$ rpki-client -vvf repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft File: D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft (raw, json) Hash identifier: tcI5STedhevo8tggFHFsdxmkAHDnpigL6YQRr+j3x/o= Subject key identifier: 97:34:35:27:BD:78:13:1F:F3:22:5D:58:90:6A:8D:BF:91:58:EF:4C Authority key identifier: D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 Certificate issuer: /CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Certificate serial: 735C29E2F3B2D80296A404030F7B2AF4BF3375EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft Manifest number: 01DE Signing time: Sat 19 Jul 2025 09:31:08 +0000 Manifest this update: Sat 19 Jul 2025 09:26:08 +0000 Manifest next update: Tue 22 Jul 2025 21:15:08 +0000 Files and hashes: 1: D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl (hash: jqhd9RlfNMsoYIynDljHTOcXA8mzMCfJ65JbNl78YJA=) 2: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6UhOGV8DI7PfyTejWhCSmpLpe0trLgn56lREPd3WDVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5c:29:e2:f3:b2:d8:02:96:a4:04:03:0f:7b:2a:f4:bf:33:75:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Validity Not Before: Jul 19 09:26:08 2025 GMT Not After : Jul 22 21:15:08 2025 GMT Subject: CN=97343527BD78131FF3225D58906A8DBF9158EF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:f8:95:94:09:8d:13:53:4d:2a:f0:91:07: da:7b:13:70:3b:f0:a9:65:06:6a:3c:58:b2:20:56: 55:19:0b:97:f9:bb:3c:d3:51:ba:9f:cf:6d:fb:71: 81:78:02:98:44:ef:b8:47:8c:9c:b7:e5:c2:11:bf: a7:d8:5c:64:93:9f:a9:47:7c:ed:ec:d9:13:8e:63: bd:39:6f:6a:ee:46:28:0b:d3:cf:4f:34:a4:bb:58: 36:4d:76:0e:e3:71:31:41:0b:ca:ad:b1:9c:64:77: 6a:69:94:5b:c7:3d:40:8f:fa:09:52:bd:21:0f:be: e7:bb:da:3b:0a:03:72:6b:52:09:9b:20:7a:ee:cf: 4c:e9:09:d1:d7:08:d8:e2:82:1e:34:1c:c7:ad:53: 29:a1:10:2c:1d:b7:53:f6:17:e2:39:79:91:32:ba: 7b:5b:e3:b2:1a:0b:a8:7f:04:9c:73:dc:7c:dc:04: 2e:71:79:47:6a:25:2b:18:5e:ab:ee:d0:1d:b1:8a: 4a:77:f7:5e:ba:47:35:88:1a:71:37:1d:b4:52:79: fc:9c:0c:03:f5:87:41:88:45:33:45:24:d2:85:bc: 09:2e:de:5b:4f:22:d7:3f:98:83:3c:3d:9a:a5:b9: 8d:e3:16:d2:3a:b8:5b:ae:36:18:04:9a:36:61:5b: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:34:35:27:BD:78:13:1F:F3:22:5D:58:90:6A:8D:BF:91:58:EF:4C X509v3 Authority Key Identifier: keyid:D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f8:97:1a:6f:e5:79:13:d8:37:fe:99:1f:0e:9b:69:60:e7: f2:12:44:f5:3d:b9:ba:6d:05:df:af:2f:fe:4d:9a:52:ee:c9: e1:99:ee:61:cd:2a:30:58:0d:7e:28:b9:03:99:2d:a8:b3:e5: 9b:f8:2f:ff:c0:c9:bf:4c:c3:1b:ac:0a:5c:20:5a:2c:81:14: 4f:1a:2c:56:88:40:e0:6b:f4:ad:4f:c4:44:0b:83:62:e2:b4: 56:9f:85:ee:ed:3a:a8:9a:e6:f2:c0:d2:52:76:7c:28:9f:6d: 2d:dd:12:dc:a8:0d:14:b2:4e:8f:6b:f9:2f:8d:83:eb:ad:95: fe:6f:4d:f6:d9:87:ac:72:db:d6:82:e3:39:c0:f7:d1:47:32: e3:ad:83:92:28:02:01:43:00:19:6d:2a:38:7b:cc:7c:9f:a7: 73:6d:69:d9:73:a3:00:02:6a:4e:c0:53:b4:97:f0:13:6d:41: 2f:71:1a:8d:6c:7d:d0:b0:69:e4:48:be:f8:e2:9b:98:bb:2d: cf:50:38:1e:b1:93:4c:b4:d9:a2:01:cb:7b:6d:4d:d0:1f:90: 66:14:15:2c:a4:4a:71:39:6f:92:15:8e:b4:a0:83:8e:19:96: ba:12:fa:dc:59:ef:a3:ce:1b:a0:53:91:3f:e9:b1:da:e8:01: 2b:b4:0d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1wp4vOy2AKWpAQDD3sq9L8zdeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAx RUMyNkREMTAeFw0yNTA3MTkwOTI2MDhaFw0yNTA3MjIyMTE1MDhaMDMxMTAvBgNV BAMTKDk3MzQzNTI3QkQ3ODEzMUZGMzIyNUQ1ODkwNkE4REJGOTE1OEVGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tPiVlAmNE1NNKvCRB9p7E3A7 8KllBmo8WLIgVlUZC5f5uzzTUbqfz237cYF4AphE77hHjJy35cIRv6fYXGSTn6lH fO3s2ROOY705b2ruRigL089PNKS7WDZNdg7jcTFBC8qtsZxkd2pplFvHPUCP+glS vSEPvue72jsKA3JrUgmbIHruz0zpCdHXCNjigh40HMetUymhECwdt1P2F+I5eZEy untb47IaC6h/BJxz3HzcBC5xeUdqJSsYXqvu0B2xikp39166RzWIGnE3HbRSefyc DAP1h0GIRTNFJNKFvAku3ltPItc/mIM8PZqluY3jFtI6uFuuNhgEmjZhW9RfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlzQ1J714Ex/zIl1YkGqNv5FY70wwHwYDVR0j BBgwFoAU1BccTAaXWkMJ/Fny00DWgB7CbdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzY4MGQwZC1lMjQwLTRhYWYtYmMyMy0yODIzNTkzNzMyODkvMC9ENDE3MUM0QzA2 OTc1QTQzMDlGQzU5RjJEMzQwRDY4MDFFQzI2REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAxRUMy NkREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2 ODAxRUMyNkREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/4lxpv5XkT2Df+mR8Om2lg5/ISRPU9ubpt Bd+vL/5NmlLuyeGZ7mHNKjBYDX4ouQOZLaiz5Zv4L//Ayb9MwxusClwgWiyBFE8a LFaIQOBr9K1PxEQLg2LitFafhe7tOqia5vLA0lJ2fCifbS3dEtyoDRSyTo9r+S+N g+utlf5vTfbZh6xy29aC4znA99FHMuOtg5IoAgFDABltKjh7zHyfp3NtadlzowAC ak7AU7SX8BNtQS9xGo1sfdCwaeRIvvjim5i7Lc9QOB6xk0y02aIBy3ttTdAfkGYU FSykSnE5b5IVjrSgg44ZlroS+txZ76POG6BTkT/psdroASu0DU8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:22 2025 by rpki-client