$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: a7FXCcXwJVWDlkMZC57in2ab4wjvyPrZqdJ/OWYY7FU= Subject key identifier: DF:57:D3:A7:DB:D0:E0:78:2C:00:23:74:8D:E6:53:AA:27:64:8F:4F Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 3F166B0D9F5B8D6A873A33D88C3541B8B4033D4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 0174 Signing time: Sun 20 Jul 2025 22:40:34 +0000 Manifest this update: Sun 20 Jul 2025 22:35:34 +0000 Manifest next update: Thu 24 Jul 2025 07:22:34 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 2: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: Ozlks1O5yRTx4QSmm4iggdB8DLLGsZuJYBrDvets8T0=) 3: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) 4: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:16:6b:0d:9f:5b:8d:6a:87:3a:33:d8:8c:35:41:b8:b4:03:3d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Jul 20 22:35:34 2025 GMT Not After : Jul 24 07:22:34 2025 GMT Subject: CN=DF57D3A7DBD0E0782C0023748DE653AA27648F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:13:d4:1b:d6:94:08:83:54:9c:aa:a6:fa: e8:ca:ed:1a:24:81:fc:c0:09:91:71:7a:e3:ec:75: 74:b7:a0:f0:7b:6e:b9:4b:1d:83:99:8e:64:70:75: b4:13:24:51:56:fc:be:e0:0e:db:3c:7c:44:01:89: 9b:83:e8:3b:93:98:8d:e7:19:f2:86:a0:8f:2b:41: df:da:90:49:a4:97:6a:80:ec:c7:0c:3d:db:9a:b3: db:e3:7e:d7:8d:fc:75:2f:0f:94:bc:c9:ee:b5:3b: bf:36:8b:58:27:5a:ee:c8:8a:c5:61:63:47:4f:77: 6a:8f:53:02:73:87:d5:d5:db:9e:5e:72:ab:82:62: 7f:32:a7:9b:57:8a:ff:4a:86:a0:e6:76:40:70:e0: 99:72:06:51:6a:41:7e:01:f9:21:5e:f9:01:65:c9: f7:bd:a6:c2:ca:1b:c1:21:d7:63:96:23:26:98:5b: c2:a5:c6:08:76:44:2d:31:fa:c4:99:f9:19:12:bd: 77:42:76:8c:c7:00:1c:fe:01:87:72:3e:d5:8c:ad: 1a:28:ad:28:66:13:df:de:79:64:e5:5d:cc:c6:cf: bd:56:04:6d:91:84:24:14:d2:6d:1c:e7:8d:5c:5a: fa:89:2a:6a:7a:49:eb:4e:7f:14:e1:db:72:fd:8e: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:D3:A7:DB:D0:E0:78:2C:00:23:74:8D:E6:53:AA:27:64:8F:4F X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7e:44:f4:5a:b3:d6:ea:ae:b7:42:cb:db:4d:f9:c2:70:40: e4:6f:2a:1e:6f:50:80:3b:fd:97:e1:a1:45:b5:4c:77:34:aa: da:77:24:d2:ec:8e:c3:ac:a1:d4:b8:da:ed:33:9b:3e:d7:b7: 1d:99:db:88:26:03:4c:7b:af:25:57:ff:1e:e2:ab:6a:f1:e0: 64:42:b1:f6:c8:05:12:ab:6b:3f:0c:e4:44:51:94:8c:a9:3d: cd:87:92:91:d1:9f:41:29:0d:69:55:2d:00:54:8e:7b:a0:6a: d1:59:64:54:b1:b6:00:57:6e:dc:1e:55:21:be:d6:5a:75:92: b2:df:53:02:a5:67:fe:02:c9:8d:e0:d5:7a:58:5d:20:53:1d: 91:a4:fc:1d:21:73:56:be:70:35:bb:c8:44:58:68:f7:4b:7c: e2:71:43:a0:9e:a6:4b:d2:80:1c:84:69:8e:f2:a4:e0:64:8e: 5b:6e:73:38:27:b8:1c:23:a9:e5:51:16:ae:8b:aa:7b:f1:bd: 08:41:ec:f2:ed:43:33:a6:6f:ef:cc:c3:d7:cc:3e:18:4d:67: d5:b4:a4:c2:5c:05:46:b4:a3:c3:a4:8b:f7:cc:ad:cf:79:7d: 7a:34:39:6f:2f:9c:dc:80:bd:60:c2:c6:fb:04:0e:ff:6e:b0: 65:8c:99:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxZrDZ9bjWqHOjPYjDVBuLQDPU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA3MjAyMjM1MzRaFw0yNTA3MjQwNzIyMzRaMDMxMTAvBgNV BAMTKERGNTdEM0E3REJEMEUwNzgyQzAwMjM3NDhERTY1M0FBMjc2NDhGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYxPUG9aUCINUnKqm+ujK7Rok gfzACZFxeuPsdXS3oPB7brlLHYOZjmRwdbQTJFFW/L7gDts8fEQBiZuD6DuTmI3n GfKGoI8rQd/akEmkl2qA7McMPduas9vjfteN/HUvD5S8ye61O782i1gnWu7IisVh Y0dPd2qPUwJzh9XV255ecquCYn8yp5tXiv9KhqDmdkBw4JlyBlFqQX4B+SFe+QFl yfe9psLKG8Eh12OWIyaYW8Klxgh2RC0x+sSZ+RkSvXdCdozHABz+AYdyPtWMrRoo rShmE9/eeWTlXczGz71WBG2RhCQU0m0c541cWvqJKmp6SetOfxTh23L9jtDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31fTp9vQ4HgsACN0jeZTqidkj08wHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh+RPRas9bqrrdCy9tN+cJwQORvKh5vUIA7 /ZfhoUW1THc0qtp3JNLsjsOsodS42u0zmz7Xtx2Z24gmA0x7ryVX/x7iq2rx4GRC sfbIBRKraz8M5ERRlIypPc2HkpHRn0EpDWlVLQBUjnugatFZZFSxtgBXbtweVSG+ 1lp1krLfUwKlZ/4CyY3g1XpYXSBTHZGk/B0hc1a+cDW7yERYaPdLfOJxQ6CepkvS gByEaY7ypOBkjltuczgnuBwjqeVRFq6LqnvxvQhB7PLtQzOmb+/Mw9fMPhhNZ9W0 pMJcBUa0o8Oki/fMrc95fXo0OW8vnNyAvWDCxvsEDv9usGWMmc4= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:07 2025 by rpki-client