$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: w2PfVnziyif5LGVNFC14xlowGz4IlVNNYkMRM4Adpdk= Subject key identifier: A8:0B:9E:A4:C5:F0:5F:51:5F:1F:73:65:67:A5:A0:3C:6C:F5:BB:39 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 4D3E97A7E28A48DA7B675404ADCEC3906BD21EF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 0103 Signing time: Tue 17 Jun 2025 08:42:16 +0000 Manifest this update: Tue 17 Jun 2025 08:37:16 +0000 Manifest next update: Fri 20 Jun 2025 12:30:16 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: IIPCjprRAJHcx3BoIuf0S6AHJVDhRKfflqdBaDr0S/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3e:97:a7:e2:8a:48:da:7b:67:54:04:ad:ce:c3:90:6b:d2:1e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Jun 17 08:37:16 2025 GMT Not After : Jun 20 12:30:16 2025 GMT Subject: CN=A80B9EA4C5F05F515F1F736567A5A03C6CF5BB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:93:3b:ab:dd:bb:b4:ae:08:13:0a:51:25: 8e:5b:fe:31:f9:1e:fe:ee:0b:6a:86:83:81:5b:65: 0c:8b:61:6c:2e:70:78:33:b1:3f:ee:81:8b:59:9f: bf:fe:19:95:81:78:2f:60:d9:55:45:36:fb:39:1f: 13:69:3b:11:1a:cd:1f:ab:86:36:ea:bd:08:5b:31: 96:02:17:3b:7a:b1:86:2f:84:20:eb:4d:65:9f:3e: 09:cb:21:ac:be:a0:9d:d2:47:be:64:80:b0:23:33: aa:88:2d:75:d0:0a:d2:ca:3f:6f:80:1b:96:88:55: f9:40:14:7c:41:ea:0e:82:b1:8e:c1:47:f8:98:9f: 31:3a:eb:cf:eb:72:11:e3:6c:1f:7c:98:82:bf:ba: a6:c6:02:50:04:7a:db:d3:5d:12:77:cc:da:b5:4b: 9c:78:c8:07:55:72:14:05:f4:ff:1e:66:d7:c1:35: ac:be:d4:d2:bf:d9:d3:65:41:81:dc:e8:67:d4:00: bc:65:4a:69:0e:8a:d9:9f:a6:fd:96:81:6c:33:f7: 10:05:ca:ef:d1:3e:2d:51:19:47:3f:f7:f6:f4:a3: fb:2c:02:8c:55:37:5d:2d:48:ed:73:83:e3:2c:07: 7c:72:cc:06:fe:ff:41:8d:6d:52:b8:b3:c5:76:c7: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0B:9E:A4:C5:F0:5F:51:5F:1F:73:65:67:A5:A0:3C:6C:F5:BB:39 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:54:55:82:0a:ef:d0:89:49:44:3b:ee:e9:99:84:83:02:7e: e2:06:97:c9:65:91:32:59:95:e4:c7:95:76:bc:31:d5:db:62: f6:d6:19:94:4a:3f:bb:06:56:51:26:c1:29:21:ff:9e:cb:6e: 92:6d:b9:6a:8e:36:e9:a5:43:08:68:34:88:c2:4e:75:91:9d: d7:6d:64:b4:50:d2:24:b4:03:23:8f:fa:76:e6:60:59:8d:7d: f3:bc:fd:24:0f:d9:03:87:c5:d4:dd:2a:9f:64:d4:a7:6b:09: 8a:1d:7c:cb:b0:3a:10:20:fd:59:ba:4c:b9:c5:34:ed:07:26: eb:d2:f7:77:ee:66:d5:aa:82:ec:5f:84:e6:c5:fe:a6:3c:2c: e2:d6:4a:8b:93:7a:1e:e8:b4:94:3b:f7:5c:d0:b8:7c:92:70: c4:ba:71:59:02:c8:ed:21:fe:49:a7:b3:b8:8a:9c:0b:86:7d: 4f:9b:ae:7c:f7:ec:06:15:0f:97:ad:54:40:a9:a0:50:c5:4c: 09:ec:68:46:a1:19:6a:cf:47:27:c4:31:ea:53:f9:98:3b:18: 4c:3d:9c:18:7f:5e:87:49:5f:2f:a1:10:7c:12:d7:1e:87:ee: e5:6d:75:6e:b3:35:54:c0:0e:05:04:db:ef:7b:38:32:16:5e: 60:a6:d8:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTT6Xp+KKSNp7Z1QErc7DkGvSHvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA2MTcwODM3MTZaFw0yNTA2MjAxMjMwMTZaMDMxMTAvBgNV BAMTKEE4MEI5RUE0QzVGMDVGNTE1RjFGNzM2NTY3QTVBMDNDNkNGNUJCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjT5M7q927tK4IEwpRJY5b/jH5 Hv7uC2qGg4FbZQyLYWwucHgzsT/ugYtZn7/+GZWBeC9g2VVFNvs5HxNpOxEazR+r hjbqvQhbMZYCFzt6sYYvhCDrTWWfPgnLIay+oJ3SR75kgLAjM6qILXXQCtLKP2+A G5aIVflAFHxB6g6CsY7BR/iYnzE668/rchHjbB98mIK/uqbGAlAEetvTXRJ3zNq1 S5x4yAdVchQF9P8eZtfBNay+1NK/2dNlQYHc6GfUALxlSmkOitmfpv2WgWwz9xAF yu/RPi1RGUc/9/b0o/ssAoxVN10tSO1zg+MsB3xyzAb+/0GNbVK4s8V2x11fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAuepMXwX1FfH3NlZ6WgPGz1uzkwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5UVYIK79CJSUQ77umZhIMCfuIGl8llkTJZ leTHlXa8MdXbYvbWGZRKP7sGVlEmwSkh/57LbpJtuWqONumlQwhoNIjCTnWRnddt ZLRQ0iS0AyOP+nbmYFmNffO8/SQP2QOHxdTdKp9k1KdrCYodfMuwOhAg/Vm6TLnF NO0HJuvS93fuZtWqguxfhObF/qY8LOLWSouTeh7otJQ791zQuHyScMS6cVkCyO0h /kmns7iKnAuGfU+brnz37AYVD5etVECpoFDFTAnsaEahGWrPRyfEMepT+Zg7GEw9 nBh/XodJXy+hEHwS1x6H7uVtdW6zNVTADgUE2+97ODIWXmCm2Fo= -----END CERTIFICATE-----Generated at Thu Jun 19 05:57:41 2025 by rpki-client