$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: MArUEs08rHloUS9yIfYbV/x9jMbEsTX8zxEj2O5PI2A= Subject key identifier: 09:DB:63:92:54:BB:DA:91:CE:51:89:1C:B7:51:60:B3:72:4B:4A:16 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 519623646734F88A254F6630176F9265F8C86386 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 59 Signing time: Sun 15 Jun 2025 02:21:22 +0000 Manifest this update: Sun 15 Jun 2025 02:16:22 +0000 Manifest next update: Wed 18 Jun 2025 07:41:22 +0000 Files and hashes: 1: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 2: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) 3: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 4: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: F9jk/4Su9aatZDkkkUBmB3y1ulMbD9s76GBlzhKAgww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 07:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:96:23:64:67:34:f8:8a:25:4f:66:30:17:6f:92:65:f8:c8:63:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Jun 15 02:16:22 2025 GMT Not After : Jun 18 07:41:22 2025 GMT Subject: CN=09DB639254BBDA91CE51891CB75160B3724B4A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:e1:02:9a:d9:92:81:a4:17:43:58:25:37: 2c:3f:08:ec:ee:40:4b:dc:02:d0:d5:c6:96:12:3f: 02:29:fd:c7:96:ab:13:5a:0f:f4:ca:69:de:01:0e: 41:3c:c9:65:c9:60:2b:90:21:01:86:e2:37:51:bf: 46:b7:d7:75:f7:68:a0:a9:9f:b8:3d:01:2e:5b:ed: 01:bd:af:66:13:3d:90:36:2d:7d:56:4a:4a:00:64: 90:b8:5a:04:83:d3:46:5d:d9:48:67:f7:ab:0a:15: d3:f5:1d:0b:f4:fe:fd:b1:dc:8c:d5:9c:05:60:77: 83:b9:03:25:0c:9d:92:e3:2b:56:e2:14:16:8b:37: 0c:2d:a0:6f:74:08:5e:2a:dc:23:4d:c0:83:3a:1e: 5e:d1:03:ed:aa:7e:74:f5:fe:cd:7c:9f:80:74:8b: 71:c0:85:0b:e0:67:d6:a2:0a:55:d3:fc:fc:64:e9: 91:e9:f8:15:ea:e7:5c:f9:07:ae:ee:5a:68:40:3e: 09:a1:7d:f2:27:b1:c4:1c:31:ce:ec:a4:0a:01:81: 4a:83:d5:9a:fb:76:69:93:4b:b1:ba:2a:33:a0:5a: 79:0e:04:13:f9:93:02:d1:0d:b2:a0:2e:3b:71:ec: 63:13:fb:2f:00:de:a8:60:09:b6:73:39:3c:2e:49: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:63:92:54:BB:DA:91:CE:51:89:1C:B7:51:60:B3:72:4B:4A:16 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:76:7b:31:b9:7f:7b:aa:b9:0b:b0:6a:1f:71:76:96:68:91: 74:c0:bd:9d:6c:77:ac:f4:b2:d5:d2:4b:88:dc:1b:63:50:9a: e4:39:87:8c:65:d8:ab:dc:bc:c8:1e:fb:fc:bd:c0:34:19:c7: 66:10:df:75:37:26:e8:1a:f3:0c:e0:3e:cc:aa:a7:9f:f8:07: 42:64:2e:29:6f:a6:cd:86:9c:19:bb:11:4c:bb:75:06:77:9a: 1c:d7:ab:d3:c0:7f:3f:38:55:2a:12:a6:97:73:07:28:b3:c9: b9:03:42:97:8e:30:74:70:dd:42:4d:ff:69:e5:ca:33:73:48: 66:ef:de:53:58:1e:b3:0a:90:29:8d:22:c0:18:8a:e5:53:b7: d1:c1:69:67:14:e3:94:3f:c8:a0:ac:a6:4a:34:f6:0a:d6:fe: a8:54:63:e2:73:0c:e0:94:f6:1c:e5:b2:4a:82:c2:22:49:53: e9:4e:5f:65:a3:f9:99:3a:24:a4:80:33:92:5b:4a:af:23:e3: 4b:54:17:83:d2:a1:4d:29:51:75:ad:da:e0:8e:97:98:cf:18: e5:de:76:a2:30:7e:bd:a0:c9:1f:f0:82:64:9f:c4:7e:1b:9c: 16:b8:4c:cc:d9:25:f5:c7:46:93:44:81:4c:db:4c:58:88:95: ef:a2:c6:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZYjZGc0+IolT2YwF2+SZfjIY4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA2MTUwMjE2MjJaFw0yNTA2MTgwNzQxMjJaMDMxMTAvBgNV BAMTKDA5REI2MzkyNTRCQkRBOTFDRTUxODkxQ0I3NTE2MEIzNzI0QjRBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1OECmtmSgaQXQ1glNyw/COzu QEvcAtDVxpYSPwIp/ceWqxNaD/TKad4BDkE8yWXJYCuQIQGG4jdRv0a313X3aKCp n7g9AS5b7QG9r2YTPZA2LX1WSkoAZJC4WgSD00Zd2Uhn96sKFdP1HQv0/v2x3IzV nAVgd4O5AyUMnZLjK1biFBaLNwwtoG90CF4q3CNNwIM6Hl7RA+2qfnT1/s18n4B0 i3HAhQvgZ9aiClXT/Pxk6ZHp+BXq51z5B67uWmhAPgmhffInscQcMc7spAoBgUqD 1Zr7dmmTS7G6KjOgWnkOBBP5kwLRDbKgLjtx7GMT+y8A3qhgCbZzOTwuSbirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCdtjklS72pHOUYkct1Fgs3JLShYwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA92ezG5f3uquQuwah9xdpZokXTAvZ1sd6z0 stXSS4jcG2NQmuQ5h4xl2KvcvMge+/y9wDQZx2YQ33U3Juga8wzgPsyqp5/4B0Jk Lilvps2GnBm7EUy7dQZ3mhzXq9PAfz84VSoSppdzByizybkDQpeOMHRw3UJN/2nl yjNzSGbv3lNYHrMKkCmNIsAYiuVTt9HBaWcU45Q/yKCspko09grW/qhUY+JzDOCU 9hzlskqCwiJJU+lOX2Wj+Zk6JKSAM5JbSq8j40tUF4PSoU0pUXWt2uCOl5jPGOXe dqIwfr2gyR/wgmSfxH4bnBa4TMzZJfXHRpNEgUzbTFiIle+ixhY= -----END CERTIFICATE-----Generated at Mon Jun 16 12:17:27 2025 by rpki-client