$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: /IvHUFc6lzZYEJ1HjxL6Cndb7gSUGV0OApJb1q9Pfzk= Subject key identifier: FC:D7:F3:FA:7A:47:A6:CE:9A:68:52:86:38:26:1C:05:B4:88:92:A4 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 635E10CB519C03B3268CDB1D7C35A70513742CC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: D4 Signing time: Mon 16 Jun 2025 05:03:12 +0000 Manifest this update: Mon 16 Jun 2025 04:58:12 +0000 Manifest next update: Thu 19 Jun 2025 08:29:12 +0000 Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) 2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: IZ22d/0+0rlW43/1JBPqMXfp9/FLbwKsOCx26LWZN70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5e:10:cb:51:9c:03:b3:26:8c:db:1d:7c:35:a7:05:13:74:2c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Jun 16 04:58:12 2025 GMT Not After : Jun 19 08:29:12 2025 GMT Subject: CN=FCD7F3FA7A47A6CE9A68528638261C05B48892A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:b8:ae:35:00:be:c3:bd:a5:c2:19:c1:b6: a9:06:82:e1:ae:06:c8:a6:05:19:dd:0f:63:81:76: 3a:95:b5:84:f4:3c:7c:1c:b1:83:39:67:2b:52:0c: 2e:f3:d4:3c:06:ef:c7:c8:4e:8a:f0:9c:48:29:d2: 25:7b:3f:7c:bf:73:46:98:95:b5:98:83:1c:ab:22: 25:e8:6d:4a:4d:8c:e2:c5:52:fc:42:01:27:74:54: d6:c1:7c:f8:75:2b:06:33:d9:2a:00:38:a7:7e:fb: 4f:23:6d:d1:86:ac:0f:2e:fb:8d:fe:91:53:97:14: 27:42:dc:b5:84:63:14:f5:97:70:8c:48:aa:16:0e: 12:b1:c8:fe:76:7e:37:2e:98:32:85:46:23:f2:41: 5a:f1:95:26:45:be:a0:ff:c6:b4:3c:0d:22:ab:a8: 55:71:a0:0a:4a:79:23:47:a7:ea:f4:ff:97:ff:fe: 08:55:51:87:87:c9:d3:d4:eb:5d:fa:86:cc:10:c5: c0:8c:89:2c:12:eb:fe:6d:c5:49:e0:80:8e:b5:fe: 08:7f:e0:cd:43:32:35:2a:89:15:35:48:7a:cd:a9: fd:4f:46:79:89:89:49:40:a9:9f:62:0f:9e:ef:85: c2:4c:2a:93:fc:64:04:03:e1:a8:05:d6:b1:eb:6c: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D7:F3:FA:7A:47:A6:CE:9A:68:52:86:38:26:1C:05:B4:88:92:A4 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9f:c2:77:74:8b:9e:e1:38:77:cf:c7:f4:4d:ae:c3:49:4f: 5c:04:7a:9b:a6:30:8f:c1:88:a1:e6:f7:f2:d9:1c:63:07:d8: b4:87:d7:7d:eb:f2:4c:98:65:06:cf:9f:09:ff:65:4d:7d:61: 2b:8e:4f:3f:b0:40:6b:26:59:28:ea:35:67:68:d0:29:73:6f: e7:de:ce:02:11:48:7c:a3:6c:53:16:f3:98:73:0d:0a:34:7f: 42:56:d3:b7:c1:9c:19:42:83:fe:8d:cd:19:08:37:c3:ed:84: 1c:10:d1:92:39:98:c9:9d:69:89:e4:65:fd:3a:c9:77:6d:3a: 3d:6d:72:7e:93:36:a1:74:58:89:8f:05:4a:b8:05:84:02:e7: 3b:88:c2:6b:1c:38:78:3d:29:bf:67:9e:55:5e:c3:13:93:2c: a4:0e:46:9c:6a:b7:81:1c:1e:05:30:8e:c1:ee:aa:f3:c1:76: f0:29:2f:b5:7b:9c:3e:18:20:d4:96:90:a9:73:41:62:30:ce: 49:58:6b:cb:6b:70:a7:c6:7c:ec:81:cb:d4:1a:9b:8f:86:7b: 9e:6a:ff:2a:10:a4:4e:00:4c:f4:cf:e4:a9:4d:3b:17:24:5c: 95:a0:26:95:d2:de:58:77:35:3a:49:d2:cc:3d:a8:67:e6:09: 61:b9:e2:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY14Qy1GcA7MmjNsdfDWnBRN0LMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTA2MTYwNDU4MTJaFw0yNTA2MTkwODI5MTJaMDMxMTAvBgNV BAMTKEZDRDdGM0ZBN0E0N0E2Q0U5QTY4NTI4NjM4MjYxQzA1QjQ4ODkyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxriuNQC+w72lwhnBtqkGguGu BsimBRndD2OBdjqVtYT0PHwcsYM5ZytSDC7z1DwG78fITorwnEgp0iV7P3y/c0aY lbWYgxyrIiXobUpNjOLFUvxCASd0VNbBfPh1KwYz2SoAOKd++08jbdGGrA8u+43+ kVOXFCdC3LWEYxT1l3CMSKoWDhKxyP52fjcumDKFRiPyQVrxlSZFvqD/xrQ8DSKr qFVxoApKeSNHp+r0/5f//ghVUYeHydPU6136hswQxcCMiSwS6/5txUnggI61/gh/ 4M1DMjUqiRU1SHrNqf1PRnmJiUlAqZ9iD57vhcJMKpP8ZAQD4agF1rHrbPVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Nfz+npHps6aaFKGOCYcBbSIkqQwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmfwnd0i57hOHfPx/RNrsNJT1wEepumMI/B iKHm9/LZHGMH2LSH133r8kyYZQbPnwn/ZU19YSuOTz+wQGsmWSjqNWdo0Clzb+fe zgIRSHyjbFMW85hzDQo0f0JW07fBnBlCg/6NzRkIN8PthBwQ0ZI5mMmdaYnkZf06 yXdtOj1tcn6TNqF0WImPBUq4BYQC5zuIwmscOHg9Kb9nnlVewxOTLKQORpxqt4Ec HgUwjsHuqvPBdvApL7V7nD4YINSWkKlzQWIwzklYa8trcKfGfOyBy9Qam4+Ge55q /yoQpE4ATPTP5KlNOxckXJWgJpXS3lh3NTpJ0sw9qGfmCWG54qY= -----END CERTIFICATE-----Generated at Tue Jun 17 21:39:10 2025 by rpki-client