d:b1:ef:4d: 12:dd:54:08:a9:bd:a6:2c:e5:8e:59:4e:11:c2:2b: 20:5f:2a:fd:00:9c:f8:21:d3:e1:d8:5c:75:8b:06: b6:8a:44:23:cd:1a:33:59:80:80:f0:50:cc:b9:83: 9d:0d:87:fa:20:a5:7e:cc:ad:9d:d7:2b:57:41:d3: 2e:36:c6:6d:05:11:30:ab:13:8d:cf:cf:a3:05:c5: 9f:0e:e5:45:4e:5d:cb:43:8f:e4:ea:c7:e3:27:49: 08:d5:e9:4b:d5:80:43:c1:aa:ea:3a:6e:b9:f0:67: 74:e5:ff:04:01:54:95:33:0a:c9:a0:62:ee:82:55: f6:09:61:34:1e:52:ff:1d:38:a0:62:d5:35:20:17: 52:bf:c6:a4:87:91:90:22:04:7a:91:e9:a1:52:b5: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:9E:48:D1:C0:12:DA:F8:B3:2D:DF:79:AD:05:32:17:FD:FD:EA X509v3 Authority Key Identifier: keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:df:b1:6c:b2:3e:00:20:ab:40:64:f1:22:2d:4c:4d:71:5b: 99:4c:bc:75:7a:f5:1a:46:93:70:41:96:88:c0:b5:3f:9e:9a: bc:b3:20:2c:fa:a4:96:29:5c:7c:12:4f:38:65:cd:44:da:16: 47:cd:c8:26:7c:69:f5:e8:b8:f8:4c:7f:2f:b3:5b:92:c2:b4: d6:f8:b7:a4:41:df:11:30:09:91:ec:72:3a:6d:24:8e:8b:a3: 63:60:dd:ce:c2:96:75:5e:2d:65:2b:3d:fb:06:4d:88:d2:d1: 4e:8f:43:8c:fb:bc:70:79:d0:e5:e4:e4:76:1f:28:29:33:d4: 18:b0:3c:49:85:8b:80:b5:b7:43:7c:fd:90:23:11:6e:62:6a: 62:85:5b:17:25:0d:3c:3d:9d:11:d8:01:a2:24:34:eb:53:6b: a4:b9:8c:6b:f1:07:65:75:db:22:8d:40:39:82:39:52:d3:07: 27:2b:fc:07:0d:4b:f7:11:f5:c2:ff:ed:56:b0:49:da:7f:d4: 45:d0:4f:53:81:bb:87:8c:cf:15:c6:04:d3:f4:d6:12:99:80: 37:2c:26:1b:25:0f:32:1b:79:b7:cc:45:d7:56:42:b3:f3:e8: 9f:3b:e5:1b:4d:11:5c:54:0d:3d:51:d4:2f:0d:25:7b:b4:46: 18:41:42:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDrmzGS9tMa00lalBQnsV7UQ8L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3 OEM5QkMyODAeFw0yNTA4MDQyMTQ3MTBaFw0yNTA4MDgwODA4MTBaMDMxMTAvBgNV BAMTKDYyNDY5RTQ4RDFDMDEyREFGOEIzMkRERjc5QUQwNTMyMTdGREZERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECRJuLp5YhxI08qcY+PG7IAb5 nzQBp1QV+vn1aVNqx6IDdgoX564elSDlyoL4gZi5p9IkfC+blucnjUe55a26BBT6 Odf1xgzWEvxBCosncfUmXeER2fsi9K44zq7jZeoSWdPfDbHvTRLdVAipvaYs5Y5Z ThHCKyBfKv0AnPgh0+HYXHWLBraKRCPNGjNZgIDwUMy5g50Nh/ogpX7MrZ3XK1dB 0y42xm0FETCrE43Pz6MFxZ8O5UVOXctDj+Tqx+MnSQjV6UvVgEPBquo6brnwZ3Tl /wQBVJUzCsmgYu6CVfYJYTQeUv8dOKBi1TUgF1K/xqSHkZAiBHqR6aFStcvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkaeSNHAEtr4sy3fea0FMhf9/eowHwYDVR0j BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5 QkMyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlD Q0Y3OEM5QkMyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzfsWyyPgAgq0Bk8SItTE1xW5lMvHV69RpG k3BBlojAtT+emryzICz6pJYpXHwSTzhlzUTaFkfNyCZ8afXouPhMfy+zW5LCtNb4 t6RB3xEwCZHscjptJI6Lo2Ng3c7ClnVeLWUrPfsGTYjS0U6PQ4z7vHB50OXk5HYf KCkz1BiwPEmFi4C1t0N8/ZAjEW5iamKFWxclDTw9nRHYAaIkNOtTa6S5jGvxB2V1 2yKNQDmCOVLTBycr/AcNS/cR9cL/7VawSdp/1EXQT1OBu4eMzxXGBNP01hKZgDcs JhslDzIbebfMRddWQrPz6J875RtNEVxUDT1R1C8NJXu0RhhBQrQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:44:00 2025 by rpki-client