$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft File: 2D18956397FA6055A44153CABF07303FD6E55E44.mft (raw, json) Hash identifier: nDisW36slkFVmsNRT+1o5vr/I2wnwQt3FppqnyqyvOI= Subject key identifier: 92:53:62:4F:DF:2D:73:9D:29:BB:C4:5E:94:BE:07:FE:AD:24:8F:F6 Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 59F2B09ADA45C437CAAA489482664B4453AF8B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft Manifest number: 04FC Signing time: Mon 21 Jul 2025 04:03:56 +0000 Manifest this update: Mon 21 Jul 2025 03:58:56 +0000 Manifest next update: Thu 24 Jul 2025 11:32:56 +0000 Files and hashes: 1: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: BilMX6PAfP77Q5Ze/r2bseAvAFYgHI4D9c4hoNAPY/0=) 2: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: 9pt7JLtOWMCBsJXp8H1J28V9N/OUvx5VflNai/uQZgc=) 3: 2D18956397FA6055A44153CABF07303FD6E55E44.crl (hash: UkDlpClCDxBQuwg3mS3ltIvnfccz4ZVeZMm9EkEAdhE=) 4: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: LMlg0YtMMAZTGP6EzKXImD6a6ZjUtLMQ+VabkB5A5lc=) 5: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: 1cZaLW2bYSVuCFR3p6/QnCg+KIF2tEt9ZDlyjUYN2tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f2:b0:9a:da:45:c4:37:ca:aa:48:94:82:66:4b:44:53:af:8b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: Jul 21 03:58:56 2025 GMT Not After : Jul 24 11:32:56 2025 GMT Subject: CN=9253624FDF2D739D29BBC45E94BE07FEAD248FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:6d:45:11:5a:e6:8c:41:12:b5:cf:c2:11: 2c:4f:2f:cc:34:f3:c5:1d:e3:6f:8e:ef:4a:51:8c: d2:5d:ef:b1:b3:18:52:33:71:0f:2f:52:c8:68:c5: 9e:62:07:ef:f2:88:7d:65:12:b7:99:1f:3a:fb:2a: 69:d1:95:e9:2b:d1:ad:b9:c6:88:02:3d:02:41:fe: 50:72:fd:ac:5e:32:7a:9e:25:bf:0e:b1:d9:f8:23: e5:7e:7e:c8:64:f7:49:9a:c2:80:20:5a:eb:87:bb: bc:55:4a:d7:0f:23:ad:2a:ea:0b:42:2e:ad:a5:0f: f9:28:61:97:f2:35:ae:23:65:c1:bf:c5:c1:88:0c: 5b:7a:4e:28:be:35:76:e9:6b:00:ae:e9:d1:e4:8a: bb:30:97:08:9c:46:9b:92:44:67:86:7d:bc:b5:9a: 47:22:3c:64:dc:0e:99:9f:75:6d:8c:9c:ac:47:b7: 7a:01:91:83:ef:56:68:64:4d:59:6d:eb:3f:0e:dd: 73:2d:08:a2:53:d4:02:4f:c0:1e:c4:5d:98:61:f8: d1:c5:ee:8a:c9:97:73:5e:0d:46:0c:3b:f2:ef:70: 5e:d0:c6:49:b8:5c:8e:ad:06:27:ca:5a:e1:e9:74: c4:6b:8b:d7:8c:28:e4:e0:ec:1b:a0:48:4b:b0:e2: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:53:62:4F:DF:2D:73:9D:29:BB:C4:5E:94:BE:07:FE:AD:24:8F:F6 X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:39:52:a4:f4:ef:13:8e:e7:d3:47:bc:e5:df:e8:89:25:59: c6:3e:1e:a2:c1:60:40:97:f2:d5:60:d9:14:16:16:2f:97:fc: 08:a2:6d:4e:b0:f4:a1:40:70:cc:8a:9e:5f:0e:c2:15:29:f3: 26:b4:8e:ad:23:ee:08:6d:b4:f6:87:fb:02:38:9b:d5:6a:44: 05:e3:2f:39:de:f9:6b:55:76:6b:aa:74:1e:cb:02:91:ab:c8: c4:4d:d6:e9:1c:3b:32:fc:90:43:8f:b6:c6:f6:d4:2d:c8:3c: f6:61:c2:ab:48:56:42:6c:f9:de:50:bd:d5:7e:1f:b5:04:6b: 18:9f:06:5a:ec:15:19:fa:65:4d:07:73:38:c0:b4:ac:82:a9: 19:5c:9a:db:d1:9c:da:ac:32:81:6c:40:00:7a:ca:4a:04:28: 47:8a:1b:38:89:52:d5:6c:7c:d6:66:b5:69:bb:44:ce:f6:cb: d1:ac:eb:34:84:c8:04:ae:6c:b5:ca:d8:fa:ad:6e:7f:8e:3d: 2a:be:52:e2:07:d3:0c:b2:fe:23:0a:6a:3d:a0:bc:40:77:df: 68:2b:69:f8:39:e1:4f:e0:52:c7:49:07:05:bc:fe:3d:b4:1d: 4e:e2:c5:41:7f:9e:b8:1b:b8:ae:42:92:88:22:cd:a2:77:1a: e7:ce:52:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfKwmtpFxDfKqkiUgmZLRFOvi3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNTA3MjEwMzU4NTZaFw0yNTA3MjQxMTMyNTZaMDMxMTAvBgNV BAMTKDkyNTM2MjRGREYyRDczOUQyOUJCQzQ1RTk0QkUwN0ZFQUQyNDhGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvB21FEVrmjEEStc/CESxPL8w0 88Ud42+O70pRjNJd77GzGFIzcQ8vUshoxZ5iB+/yiH1lEreZHzr7KmnRlekr0a25 xogCPQJB/lBy/axeMnqeJb8Osdn4I+V+fshk90mawoAgWuuHu7xVStcPI60q6gtC Lq2lD/koYZfyNa4jZcG/xcGIDFt6Tii+NXbpawCu6dHkirswlwicRpuSRGeGfby1 mkciPGTcDpmfdW2MnKxHt3oBkYPvVmhkTVlt6z8O3XMtCKJT1AJPwB7EXZhh+NHF 7orJl3NeDUYMO/LvcF7Qxkm4XI6tBifKWuHpdMRri9eMKOTg7BugSEuw4oIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklNiT98tc50pu8RelL4H/q0kj/YwHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMw M0ZENkU1NUU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk5UqT07xOO59NHvOXf6IklWcY+HqLBYECX 8tVg2RQWFi+X/AiibU6w9KFAcMyKnl8OwhUp8ya0jq0j7ghttPaH+wI4m9VqRAXj Lzne+WtVdmuqdB7LApGryMRN1ukcOzL8kEOPtsb21C3IPPZhwqtIVkJs+d5QvdV+ H7UEaxifBlrsFRn6ZU0HczjAtKyCqRlcmtvRnNqsMoFsQAB6ykoEKEeKGziJUtVs fNZmtWm7RM72y9Gs6zSEyASubLXK2Pqtbn+OPSq+UuIH0wyy/iMKaj2gvEB332gr afg54U/gUsdJBwW8/j20HU7ixUF/nrgbuK5CkogizaJ3GufOUik= -----END CERTIFICATE-----Generated at Mon Jul 21 12:58:59 2025 by rpki-client