$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: o9J4EOgiwh+6sI7yJlt4dLKH7aaEyqEgsPVlvBR05ig= Subject key identifier: A9:EE:DA:6B:52:0E:ED:D2:52:45:61:B5:5E:7A:DF:F7:E7:50:7A:67 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 61B03EE7518936D0DBCBC4EA62B81539C59BA5E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0229 Signing time: Mon 21 Jul 2025 18:41:41 +0000 Manifest this update: Mon 21 Jul 2025 18:36:41 +0000 Manifest next update: Fri 25 Jul 2025 03:09:41 +0000 Files and hashes: 1: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: /OOxt+AbD11Ne1TvHEG/kwJUmGRN+KQ5iCbUdk2eyEU=) 2: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 3: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) 4: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) 5: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 6: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b0:3e:e7:51:89:36:d0:db:cb:c4:ea:62:b8:15:39:c5:9b:a5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Jul 21 18:36:41 2025 GMT Not After : Jul 25 03:09:41 2025 GMT Subject: CN=A9EEDA6B520EEDD2524561B55E7ADFF7E7507A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:d4:f0:3a:b9:6e:74:91:7d:b0:6c:3a:1f: ed:1a:5d:8d:2f:b0:04:3e:01:80:91:a8:61:46:6d: 75:e2:06:c1:8d:0f:43:8d:46:32:36:68:c3:ec:02: c8:24:e9:15:78:d2:0b:e7:6a:da:02:75:2f:c7:1e: b7:78:a8:19:06:08:2e:fd:54:f3:04:23:49:dc:2f: 3d:c7:26:ed:ed:31:ab:17:4c:3c:03:cc:f6:6c:db: 73:f9:68:4e:b6:e7:c5:f4:ee:4d:eb:17:cc:b3:02: dd:54:30:a2:85:cd:bb:02:a0:30:16:a6:14:f8:f6: e5:1a:cc:1d:f4:98:3d:f8:34:79:48:e3:f1:aa:be: 3e:d5:8a:59:6a:72:a2:4e:cc:66:7d:0a:fa:1d:66: 2c:a8:a8:97:ea:9b:9a:c9:9e:bd:ed:31:05:8f:e5: d4:67:41:3b:1b:54:d0:4c:ca:d5:f5:35:63:21:e4: 19:8d:da:ef:ad:f8:1e:2d:07:99:29:d7:fc:d7:07: 97:85:b6:82:61:b6:21:55:97:69:55:38:ca:15:d6: e8:a1:8a:d9:0f:39:50:f2:e8:ee:1d:e6:34:b5:a5: ee:a6:c6:75:10:f0:0f:6a:5b:27:9f:c5:cd:0b:c7: eb:24:31:52:d9:5a:4e:0b:99:c5:96:fa:e8:d1:e4: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EE:DA:6B:52:0E:ED:D2:52:45:61:B5:5E:7A:DF:F7:E7:50:7A:67 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:00:b0:2d:9b:19:17:b3:60:35:20:b5:86:f8:3d:1f:db: c1:91:5c:1e:ae:a1:0d:23:ba:89:5e:69:c1:e4:fa:17:a5:27: 3f:fd:e1:c3:b0:ce:da:f4:e5:cc:47:ac:e2:d1:ec:cc:9d:6a: 20:d4:35:fd:9e:36:97:15:91:71:86:d7:48:0a:08:3d:6b:a6: 01:3a:16:a2:bc:ee:d2:20:b3:08:84:5d:76:70:6a:07:50:e9: d1:32:76:cd:5d:d4:63:ab:ca:ac:72:93:f2:31:c9:b3:96:36: f1:bb:c3:c4:72:56:3c:ad:79:f9:04:50:b2:a4:c2:ba:f2:0f: 55:cc:c9:fd:0f:63:5c:60:93:29:6a:e2:c1:59:16:c4:b5:56: 51:25:25:d7:8f:e9:8b:59:3a:ce:4f:9d:1a:fd:21:e4:57:d6: 97:42:cc:3d:bd:6b:30:a7:e3:3d:9c:71:d9:ef:f7:7e:e5:1b: e5:57:7f:c1:f3:35:4d:e9:8f:81:0f:ad:08:22:a7:cc:22:90: 21:55:96:60:ad:b2:db:bd:47:b4:ef:38:76:61:b3:e1:c0:5f: 99:be:38:7c:d2:b4:83:81:fc:a1:5e:4c:0a:fb:5f:fb:57:ca: 38:ea:01:b6:56:85:04:67:3b:b7:08:1d:01:cf:42:7c:db:dc: 7c:68:ae:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbA+51GJNtDby8TqYrgVOcWbpeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTA3MjExODM2NDFaFw0yNTA3MjUwMzA5NDFaMDMxMTAvBgNV BAMTKEE5RUVEQTZCNTIwRUVERDI1MjQ1NjFCNTVFN0FERkY3RTc1MDdBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9U9TwOrludJF9sGw6H+0aXY0v sAQ+AYCRqGFGbXXiBsGND0ONRjI2aMPsAsgk6RV40gvnatoCdS/HHrd4qBkGCC79 VPMEI0ncLz3HJu3tMasXTDwDzPZs23P5aE6258X07k3rF8yzAt1UMKKFzbsCoDAW phT49uUazB30mD34NHlI4/Gqvj7VillqcqJOzGZ9CvodZiyoqJfqm5rJnr3tMQWP 5dRnQTsbVNBMytX1NWMh5BmN2u+t+B4tB5kp1/zXB5eFtoJhtiFVl2lVOMoV1uih itkPOVDy6O4d5jS1pe6mxnUQ8A9qWyefxc0Lx+skMVLZWk4LmcWW+ujR5KGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqe7aa1IO7dJSRWG1Xnrf9+dQemcwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZRALAtmxkXs2A1ILWG+D0f28GRXB6uoQ0j uoleacHk+helJz/94cOwztr05cxHrOLR7MydaiDUNf2eNpcVkXGG10gKCD1rpgE6 FqK87tIgswiEXXZwagdQ6dEyds1d1GOryqxyk/IxybOWNvG7w8RyVjytefkEULKk wrryD1XMyf0PY1xgkylq4sFZFsS1VlElJdeP6YtZOs5PnRr9IeRX1pdCzD29azCn 4z2ccdnv937lG+VXf8HzNU3pj4EPrQgip8wikCFVlmCtstu9R7TvOHZhs+HAX5m+ OHzStIOB/KFeTAr7X/tXyjjqAbZWhQRnO7cIHQHPQnzb3HxorlE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:04 2025 by rpki-client