$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: ClZFuXx3Rc31u6pKw78rkzxoMDRVxNobeMjpHMGU2NY= Subject key identifier: 0D:CC:DB:A1:D0:17:50:A2:5E:6B:87:53:46:E8:5F:E2:A5:09:17:87 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 1597B13B85D5F281259C50B818BAD31E653BB141 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 02EE Signing time: Wed 18 Jun 2025 20:02:10 +0000 Manifest this update: Wed 18 Jun 2025 19:57:10 +0000 Manifest next update: Sat 21 Jun 2025 21:46:10 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 2: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: B3RhHnA7vmLpeCUcqW5syGUY/6yLyQUP4BvYt/H+VAo=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:97:b1:3b:85:d5:f2:81:25:9c:50:b8:18:ba:d3:1e:65:3b:b1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Jun 18 19:57:10 2025 GMT Not After : Jun 21 21:46:10 2025 GMT Subject: CN=0DCCDBA1D01750A25E6B875346E85FE2A5091787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:95:a3:6f:eb:aa:0e:7d:5f:fc:de:c1:f4: 2d:7c:25:dd:f2:ec:a4:09:71:56:18:c8:43:c8:f0: 44:f2:11:2d:88:56:c9:97:f9:13:fa:7d:57:24:b7: f5:5b:16:1d:b1:4d:d5:a8:7a:51:76:5b:20:15:42: 34:f1:96:37:46:9d:73:2c:1e:b1:37:6a:9c:ea:b8: f5:f0:0b:9a:cf:d8:17:f2:28:1d:ac:c4:6a:b0:29: a9:91:db:e0:a1:ab:ec:d8:55:0e:8a:e3:c5:2e:4e: 2d:5b:47:f0:75:40:53:58:8b:21:9e:44:82:13:a2: 7e:aa:b8:8a:fc:27:72:d2:d2:bd:2c:47:30:26:db: 00:72:4b:69:ba:a5:de:fb:89:5d:ac:b1:10:20:11: bc:05:97:c5:cd:fe:82:ec:ff:37:be:a4:2e:c6:1e: 48:25:2d:fe:bb:ca:bf:64:eb:b7:a1:5f:b7:c3:f7: 5d:6c:a6:22:09:8c:4b:10:74:78:da:ee:55:19:aa: ee:c5:31:03:77:7c:7f:5d:e6:fd:87:2d:9c:e6:aa: ae:3a:7a:b8:11:fd:cc:d7:d9:35:e3:ec:86:e4:6d: d0:57:be:8a:b4:d2:d5:0a:25:7d:2e:7a:1c:b9:db: 47:b2:39:8c:88:e9:51:50:98:84:5b:9c:9c:95:a2: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:DB:A1:D0:17:50:A2:5E:6B:87:53:46:E8:5F:E2:A5:09:17:87 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:de:55:b8:e9:21:3b:a6:8c:7c:8a:18:50:05:61:a9:4e:69: 2a:36:13:49:53:d6:f1:58:35:f9:01:8b:6f:45:94:61:f7:fe: ee:f2:88:d5:90:67:ec:b0:56:14:55:00:ed:68:4f:03:1c:c4: 2b:17:c1:cb:72:59:75:80:c0:4e:28:ea:c0:c3:92:db:d7:ea: 13:ea:85:d3:f3:c7:e5:13:42:6a:ce:a4:fe:4f:1b:4d:4c:32: af:98:65:9d:c7:eb:d1:ff:c4:31:b1:ec:a1:a0:b0:7a:5c:2f: 61:55:f8:b2:37:e9:78:b5:f3:84:0f:6e:8b:70:11:80:79:3b: a9:48:8b:aa:e2:3d:08:1d:0f:9b:a9:5a:60:a8:aa:45:e8:d3: 9f:0f:3b:9c:ef:81:53:8d:f6:c7:a0:ea:23:61:de:2e:18:4f: 98:25:2a:f7:3e:0a:93:01:dc:69:89:90:ff:06:cd:b7:0c:e3: 7c:cb:70:ca:69:65:e6:a1:36:ab:64:9f:92:48:4b:4f:b5:c5: 91:6f:b3:ec:b4:c4:d7:dd:2f:ae:71:46:f9:c9:96:1b:b3:0c: 71:d9:67:26:f0:33:23:2c:26:86:f4:46:cb:ff:12:9d:81:94: 55:22:1f:1b:1a:80:40:88:3d:e7:b3:17:c1:65:5b:27:e7:fe: 9c:51:3a:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZexO4XV8oElnFC4GLrTHmU7sUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA2MTgxOTU3MTBaFw0yNTA2MjEyMTQ2MTBaMDMxMTAvBgNV BAMTKDBEQ0NEQkExRDAxNzUwQTI1RTZCODc1MzQ2RTg1RkUyQTUwOTE3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLw5Wjb+uqDn1f/N7B9C18Jd3y 7KQJcVYYyEPI8ETyES2IVsmX+RP6fVckt/VbFh2xTdWoelF2WyAVQjTxljdGnXMs HrE3apzquPXwC5rP2BfyKB2sxGqwKamR2+Chq+zYVQ6K48UuTi1bR/B1QFNYiyGe RIITon6quIr8J3LS0r0sRzAm2wByS2m6pd77iV2ssRAgEbwFl8XN/oLs/ze+pC7G HkglLf67yr9k67ehX7fD911spiIJjEsQdHja7lUZqu7FMQN3fH9d5v2HLZzmqq46 ergR/czX2TXj7IbkbdBXvoq00tUKJX0uehy520eyOYyI6VFQmIRbnJyVoruTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDczbodAXUKJea4dTRuhf4qUJF4cwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKveVbjpITumjHyKGFAFYalOaSo2E0lT1vFY NfkBi29FlGH3/u7yiNWQZ+ywVhRVAO1oTwMcxCsXwctyWXWAwE4o6sDDktvX6hPq hdPzx+UTQmrOpP5PG01MMq+YZZ3H69H/xDGx7KGgsHpcL2FV+LI36Xi184QPbotw EYB5O6lIi6riPQgdD5upWmCoqkXo058PO5zvgVON9seg6iNh3i4YT5glKvc+CpMB 3GmJkP8GzbcM43zLcMppZeahNqtkn5JIS0+1xZFvs+y0xNfdL65xRvnJlhuzDHHZ ZybwMyMsJob0Rsv/Ep2BlFUiHxsagECIPeezF8FlWyfn/pxROjA= -----END CERTIFICATE-----Generated at Thu Jun 19 01:23:07 2025 by rpki-client