$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: 3rMXRBBobMTeaBatuQR60UhxlUoUZcZy+7GZ7JXYfZk= Subject key identifier: ED:22:73:56:58:2C:37:60:A9:AA:04:9E:C2:D0:48:61:09:9E:83:BE Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 21CFF35C4297820B15C3B4528EFA5E32334301CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 04FC Signing time: Sat 14 Jun 2025 03:50:39 +0000 Manifest this update: Sat 14 Jun 2025 03:45:39 +0000 Manifest next update: Tue 17 Jun 2025 04:55:39 +0000 Files and hashes: 1: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: N575Rd04sdWuljy+/gWPBi8EMbVoyPyHMDMfsQ5bHKg=) 2: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: 0aRFrXTSbHUOy2mZwEH0txx1Tk9Q/AHJdIJdOAn4gUw=) 3: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: EC/apaEw6nvbeVRwEoDoeTlxOgKBSJFUQVJOdNsZhMQ=) 4: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cf:f3:5c:42:97:82:0b:15:c3:b4:52:8e:fa:5e:32:33:43:01:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Jun 14 03:45:39 2025 GMT Not After : Jun 17 04:55:39 2025 GMT Subject: CN=ED227356582C3760A9AA049EC2D04861099E83BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:bb:c7:75:8d:f2:ec:0f:f6:cc:5e:d1:cc: 17:a6:41:3a:82:5d:9b:c2:83:d0:e1:cd:91:a2:b2: c2:7c:7c:9a:62:d8:de:c9:77:f6:c5:05:e6:b6:54: b8:f1:6b:5d:54:57:d7:4e:d7:18:c6:df:40:05:e6: e8:ce:08:2d:2c:f5:4a:e5:6e:0a:54:ca:55:21:cc: d2:ac:5e:b7:cb:e1:74:dd:dd:68:f5:d1:fe:13:41: d7:33:3b:41:b9:c8:34:64:ec:db:dc:4c:c9:4e:4b: 2b:e0:68:67:ff:6b:4c:20:f9:99:d1:fe:dd:b7:2b: f1:28:1d:84:e2:45:89:ed:6c:21:31:7f:a0:5f:c9: 37:25:f9:ba:e0:da:7e:64:e8:9f:78:ac:d6:6d:25: 9c:06:c9:0a:fc:41:08:bc:b2:a7:ca:b5:6a:9d:16: ec:1f:6d:ff:a0:4f:fa:88:9d:b6:d5:f3:6b:00:d4: e5:4a:1c:56:36:c9:59:57:19:a9:90:05:8c:03:cc: b3:2c:ef:8f:6f:0d:54:2c:d2:64:c2:96:be:55:b6: 0d:91:8e:22:81:0b:47:0e:66:98:13:34:26:7e:e4: 73:5a:b5:4c:c8:39:fd:a7:a3:02:20:63:23:dd:b2: d8:bf:00:5f:3d:34:a0:7c:da:4b:a8:36:65:0b:4d: 21:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:73:56:58:2C:37:60:A9:AA:04:9E:C2:D0:48:61:09:9E:83:BE X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b1:b0:d8:30:16:29:72:37:1f:93:f2:1d:c2:fb:68:82:9b: e2:72:de:b9:f4:b6:ce:8c:f5:49:89:94:03:1d:a7:48:64:a3: 9b:8c:b5:d2:59:fb:a6:e5:a1:79:81:83:fe:2f:13:09:5e:07: 2a:d9:8c:94:2e:73:ad:7d:43:14:b3:77:6f:8f:c0:08:41:1e: 86:2e:88:42:2e:d4:e1:57:74:dd:f6:8c:04:8b:e2:ee:bf:4e: 7f:45:85:7d:43:ef:51:3c:88:27:95:5a:69:4c:9e:84:3e:9f: 0c:b6:96:52:d5:84:f8:ef:cb:73:0a:d2:c3:8d:23:49:3b:49: 0e:85:cb:fb:f6:8f:88:88:93:4a:58:11:f2:00:99:86:dc:10: b7:b5:07:1d:54:49:12:16:dc:ce:5b:82:4c:f9:59:db:50:e7: 06:47:88:72:b6:3a:0e:b5:b0:3d:8b:bc:ea:a3:71:a7:76:e6: 66:95:db:60:5b:d6:89:92:27:ac:68:58:f8:22:5d:e1:79:70: cd:7c:02:08:9e:e4:cd:ac:29:55:01:8c:b3:cc:fe:30:83:5a: 23:9f:f0:fc:dc:7a:8b:0e:d0:8b:99:15:2b:de:ca:3d:d3:86: be:fa:22:17:28:9f:98:96:2a:bb:4f:05:d6:45:da:56:5c:56: 0e:8a:f2:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIc/zXEKXggsVw7RSjvpeMjNDAcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA2MTQwMzQ1MzlaFw0yNTA2MTcwNDU1MzlaMDMxMTAvBgNV BAMTKEVEMjI3MzU2NTgyQzM3NjBBOUFBMDQ5RUMyRDA0ODYxMDk5RTgzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyF7vHdY3y7A/2zF7RzBemQTqC XZvCg9DhzZGissJ8fJpi2N7Jd/bFBea2VLjxa11UV9dO1xjG30AF5ujOCC0s9Url bgpUylUhzNKsXrfL4XTd3Wj10f4TQdczO0G5yDRk7NvcTMlOSyvgaGf/a0wg+ZnR /t23K/EoHYTiRYntbCExf6BfyTcl+brg2n5k6J94rNZtJZwGyQr8QQi8sqfKtWqd Fuwfbf+gT/qInbbV82sA1OVKHFY2yVlXGamQBYwDzLMs749vDVQs0mTClr5Vtg2R jiKBC0cOZpgTNCZ+5HNatUzIOf2nowIgYyPdsti/AF89NKB82kuoNmULTSEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7SJzVlgsN2CpqgSewtBIYQmeg74wHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+xsNgwFilyNx+T8h3C+2iCm+Jy3rn0ts6M 9UmJlAMdp0hko5uMtdJZ+6bloXmBg/4vEwleByrZjJQuc619QxSzd2+PwAhBHoYu iEIu1OFXdN32jASL4u6/Tn9FhX1D71E8iCeVWmlMnoQ+nwy2llLVhPjvy3MK0sON I0k7SQ6Fy/v2j4iIk0pYEfIAmYbcELe1Bx1USRIW3M5bgkz5WdtQ5wZHiHK2Og61 sD2LvOqjcad25maV22Bb1omSJ6xoWPgiXeF5cM18Agie5M2sKVUBjLPM/jCDWiOf 8PzceosO0IuZFSveyj3Thr76Ihcon5iWKrtPBdZF2lZcVg6K8i8= -----END CERTIFICATE-----Generated at Mon Jun 16 01:53:13 2025 by rpki-client