$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: amoLao7McEJ06r/x3Vv5eIjiJT4JE7Gm1CGnO/Wn7OU= Subject key identifier: 8F:54:67:CD:64:C5:58:5B:E9:02:7F:14:81:5B:E7:A1:1A:08:B4:FB Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 74BDAF5A5521E325ED1FA9AB5B3E48461EEA6E29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 0234 Signing time: Tue 22 Jul 2025 02:10:50 +0000 Manifest this update: Tue 22 Jul 2025 02:05:50 +0000 Manifest next update: Fri 25 Jul 2025 08:11:50 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=) 2: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: iGlUgf5l8rsMyQ25IgzV/Oj2oYmvS2Lt0cE0DyElJlo=) 3: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=) 4: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 5: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=) 6: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 8: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) 9: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 08:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bd:af:5a:55:21:e3:25:ed:1f:a9:ab:5b:3e:48:46:1e:ea:6e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Jul 22 02:05:50 2025 GMT Not After : Jul 25 08:11:50 2025 GMT Subject: CN=8F5467CD64C5585BE9027F14815BE7A11A08B4FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:71:9c:d4:09:07:03:80:86:a7:f5:55:eb: de:34:ae:fa:a6:46:9f:b1:36:a3:bb:90:91:d8:1f: 61:ab:db:80:f0:09:fd:df:69:a0:9a:40:b1:22:82: 80:4c:01:d1:df:9a:2d:d7:c6:cf:51:05:f7:e0:42: 2e:e0:39:c7:91:56:62:f5:e8:ef:71:03:bd:35:9a: 73:57:eb:fa:bc:f7:2a:3e:de:bf:4b:4f:e9:99:23: ef:43:d7:2d:15:35:85:9d:b1:3a:5c:b8:08:df:6d: 29:4e:e9:a3:3e:fa:63:d2:8a:d7:cb:5f:6b:d6:95: d7:c3:58:aa:18:e9:89:f3:61:4b:9e:ca:0b:a9:f1: a2:88:71:d0:e8:a2:66:5a:b2:72:d0:c8:91:5f:ac: fb:c7:45:f8:53:f8:44:7c:4f:6c:a1:51:c8:34:18: 5b:6f:54:4b:9c:4e:8b:12:96:d3:c2:7b:7c:df:e9: 59:90:2c:9e:d8:d1:9b:83:f9:fc:43:43:21:83:a1: 2c:23:2f:d0:70:21:f5:3d:7e:5c:95:5c:db:b8:32: b3:dc:d0:08:50:c0:ea:b6:36:87:16:81:a3:82:a9: 6c:ec:a3:0b:7d:24:12:b7:1d:85:c3:63:d6:f6:6a: f5:43:5b:50:1f:0c:1b:7b:1d:83:31:13:72:67:a4: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:67:CD:64:C5:58:5B:E9:02:7F:14:81:5B:E7:A1:1A:08:B4:FB X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:cf:b1:95:80:ef:c8:23:39:d3:e9:ca:01:78:06:a4:18:17: 95:62:b4:2a:4a:c3:2c:36:03:21:c2:8a:30:5e:f0:08:20:03: 14:83:7e:88:b2:26:07:74:d7:92:d3:49:cd:76:07:28:23:15: 71:e8:2b:39:24:13:24:51:fb:5b:c3:1f:08:c5:51:ce:8c:92: c0:64:02:3c:58:39:32:5a:4c:fb:fc:7c:74:a7:a0:ab:ca:ed: c6:bd:cc:21:91:83:c5:ff:b7:88:e1:e6:88:2a:56:71:bd:79: 2f:46:61:f9:c3:91:99:67:cc:ac:d6:76:34:b6:2a:6d:16:04: 83:cf:33:00:c2:6e:51:48:50:aa:a8:60:2c:dd:6a:e1:8e:70: d8:3a:ec:a7:96:fa:da:f1:1f:78:4d:93:de:bf:ce:17:b3:96: 3f:80:e2:46:1a:d1:f3:d7:06:c8:19:55:56:64:c4:19:19:f2: b7:0e:d7:7c:d1:cf:ed:27:f3:56:8a:5c:f5:87:48:e4:9a:87: 4c:af:2d:fc:21:66:f8:8e:b1:4a:27:12:9b:8e:bb:32:b0:29: 82:d9:5f:a6:9f:ac:8e:4a:ef:44:4f:01:8a:b2:6c:8b:e1:ba: 68:06:a3:93:02:ea:6a:8d:82:de:53:64:2e:5a:6e:4a:39:2b: df:49:b9:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdL2vWlUh4yXtH6mrWz5IRh7qbikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA3MjIwMjA1NTBaFw0yNTA3MjUwODExNTBaMDMxMTAvBgNV BAMTKDhGNTQ2N0NENjRDNTU4NUJFOTAyN0YxNDgxNUJFN0ExMUEwOEI0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJnGc1AkHA4CGp/VV6940rvqm Rp+xNqO7kJHYH2Gr24DwCf3faaCaQLEigoBMAdHfmi3Xxs9RBffgQi7gOceRVmL1 6O9xA701mnNX6/q89yo+3r9LT+mZI+9D1y0VNYWdsTpcuAjfbSlO6aM++mPSitfL X2vWldfDWKoY6YnzYUueygup8aKIcdDoomZasnLQyJFfrPvHRfhT+ER8T2yhUcg0 GFtvVEucTosSltPCe3zf6VmQLJ7Y0ZuD+fxDQyGDoSwjL9BwIfU9flyVXNu4MrPc 0AhQwOq2NocWgaOCqWzsowt9JBK3HYXDY9b2avVDW1AfDBt7HYMxE3JnpGgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1RnzWTFWFvpAn8UgVvnoRoItPswHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInPsZWA78gjOdPpygF4BqQYF5VitCpKwyw2 AyHCijBe8AggAxSDfoiyJgd015LTSc12BygjFXHoKzkkEyRR+1vDHwjFUc6MksBk AjxYOTJaTPv8fHSnoKvK7ca9zCGRg8X/t4jh5ogqVnG9eS9GYfnDkZlnzKzWdjS2 Km0WBIPPMwDCblFIUKqoYCzdauGOcNg67KeW+trxH3hNk96/zhezlj+A4kYa0fPX BsgZVVZkxBkZ8rcO13zRz+0n81aKXPWHSOSah0yvLfwhZviOsUonEpuOuzKwKYLZ X6afrI5K70RPAYqybIvhumgGo5MC6mqNgt5TZC5abko5K99JuZI= -----END CERTIFICATE-----Generated at Wed Jul 23 12:23:45 2025 by rpki-client