$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json) Hash identifier: BPDeM5XFKjA4XR12MIckgpn3GU973Lo/tP+0kFhpicE= Subject key identifier: 9D:27:40:A4:78:70:AC:B1:2B:32:BD:B1:5B:C4:B3:78:B1:A5:92:29 Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Certificate serial: 379D06DF8683A44D605814BB25B7FFAD2F47EC52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft Manifest number: 01F1 Signing time: Wed 23 Jul 2025 07:32:04 +0000 Manifest this update: Wed 23 Jul 2025 07:27:04 +0000 Manifest next update: Sat 26 Jul 2025 14:10:04 +0000 Files and hashes: 1: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=) 2: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: Q01QqrxI7gqVv+Xo8gOMit+6kKXJkH+5NKAdvXWdvQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9d:06:df:86:83:a4:4d:60:58:14:bb:25:b7:ff:ad:2f:47:ec:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366 Validity Not Before: Jul 23 07:27:04 2025 GMT Not After : Jul 26 14:10:04 2025 GMT Subject: CN=9D2740A47870ACB12B32BDB15BC4B378B1A59229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:76:47:c1:86:56:f8:46:9f:24:51:b4:2a: 63:f2:f1:a3:74:62:4a:f1:b1:66:51:57:93:33:85: 9d:de:fe:6f:ad:76:bf:a8:cb:c9:c2:a6:1f:7c:41: 7f:04:cb:be:02:f6:48:1a:98:7e:60:1c:63:f1:db: 40:c0:f5:82:06:b9:9b:7b:b1:b3:99:e8:b3:58:48: b2:eb:f9:48:87:24:af:99:b4:58:0c:71:8b:99:a5: 43:e0:45:c6:92:09:18:8e:aa:79:5b:08:4b:19:07: 2b:d8:19:d2:10:a0:a0:01:80:49:33:f4:a7:b6:71: c5:dd:2e:31:f0:e9:89:aa:a2:a4:fa:85:5d:8d:bd: 60:ee:3f:45:d1:cd:09:f7:a7:ab:7d:7d:6d:ee:e5: 8f:45:e0:04:15:f9:a3:bb:ea:fd:73:ca:a2:49:a4: b1:6e:17:33:78:8e:c0:54:65:39:c5:3c:f9:b2:5e: 56:78:a0:76:57:1f:a9:91:aa:c6:f6:b9:d0:38:f2: 22:10:fe:35:c8:08:e5:15:ed:bf:f7:00:e4:e8:c2: ab:26:cc:ca:03:5c:3f:c7:a6:22:a9:99:43:0a:4d: 81:8a:4d:34:1d:c4:0b:0a:b7:41:81:2d:b0:44:bf: af:c7:f4:69:7b:6e:47:e0:37:09:06:7a:08:d9:9c: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:40:A4:78:70:AC:B1:2B:32:BD:B1:5B:C4:B3:78:B1:A5:92:29 X509v3 Authority Key Identifier: keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:94:97:41:13:0b:38:12:d4:ed:3b:d3:33:93:fd:c2:67:bb: ff:5b:17:9c:76:f2:4a:cd:d0:83:54:c8:86:11:b2:3b:2c:bc: 01:ac:7b:c9:dd:c1:a9:91:af:a9:e4:53:93:64:51:e5:7b:b0: db:d9:2f:fa:98:bd:0b:f3:e3:c8:42:7a:5a:e7:0f:6e:99:cc: f3:61:a5:27:28:24:b5:52:be:bf:e6:02:f2:b2:06:fa:14:2d: 19:91:20:0a:a0:03:f0:4f:3c:9c:b3:05:7e:04:9e:bf:1e:6b: 81:f8:30:81:02:4e:99:87:f9:d8:b1:c3:ec:fc:99:31:66:6e: 61:59:7e:22:20:db:c6:2f:f3:2e:ab:b7:01:f2:69:c1:29:5a: 0d:05:35:4b:31:57:62:cb:5e:3b:89:9b:62:eb:ba:ca:bd:42: 5f:02:a9:3e:9a:c7:32:37:ef:3a:ec:a0:6a:cf:8f:45:51:fd: cf:8d:10:14:9d:8b:3e:7c:d9:5e:1c:02:47:a6:ed:8f:0b:6f: 6b:45:9d:05:19:dc:26:4e:49:d9:d4:c2:58:ae:de:4b:d3:7e: 5a:75:58:b2:06:e8:1e:f6:95:04:5a:12:a6:00:6a:be:91:1a: 51:66:8c:4d:b4:65:20:6d:81:8c:04:6f:7d:1c:8e:77:8c:c3: 33:55:c2:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN50G34aDpE1gWBS7Jbf/rS9H7FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUz QzU3RDM2NjAeFw0yNTA3MjMwNzI3MDRaFw0yNTA3MjYxNDEwMDRaMDMxMTAvBgNV BAMTKDlEMjc0MEE0Nzg3MEFDQjEyQjMyQkRCMTVCQzRCMzc4QjFBNTkyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpHZHwYZW+EafJFG0KmPy8aN0 YkrxsWZRV5MzhZ3e/m+tdr+oy8nCph98QX8Ey74C9kgamH5gHGPx20DA9YIGuZt7 sbOZ6LNYSLLr+UiHJK+ZtFgMcYuZpUPgRcaSCRiOqnlbCEsZByvYGdIQoKABgEkz 9Ke2ccXdLjHw6YmqoqT6hV2NvWDuP0XRzQn3p6t9fW3u5Y9F4AQV+aO76v1zyqJJ pLFuFzN4jsBUZTnFPPmyXlZ4oHZXH6mRqsb2udA48iIQ/jXICOUV7b/3AOTowqsm zMoDXD/HpiKpmUMKTYGKTTQdxAsKt0GBLbBEv6/H9Gl7bkfgNwkGegjZnCm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnSdApHhwrLErMr2xW8SzeLGlkikwHwYDVR0j BBgwFoAUmT1tvAs3u1nOqGzgJKNJNTxX02YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDFhMDJlNi0yMTcxLTQ3YzktODZjOS1kNWQ4MGY0NTg4MzYvMC85OTNENkRCQzBC MzdCQjU5Q0VBODZDRTAyNEEzNDkzNTNDNTdEMzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5MzUzQzU3 RDM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQxYTAyZTYtMjE3MS00N2M5LTg2 YzktZDVkODBmNDU4ODM2LzAvOTkzRDZEQkMwQjM3QkI1OUNFQTg2Q0UwMjRBMzQ5 MzUzQzU3RDM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSUl0ETCzgS1O070zOT/cJnu/9bF5x28krN 0INUyIYRsjssvAGse8ndwamRr6nkU5NkUeV7sNvZL/qYvQvz48hCelrnD26ZzPNh pScoJLVSvr/mAvKyBvoULRmRIAqgA/BPPJyzBX4Enr8ea4H4MIECTpmH+dixw+z8 mTFmbmFZfiIg28Yv8y6rtwHyacEpWg0FNUsxV2LLXjuJm2Lrusq9Ql8CqT6axzI3 7zrsoGrPj0VR/c+NEBSdiz582V4cAkem7Y8Lb2tFnQUZ3CZOSdnUwliu3kvTflp1 WLIG6B72lQRaEqYAar6RGlFmjE20ZSBtgYwEb30cjneMwzNVwg8= -----END CERTIFICATE-----Generated at Wed Jul 23 12:27:01 2025 by rpki-client