$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: d2zYdaG4CBg+YycTvHu+t8keJJiPAcZmKv/d6g8/Q4I= Subject key identifier: 72:37:F1:B7:8A:2E:E6:5C:57:49:47:F3:86:8B:09:07:0F:E3:10:34 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 6169B1022911ABF6A8634029F2B03F23331EA166 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 023C Signing time: Mon 16 Jun 2025 22:01:38 +0000 Manifest this update: Mon 16 Jun 2025 21:56:38 +0000 Manifest next update: Fri 20 Jun 2025 03:34:38 +0000 Files and hashes: 1: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 2: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 3: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 4: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: kcofscEbp0OUor67C59lK7x7+3tzsZNTLZ6V4tl2ofY=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:69:b1:02:29:11:ab:f6:a8:63:40:29:f2:b0:3f:23:33:1e:a1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Jun 16 21:56:38 2025 GMT Not After : Jun 20 03:34:38 2025 GMT Subject: CN=7237F1B78A2EE65C574947F3868B09070FE31034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:22:d7:ed:85:69:06:0f:00:35:5a:be:21:3c: 19:cc:77:45:4a:cb:5b:a2:42:bc:d0:97:29:08:ba: a4:b2:41:b8:aa:af:b6:3f:46:8c:43:d6:9f:2f:05: 57:47:9b:b9:4e:1b:83:82:b9:95:c4:3a:c1:6f:25: 73:85:8b:21:bd:0d:58:7e:d5:7b:69:dd:39:04:33: be:18:4b:fd:31:f9:a9:c8:d9:0a:89:ff:26:8a:53: 2d:17:85:2c:11:24:27:a8:8c:a3:07:84:5c:d2:aa: ce:cf:a6:03:04:c5:73:e6:20:f0:67:53:6a:c5:ee: 19:e1:be:f6:21:c9:c8:90:1d:27:16:2d:ce:63:38: 0e:69:5f:0f:7c:39:45:d3:a5:b7:e1:1d:88:77:bd: a6:e9:da:bc:72:87:ac:13:8b:09:14:d7:b6:be:16: 97:3f:f2:e8:2a:13:83:c6:76:fd:dd:97:1a:48:84: d7:cc:5b:88:1b:8f:2c:22:b8:79:ad:8c:3b:15:91: 87:b7:50:bb:46:98:ca:c4:f6:ed:45:ea:ae:8f:42: 8b:49:47:06:0c:e5:62:8b:fc:bc:59:ef:d7:2f:6e: 37:ae:41:69:e5:6a:52:81:21:4f:ab:e1:a8:c3:ee: fe:06:cd:ef:76:1a:7f:32:26:a1:a3:bd:f4:95:9d: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:37:F1:B7:8A:2E:E6:5C:57:49:47:F3:86:8B:09:07:0F:E3:10:34 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:9e:90:7b:26:f5:1f:45:90:7d:5b:02:0a:a6:1f:33:dd:6a: 33:cf:04:0e:0e:28:a2:da:42:2a:df:34:03:30:e7:3d:34:fb: 0c:48:59:a7:b6:3a:9f:c0:21:21:1a:75:d2:7b:25:38:04:43: ce:e2:77:e3:ce:9d:b2:ef:ac:59:ba:f8:24:0d:cf:99:3c:56: 98:f8:d8:23:24:0d:67:4f:34:27:20:b3:c1:30:60:e3:1a:3b: 29:44:f1:19:a7:32:9c:bd:4e:73:ff:8d:f7:c9:95:b0:ac:b0: 82:af:e6:2c:5d:1e:e5:ed:70:e2:58:27:5f:f5:fa:82:04:36: 42:e8:00:47:34:20:b4:84:88:4b:bd:c8:4b:49:a6:5c:0b:3c: d6:3f:ba:eb:64:9a:dc:2c:2d:e0:dd:ec:7a:9c:50:73:c4:bd: 14:58:7e:9a:7d:12:9b:a3:2f:e3:39:b7:3b:43:e4:8a:b1:96: 90:50:b8:f9:54:78:cb:69:0c:7f:09:79:9e:59:60:fc:6e:09: b4:b4:de:ed:1a:9c:9c:fd:3a:90:b2:9c:d0:58:ce:bd:03:d5: eb:ad:93:7e:6b:9c:44:c5:1b:f3:72:bd:a0:60:b0:16:13:f9: 9d:bb:9b:41:e8:39:62:f4:00:d1:62:b9:9e:2c:65:53:b5:c3: e2:23:91:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWmxAikRq/aoY0Ap8rA/IzMeoWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA2MTYyMTU2MzhaFw0yNTA2MjAwMzM0MzhaMDMxMTAvBgNV BAMTKDcyMzdGMUI3OEEyRUU2NUM1NzQ5NDdGMzg2OEIwOTA3MEZFMzEwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ItfthWkGDwA1Wr4hPBnMd0VK y1uiQrzQlykIuqSyQbiqr7Y/RoxD1p8vBVdHm7lOG4OCuZXEOsFvJXOFiyG9DVh+ 1Xtp3TkEM74YS/0x+anI2QqJ/yaKUy0XhSwRJCeojKMHhFzSqs7PpgMExXPmIPBn U2rF7hnhvvYhyciQHScWLc5jOA5pXw98OUXTpbfhHYh3vabp2rxyh6wTiwkU17a+ Fpc/8ugqE4PGdv3dlxpIhNfMW4gbjywiuHmtjDsVkYe3ULtGmMrE9u1F6q6PQotJ RwYM5WKL/LxZ79cvbjeuQWnlalKBIU+r4ajD7v4Gze92Gn8yJqGjvfSVncoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcjfxt4ou5lxXSUfzhosJBw/jEDQwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6ekHsm9R9FkH1bAgqmHzPdajPPBA4OKKLa QirfNAMw5z00+wxIWae2Op/AISEaddJ7JTgEQ87id+POnbLvrFm6+CQNz5k8Vpj4 2CMkDWdPNCcgs8EwYOMaOylE8RmnMpy9TnP/jffJlbCssIKv5ixdHuXtcOJYJ1/1 +oIENkLoAEc0ILSEiEu9yEtJplwLPNY/uutkmtwsLeDd7HqcUHPEvRRYfpp9Epuj L+M5tztD5IqxlpBQuPlUeMtpDH8JeZ5ZYPxuCbS03u0anJz9OpCynNBYzr0D1eut k35rnETFG/NyvaBgsBYT+Z27m0HoOWL0ANFiuZ4sZVO1w+IjkVI= -----END CERTIFICATE-----Generated at Tue Jun 17 20:15:05 2025 by rpki-client