$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft File: D9B568DACE796AFC606BD299D9DA57F714CD7970.mft (raw, json) Hash identifier: uFLGw7D3kJAUAV6QXyOv8SrBeOmT+/u5juxXGwmChb4= Subject key identifier: 14:7A:24:1C:79:51:80:37:27:3E:5A:3E:46:D3:D0:5A:49:4C:60:F8 Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 Certificate issuer: /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Certificate serial: 6D59862723BB1E19549FF9E7A6D63A4C5FF30FEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft Manifest number: FD Signing time: Fri 18 Jul 2025 23:31:03 +0000 Manifest this update: Fri 18 Jul 2025 23:26:03 +0000 Manifest next update: Tue 22 Jul 2025 04:07:03 +0000 Files and hashes: 1: 3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (hash: 5Xv6mrgfWe+rWcCn7CecS/d4Z1XQ/6GwMQiiafaEOqI=) 2: D9B568DACE796AFC606BD299D9DA57F714CD7970.crl (hash: KuUDPavXOIVdkiz6PPXPYKc7IObdEwol4kj+pSNQCcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 04:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:59:86:27:23:bb:1e:19:54:9f:f9:e7:a6:d6:3a:4c:5f:f3:0f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970 Validity Not Before: Jul 18 23:26:03 2025 GMT Not After : Jul 22 04:07:03 2025 GMT Subject: CN=147A241C79518037273E5A3E46D3D05A494C60F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c0:35:08:ff:ca:ee:88:f3:a1:05:a3:cb:50: 1c:02:f1:0f:67:0b:ee:97:b0:dd:cf:a4:b7:d9:ea: 5d:b0:be:4f:17:2f:c8:fc:84:fb:a2:ee:17:d4:64: 9d:78:c7:2c:f1:3a:2a:39:7d:9e:97:8b:85:69:56: 0d:43:f5:7a:cb:dc:dc:64:c9:ed:23:7d:f3:55:ac: f5:bc:ab:52:d0:f8:67:7f:8a:4b:28:33:83:cb:22: cc:c2:45:07:bb:07:1b:14:8f:e4:4f:b5:3a:c6:7c: 5b:d0:a2:e3:ff:89:95:7d:fd:88:98:ae:af:65:60: c5:4e:14:ce:bf:ae:2a:95:cc:c3:6b:0a:45:e0:30: c0:df:7c:48:ef:45:59:31:a4:58:b3:c0:47:1f:f4: 65:db:1e:82:ce:51:de:0f:3a:6a:d8:b3:74:9f:2e: ef:47:6c:31:42:84:b1:87:69:09:4a:42:2c:be:e4: f0:7a:27:a4:2e:e4:50:c5:7a:15:3b:f4:97:8f:f6: 16:80:29:39:8b:5c:18:f6:00:81:ce:86:d2:1c:f5: e6:08:ba:9f:76:4b:91:93:8b:13:ee:39:46:72:ce: 46:64:ac:91:3f:d6:7d:cb:73:d9:38:77:a1:db:a1: 27:0a:32:d1:94:c6:9e:1d:15:1f:dc:24:93:ca:fe: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:24:1C:79:51:80:37:27:3E:5A:3E:46:D3:D0:5A:49:4C:60:F8 X509v3 Authority Key Identifier: keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0c:5b:9c:ce:87:81:bd:f1:09:b0:90:3b:d7:06:53:0f:5f: 