$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: HwTcKkr3ecTCTnSY7eLYVbFYNdDkCXiilCTDu+zRioQ= Subject key identifier: FE:0C:B6:C3:7B:FE:17:A6:64:92:14:24:9F:D4:17:BF:12:1A:7D:47 Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 02FE9F61EB64FA5BC28FCC039DC1B7480A390C9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01C8 Signing time: Mon 16 Jun 2025 13:11:40 +0000 Manifest this update: Mon 16 Jun 2025 13:06:40 +0000 Manifest next update: Fri 20 Jun 2025 00:24:40 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: QAENWIyDVsXcp9U/5EEjQqFj8HxScANF+QJp62Bn9v0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fe:9f:61:eb:64:fa:5b:c2:8f:cc:03:9d:c1:b7:48:0a:39:0c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Jun 16 13:06:40 2025 GMT Not After : Jun 20 00:24:40 2025 GMT Subject: CN=FE0CB6C37BFE17A6649214249FD417BF121A7D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:7c:32:0e:c0:95:5d:ee:9f:c1:84:89:55: 70:40:82:73:94:c4:37:ff:5e:9a:80:04:1d:82:14: 00:0c:69:4f:72:51:28:a1:0a:c8:fe:6d:c6:90:87: c5:da:39:07:f9:c1:10:32:c8:db:e9:5f:f1:de:42: ed:70:63:71:43:0c:a9:a8:9d:f4:5b:c2:86:2d:e2: 07:23:a8:8f:08:b3:1c:a8:3d:f4:7e:04:c6:5d:55: 66:ab:fb:52:23:04:8d:77:68:48:ed:95:11:09:74: 39:04:70:26:ed:db:a0:d3:b4:3e:47:00:60:36:86: ce:54:a2:b6:91:db:8d:6a:2c:68:f6:14:41:ef:a7: 5a:ce:f4:8e:2d:b1:32:ed:ea:b7:9c:8f:f5:f6:d4: 21:4d:fa:2a:b0:ff:b8:a1:ec:f7:b5:de:3a:e2:69: d9:e8:88:58:bc:a5:9d:5a:14:7e:e2:56:23:f2:ec: 8f:84:28:0e:ed:78:37:32:d3:3a:5f:d6:f2:7c:1d: c0:ef:9f:d0:48:f0:32:14:ec:22:53:58:11:25:56: fc:b3:7b:21:77:9e:35:93:0d:d0:e2:25:03:4f:99: ab:b7:e6:0d:0f:36:59:ae:74:8a:bb:e8:50:7b:73: 12:20:53:22:59:a6:46:60:65:bc:16:86:2a:5b:68: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0C:B6:C3:7B:FE:17:A6:64:92:14:24:9F:D4:17:BF:12:1A:7D:47 X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b8:28:18:80:c7:7b:84:3d:d8:5e:c6:84:03:32:4f:ba:ac: 23:06:17:26:72:9e:b0:65:9a:ed:80:fd:e1:65:79:17:f2:aa: 02:a8:e8:a7:f9:6c:1b:81:b4:03:97:36:ae:5b:86:7d:b6:66: d2:a2:85:b8:dd:78:8f:56:45:26:08:f7:58:7a:6c:6f:0a:78: bc:19:82:dd:60:36:7b:85:83:75:f9:4c:86:62:d2:a6:35:0d: bd:44:5e:45:e0:5a:6e:27:e8:ea:4b:e5:89:7c:b6:75:13:1c: bd:6c:e9:ba:7a:af:f1:84:2c:94:40:3c:82:6b:43:a0:0d:6a: ca:26:96:c4:8a:cb:21:f2:63:4b:a3:22:fb:bf:26:89:cf:e5: 51:f1:21:b2:85:5f:cc:1d:fd:4c:ad:d5:31:94:38:51:40:d0: 0c:84:53:41:3b:65:48:8d:d0:0d:16:ce:52:06:06:ba:a2:fc: 64:c9:c0:7f:e8:f1:27:f7:47:69:59:ce:e6:9b:a2:5b:93:d1: 79:94:a3:3b:e4:f9:96:57:29:f3:81:4d:8f:2a:90:e0:72:1d: 05:28:2e:21:28:93:b7:fe:40:24:a8:5a:8e:fa:36:58:e5:4e: 4a:72:8b:be:e7:d2:02:1d:ee:2e:c4:6a:63:5c:33:c5:48:23: ff:29:5a:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAv6fYetk+lvCj8wDncG3SAo5DJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTA2MTYxMzA2NDBaFw0yNTA2MjAwMDI0NDBaMDMxMTAvBgNV BAMTKEZFMENCNkMzN0JGRTE3QTY2NDkyMTQyNDlGRDQxN0JGMTIxQTdENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKHwyDsCVXe6fwYSJVXBAgnOU xDf/XpqABB2CFAAMaU9yUSihCsj+bcaQh8XaOQf5wRAyyNvpX/HeQu1wY3FDDKmo nfRbwoYt4gcjqI8IsxyoPfR+BMZdVWar+1IjBI13aEjtlREJdDkEcCbt26DTtD5H AGA2hs5UoraR241qLGj2FEHvp1rO9I4tsTLt6recj/X21CFN+iqw/7ih7Pe13jri adnoiFi8pZ1aFH7iViPy7I+EKA7teDcy0zpf1vJ8HcDvn9BI8DIU7CJTWBElVvyz eyF3njWTDdDiJQNPmau35g0PNlmudIq76FB7cxIgUyJZpkZgZbwWhipbaCufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/gy2w3v+F6ZkkhQkn9QXvxIafUcwHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS4KBiAx3uEPdhexoQDMk+6rCMGFyZynrBl mu2A/eFleRfyqgKo6Kf5bBuBtAOXNq5bhn22ZtKihbjdeI9WRSYI91h6bG8KeLwZ gt1gNnuFg3X5TIZi0qY1Db1EXkXgWm4n6OpL5Yl8tnUTHL1s6bp6r/GELJRAPIJr Q6ANasomlsSKyyHyY0ujIvu/JonP5VHxIbKFX8wd/Uyt1TGUOFFA0AyEU0E7ZUiN 0A0WzlIGBrqi/GTJwH/o8Sf3R2lZzuaboluT0XmUozvk+ZZXKfOBTY8qkOByHQUo LiEok7f+QCSoWo76NljlTkpyi77n0gId7i7EamNcM8VII/8pWiI= -----END CERTIFICATE-----Generated at Tue Jun 17 09:46:46 2025 by rpki-client