$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: p5eJGvE9CUZtHvAYvN4VshiM631F0XWbQXb8kUnjnJY= Subject key identifier: 76:B1:4D:BB:D8:9D:60:AE:8B:E8:BB:39:57:9A:89:D2:0D:EB:C9:E2 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 3DD16B1CBE269F559EC774339B516FBFEFDCAB48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: A7 Signing time: Sat 19 Jul 2025 05:32:01 +0000 Manifest this update: Sat 19 Jul 2025 05:27:01 +0000 Manifest next update: Tue 22 Jul 2025 09:41:01 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: sEurlJtO2ZuyluacZO68kWJfWjUHneuZv1lBVKkPe2Q=) 2: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: ajCQWCbIuLR2rdyLkSz/8WmAOj/J1v9eHfGi8P7WLFg=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: 6UTk6qTE+l33r+zdpJdYayRwLX5BpaOtu0Am/wxoORw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d1:6b:1c:be:26:9f:55:9e:c7:74:33:9b:51:6f:bf:ef:dc:ab:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Jul 19 05:27:01 2025 GMT Not After : Jul 22 09:41:01 2025 GMT Subject: CN=76B14DBBD89D60AE8BE8BB39579A89D20DEBC9E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a7:9f:f6:a0:25:64:de:bb:dd:a2:6c:9b:13: 39:89:a6:72:f0:a5:85:e3:5e:7a:17:36:b6:da:88: b1:31:92:c9:a1:df:c8:cb:c0:2d:e9:c5:ed:0c:3b: c3:fe:58:e6:c3:80:46:01:bf:9b:c8:30:be:aa:0c: 4b:e6:35:63:ef:2e:34:ba:8c:43:fa:3f:a2:5a:1f: 3d:8f:8e:09:63:23:a7:da:b8:17:a4:04:9d:0e:06: 8a:30:1c:9a:cf:d4:25:37:a7:86:ad:3e:99:28:ec: 23:2f:1a:7a:e1:09:65:ee:bc:3c:1f:db:bc:af:c9: 9f:4d:89:de:40:82:26:82:0b:0a:e0:85:eb:8f:14: e6:1e:78:75:14:e1:3d:d8:67:f3:e6:d5:05:1c:f2: 98:1d:d0:73:cc:20:72:ba:3c:fb:ef:0a:9a:54:c8: 46:ae:c8:bf:83:ee:2f:05:3c:34:da:44:d7:01:b2: bd:5b:dd:c9:b6:65:e0:47:9e:03:11:3e:3f:c2:2d: a1:43:5b:54:c9:1a:12:c3:ca:2b:b3:6b:4a:01:a9: 7e:d5:35:ee:c3:a2:4a:29:55:cc:df:bb:8a:2b:4b: 5a:61:b0:fc:e0:d4:89:3d:d1:9c:ef:f3:5f:46:a1: 30:25:8d:30:e7:9b:5a:36:83:35:d0:01:d9:cb:de: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B1:4D:BB:D8:9D:60:AE:8B:E8:BB:39:57:9A:89:D2:0D:EB:C9:E2 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:fb:7a:e5:c6:88:99:2f:b3:3a:f2:62:67:e8:8a:42:3c:c4: 6f:2d:19:7e:e7:1c:d8:7e:b0:e2:c7:ce:db:28:52:f8:83:8d: c2:87:f6:b1:21:55:50:67:15:95:f1:39:be:79:1f:ac:fe:e1: 4d:c7:48:e2:3c:72:82:ba:c3:3b:45:ba:c1:fd:d1:b8:63:01: 54:12:84:15:5d:cb:e1:70:78:53:ad:f7:22:b2:25:94:64:dd: 62:9a:a2:b7:05:8c:e4:24:8c:12:ad:55:6e:3d:6c:c3:08:a9: e8:3f:a3:e8:14:11:f0:60:30:a9:fd:21:8a:68:fa:4f:01:89: 40:4d:2f:e9:83:76:e5:96:76:51:49:07:14:23:a7:96:34:fc: ae:2e:ce:b4:f7:cf:ac:30:0e:5c:4e:ff:e8:be:75:24:4b:ec: e4:6e:41:4a:08:bd:d8:72:81:4d:96:89:71:91:5b:fa:57:d8: 05:d7:cb:75:f9:88:1f:8c:a4:83:fc:62:c7:2b:50:59:81:d5: 79:49:c9:07:a4:e1:dd:c6:50:c6:71:39:d8:8e:83:cd:c0:6d: 61:1e:a1:2a:7c:73:27:01:83:4c:a7:b1:72:21:a1:f8:9c:73: 65:e2:e7:44:6e:ba:44:e1:cd:9b:e2:6d:c1:b0:61:bd:b6:4c: c9:ff:8c:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdFrHL4mn1Wex3Qzm1Fvv+/cq0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTA3MTkwNTI3MDFaFw0yNTA3MjIwOTQxMDFaMDMxMTAvBgNV BAMTKDc2QjE0REJCRDg5RDYwQUU4QkU4QkIzOTU3OUE4OUQyMERFQkM5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhp5/2oCVk3rvdomybEzmJpnLw pYXjXnoXNrbaiLExksmh38jLwC3pxe0MO8P+WObDgEYBv5vIML6qDEvmNWPvLjS6 jEP6P6JaHz2PjgljI6fauBekBJ0OBoowHJrP1CU3p4atPpko7CMvGnrhCWXuvDwf 27yvyZ9Nid5AgiaCCwrgheuPFOYeeHUU4T3YZ/Pm1QUc8pgd0HPMIHK6PPvvCppU yEauyL+D7i8FPDTaRNcBsr1b3cm2ZeBHngMRPj/CLaFDW1TJGhLDyiuza0oBqX7V Ne7DokopVczfu4orS1phsPzg1Ik90Zzv819GoTAljTDnm1o2gzXQAdnL3gAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdrFNu9idYK6L6Ls5V5qJ0g3ryeIwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANb7euXGiJkvszryYmfoikI8xG8tGX7nHNh+ sOLHztsoUviDjcKH9rEhVVBnFZXxOb55H6z+4U3HSOI8coK6wztFusH90bhjAVQS hBVdy+FweFOt9yKyJZRk3WKaorcFjOQkjBKtVW49bMMIqeg/o+gUEfBgMKn9IYpo +k8BiUBNL+mDduWWdlFJBxQjp5Y0/K4uzrT3z6wwDlxO/+i+dSRL7ORuQUoIvdhy gU2WiXGRW/pX2AXXy3X5iB+MpIP8YscrUFmB1XlJyQek4d3GUMZxOdiOg83AbWEe oSp8cycBg0ynsXIhoficc2Xi50RuukThzZvibcGwYb22TMn/jLU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:54 2025 by rpki-client