$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: /ro5pGSMx2nCkQk/Y5stv8O//4RDX1fj58ZNx6OD9YM= Subject key identifier: 8A:B9:49:23:02:E0:C4:E6:AC:8D:BC:AF:81:0B:DF:CD:40:0F:D1:97 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 46E9F77E30B861673B6AA681E8C145E3CB79FC41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01C7 Signing time: Mon 16 Jun 2025 21:41:46 +0000 Manifest this update: Mon 16 Jun 2025 21:36:46 +0000 Manifest next update: Thu 19 Jun 2025 22:08:46 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 3: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: 8p/9lCAEc56o9CXbWKF3jxn6CMHe8uvmFFjfLwpyLV0=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e9:f7:7e:30:b8:61:67:3b:6a:a6:81:e8:c1:45:e3:cb:79:fc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Jun 16 21:36:46 2025 GMT Not After : Jun 19 22:08:46 2025 GMT Subject: CN=8AB9492302E0C4E6AC8DBCAF810BDFCD400FD197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:ef:c1:f8:d3:86:97:71:4b:a7:70:ca:f0: 62:00:38:6c:84:1a:a8:f7:2e:86:61:d7:6b:2a:c7: af:a1:2d:0c:f1:17:3e:2b:dc:d9:98:60:cb:dd:05: 80:63:c3:10:ff:17:f5:67:fe:aa:60:96:35:d6:15: 3d:f0:d0:2e:16:ba:a1:8c:43:8e:c0:02:27:67:77: d8:d1:0a:38:3b:0e:b7:d3:d0:cb:d0:97:1c:e4:2c: c4:8c:9d:6d:57:4a:85:0b:03:ba:9a:44:07:49:a2: 05:92:4b:05:2c:c5:d3:57:44:95:37:d7:de:a5:6c: 0b:b7:d3:9e:80:71:45:9f:34:0e:e9:fd:63:59:c3: 44:b6:24:d8:29:27:16:7c:c2:b2:2a:e8:e1:13:21: 47:62:30:58:4f:c9:f4:ae:72:85:e3:79:28:2d:6e: bd:de:12:dd:45:4b:71:a3:8f:01:fb:cd:1f:dd:df: 41:fa:30:a6:72:14:16:ab:e9:48:e0:dc:4e:05:b7: 9b:cd:4d:40:71:ab:3c:79:9a:29:9f:b5:cf:f4:29: 4a:0c:0c:4a:49:c1:d5:fe:26:ae:1f:f6:b0:f0:c3: ab:97:58:34:03:c0:d3:8b:26:23:d5:e3:73:42:47: 38:62:b2:8f:0e:28:dc:ba:9f:24:69:0a:f7:82:8a: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:49:23:02:E0:C4:E6:AC:8D:BC:AF:81:0B:DF:CD:40:0F:D1:97 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a1:ad:1e:ae:62:2f:48:fb:c2:7e:a8:98:62:39:37:5f:c1: cb:e8:f1:f3:be:c8:68:08:c8:b3:21:07:b1:1b:9f:5c:2c:4b: 16:a2:7e:7b:32:e7:21:28:c7:c5:2c:19:19:df:78:78:d0:83: 4e:27:8c:d7:f1:b6:fe:f5:fa:19:7f:20:3f:1d:27:61:0e:10: ed:4d:33:88:37:c0:57:b5:3a:89:c5:bb:2f:cd:3a:af:18:14: 22:a4:56:b0:09:c8:9e:34:e8:39:8e:5d:77:fc:da:e8:3f:de: d2:97:b5:f5:1c:56:cd:6a:a7:01:e6:55:35:20:43:f0:52:6b: d2:d2:0c:d7:3a:de:24:be:e7:8e:92:a9:70:d8:4d:8d:e4:50: 31:e9:8f:f6:46:7e:3d:6b:1e:4f:d6:81:04:91:7f:a9:f9:08: 81:83:22:e8:6e:3e:d5:1e:51:64:8d:72:70:e4:bf:db:20:a1: 22:e4:90:07:70:e1:c5:21:b3:47:9b:fe:7f:24:66:5d:e1:c2: ab:f2:60:1b:12:74:88:ee:18:17:79:44:80:89:82:ad:71:b3: 87:e2:c8:ce:1b:b7:19:7a:21:37:9d:e5:57:96:bb:33:86:4b: 32:1d:f5:b6:97:c0:cd:3d:e9:ae:dc:94:c5:de:5a:3b:c2:b5: 25:97:38:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURun3fjC4YWc7aqaB6MFF48t5/EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA2MTYyMTM2NDZaFw0yNTA2MTkyMjA4NDZaMDMxMTAvBgNV BAMTKDhBQjk0OTIzMDJFMEM0RTZBQzhEQkNBRjgxMEJERkNENDAwRkQxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClse/B+NOGl3FLp3DK8GIAOGyE Gqj3LoZh12sqx6+hLQzxFz4r3NmYYMvdBYBjwxD/F/Vn/qpgljXWFT3w0C4WuqGM Q47AAidnd9jRCjg7DrfT0MvQlxzkLMSMnW1XSoULA7qaRAdJogWSSwUsxdNXRJU3 196lbAu3056AcUWfNA7p/WNZw0S2JNgpJxZ8wrIq6OETIUdiMFhPyfSucoXjeSgt br3eEt1FS3GjjwH7zR/d30H6MKZyFBar6Ujg3E4Ft5vNTUBxqzx5mimftc/0KUoM DEpJwdX+Jq4f9rDww6uXWDQDwNOLJiPV43NCRzhiso8OKNy6nyRpCveCipE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirlJIwLgxOasjbyvgQvfzUAP0ZcwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMehrR6uYi9I+8J+qJhiOTdfwcvo8fO+yGgI yLMhB7Ebn1wsSxaifnsy5yEox8UsGRnfeHjQg04njNfxtv71+hl/ID8dJ2EOEO1N M4g3wFe1OonFuy/NOq8YFCKkVrAJyJ406DmOXXf82ug/3tKXtfUcVs1qpwHmVTUg Q/BSa9LSDNc63iS+546SqXDYTY3kUDHpj/ZGfj1rHk/WgQSRf6n5CIGDIuhuPtUe UWSNcnDkv9sgoSLkkAdw4cUhs0eb/n8kZl3hwqvyYBsSdIjuGBd5RICJgq1xs4fi yM4btxl6ITed5VeWuzOGSzId9baXwM096a7clMXeWjvCtSWXODs= -----END CERTIFICATE-----Generated at Wed Jun 18 01:55:34 2025 by rpki-client