$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: IuC5ESqc3QB/oPUhdGblvIl+ZR+5spNA3VlfJoTSlwI= Subject key identifier: B2:CA:2F:F0:35:30:82:98:97:98:47:A8:3B:80:77:1D:B9:BC:18:46 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 4502E9AF251F8276377B34EAF8BC77295B4A4095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01C7 Signing time: Mon 16 Jun 2025 03:02:53 +0000 Manifest this update: Mon 16 Jun 2025 02:57:53 +0000 Manifest next update: Thu 19 Jun 2025 06:02:53 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 2: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: aiiAhPQc6nlrZXAzMOnz1H84iaSJeIOe6NbcQ19z0h8=) 3: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 4: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 5: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:02:e9:af:25:1f:82:76:37:7b:34:ea:f8:bc:77:29:5b:4a:40:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Jun 16 02:57:53 2025 GMT Not After : Jun 19 06:02:53 2025 GMT Subject: CN=B2CA2FF035308298979847A83B80771DB9BC1846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:2b:fe:17:aa:84:c6:c9:c5:8a:3e:0b:a4: 11:a8:84:f9:e1:37:98:83:ba:09:8d:cc:d6:2b:5b: c8:3c:fa:06:5a:b0:54:53:53:ff:c1:80:f9:1f:8f: f9:98:42:0e:17:e9:a2:46:7d:e1:1d:1f:41:3d:c5: 16:03:6a:9a:b0:6a:3f:da:db:22:12:35:f9:d9:7c: b0:5e:f8:a0:c7:2d:19:f9:81:0c:0a:7a:f9:08:54: 16:0f:1c:ce:90:8c:15:ac:c7:83:56:a4:a8:b0:71: b8:68:73:ed:bf:18:fa:63:e6:da:a8:5a:8a:00:7b: 24:0d:56:1f:77:56:e6:9d:97:6a:1a:ef:f1:08:0d: 3b:99:d3:31:22:de:bf:2a:f5:9d:e2:a7:76:8e:9f: 34:d7:3f:00:d9:a7:d0:c2:ef:6b:98:34:02:cb:ca: 9b:e3:98:fa:f2:d0:30:b2:f6:42:69:cc:62:f5:5b: 70:bb:35:0c:78:a5:95:da:eb:00:19:9c:63:8f:4c: 5b:e9:07:8d:a2:e3:17:b4:d5:d4:6b:92:c7:65:78: e1:b7:30:df:67:a5:45:9a:1a:36:bc:29:0e:c8:0e: ab:37:cf:de:8c:3f:9f:16:37:6e:25:76:a4:b8:ee: bd:80:bf:8b:20:90:af:db:6e:bf:3c:6c:05:6f:b8: c6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CA:2F:F0:35:30:82:98:97:98:47:A8:3B:80:77:1D:B9:BC:18:46 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:18:f9:0f:d8:f9:47:92:f8:be:6b:28:01:de:e8:14:dd:85: 84:3d:b4:e3:08:0b:74:97:d7:81:bc:db:90:83:c5:9e:8b:a9: e2:85:03:64:cc:30:8e:a5:4a:f7:d1:0a:a5:d7:a6:e7:52:da: 3b:0a:1e:10:23:8d:1c:15:db:8c:33:64:40:07:42:c8:85:75: aa:f0:9f:c1:4b:a9:57:34:ae:26:93:6c:b0:ab:87:d2:f6:b7: b6:8e:a4:8c:fb:da:89:7e:e5:10:95:db:9f:86:f3:8a:d6:30: 8d:d2:a8:5b:f5:d5:6f:bb:73:af:df:ac:54:81:a1:8f:ea:51: 87:5d:08:99:8e:bf:c5:9e:f2:06:b9:04:b4:2f:dc:cb:bd:db: 06:1a:92:d6:0c:a4:1f:17:bf:3a:eb:d3:6a:ff:74:fc:e0:98: ce:d7:a2:74:9c:37:72:7f:c5:5f:10:48:d5:55:66:2a:bb:c3: 66:5d:10:fd:e8:4b:e0:f3:ee:8b:3e:31:db:96:df:b4:20:fc: bf:48:d4:99:25:35:4b:ce:91:a3:3d:48:94:f7:62:1d:eb:aa: 6f:39:93:12:5b:fd:ac:0c:6c:44:59:14:d7:45:cb:1f:4e:ed: cc:8a:c9:59:42:bd:bb:54:b8:9b:e8:53:51:d4:bd:ce:ad:dd: e4:50:9b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQLpryUfgnY3ezTq+Lx3KVtKQJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA2MTYwMjU3NTNaFw0yNTA2MTkwNjAyNTNaMDMxMTAvBgNV BAMTKEIyQ0EyRkYwMzUzMDgyOTg5Nzk4NDdBODNCODA3NzFEQjlCQzE4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdiv+F6qExsnFij4LpBGohPnh N5iDugmNzNYrW8g8+gZasFRTU//BgPkfj/mYQg4X6aJGfeEdH0E9xRYDapqwaj/a 2yISNfnZfLBe+KDHLRn5gQwKevkIVBYPHM6QjBWsx4NWpKiwcbhoc+2/GPpj5tqo WooAeyQNVh93Vuadl2oa7/EIDTuZ0zEi3r8q9Z3ip3aOnzTXPwDZp9DC72uYNALL ypvjmPry0DCy9kJpzGL1W3C7NQx4pZXa6wAZnGOPTFvpB42i4xe01dRrksdleOG3 MN9npUWaGja8KQ7IDqs3z96MP58WN24ldqS47r2Av4sgkK/bbr88bAVvuMYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUssov8DUwgpiXmEeoO4B3Hbm8GEYwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMY+Q/Y+UeS+L5rKAHe6BTdhYQ9tOMIC3SX 14G825CDxZ6LqeKFA2TMMI6lSvfRCqXXpudS2jsKHhAjjRwV24wzZEAHQsiFdarw n8FLqVc0riaTbLCrh9L2t7aOpIz72ol+5RCV25+G84rWMI3SqFv11W+7c6/frFSB oY/qUYddCJmOv8We8ga5BLQv3Mu92wYaktYMpB8Xvzrr02r/dPzgmM7XonScN3J/ xV8QSNVVZiq7w2ZdEP3oS+Dz7os+MduW37Qg/L9I1JklNUvOkaM9SJT3Yh3rqm85 kxJb/awMbERZFNdFyx9O7cyKyVlCvbtUuJvoU1HUvc6t3eRQm78= -----END CERTIFICATE-----Generated at Mon Jun 16 15:50:47 2025 by rpki-client