$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: KF4kNmRQnpL8B9oFQzrgSYNQnzR2WKG/w9NPiLcqk4E= Subject key identifier: E0:70:06:89:78:10:26:A3:30:6F:66:84:60:14:3F:D5:59:AA:5E:95 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 77AE86680BCFFA2B4560ABD4E0E107770D86B716 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 12:30:03 +0000 Manifest this update: Sun 15 Jun 2025 12:25:03 +0000 Manifest next update: Wed 18 Jun 2025 17:09:03 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: E40KthqLZR4pSKTmG1zUubCh02FWzVLrmavnhwvvXdM=) 3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ae:86:68:0b:cf:fa:2b:45:60:ab:d4:e0:e1:07:77:0d:86:b7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Jun 15 12:25:03 2025 GMT Not After : Jun 18 17:09:03 2025 GMT Subject: CN=E0700689781026A3306F668460143FD559AA5E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:1f:c3:09:05:e8:39:27:e4:5a:8c:c3:65: 22:57:08:73:af:ba:a1:e3:f5:cd:a5:eb:28:dd:b6: c8:8f:83:b7:68:50:aa:fc:18:4a:fc:e4:51:67:77: 6a:6d:a7:fe:33:7c:e1:53:f9:89:c9:22:d0:b8:5a: 56:86:0e:02:8c:a1:bc:56:89:17:f7:a1:7a:a8:9a: e0:0e:73:12:0e:4b:8b:b1:f1:02:c5:73:58:ae:44: f2:fc:f2:28:4e:83:a4:6f:10:c8:65:f9:e5:a0:3a: 1f:e5:dd:3c:49:d3:e7:94:a6:da:b7:72:a9:52:4b: c3:1b:11:03:04:56:38:30:01:67:ff:37:9d:83:41: 9d:8f:45:7d:9b:40:9e:99:aa:38:e2:83:b9:b6:73: e2:91:e4:b7:1c:b4:c1:73:02:16:b7:da:51:64:a6: 14:8e:0b:4a:bc:ff:4f:c5:23:8f:74:f1:40:94:23: eb:c9:49:b4:6b:78:0c:cb:b0:97:05:f1:d4:8b:e8: f6:8d:2f:53:61:4c:79:4c:61:5c:d4:73:58:f0:ad: fa:ef:e8:6f:4e:43:e5:17:22:66:a4:a3:31:c2:be: f2:9e:40:1e:da:62:b5:d4:0e:b5:2f:78:ed:10:93: 55:04:e1:3a:96:1f:fb:fb:51:9a:72:a7:1d:76:ec: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:06:89:78:10:26:A3:30:6F:66:84:60:14:3F:D5:59:AA:5E:95 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:55:f4:30:b1:01:f2:88:d3:5f:11:87:43:77:74:10:75:7a: b1:80:14:44:5e:d7:df:c7:9a:67:d6:77:bd:ca:0b:01:a2:57: 0e:17:12:9f:99:aa:81:8a:e3:c8:9d:75:f8:aa:57:9a:92:69: 38:de:25:b3:41:8a:c3:8b:83:bf:81:3d:21:bb:bd:d6:08:10: bc:0c:69:0c:19:18:ad:79:50:64:8a:cd:3c:9b:e1:51:34:ed: 58:90:72:b6:d0:a5:86:9c:15:d1:c9:d0:38:3f:7e:a0:61:81: 49:8c:43:2d:bd:1b:1c:c4:ed:fc:b1:cc:fc:12:91:91:49:ed: 3e:dc:51:e3:21:94:d3:06:93:42:20:28:9a:99:80:3d:a2:d0: dd:a3:e8:93:2e:d9:2b:6b:4a:c0:b3:21:8e:ec:66:26:e0:fc: 15:8a:f7:e6:4d:b3:69:9c:91:4e:65:5e:5b:c7:66:43:1f:5f: 2e:2b:a5:25:0e:29:31:97:dd:f7:48:72:76:c2:0c:c5:45:83: 48:e6:a2:fa:ce:c7:1b:b4:79:53:a3:ba:73:be:fe:e6:95:e1: f6:b4:d9:38:70:19:d8:db:a8:aa:63:a9:42:6a:dc:22:cd:b3: 4e:af:8a:3f:5e:0d:87:35:b9:60:e6:0d:5d:ce:8a:ee:b7:25: 65:e8:84:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd66GaAvP+itFYKvU4OEHdw2GtxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA2MTUxMjI1MDNaFw0yNTA2MTgxNzA5MDNaMDMxMTAvBgNV BAMTKEUwNzAwNjg5NzgxMDI2QTMzMDZGNjY4NDYwMTQzRkQ1NTlBQTVFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNR/DCQXoOSfkWozDZSJXCHOv uqHj9c2l6yjdtsiPg7doUKr8GEr85FFnd2ptp/4zfOFT+YnJItC4WlaGDgKMobxW iRf3oXqomuAOcxIOS4ux8QLFc1iuRPL88ihOg6RvEMhl+eWgOh/l3TxJ0+eUptq3 cqlSS8MbEQMEVjgwAWf/N52DQZ2PRX2bQJ6Zqjjig7m2c+KR5LcctMFzAha32lFk phSOC0q8/0/FI4908UCUI+vJSbRreAzLsJcF8dSL6PaNL1NhTHlMYVzUc1jwrfrv 6G9OQ+UXImakozHCvvKeQB7aYrXUDrUveO0Qk1UE4TqWH/v7UZpypx127F/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4HAGiXgQJqMwb2aEYBQ/1VmqXpUwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdV9DCxAfKI018Rh0N3dBB1erGAFERe19/H mmfWd73KCwGiVw4XEp+ZqoGK48iddfiqV5qSaTjeJbNBisOLg7+BPSG7vdYIELwM aQwZGK15UGSKzTyb4VE07ViQcrbQpYacFdHJ0Dg/fqBhgUmMQy29GxzE7fyxzPwS kZFJ7T7cUeMhlNMGk0IgKJqZgD2i0N2j6JMu2StrSsCzIY7sZibg/BWK9+ZNs2mc kU5lXlvHZkMfXy4rpSUOKTGX3fdIcnbCDMVFg0jmovrOxxu0eVOjunO+/uaV4fa0 2ThwGdjbqKpjqUJq3CLNs06vij9eDYc1uWDmDV3Oiu63JWXohPI= -----END CERTIFICATE-----Generated at Mon Jun 16 02:10:07 2025 by rpki-client