$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft File: 1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json) Hash identifier: tQNorQMki2oyJ9YxlXnRU7ZjGGL5xSwL01oXJYNHF84= Subject key identifier: D4:09:CF:88:F3:3B:E4:5E:15:25:FC:76:0A:02:11:B9:95:E1:32:BA Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 62451AA7618B5B16E464C480D1F963659260DA18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft Manifest number: 01DD Signing time: Sun 15 Jun 2025 10:01:32 +0000 Manifest this update: Sun 15 Jun 2025 09:56:32 +0000 Manifest next update: Wed 18 Jun 2025 13:01:32 +0000 Files and hashes: 1: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: 83g1exgFqaTQKU38X1D6x0BtWT5D2KATwMghhQSp0Hg=) 2: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: ykRWiMSaAsP4Z39Whyu3kvlehUT+9RaQnqBPMyF4FR0=) 3: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: TfGChP3fu4L9hpOhq7ERAKJPSSZpz8eq5Xb+2cFEs2w=) 4: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: sJCm2ee/pkpEqZ3CTb0n1XRlqsVPP4kAsamQV7lnrGA=) 5: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: EFHYC7XhG7MQGG+p71C9PeqM87F/0AnjgXarEbD+y4E=) 6: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:45:1a:a7:61:8b:5b:16:e4:64:c4:80:d1:f9:63:65:92:60:da:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Jun 15 09:56:32 2025 GMT Not After : Jun 18 13:01:32 2025 GMT Subject: CN=D409CF88F33BE45E1525FC760A0211B995E132BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:69:c0:08:65:49:34:95:64:01:d8:c1:8f: fe:00:99:cc:07:64:c2:11:ae:55:fe:51:60:c3:4d: 21:c8:18:0c:48:73:04:4f:56:9c:79:29:ca:20:a7: 8a:b5:0d:59:55:a8:41:76:91:a7:d4:92:74:2c:fc: 16:96:2c:dc:76:9f:69:97:b9:8e:db:1d:ae:8f:59: 6b:6c:ce:4f:ee:92:51:ca:9e:ee:d6:79:39:19:14: 0c:54:3f:bf:f2:ff:e8:e9:a8:69:d3:26:a4:75:fb: 2c:54:69:57:5f:60:36:2f:5e:e8:7a:02:31:fc:0b: d9:e0:e3:07:b2:b1:fc:a8:4c:c6:09:29:d2:d5:e6: c7:4b:fe:4e:19:e4:c2:f9:29:bb:57:4d:c8:20:bc: 65:b6:c5:07:2b:85:99:fd:9c:e4:a1:f5:94:78:d6: 58:e6:a9:bb:e9:6d:83:93:e3:73:03:d4:a6:7c:60: 2e:93:48:3b:84:03:e5:54:d3:87:e5:4b:a6:15:6a: 90:68:bc:ef:af:9d:a8:66:a6:59:e8:bd:3f:91:ec: b5:c0:df:6d:40:7b:2b:34:2f:23:0b:a6:61:ee:e8: bc:a6:e9:8e:f7:29:c1:48:eb:fc:be:33:97:31:8e: 18:9f:2e:34:96:0f:5c:d8:31:9c:8b:39:58:c6:0d: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:CF:88:F3:3B:E4:5E:15:25:FC:76:0A:02:11:B9:95:E1:32:BA X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a2:1a:65:92:41:db:15:84:6d:1f:29:be:e8:e4:35:be:2f: 92:25:c1:6a:47:1b:3f:64:4d:5e:42:b0:87:1f:04:99:fc:ee: 7b:82:05:f2:5c:22:37:02:cc:56:2f:43:35:72:73:c8:44:92: b2:6d:9c:bf:72:95:07:c4:99:d5:80:9e:74:e8:27:86:a7:c5: 41:0e:49:d8:71:ac:4b:a6:55:17:79:0f:99:28:9c:7c:0f:50: 36:01:f6:0b:df:2c:cf:d5:f2:ab:cf:db:9c:25:96:d2:8d:6b: 8c:05:d5:25:5b:1a:92:10:6a:b6:27:8a:be:a6:83:60:c9:5c: e3:e5:52:fc:02:58:8d:2e:f0:91:68:b6:e0:36:d5:3b:00:9f: 06:af:4e:d3:b7:3e:d8:a8:f2:18:52:4c:69:06:ac:b1:82:a1: 8e:3e:92:6a:d8:72:d9:67:65:5f:3e:e4:3c:14:df:97:60:dc: 67:91:ab:9f:f4:74:bd:54:45:92:a8:40:f5:e3:11:8c:12:1e: 9b:54:a9:73:b2:c8:67:f0:c2:3c:4b:8c:c7:25:6e:83:2c:1f: 7e:91:9b:e8:64:db:dc:ab:6d:15:67:af:e5:47:fd:f9:d6:66: f3:c0:d2:e7:e7:d1:67:38:66:04:6a:c8:18:66:ef:9c:1a:e6: 3a:b6:a6:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkUap2GLWxbkZMSA0fljZZJg2hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNTA2MTUwOTU2MzJaFw0yNTA2MTgxMzAxMzJaMDMxMTAvBgNV BAMTKEQ0MDlDRjg4RjMzQkU0NUUxNTI1RkM3NjBBMDIxMUI5OTVFMTMyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/N2nACGVJNJVkAdjBj/4AmcwH ZMIRrlX+UWDDTSHIGAxIcwRPVpx5Kcogp4q1DVlVqEF2kafUknQs/BaWLNx2n2mX uY7bHa6PWWtszk/uklHKnu7WeTkZFAxUP7/y/+jpqGnTJqR1+yxUaVdfYDYvXuh6 AjH8C9ng4weysfyoTMYJKdLV5sdL/k4Z5ML5KbtXTcggvGW2xQcrhZn9nOSh9ZR4 1ljmqbvpbYOT43MD1KZ8YC6TSDuEA+VU04flS6YVapBovO+vnahmplnovT+R7LXA 321Aeys0LyMLpmHu6Lym6Y73KcFI6/y+M5cxjhifLjSWD1zYMZyLOVjGDZjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1AnPiPM75F4VJfx2CgIRuZXhMrowHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx NjAtYTllOGFmZTM1NzlmLzAvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1 OUVBMDk3MzUzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOiGmWSQdsVhG0fKb7o5DW+L5IlwWpHGz9k TV5CsIcfBJn87nuCBfJcIjcCzFYvQzVyc8hEkrJtnL9ylQfEmdWAnnToJ4anxUEO SdhxrEumVRd5D5konHwPUDYB9gvfLM/V8qvP25wlltKNa4wF1SVbGpIQarYnir6m g2DJXOPlUvwCWI0u8JFotuA21TsAnwavTtO3Ptio8hhSTGkGrLGCoY4+kmrYctln ZV8+5DwU35dg3GeRq5/0dL1URZKoQPXjEYwSHptUqXOyyGfwwjxLjMclboMsH36R m+hk29yrbRVnr+VH/fnWZvPA0ufn0Wc4ZgRqyBhm75wa5jq2ptQ= -----END CERTIFICATE-----Generated at Tue Jun 17 05:45:42 2025 by rpki-client