$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: 35zMsnuVJ/6krbaj5l4feuHJakpKfH5I3a6zX8h1XB8= Subject key identifier: 3A:40:1D:6B:0F:7B:1F:20:98:DC:71:E6:A0:C1:47:C8:B3:E3:49:38 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 0F8AA765F1AE72846A363D93E7C801ED9445D4A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 01DD Signing time: Tue 17 Jun 2025 05:41:10 +0000 Manifest this update: Tue 17 Jun 2025 05:36:10 +0000 Manifest next update: Fri 20 Jun 2025 16:10:10 +0000 Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: JP+4/vvlGDhaqMJNfty5cTZdbcMSpbAOqZPJL++svFc=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 16:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8a:a7:65:f1:ae:72:84:6a:36:3d:93:e7:c8:01:ed:94:45:d4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Jun 17 05:36:10 2025 GMT Not After : Jun 20 16:10:10 2025 GMT Subject: CN=3A401D6B0F7B1F2098DC71E6A0C147C8B3E34938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:3c:81:75:83:ec:96:c8:21:73:af:35:2f: b5:86:ea:2d:44:91:70:87:01:d9:c9:59:2d:0d:01: a5:35:be:1c:29:61:c5:3b:37:2c:f9:36:be:94:a6: c7:6c:04:52:50:9c:f7:c4:23:8a:bd:8d:78:96:ea: dc:4d:46:2d:d1:da:af:85:eb:53:a5:70:45:21:67: da:9d:68:01:29:1f:78:d2:86:42:ea:7b:78:36:b6: 2f:fe:bd:49:24:e9:7e:9e:1e:3c:19:b4:21:d0:0b: f5:2f:5d:52:2f:14:2d:28:09:41:33:d2:28:6d:29: 99:d8:63:4c:0e:75:b8:c7:f8:13:58:8e:68:c4:69: 20:fa:43:bf:40:5a:77:8d:9a:54:78:f7:10:3d:35: 39:c1:4a:d0:fc:78:54:9a:1d:73:23:89:41:ad:b2: 10:7d:5f:46:8e:26:dd:94:fe:e2:68:e6:d6:b0:95: 04:7b:35:c9:f5:d0:85:74:6d:92:73:9d:f3:00:cf: 6d:51:40:05:5e:aa:49:7d:ec:b7:05:10:8b:48:14: 6a:01:50:b9:75:69:68:1f:db:ef:56:9f:7a:ce:64: 96:76:dd:c6:a4:82:26:f0:39:69:62:a9:36:5f:b6: 34:35:6a:81:1d:ce:f8:af:de:0a:0f:5b:72:e1:59: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:1D:6B:0F:7B:1F:20:98:DC:71:E6:A0:C1:47:C8:B3:E3:49:38 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:72:b3:b8:fe:86:b5:e8:d6:74:c3:b7:17:b2:b6:99:bf: ff:f5:2f:d1:3e:b5:44:b8:fa:4d:e0:19:4e:f6:67:9b:d9:c0: a1:31:87:b6:b7:7a:36:87:df:a9:25:a5:43:79:f7:d7:25:60: d0:c2:3e:e8:23:22:e0:44:72:7d:ed:61:da:8e:59:46:7b:7b: af:fc:b0:52:6d:2c:16:ba:05:07:73:a0:97:c1:03:70:9f:31: 48:80:d3:98:2f:de:38:3d:51:63:78:84:08:8d:0c:04:8f:c5: 84:7d:8a:1d:d7:96:2d:c7:83:84:fa:a4:cb:ff:b1:33:78:e0: ae:22:2d:ae:03:d7:15:ca:79:4b:22:fa:1e:c9:64:06:e1:03: b4:cb:dc:2e:32:77:be:e9:e1:f9:e4:5c:3e:66:af:74:a6:7c: c6:b9:53:79:13:0a:e1:89:b4:9a:f4:c7:04:23:ff:2e:17:76: a3:00:a9:3c:56:ba:94:7e:7a:ed:d0:c1:af:76:44:7d:d3:6e: 4e:84:47:c1:ec:5a:8d:12:d4:7d:e4:ef:e6:e3:3b:c3:c0:66: 1a:88:e8:dc:33:ef:c4:18:80:c1:a3:1a:fd:a6:b1:55:24:c2: a0:6f:cc:9c:2d:a7:c8:68:47:e2:cd:74:23:40:e8:44:b6:5d: bb:d9:d8:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4qnZfGucoRqNj2T58gB7ZRF1KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTA2MTcwNTM2MTBaFw0yNTA2MjAxNjEwMTBaMDMxMTAvBgNV BAMTKDNBNDAxRDZCMEY3QjFGMjA5OERDNzFFNkEwQzE0N0M4QjNFMzQ5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51jyBdYPslsghc681L7WG6i1E kXCHAdnJWS0NAaU1vhwpYcU7Nyz5Nr6UpsdsBFJQnPfEI4q9jXiW6txNRi3R2q+F 61OlcEUhZ9qdaAEpH3jShkLqe3g2ti/+vUkk6X6eHjwZtCHQC/UvXVIvFC0oCUEz 0ihtKZnYY0wOdbjH+BNYjmjEaSD6Q79AWneNmlR49xA9NTnBStD8eFSaHXMjiUGt shB9X0aOJt2U/uJo5tawlQR7Ncn10IV0bZJznfMAz21RQAVeqkl97LcFEItIFGoB ULl1aWgf2+9Wn3rOZJZ23cakgibwOWliqTZftjQ1aoEdzviv3goPW3LhWcuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkAdaw97HyCY3HHmoMFHyLPjSTgwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9dcrO4/oa16NZ0w7cXsraZv//1L9E+tUS4 +k3gGU72Z5vZwKExh7a3ejaH36klpUN599clYNDCPugjIuBEcn3tYdqOWUZ7e6/8 sFJtLBa6BQdzoJfBA3CfMUiA05gv3jg9UWN4hAiNDASPxYR9ih3Xli3Hg4T6pMv/ sTN44K4iLa4D1xXKeUsi+h7JZAbhA7TL3C4yd77p4fnkXD5mr3SmfMa5U3kTCuGJ tJr0xwQj/y4XdqMAqTxWupR+eu3Qwa92RH3Tbk6ER8HsWo0S1H3k7+bjO8PAZhqI 6Nwz78QYgMGjGv2msVUkwqBvzJwtp8hoR+LNdCNA6ES2XbvZ2Gk= -----END CERTIFICATE-----Generated at Wed Jun 18 07:32:56 2025 by rpki-client