$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: Oul4rhvndksGeXZV2fwXlRKHGJI3gifyaTUtcNbZu4s= Subject key identifier: DD:0C:3A:6D:D5:0D:9D:F2:7A:A0:84:56:AB:4B:04:79:86:95:51:DE Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 53430F020D9A149E6DA79C7D2D3DEF04C8DBF48A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 01C5 Signing time: Sun 20 Jul 2025 05:01:19 +0000 Manifest this update: Sun 20 Jul 2025 04:56:19 +0000 Manifest next update: Wed 23 Jul 2025 06:34:19 +0000 Files and hashes: 1: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: x1ebtkzZ6rGKj1a59RPXAWzFPRQ58XFOPobP3bxdPwM=) 2: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: Hm8P4hacYfkZNd8sZfNbLj4+ngt9DzF5s+/x8t3BFqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:43:0f:02:0d:9a:14:9e:6d:a7:9c:7d:2d:3d:ef:04:c8:db:f4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Jul 20 04:56:19 2025 GMT Not After : Jul 23 06:34:19 2025 GMT Subject: CN=DD0C3A6DD50D9DF27AA08456AB4B0479869551DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a4:1c:12:f6:0f:c9:49:81:4c:d4:3b:ea:2e: 56:03:db:d8:16:43:66:df:43:18:0c:14:d3:7d:9a: 93:d0:ee:d8:8c:bd:f2:9b:22:e8:3c:db:7d:43:b4: db:e1:51:12:19:ed:cb:da:a6:b2:5d:e1:9c:d1:3b: 1e:55:db:b0:9a:b8:3a:88:0c:7c:e2:8a:ce:fe:8c: 12:5c:9c:54:0e:78:7f:b9:0b:0d:fd:64:27:af:2d: 31:6c:6d:60:83:8c:e7:af:cb:cd:3e:c1:25:9e:c9: 5a:e8:7c:67:b4:65:26:00:35:cb:d5:6a:c6:c2:d3: 9a:59:cb:09:57:d3:43:c6:c5:08:9c:56:76:ad:a7: be:62:33:f9:aa:97:94:f2:3b:51:fd:04:26:20:18: 85:17:54:2e:b3:89:8c:23:b2:99:08:b4:13:9b:7a: 0d:24:f2:1d:21:dc:07:b1:01:1c:11:e8:f9:8a:5c: 60:92:93:e6:c7:e5:b9:ff:87:fe:42:fd:d6:26:40: 42:56:ec:18:81:d4:21:4d:29:80:77:f4:dc:b9:82: ba:c5:e4:f2:00:c8:4b:c6:ee:56:71:b1:e5:14:02: a2:70:db:a7:76:00:10:c3:01:d9:8c:c5:a9:57:fa: be:03:3f:41:28:b9:be:71:81:b1:06:b6:41:3a:cf: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0C:3A:6D:D5:0D:9D:F2:7A:A0:84:56:AB:4B:04:79:86:95:51:DE X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:16:f4:22:32:81:65:68:ff:20:bd:df:fb:1b:8d:72:98:bd: 12:55:41:6f:dc:1c:8f:2d:40:3c:3a:e0:38:12:ff:b8:39:0a: 56:c6:ea:d9:e7:6e:88:49:23:e3:36:be:42:d6:74:15:18:ee: 7e:71:0d:40:6d:48:1b:db:b9:86:ef:08:f5:9c:cf:a2:49:f3: 24:3f:cd:d9:cd:16:f2:50:d7:45:29:a7:de:2d:2f:a6:af:5a: 37:52:d6:f6:be:08:b4:de:8b:00:e5:4e:79:f4:44:80:93:4d: 53:7c:4e:3e:ea:a3:63:d7:20:12:7c:52:6f:23:db:64:cf:25: 12:6b:d4:63:2f:c5:e4:9c:72:cd:00:67:64:3e:60:3d:eb:01: 77:d7:6e:cb:6a:fa:2d:e3:93:56:e1:96:55:20:e1:fd:bb:98: e0:06:f0:30:6e:6d:60:67:55:18:9c:1b:a7:fb:a3:0d:de:ea: 22:62:5d:67:9a:31:7a:e8:e2:0b:7b:c8:e9:58:e7:53:8d:9b: 04:17:3d:2c:3c:0e:67:99:8b:7f:d1:25:da:3e:44:1e:f9:bc: 15:85:31:50:55:2c:79:76:30:c9:f2:e6:8a:98:52:02:09:00: bd:60:9e:78:fe:54:06:88:ab:c8:9e:50:94:69:79:63:1a:ab: e2:fb:cc:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0MPAg2aFJ5tp5x9LT3vBMjb9IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTA3MjAwNDU2MTlaFw0yNTA3MjMwNjM0MTlaMDMxMTAvBgNV BAMTKEREMEMzQTZERDUwRDlERjI3QUEwODQ1NkFCNEIwNDc5ODY5NTUxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRpBwS9g/JSYFM1DvqLlYD29gW Q2bfQxgMFNN9mpPQ7tiMvfKbIug8231DtNvhURIZ7cvaprJd4ZzROx5V27CauDqI DHziis7+jBJcnFQOeH+5Cw39ZCevLTFsbWCDjOevy80+wSWeyVrofGe0ZSYANcvV asbC05pZywlX00PGxQicVnatp75iM/mql5TyO1H9BCYgGIUXVC6ziYwjspkItBOb eg0k8h0h3AexARwR6PmKXGCSk+bH5bn/h/5C/dYmQEJW7BiB1CFNKYB39Ny5grrF 5PIAyEvG7lZxseUUAqJw26d2ABDDAdmMxalX+r4DP0Eoub5xgbEGtkE6z9pBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Qw6bdUNnfJ6oIRWq0sEeYaVUd4wHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEW9CIygWVo/yC93/sbjXKYvRJVQW/cHI8t QDw64DgS/7g5ClbG6tnnbohJI+M2vkLWdBUY7n5xDUBtSBvbuYbvCPWcz6JJ8yQ/ zdnNFvJQ10Upp94tL6avWjdS1va+CLTeiwDlTnn0RICTTVN8Tj7qo2PXIBJ8Um8j 22TPJRJr1GMvxeSccs0AZ2Q+YD3rAXfXbstq+i3jk1bhllUg4f27mOAG8DBubWBn VRicG6f7ow3e6iJiXWeaMXro4gt7yOlY51ONmwQXPSw8DmeZi3/RJdo+RB75vBWF MVBVLHl2MMny5oqYUgIJAL1gnnj+VAaIq8ieUJRpeWMaq+L7zKo= -----END CERTIFICATE-----Generated at Mon Jul 21 08:44:10 2025 by rpki-client