$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json) Hash identifier: ykTCrBZulL4SIcdkou48GYwtuxJzmJUDfqr08LKWoL4= Subject key identifier: DB:E0:D8:06:CA:D5:D8:97:B3:43:F8:B4:58:40:52:41:74:E9:F5:C8 Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Certificate serial: 5D51D9C3FC1247779A2BB3DEF6067CA35262EA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft Manifest number: 020F Signing time: Sun 20 Jul 2025 02:01:02 +0000 Manifest this update: Sun 20 Jul 2025 01:56:02 +0000 Manifest next update: Wed 23 Jul 2025 03:12:02 +0000 Files and hashes: 1: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: wzoIeNbkj23L7cRB2PA1oLvFDg1Iflb0JLe8OmBCPNg=) 2: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: +xob4YEanp8C5GvuLdsQx6ikXowtOPpr/uG69DFpAKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:51:d9:c3:fc:12:47:77:9a:2b:b3:de:f6:06:7c:a3:52:62:ea:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03 Validity Not Before: Jul 20 01:56:02 2025 GMT Not After : Jul 23 03:12:02 2025 GMT Subject: CN=DBE0D806CAD5D897B343F8B45840524174E9F5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:5c:76:b1:ea:78:98:e5:bc:11:75:63:cf: da:9c:93:7f:f8:d4:6d:c2:5f:5a:69:15:38:65:fe: c1:4e:b9:fe:a0:bc:02:b8:6f:74:d4:bc:9a:3c:fc: dc:0b:90:f5:da:dd:62:cd:83:ec:93:96:4d:6d:77: 77:cf:16:b8:57:2e:2f:ce:94:db:4e:53:cd:3d:87: 14:98:95:23:17:f0:38:7d:83:af:24:c4:74:11:e8: c1:a7:f5:09:b1:73:2b:dd:c6:81:ea:1d:3b:f4:51: ea:82:b9:d1:73:08:f6:08:c7:5e:54:09:cc:4c:7f: dd:9b:3b:3a:d7:e8:1b:80:41:8f:f4:97:b8:2e:01: 99:63:9c:3b:98:64:de:5a:84:c3:2f:1c:fe:dd:c8: 4a:cd:f8:47:78:da:ff:fa:08:25:73:6c:ed:51:89: ad:6f:01:2c:81:ec:32:c7:df:fa:68:db:74:27:41: 38:68:7e:7d:10:bc:66:c8:ee:b9:6f:48:93:26:0e: 95:53:aa:04:93:ae:69:44:85:66:59:de:63:7a:a5: 72:0a:eb:03:f5:f4:af:ba:7e:42:32:28:d2:92:74: 3c:75:ac:ee:54:5e:f5:00:f4:50:9b:d6:16:ae:f7: fc:c1:71:5b:1e:b1:72:fb:9f:cb:71:1c:c0:a8:77: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E0:D8:06:CA:D5:D8:97:B3:43:F8:B4:58:40:52:41:74:E9:F5:C8 X509v3 Authority Key Identifier: keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b7:6f:24:87:93:91:65:46:20:4c:14:b2:ff:ee:3e:db:7a: d3:2c:ae:81:c7:fb:c6:9a:ef:aa:58:7b:c8:66:53:c1:c3:61: 84:3b:34:e7:56:8b:e6:00:71:c0:50:08:ea:e5:84:ed:ea:7f: a6:c3:b3:5c:96:74:7c:4a:4e:aa:e8:8b:69:e2:8d:8f:73:dd: 7c:cc:41:8f:14:a3:e4:aa:c4:3b:2b:1f:c4:ea:34:8d:67:b0: 2e:8b:ed:8b:c4:6f:1d:40:20:3e:94:97:29:ec:f2:b4:c4:aa: 7f:23:95:7c:3e:13:e6:b2:d6:e7:9f:df:48:e3:dd:96:30:d4: 39:bb:ff:73:e1:4d:5d:fb:51:bc:dd:fd:74:45:7c:66:7a:89: c3:1b:ad:cc:8b:7c:99:ec:8c:01:95:25:25:5b:80:4b:54:0a: 8a:45:64:9a:82:00:24:e2:06:a4:21:07:f4:85:54:e2:c9:69: 55:1e:bd:c6:0d:87:cd:bd:d8:bb:81:cd:c6:18:ef:85:24:0d: bb:f5:53:45:8a:3f:d7:eb:f2:40:54:8f:70:4e:b4:ce:6f:7b: 1d:03:f4:81:52:12:0a:0d:b9:1c:cb:2f:97:00:73:82:bb:b2: 63:c3:8a:1f:b6:58:b1:d5:67:e7:80:1d:8c:25:12:c9:4f:6f: 17:6d:38:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVHZw/wSR3eaK7Pe9gZ8o1Ji6m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJF Njc5MEIwMzAeFw0yNTA3MjAwMTU2MDJaFw0yNTA3MjMwMzEyMDJaMDMxMTAvBgNV BAMTKERCRTBEODA2Q0FENUQ4OTdCMzQzRjhCNDU4NDA1MjQxNzRFOUY1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS51x2sep4mOW8EXVjz9qck3/4 1G3CX1ppFThl/sFOuf6gvAK4b3TUvJo8/NwLkPXa3WLNg+yTlk1td3fPFrhXLi/O lNtOU809hxSYlSMX8Dh9g68kxHQR6MGn9QmxcyvdxoHqHTv0UeqCudFzCPYIx15U CcxMf92bOzrX6BuAQY/0l7guAZljnDuYZN5ahMMvHP7dyErN+Ed42v/6CCVzbO1R ia1vASyB7DLH3/po23QnQThofn0QvGbI7rlvSJMmDpVTqgSTrmlEhWZZ3mN6pXIK 6wP19K+6fkIyKNKSdDx1rO5UXvUA9FCb1hau9/zBcVsesXL7n8txHMCodwvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+DYBsrV2JezQ/i0WEBSQXTp9cgwHwYDVR0j BBgwFoAUM5JXoMeVEgPAErpa8Z7bUuZ5CwMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmEwYjNmMS05NzRmLTQyMDUtYmRjZS0wZjlmNWI3MjUwZGMvMC8zMzkyNTdBMEM3 OTUxMjAzQzAxMkJBNUFGMTlFREI1MkU2NzkwQjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURCNTJFNjc5 MEIwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JhMGIzZjEtOTc0Zi00MjA1LWJk Y2UtMGY5ZjViNzI1MGRjLzAvMzM5MjU3QTBDNzk1MTIwM0MwMTJCQTVBRjE5RURC NTJFNjc5MEIwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK3bySHk5FlRiBMFLL/7j7betMsroHH+8aa 76pYe8hmU8HDYYQ7NOdWi+YAccBQCOrlhO3qf6bDs1yWdHxKTqroi2nijY9z3XzM QY8Uo+SqxDsrH8TqNI1nsC6L7YvEbx1AID6Ulyns8rTEqn8jlXw+E+ay1uef30jj 3ZYw1Dm7/3PhTV37Ubzd/XRFfGZ6icMbrcyLfJnsjAGVJSVbgEtUCopFZJqCACTi BqQhB/SFVOLJaVUevcYNh8292LuBzcYY74UkDbv1U0WKP9fr8kBUj3BOtM5vex0D 9IFSEgoNuRzLL5cAc4K7smPDih+2WLHVZ+eAHYwlEslPbxdtOPE= -----END CERTIFICATE-----Generated at Mon Jul 21 08:33:40 2025 by rpki-client