$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: 0XJcYqrmd1WrJbnAUD5Y1id4JrfSV02lAYUExxXffco= Subject key identifier: 91:58:6B:DA:BF:F3:DF:AE:69:AB:92:EC:D1:D7:38:0E:28:89:D9:E1 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 29C18CF485BD8A11EDA2F6D7E3C94F06F957F787 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: 50 Signing time: Sat 14 Jun 2025 21:12:20 +0000 Manifest this update: Sat 14 Jun 2025 21:07:20 +0000 Manifest next update: Wed 18 Jun 2025 04:18:20 +0000 Files and hashes: 1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: fwx09qfbx8QbcxE9q/oVhZZN3pGMBiHzv2GasOKaLqY=) 2: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=) 3: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c1:8c:f4:85:bd:8a:11:ed:a2:f6:d7:e3:c9:4f:06:f9:57:f7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Jun 14 21:07:20 2025 GMT Not After : Jun 18 04:18:20 2025 GMT Subject: CN=91586BDABFF3DFAE69AB92ECD1D7380E2889D9E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:02:63:8d:72:3a:53:9e:e2:8b:e7:1f:a6: 00:c1:32:6d:34:1f:a3:1b:bc:77:cf:e9:37:0c:9a: ca:79:d9:b2:71:56:b2:f6:03:92:bd:d3:0a:e1:34: 70:83:d2:41:cf:e7:ee:91:3b:4a:5f:e6:82:b0:c0: d4:54:da:24:41:a7:db:fe:52:64:44:8f:8f:bf:b4: fa:a5:7b:30:9e:06:1d:ef:cb:5b:1b:5e:9b:95:f5: 08:6f:71:2d:ac:33:fb:21:f4:ec:b6:8a:11:11:bf: 64:47:ca:7d:23:04:58:ac:5c:2f:84:b6:ad:2f:9e: 88:5e:45:1b:e5:91:75:53:5a:69:df:d0:0c:bd:e3: 75:dd:86:3a:2e:fd:8e:67:78:1f:c1:02:1f:fc:55: 15:e1:96:f6:04:cc:d7:fc:08:38:db:7b:58:ea:ce: 3b:2d:15:22:3b:c4:03:4a:28:a9:d4:83:81:d2:9f: 36:7a:d4:b1:8a:99:3c:a8:fd:04:a1:92:4c:52:e5: 72:b1:bf:52:40:ff:05:f0:86:4c:a5:e7:71:98:9a: 4c:81:22:ce:88:de:c4:75:6b:63:0c:a1:f4:25:03: 3a:dd:e9:f8:6c:8b:21:3e:c7:aa:74:f1:18:24:65: aa:36:eb:cd:d4:b4:8e:bb:08:32:81:1c:1e:07:60: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:6B:DA:BF:F3:DF:AE:69:AB:92:EC:D1:D7:38:0E:28:89:D9:E1 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1a:ce:32:35:b4:83:ca:a7:d5:bd:23:8d:a1:d3:41:06:e2: 0d:a0:bf:a5:3b:10:3d:4b:c2:b7:38:4c:30:d6:23:87:d5:7c: 6f:ba:72:f3:f0:a7:bd:66:02:e0:8f:30:16:88:fc:2d:e4:9f: 29:2f:c0:2d:65:f3:8f:de:61:83:8a:d8:b2:65:bd:6e:5b:4b: 97:2e:5b:55:4a:f2:e0:3f:b5:2a:7f:a3:6a:38:8e:0d:1a:cb: 4c:d4:0f:84:80:32:24:e4:9c:e2:d2:6b:7a:ed:f6:3c:a7:0e: 7b:8e:25:4c:c5:f3:c1:79:54:4a:6d:3d:dc:4d:0c:53:c4:9c: 1f:3e:40:52:84:ff:1a:05:3e:2e:14:cf:c5:38:ad:d0:3f:70: db:e5:dc:5a:c8:a0:77:83:0e:9f:fa:1f:fd:f7:a7:b7:2f:68: 7d:c6:2c:b3:3a:83:b0:db:01:16:93:14:be:2e:f7:f5:c3:9f: 3f:1e:76:7e:c5:ad:10:de:23:bd:b4:a8:e1:fe:db:b6:be:58: ba:9d:42:42:8d:24:10:e2:fd:86:16:50:98:46:46:de:32:81: 58:32:d3:77:66:0a:5d:f5:01:29:eb:89:e7:8b:ac:8b:ca:b5: 14:de:62:b9:6f:59:68:f9:70:88:76:9c:f2:80:bf:ec:a4:fc: 29:c8:64:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcGM9IW9ihHtovbX48lPBvlX94cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTA2MTQyMTA3MjBaFw0yNTA2MTgwNDE4MjBaMDMxMTAvBgNV BAMTKDkxNTg2QkRBQkZGM0RGQUU2OUFCOTJFQ0QxRDczODBFMjg4OUQ5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHwJjjXI6U57ii+cfpgDBMm00 H6MbvHfP6TcMmsp52bJxVrL2A5K90wrhNHCD0kHP5+6RO0pf5oKwwNRU2iRBp9v+ UmREj4+/tPqlezCeBh3vy1sbXpuV9QhvcS2sM/sh9Oy2ihERv2RHyn0jBFisXC+E tq0vnoheRRvlkXVTWmnf0Ay943Xdhjou/Y5neB/BAh/8VRXhlvYEzNf8CDjbe1jq zjstFSI7xANKKKnUg4HSnzZ61LGKmTyo/QShkkxS5XKxv1JA/wXwhkyl53GYmkyB Is6I3sR1a2MMofQlAzrd6fhsiyE+x6p08RgkZao2683UtI67CDKBHB4HYIQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkVhr2r/z365pq5Ls0dc4DiiJ2eEwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgazjI1tIPKp9W9I42h00EG4g2gv6U7ED1L wrc4TDDWI4fVfG+6cvPwp71mAuCPMBaI/C3knykvwC1l84/eYYOK2LJlvW5bS5cu W1VK8uA/tSp/o2o4jg0ay0zUD4SAMiTknOLSa3rt9jynDnuOJUzF88F5VEptPdxN DFPEnB8+QFKE/xoFPi4Uz8U4rdA/cNvl3FrIoHeDDp/6H/33p7cvaH3GLLM6g7Db ARaTFL4u9/XDnz8edn7FrRDeI720qOH+27a+WLqdQkKNJBDi/YYWUJhGRt4ygVgy 03dmCl31ASnrieeLrIvKtRTeYrlvWWj5cIh2nPKAv+yk/CnIZGQ= -----END CERTIFICATE-----Generated at Mon Jun 16 21:20:23 2025 by rpki-client