$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: QboD5vqKJKS9SoD+vYjwOnCSFIhgfuHA8ln/w0xtGUk= Subject key identifier: 2B:53:A8:60:E7:E3:A9:F3:EA:D2:21:8D:D7:75:9E:DD:DD:1C:FF:2C Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 53CD6EF41EEC7195D4E54C1E847FED9AB0558CA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 01B6 Signing time: Wed 18 Jun 2025 01:11:22 +0000 Manifest this update: Wed 18 Jun 2025 01:06:22 +0000 Manifest next update: Sat 21 Jun 2025 06:49:22 +0000 Files and hashes: 1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: yfirY/IdmmUBXQP+agxLPC5R2mzKmb/7B1nbgYo1Od4=) 2: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: iioa0FNc3zL0qpPDZFv66zLDTLO8gQ3+1eSq+JnvPz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 06:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cd:6e:f4:1e:ec:71:95:d4:e5:4c:1e:84:7f:ed:9a:b0:55:8c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Jun 18 01:06:22 2025 GMT Not After : Jun 21 06:49:22 2025 GMT Subject: CN=2B53A860E7E3A9F3EAD2218DD7759EDDDD1CFF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:98:05:13:b3:e5:72:ec:9c:4d:21:4a:b6: 36:10:c9:fc:b1:15:14:1b:08:c7:b9:e4:30:6b:0c: 85:15:3a:a8:25:58:dd:a8:49:d1:70:f1:50:a3:5a: e8:1b:af:88:99:04:5c:c5:2d:14:db:19:28:22:f3: 3f:59:05:13:70:78:02:ce:8a:f7:8a:13:da:7f:2a: f2:f5:18:a9:15:13:29:d0:3b:8e:91:6b:e5:2e:91: 22:ee:45:66:35:16:cc:4d:81:f2:1a:cb:10:9b:ea: 0b:57:6e:3a:fd:3c:14:2b:e4:17:38:05:b9:25:34: 63:23:50:a6:42:3b:08:c7:35:a8:4f:b0:ac:c7:1b: cf:d9:f9:fd:59:65:df:01:9b:6e:6b:77:6b:6c:a4: 19:15:d1:08:5c:10:e9:8b:fb:5d:12:5f:24:03:49: 14:b9:1e:d9:33:3e:46:f7:a4:97:8b:d9:d9:20:94: e9:a0:ef:81:27:ce:c0:36:d6:d4:6a:43:2b:cb:b4: 03:70:5c:88:9d:81:fd:08:34:94:b7:8b:56:89:d0: c5:70:d6:a2:e8:39:a5:82:24:75:75:71:56:16:19: 20:52:90:49:3d:4f:a1:e1:38:f9:c2:cf:a0:53:f1: e7:2e:7e:27:ca:e4:a0:64:78:af:3b:fb:76:f8:ff: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:53:A8:60:E7:E3:A9:F3:EA:D2:21:8D:D7:75:9E:DD:DD:1C:FF:2C X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3f:18:59:4d:fa:2e:71:05:82:e7:c6:20:3e:f8:38:93:04: 2f:b3:a2:39:38:3f:50:e7:10:ee:51:6d:51:3f:1f:18:cb:9e: 44:43:b7:97:52:2c:89:6c:5b:d1:ae:0e:07:a2:78:51:f7:d3: 8a:87:4b:cd:5f:56:39:7a:12:4b:d5:f9:22:d7:e8:f4:aa:e9: b7:cc:84:f2:7b:73:42:15:64:57:84:45:09:86:70:94:47:d0: cc:89:9f:14:d3:5d:d5:06:c2:b6:59:92:99:b6:d7:01:a7:b7: b5:c0:86:b6:2b:0c:ee:f6:f1:53:be:57:74:d3:fe:98:2c:3c: 66:8f:2e:a8:b1:71:c4:38:3a:c7:6d:27:04:55:c8:0c:20:5a: 0d:7c:96:44:28:05:aa:ce:75:64:5d:52:21:5e:56:8b:20:b3: a4:96:42:33:29:29:06:b1:6f:29:4a:47:e0:e4:8b:c9:3c:e6: 8a:f6:7d:bc:ef:a9:f0:02:63:5f:c4:21:4d:a9:bc:bf:17:c1: e0:9f:43:cc:24:68:3a:bd:b1:c1:86:c9:a4:5a:4f:e4:37:c7: c0:0a:0a:61:d9:36:38:3e:56:ed:4c:f8:54:18:12:fc:ae:2a: c7:ae:47:c2:b5:36:14:d0:ca:b5:8e:b5:fe:a5:92:38:c8:20: a0:c4:8f:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU81u9B7scZXU5UwehH/tmrBVjKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTA2MTgwMTA2MjJaFw0yNTA2MjEwNjQ5MjJaMDMxMTAvBgNV BAMTKDJCNTNBODYwRTdFM0E5RjNFQUQyMjE4REQ3NzU5RUREREQxQ0ZGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1JgFE7PlcuycTSFKtjYQyfyx FRQbCMe55DBrDIUVOqglWN2oSdFw8VCjWugbr4iZBFzFLRTbGSgi8z9ZBRNweALO iveKE9p/KvL1GKkVEynQO46Ra+UukSLuRWY1FsxNgfIayxCb6gtXbjr9PBQr5Bc4 BbklNGMjUKZCOwjHNahPsKzHG8/Z+f1ZZd8Bm25rd2tspBkV0QhcEOmL+10SXyQD SRS5HtkzPkb3pJeL2dkglOmg74EnzsA21tRqQyvLtANwXIidgf0INJS3i1aJ0MVw 1qLoOaWCJHV1cVYWGSBSkEk9T6HhOPnCz6BT8ecufifK5KBkeK87+3b4////AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK1OoYOfjqfPq0iGN13We3d0c/ywwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHk/GFlN+i5xBYLnxiA++DiTBC+zojk4P1Dn EO5RbVE/HxjLnkRDt5dSLIlsW9GuDgeieFH304qHS81fVjl6EkvV+SLX6PSq6bfM hPJ7c0IVZFeERQmGcJRH0MyJnxTTXdUGwrZZkpm21wGnt7XAhrYrDO728VO+V3TT /pgsPGaPLqixccQ4OsdtJwRVyAwgWg18lkQoBarOdWRdUiFeVosgs6SWQjMpKQax bylKR+Dki8k85or2fbzvqfACY1/EIU2pvL8XweCfQ8wkaDq9scGGyaRaT+Q3x8AK CmHZNjg+Vu1M+FQYEvyuKseuR8K1NhTQyrWOtf6lkjjIIKDEj+E= -----END CERTIFICATE-----Generated at Wed Jun 18 23:46:17 2025 by rpki-client