$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: pH3YRrJhSVKY3jcK9wOmdurbU5gxYTIORL6F8mnbBXk= Subject key identifier: C3:64:33:3A:F5:AD:AB:A3:C5:F7:3F:88:77:06:25:DE:BC:49:EE:37 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 76C3DC5C52F0AF0D256AE7F3D7B14543D54C0788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: C0 Signing time: Tue 22 Jul 2025 10:01:54 +0000 Manifest this update: Tue 22 Jul 2025 09:56:54 +0000 Manifest next update: Fri 25 Jul 2025 14:15:54 +0000 Files and hashes: 1: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: Y7ZPLJHNYLBCN1xmQZDF+qSXsdD+Zp/BthmfjHdgGPI=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c3:dc:5c:52:f0:af:0d:25:6a:e7:f3:d7:b1:45:43:d5:4c:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Jul 22 09:56:54 2025 GMT Not After : Jul 25 14:15:54 2025 GMT Subject: CN=C364333AF5ADABA3C5F73F88770625DEBC49EE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:d8:9a:32:61:86:0e:11:0f:4b:f2:75:cd: db:47:88:2f:2f:97:57:ac:e5:bc:36:63:a3:e0:09: 44:17:e5:c3:3e:a3:1e:55:d3:39:a0:14:04:b2:e1: 25:75:1e:5f:cb:6c:2b:fa:a1:84:13:63:d9:b8:5a: 53:09:ee:89:12:7c:21:c0:f6:c9:af:f1:11:e3:5c: a3:84:84:cf:3c:43:1d:5b:23:26:3e:c7:10:54:7d: b9:4b:bc:2f:72:21:09:6e:98:ee:5f:2b:4e:f9:92: a8:49:bd:b2:04:0f:e6:71:44:bc:9a:6d:1e:4e:47: c5:f2:54:ca:9d:16:33:98:02:67:2a:7f:3d:2d:c6: b4:2b:55:f9:04:8b:e6:b1:19:26:1c:d8:f8:5b:20: 25:0c:0e:a3:ae:0c:5b:a1:b3:95:e7:31:51:fd:9f: 0e:72:17:43:23:9f:2c:03:77:dc:e3:86:fc:d1:d9: 63:3c:67:cd:4e:37:d5:8b:70:37:fc:fd:04:f1:ff: b1:4e:dc:0f:e4:bb:8f:21:1d:aa:f8:58:a0:82:d0: 3d:47:c7:57:a1:80:1e:4d:77:18:36:3a:c7:9f:7f: bf:0e:a3:a3:69:bd:4c:27:86:64:60:02:0d:b1:05: 59:ef:85:9d:dd:1b:fa:36:9c:07:4d:4c:a2:71:36: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:33:3A:F5:AD:AB:A3:C5:F7:3F:88:77:06:25:DE:BC:49:EE:37 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fb:7e:75:f5:bc:e3:f0:e2:e4:f1:6f:82:66:bc:0f:65:0c: 51:3a:48:ac:d4:cd:c5:7e:c2:8c:e7:ce:39:b9:c5:d8:5d:64: ab:ed:1f:bc:27:3a:5a:b3:bc:ce:1c:c8:ce:ce:83:2f:6c:60: 5e:ba:3f:9e:23:ee:0e:aa:ee:dd:cb:49:ae:4f:93:73:a8:be: d3:a6:f2:91:0d:e9:ef:5f:78:f0:7c:73:6c:21:fc:e0:b9:25: b4:7b:e0:a0:24:80:81:a7:03:94:cb:1c:b4:c1:3c:a3:8d:74: f5:e7:49:c5:2d:fb:24:fe:94:ac:fa:56:9c:7c:8e:20:a0:e1: 9a:fa:44:76:fa:53:94:38:85:01:05:13:6b:48:67:22:9d:29: f0:13:74:1e:a2:77:8d:9f:6d:4f:f5:eb:c3:37:c4:7b:7c:c0: d7:fc:fe:41:71:99:f6:04:f9:4d:29:70:fd:07:22:dc:9e:f6: 53:07:d1:d1:e4:7a:c3:8e:d6:39:41:26:2d:95:1d:ef:13:13: 2a:5d:42:f7:ca:e4:ba:98:75:ff:2e:6e:1c:d8:42:9f:af:ac: 2e:14:9c:53:ef:fc:93:c8:1b:46:fa:8f:50:e0:45:8d:b7:c2: 65:f4:ad:93:3f:32:bf:d3:29:22:05:d6:a0:b2:51:f5:5b:cd: 3a:88:40:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsPcXFLwrw0laufz17FFQ9VMB4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTA3MjIwOTU2NTRaFw0yNTA3MjUxNDE1NTRaMDMxMTAvBgNV BAMTKEMzNjQzMzNBRjVBREFCQTNDNUY3M0Y4ODc3MDYyNURFQkM0OUVFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+tiaMmGGDhEPS/J1zdtHiC8v l1es5bw2Y6PgCUQX5cM+ox5V0zmgFASy4SV1Hl/LbCv6oYQTY9m4WlMJ7okSfCHA 9smv8RHjXKOEhM88Qx1bIyY+xxBUfblLvC9yIQlumO5fK075kqhJvbIED+ZxRLya bR5OR8XyVMqdFjOYAmcqfz0txrQrVfkEi+axGSYc2PhbICUMDqOuDFuhs5XnMVH9 nw5yF0MjnywDd9zjhvzR2WM8Z81ON9WLcDf8/QTx/7FO3A/ku48hHar4WKCC0D1H x1ehgB5Ndxg2Oseff78Oo6NpvUwnhmRgAg2xBVnvhZ3dG/o2nAdNTKJxNk5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw2QzOvWtq6PF9z+IdwYl3rxJ7jcwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGH7fnX1vOPw4uTxb4JmvA9lDFE6SKzUzcV+ woznzjm5xdhdZKvtH7wnOlqzvM4cyM7Ogy9sYF66P54j7g6q7t3LSa5Pk3OovtOm 8pEN6e9fePB8c2wh/OC5JbR74KAkgIGnA5TLHLTBPKONdPXnScUt+yT+lKz6Vpx8 jiCg4Zr6RHb6U5Q4hQEFE2tIZyKdKfATdB6id42fbU/168M3xHt8wNf8/kFxmfYE +U0pcP0HItye9lMH0dHkesOO1jlBJi2VHe8TEypdQvfK5LqYdf8ubhzYQp+vrC4U nFPv/JPIG0b6j1DgRY23wmX0rZM/Mr/TKSIF1qCyUfVbzTqIQAk= -----END CERTIFICATE-----Generated at Thu Jul 24 02:35:57 2025 by rpki-client