56:cb:24:31:d3:bd:aa:ea:bd:7a:73:f9:8d:d2:5d:3a:b3:7e: 9a:15:82:f1:ad:12:b0:18:c2:2f:ae:23:94:91:89:ea:df:71: ed:36:7f:09:5a:48:45:57:d7:92:fc:98:70:c1:fe:85:21:9c: 87:ec:f7:c5:46:9d:ca:b9:fc:c7:5e:59:13:c8:2d:a5:e7:84: 04:2c:77:67:58:03:d4:62:61:83:21:f1:3b:00:0a:b1:9d:6e: e6:8f:0d:d5:52:1c:95:05:29:c5:c5:7b:3f:2b:c1:34:16:06: 56:83:b0:0f:80:e5:7c:09:06:35:b3:ff:b6:36:7a:ee:c3:5a: 4a:1d:ea:0f:be:01:12:7f:36:85:7d:75:da:d8:1d:9c:fa:f8: 36:0e:2d:f7:85:99:e9:a2:de:2e:e5:c6:06:5e:67:ca:35:f0: 16:ca:9c:6e:49:27:d0:8b:f2:ac:e4:02:fc:ee:df:d1:00:82: 74:a6:64:35:f1:da:e2:cc:0b:8e:12:9f:b9:9d:5c:68:33:23: f9:52:69:30:d6:49:f5:4e:56:81:b0:6b:1f:fa:a2:7f:9f:e2: 54:52:1e:9c:b4:61:73:55:fa:ea:61:21:ea:7e:de:5b:5f:b0: 62:2c:bc:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVmGJyO7HhlUn/nnptY6TF/zD+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3Rjcx NENENzk3MDAeFw0yNTA3MTgyMzI2MDNaFw0yNTA3MjIwNDA3MDNaMDMxMTAvBgNV BAMTKDE0N0EyNDFDNzk1MTgwMzcyNzNFNUEzRTQ2RDNEMDVBNDk0QzYwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcwDUI/8ruiPOhBaPLUBwC8Q9n C+6XsN3PpLfZ6l2wvk8XL8j8hPui7hfUZJ14xyzxOio5fZ6Xi4VpVg1D9XrL3Nxk ye0jffNVrPW8q1LQ+Gd/iksoM4PLIszCRQe7BxsUj+RPtTrGfFvQouP/iZV9/YiY rq9lYMVOFM6/riqVzMNrCkXgMMDffEjvRVkxpFizwEcf9GXbHoLOUd4POmrYs3Sf Lu9HbDFChLGHaQlKQiy+5PB6J6Qu5FDFehU79JeP9haAKTmLXBj2AIHOhtIc9eYI up92S5GTixPuOUZyzkZkrJE/1n3Lc9k4d6HboScKMtGUxp4dFR/cJJPK/pFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHokHHlRgDcnPlo+RtPQWklMYPgwHwYDVR0j BBgwFoAU2bVo2s55avxga9KZ2dpX9xTNeXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNhYjlkZi0wM2I1LTQ4YjMtYTg3Mi1hMGZlMTJhNjc0MjYvMC9EOUI1NjhEQUNF Nzk2QUZDNjA2QkQyOTlEOURBNTdGNzE0Q0Q3OTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3RjcxNENE Nzk3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjYWI5ZGYtMDNiNS00OGIzLWE4 NzItYTBmZTEyYTY3NDI2LzAvRDlCNTY4REFDRTc5NkFGQzYwNkJEMjk5RDlEQTU3 RjcxNENENzk3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUMW5zOh4G98QmwkDvXBlMPX1bLJDHTvarq vXpz+Y3SXTqzfpoVgvGtErAYwi+uI5SRierfce02fwlaSEVX15L8mHDB/oUhnIfs 98VGncq5/MdeWRPILaXnhAQsd2dYA9RiYYMh8TsACrGdbuaPDdVSHJUFKcXFez8r wTQWBlaDsA+A5XwJBjWz/7Y2eu7DWkod6g++ARJ/NoV9ddrYHZz6+DYOLfeFmemi 3i7lxgZeZ8o18BbKnG5JJ9CL8qzkAvzu39EAgnSmZDXx2uLMC44Sn7mdXGgzI/lS aTDWSfVOVoGwax/6on+f4lRSHpy0YXNV+uphIep+3ltfsGIsvO8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:18 2025 by rpki-client