$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: QJpqGbj9XKxqNexFKQNi+jUMji0sWKMgSc9wJ/Ji484= Subject key identifier: 99:EA:DD:51:0D:3A:5C:3C:C7:B4:3B:D6:F0:9D:EE:5F:00:34:D5:9F Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 737A965232197D219F582BC33844E1F9AC660A83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 017D Signing time: Fri 13 Jun 2025 03:00:58 +0000 Manifest this update: Fri 13 Jun 2025 02:55:58 +0000 Manifest next update: Mon 16 Jun 2025 14:24:58 +0000 Files and hashes: 1: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=) 2: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: 1NeAyjWaXnUPoiPYgzo9RlUvg3NXV1iMogb/9wAjSj8=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 14:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7a:96:52:32:19:7d:21:9f:58:2b:c3:38:44:e1:f9:ac:66:0a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Jun 13 02:55:58 2025 GMT Not After : Jun 16 14:24:58 2025 GMT Subject: CN=99EADD510D3A5C3CC7B43BD6F09DEE5F0034D59F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:c0:bf:4f:8f:63:d2:67:2c:b6:8b:03:9e: 78:e0:29:5c:3e:f4:4f:a0:b3:f2:3c:83:d2:68:3c: 3a:6b:90:14:35:d4:2f:70:9f:d0:86:60:b7:f2:fc: a2:70:ac:32:18:b9:98:35:48:45:ae:a9:15:2f:0a: 05:1c:4d:18:09:d0:07:07:b0:88:5a:c3:21:9c:c4: 63:34:a0:de:13:fa:24:27:28:e6:ed:3f:14:ad:3f: 49:ad:f7:4d:3c:38:0a:1b:a1:6f:fc:93:4e:a0:75: d6:df:d5:74:dc:10:40:59:50:8b:c1:3b:81:dc:2d: 91:7a:05:ed:a7:3c:9b:53:b0:fa:ac:dd:15:3d:ab: 9e:fa:6e:45:6a:44:9b:51:a6:f8:2e:1b:ef:7a:4f: f8:ae:ec:c6:a9:b6:fc:b9:e6:55:c7:17:9d:83:9a: 67:3c:df:9f:85:4c:d0:1c:9f:fe:86:3f:12:87:70: c1:cc:a0:2e:43:ae:fb:c5:25:68:b8:b0:8a:b4:05: 9a:e0:8d:ad:d0:28:c9:46:b8:77:c3:d4:80:18:f2: 06:7d:fc:95:e1:d9:44:7b:f5:9f:82:fe:39:ab:ae: f8:dc:7d:16:29:c8:69:b7:7e:08:fc:9c:1e:f4:03: 07:ee:a2:a8:05:a4:77:6b:39:4d:3c:da:d3:2d:68: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:DD:51:0D:3A:5C:3C:C7:B4:3B:D6:F0:9D:EE:5F:00:34:D5:9F X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c9:95:bb:65:4d:81:75:36:70:57:96:5e:42:13:70:c7:98: 96:41:96:c5:57:60:8d:72:a1:16:6f:1e:66:89:41:db:9f:52: 97:e3:43:f1:23:00:41:c2:a1:ea:da:4c:5a:11:be:4c:a6:a6: 7c:ce:d0:c3:60:fb:75:ff:84:55:5e:71:5b:d2:e3:45:d3:5e: 62:10:91:de:15:fa:7c:08:d5:89:69:63:f5:ac:67:8f:be:68: 9c:44:c7:d1:da:a3:5c:dd:96:96:34:90:35:86:83:bd:75:50: d5:63:54:ef:ea:94:b7:97:d3:0a:94:c5:08:9d:94:db:d8:a1: b9:2d:07:cb:e8:89:15:1b:5e:57:fb:49:1c:df:ef:3d:2b:de: be:19:07:1d:73:aa:19:7e:c9:9f:86:25:1e:bb:66:97:b0:60: bd:08:ab:6f:58:8d:92:a9:21:e3:6a:70:a7:e9:1a:70:c2:a7: 49:b2:b8:c9:45:8b:20:8e:16:c5:34:62:f1:0f:c1:21:41:a1: 7e:5c:c8:f9:31:0d:e5:92:e2:12:22:4f:18:e3:1a:2f:e2:5e: 72:6c:de:86:b9:f1:a0:e1:24:04:e6:c4:a6:48:b4:c2:64:b0: 1a:b4:f9:83:25:27:ce:99:4c:4d:52:ad:29:ac:7b:24:9b:4e: 3b:f7:fa:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3qWUjIZfSGfWCvDOETh+axmCoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTA2MTMwMjU1NThaFw0yNTA2MTYxNDI0NThaMDMxMTAvBgNV BAMTKDk5RUFERDUxMEQzQTVDM0NDN0I0M0JENkYwOURFRTVGMDAzNEQ1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNcC/T49j0mcstosDnnjgKVw+ 9E+gs/I8g9JoPDprkBQ11C9wn9CGYLfy/KJwrDIYuZg1SEWuqRUvCgUcTRgJ0AcH sIhawyGcxGM0oN4T+iQnKObtPxStP0mt9008OAoboW/8k06gddbf1XTcEEBZUIvB O4HcLZF6Be2nPJtTsPqs3RU9q576bkVqRJtRpvguG+96T/iu7Maptvy55lXHF52D mmc835+FTNAcn/6GPxKHcMHMoC5DrvvFJWi4sIq0BZrgja3QKMlGuHfD1IAY8gZ9 /JXh2UR79Z+C/jmrrvjcfRYpyGm3fgj8nB70AwfuoqgFpHdrOU082tMtaKBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmerdUQ06XDzHtDvW8J3uXwA01Z8wHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPJlbtlTYF1NnBXll5CE3DHmJZBlsVXYI1y oRZvHmaJQdufUpfjQ/EjAEHCoeraTFoRvkympnzO0MNg+3X/hFVecVvS40XTXmIQ kd4V+nwI1YlpY/WsZ4++aJxEx9Hao1zdlpY0kDWGg711UNVjVO/qlLeX0wqUxQid lNvYobktB8voiRUbXlf7SRzf7z0r3r4ZBx1zqhl+yZ+GJR67ZpewYL0Iq29YjZKp IeNqcKfpGnDCp0myuMlFiyCOFsU0YvEPwSFBoX5cyPkxDeWS4hIiTxjjGi/iXnJs 3oa58aDhJATmxKZItMJksBq0+YMlJ86ZTE1SrSmseySbTjv3+s4= -----END CERTIFICATE-----Generated at Sun Jun 15 15:19:11 2025 by rpki-client