$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: mDSagr3/b9gBuOOKLSOFmslNxmodc/ZNyvYPNts9rBE= Subject key identifier: FE:63:31:4A:21:33:EE:CC:98:26:80:25:0A:AD:E2:D4:8D:D9:AF:1D Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 697D91C5C74F5B613B48C332B52DEE01D2D1BE4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 027D Signing time: Sat 14 Jun 2025 17:42:20 +0000 Manifest this update: Sat 14 Jun 2025 17:37:20 +0000 Manifest next update: Tue 17 Jun 2025 20:42:20 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K58hS10IRX+zau5OGGRyu9JQqy2xuB39owD+O8xQ0hc=) 2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: WINoowfnYm4eLyJmmSY4kX6/+jA9FqiCfuSzJ+aYdi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7d:91:c5:c7:4f:5b:61:3b:48:c3:32:b5:2d:ee:01:d2:d1:be:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Jun 14 17:37:20 2025 GMT Not After : Jun 17 20:42:20 2025 GMT Subject: CN=FE63314A2133EECC982680250AADE2D48DD9AF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:2f:1f:dc:d9:d1:73:b8:65:1e:60:6e:a7: 07:68:a3:aa:3f:db:23:ae:4f:ef:c9:32:d1:c5:c4: 57:ef:3e:cd:a6:63:24:a6:d7:fc:44:b0:03:95:34: 1e:bb:42:e0:b4:97:03:db:1c:c9:53:9b:e2:6f:3c: 8a:32:78:4f:55:ab:73:81:98:84:e6:1d:21:ee:75: 59:43:fd:d0:eb:4a:eb:7e:17:fd:41:0b:e4:a6:c4: d4:7e:f5:aa:06:66:60:6b:c9:d7:df:a6:11:d9:0a: eb:8a:2b:3a:78:37:df:9c:bc:ad:55:ef:d0:e5:c9: 34:ec:ec:7f:0c:44:1a:ff:f3:99:95:a5:82:b2:59: 4d:bf:ab:49:88:3f:32:a2:7f:e0:46:24:2e:82:0b: f5:7e:de:17:84:50:57:94:a3:ac:02:5d:24:34:d2: 47:2c:88:1a:ee:86:e4:1e:0f:83:44:a8:62:64:bf: 6c:86:17:81:93:37:d7:9c:30:73:ee:ac:0b:9a:58: 48:f8:33:d4:fa:d4:bc:27:3a:02:ad:0c:11:4a:20: 5a:71:f3:69:9e:4b:3f:fc:35:44:de:de:15:a6:b9: be:6e:fb:bd:ad:de:b6:08:cf:58:60:60:ed:09:38: cf:be:cf:47:0c:af:86:f8:08:9a:7e:8d:ab:0e:b6: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:63:31:4A:21:33:EE:CC:98:26:80:25:0A:AD:E2:D4:8D:D9:AF:1D X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:48:57:bd:e4:de:bb:4d:ec:1c:24:34:8f:34:23:d6:8b:1b: 4a:b3:c8:04:a2:b6:dc:c5:12:00:e0:9d:ab:f9:27:be:66:37: 4e:69:0b:67:b5:ca:5c:c3:c7:89:6c:f6:38:61:0f:ba:8a:05: 78:48:de:f2:4e:d4:4d:00:d4:af:9e:85:b6:37:7d:85:dc:8e: c4:77:e0:98:fa:40:84:08:f2:ab:e0:b3:bc:a0:5d:62:c1:ce: 58:05:14:65:40:c6:a7:ee:03:46:77:cf:bf:e9:a3:8d:9a:8d: d9:ea:ca:e3:cc:f2:81:55:2d:7e:3e:a5:9a:82:94:1a:48:3a: 50:f7:d5:d9:b9:11:68:da:aa:c4:3e:c9:a4:d4:04:af:8d:89: f1:14:fb:5f:9c:08:43:9d:45:c3:ae:b6:bb:ee:fd:be:4b:17: 92:59:e8:d5:2c:84:c5:6c:cb:41:e7:04:7e:b3:76:35:5c:7c: 64:fe:c2:83:8a:d5:2f:ba:3c:3a:a1:11:94:97:21:84:15:2e: 1b:c7:83:94:10:47:bc:2b:cc:c8:e3:b7:7b:ed:ab:0f:42:7e: d6:f2:0c:a5:a3:00:db:f5:59:2e:b5:67:da:7d:16:7e:f6:b1: a0:95:c7:ed:26:ca:0a:6e:0b:c2:f4:c7:a8:7b:d9:c1:e0:9b: 4d:3a:4f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaX2RxcdPW2E7SMMytS3uAdLRvkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTA2MTQxNzM3MjBaFw0yNTA2MTcyMDQyMjBaMDMxMTAvBgNV BAMTKEZFNjMzMTRBMjEzM0VFQ0M5ODI2ODAyNTBBQURFMkQ0OEREOUFGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVS8f3NnRc7hlHmBupwdoo6o/ 2yOuT+/JMtHFxFfvPs2mYySm1/xEsAOVNB67QuC0lwPbHMlTm+JvPIoyeE9Vq3OB mITmHSHudVlD/dDrSut+F/1BC+SmxNR+9aoGZmBrydffphHZCuuKKzp4N9+cvK1V 79DlyTTs7H8MRBr/85mVpYKyWU2/q0mIPzKif+BGJC6CC/V+3heEUFeUo6wCXSQ0 0kcsiBruhuQeD4NEqGJkv2yGF4GTN9ecMHPurAuaWEj4M9T61LwnOgKtDBFKIFpx 82meSz/8NUTe3hWmub5u+72t3rYIz1hgYO0JOM++z0cMr4b4CJp+jasOti5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mMxSiEz7syYJoAlCq3i1I3Zrx0wHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpIV73k3rtN7BwkNI80I9aLG0qzyASittzF EgDgnav5J75mN05pC2e1ylzDx4ls9jhhD7qKBXhI3vJO1E0A1K+ehbY3fYXcjsR3 4Jj6QIQI8qvgs7ygXWLBzlgFFGVAxqfuA0Z3z7/po42ajdnqyuPM8oFVLX4+pZqC lBpIOlD31dm5EWjaqsQ+yaTUBK+NifEU+1+cCEOdRcOutrvu/b5LF5JZ6NUshMVs y0HnBH6zdjVcfGT+woOK1S+6PDqhEZSXIYQVLhvHg5QQR7wrzMjjt3vtqw9Cftby DKWjANv1WS61Z9p9Fn72saCVx+0mygpuC8L0x6h72cHgm006T/U= -----END CERTIFICATE-----Generated at Sun Jun 15 17:11:30 2025 by rpki-client