$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: id9says2C3okA5j0ArSYntn7nFEJdummioItAyUKlns= Subject key identifier: 19:2B:02:C6:AE:EE:4D:DA:88:C2:C3:C7:C6:90:87:D7:40:74:76:F0 Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 5BC7D16B14296D1253F370BCC44A8C9AE9A5B440 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 015B Signing time: Sat 14 Jun 2025 20:21:34 +0000 Manifest this update: Sat 14 Jun 2025 20:16:34 +0000 Manifest next update: Wed 18 Jun 2025 08:02:34 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) 2: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: fpV6GSafRrsmGtpIz+htEuwSpTXh3Hb9SVWkxvPFJFM=) 3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) 4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c7:d1:6b:14:29:6d:12:53:f3:70:bc:c4:4a:8c:9a:e9:a5:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Jun 14 20:16:34 2025 GMT Not After : Jun 18 08:02:34 2025 GMT Subject: CN=192B02C6AEEE4DDA88C2C3C7C69087D7407476F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:70:51:e8:1d:00:c7:db:63:ba:99:22:0e: 56:ef:be:21:78:19:8f:71:2e:59:ba:49:ca:4d:6e: 5d:cc:06:60:62:07:ef:a8:f0:ee:f3:e4:23:93:43: c2:39:5b:a4:00:00:6b:55:34:9d:a9:ae:45:ff:b6: 5f:d1:08:e1:a1:fd:24:58:4f:e2:6e:65:e7:ea:a1: 70:38:a4:85:59:1c:49:3c:f3:d8:6c:1b:f4:bc:5f: 6a:59:9a:2d:65:71:b4:9b:35:2d:6e:92:c5:35:82: 9f:7e:b6:2a:14:ab:42:84:34:cd:54:70:6a:20:e9: 6a:a4:d2:35:cb:09:42:9d:4c:ac:f6:d8:b4:91:a8: 1c:10:12:cb:b1:cd:4d:f2:b9:8d:51:e1:e3:20:51: 12:04:99:bc:36:c2:7b:29:fc:11:72:c6:f9:87:00: 83:0d:64:e6:61:b9:ec:fa:27:25:d5:5e:b3:6a:05: f2:f4:bc:11:e5:87:24:7d:c4:16:d1:a9:ee:5a:db: b8:70:ec:be:53:3b:32:8f:08:91:47:f3:5f:b5:af: 8e:d9:ba:e3:74:84:b8:3b:99:62:2d:ec:8f:2d:21: 3a:d0:91:6e:75:ed:3b:e4:f3:30:df:ee:dd:09:64: 3b:c1:14:16:44:96:0e:c8:e9:13:ca:a0:11:24:31: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2B:02:C6:AE:EE:4D:DA:88:C2:C3:C7:C6:90:87:D7:40:74:76:F0 X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:02:c2:25:6b:47:7b:0c:a8:4d:2e:77:8c:f7:8f:3d:e2:69: a0:59:88:7c:6c:6a:b5:79:82:35:ab:0e:94:7a:7e:dd:b8:41: d3:80:4a:c6:ad:47:b7:d1:3a:24:aa:30:b2:a5:18:b8:a6:68: 70:db:90:20:ca:2a:d0:c1:e6:cc:5a:df:b3:be:fd:7b:d8:14: 22:2c:eb:d1:91:bb:35:0e:2d:02:a2:d9:bf:b6:81:0d:71:f1: 94:9c:84:d4:cd:83:85:8b:b2:7e:44:93:02:83:3b:7c:65:75: b8:df:16:d4:41:82:bb:e2:f0:cc:6d:ad:7f:c7:bd:45:c6:b8: 8a:3b:fc:36:07:ee:e0:46:18:1b:50:b7:eb:52:e8:86:9e:f1: 31:73:e3:1f:d4:0c:e6:bb:4c:3e:a5:c8:d7:e3:f1:3d:6f:61: 11:ba:e0:90:d5:8f:b2:7a:02:3d:09:f3:2a:a0:a8:ba:ca:ed: f4:a1:06:56:a8:32:f8:85:3b:49:8c:d0:ab:f1:90:ed:aa:04: 16:91:1e:66:1e:62:61:de:84:17:b8:1d:cb:67:58:4b:52:ac: 5d:53:9e:75:cb:a1:80:dd:b3:56:7e:59:6f:4f:7f:f5:2c:f9: ba:ff:e0:1f:4a:fc:90:4f:c9:64:25:93:a3:69:d5:95:39:6b: 3e:c2:fc:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8fRaxQpbRJT83C8xEqMmumltEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNTA2MTQyMDE2MzRaFw0yNTA2MTgwODAyMzRaMDMxMTAvBgNV BAMTKDE5MkIwMkM2QUVFRTREREE4OEMyQzNDN0M2OTA4N0Q3NDA3NDc2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8AXBR6B0Ax9tjupkiDlbvviF4 GY9xLlm6ScpNbl3MBmBiB++o8O7z5COTQ8I5W6QAAGtVNJ2prkX/tl/RCOGh/SRY T+JuZefqoXA4pIVZHEk889hsG/S8X2pZmi1lcbSbNS1uksU1gp9+tioUq0KENM1U cGog6Wqk0jXLCUKdTKz22LSRqBwQEsuxzU3yuY1R4eMgURIEmbw2wnsp/BFyxvmH AIMNZOZhuez6JyXVXrNqBfL0vBHlhyR9xBbRqe5a27hw7L5TOzKPCJFH81+1r47Z uuN0hLg7mWIt7I8tITrQkW517Tvk8zDf7t0JZDvBFBZElg7I6RPKoBEkMYiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGSsCxq7uTdqIwsPHxpCH10B0dvAwHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0CwiVrR3sMqE0ud4z3jz3iaaBZiHxsarV5 gjWrDpR6ft24QdOASsatR7fROiSqMLKlGLimaHDbkCDKKtDB5sxa37O+/XvYFCIs 69GRuzUOLQKi2b+2gQ1x8ZSchNTNg4WLsn5EkwKDO3xldbjfFtRBgrvi8MxtrX/H vUXGuIo7/DYH7uBGGBtQt+tS6Iae8TFz4x/UDOa7TD6lyNfj8T1vYRG64JDVj7J6 Aj0J8yqgqLrK7fShBlaoMviFO0mM0KvxkO2qBBaRHmYeYmHehBe4HctnWEtSrF1T nnXLoYDds1Z+WW9Pf/Us+br/4B9K/JBPyWQlk6Np1ZU5az7C/Fo= -----END CERTIFICATE-----Generated at Tue Jun 17 06:48:44 2025 by rpki-client