$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: 9Y355SDFxScDBcn6bWddT9diMmVm3Lf/eoYL+aNK6Iw= Subject key identifier: A6:5A:4C:88:8F:65:70:0E:D5:E1:35:A5:5D:DE:2C:E9:4D:69:4A:01 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 3141B7552DFF17A9B3E1A4C769D3CBFD8191E71B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 0350 Signing time: Sun 15 Jun 2025 05:51:43 +0000 Manifest this update: Sun 15 Jun 2025 05:46:43 +0000 Manifest next update: Wed 18 Jun 2025 14:41:43 +0000 Files and hashes: 1: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) 2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: /q47Zbf59KrTvTmuMHa09xBcKSsNMYxMt9QpceF9Q9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:41:b7:55:2d:ff:17:a9:b3:e1:a4:c7:69:d3:cb:fd:81:91:e7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Jun 15 05:46:43 2025 GMT Not After : Jun 18 14:41:43 2025 GMT Subject: CN=A65A4C888F65700ED5E135A55DDE2CE94D694A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:7a:71:9b:d2:22:63:95:6f:7c:bf:c6:b0: e3:25:45:7d:a5:7a:97:e3:50:7e:40:d7:b1:f3:d9: ae:88:e4:85:29:ef:bb:b3:ff:e4:d1:3d:67:49:f0: 39:62:a2:b6:bc:82:4f:74:84:57:47:57:73:0a:c6: d9:62:3d:1c:9f:f9:a0:9b:3d:0b:f6:e0:5d:56:65: 7f:9d:41:17:9c:91:77:ca:e6:c9:b8:ca:2b:34:b2: 69:41:c3:72:96:80:c5:fd:03:01:1f:08:03:33:2a: 10:4e:f8:af:dc:2a:ed:6f:06:40:3c:74:3c:9d:bb: b5:90:61:bd:74:10:ff:0a:7d:01:39:10:50:db:01: 6c:3f:b8:36:d7:aa:c2:53:a0:10:73:9a:92:5a:fa: 06:da:1b:29:42:96:de:55:1e:06:09:4f:76:fa:4c: 6a:ce:29:b2:85:63:8d:a1:71:a0:6c:19:52:aa:0c: 79:e6:a8:ea:d6:0f:96:69:0c:6d:a4:ad:61:fa:fb: a6:3c:7d:30:be:b6:e1:a3:fc:16:b9:ce:13:1f:9c: fc:ca:ac:97:77:c2:78:23:be:02:57:f6:fe:31:c2: 1c:8b:ec:15:16:41:3d:cb:84:76:26:65:32:de:0c: f6:e1:37:7e:a0:99:b2:9f:87:7b:ad:e5:f7:be:20: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5A:4C:88:8F:65:70:0E:D5:E1:35:A5:5D:DE:2C:E9:4D:69:4A:01 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d5:99:75:41:fc:4e:45:d3:25:9d:7e:c1:bf:09:76:13:64: 4a:92:99:42:66:80:f3:66:89:63:00:f5:20:38:66:ce:fd:67: 59:71:b7:7f:56:d8:8c:f4:b7:2c:ef:2f:a1:f1:96:eb:23:17: f1:ea:d4:62:ed:e6:c9:bd:0b:03:09:91:4b:4d:5e:8b:7a:03: 08:ba:66:fe:e3:13:e5:d8:60:ed:02:73:66:54:85:30:81:3e: 93:0b:cd:6d:49:4d:29:34:1f:02:a8:1d:fe:26:5f:f7:37:bf: 33:aa:d8:8c:d0:24:57:79:af:20:a2:6d:8f:89:bb:13:08:19: 8c:24:78:fa:8a:ea:5c:f6:28:87:8f:80:d9:f1:52:96:8a:76: 1d:46:07:62:2c:d9:3b:0c:eb:e1:64:0b:ee:de:cd:b8:7a:9a: e8:17:e5:4b:eb:ae:c0:f2:69:78:c1:ec:82:30:ef:ff:33:a1: b0:9d:cc:a0:df:70:1d:ec:f5:e6:98:09:85:83:e4:7a:31:4b: 72:db:fc:90:c9:10:55:92:68:e1:60:5b:69:6e:9e:1d:5b:b5: 51:97:31:60:e7:46:75:52:14:d2:40:2a:78:14:d3:da:cf:e0: 9f:f4:f3:75:dd:07:18:3e:98:73:78:5d:64:49:6a:84:39:35: f8:77:d4:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUG3VS3/F6mz4aTHadPL/YGR5xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTA2MTUwNTQ2NDNaFw0yNTA2MTgxNDQxNDNaMDMxMTAvBgNV BAMTKEE2NUE0Qzg4OEY2NTcwMEVENUUxMzVBNTVEREUyQ0U5NEQ2OTRBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnp3pxm9IiY5VvfL/GsOMlRX2l epfjUH5A17Hz2a6I5IUp77uz/+TRPWdJ8Dliora8gk90hFdHV3MKxtliPRyf+aCb PQv24F1WZX+dQReckXfK5sm4yis0smlBw3KWgMX9AwEfCAMzKhBO+K/cKu1vBkA8 dDydu7WQYb10EP8KfQE5EFDbAWw/uDbXqsJToBBzmpJa+gbaGylClt5VHgYJT3b6 TGrOKbKFY42hcaBsGVKqDHnmqOrWD5ZpDG2krWH6+6Y8fTC+tuGj/Ba5zhMfnPzK rJd3wngjvgJX9v4xwhyL7BUWQT3LhHYmZTLeDPbhN36gmbKfh3ut5fe+IB4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUplpMiI9lcA7V4TWlXd4s6U1pSgEwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDVmXVB/E5F0yWdfsG/CXYTZEqSmUJmgPNm iWMA9SA4Zs79Z1lxt39W2Iz0tyzvL6HxlusjF/Hq1GLt5sm9CwMJkUtNXot6Awi6 Zv7jE+XYYO0Cc2ZUhTCBPpMLzW1JTSk0HwKoHf4mX/c3vzOq2IzQJFd5ryCibY+J uxMIGYwkePqK6lz2KIePgNnxUpaKdh1GB2Is2TsM6+FkC+7ezbh6mugX5UvrrsDy aXjB7IIw7/8zobCdzKDfcB3s9eaYCYWD5HoxS3Lb/JDJEFWSaOFgW2lunh1btVGX MWDnRnVSFNJAKngU09rP4J/083XdBxg+mHN4XWRJaoQ5Nfh31CU= -----END CERTIFICATE-----Generated at Tue Jun 17 15:35:14 2025 by rpki-client