$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: ig13BON+WLUgMnGR7IvC1ovTg4Ig6QCaHbREaAx/Qpk= Subject key identifier: C6:41:97:94:08:4C:FC:22:40:F0:4D:84:50:A1:6F:6B:E1:87:44:75 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 2E79E3CE4170A463F2268D7C5472BB04C4C9CB50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 032E Signing time: Fri 18 Jul 2025 22:40:58 +0000 Manifest this update: Fri 18 Jul 2025 22:35:58 +0000 Manifest next update: Tue 22 Jul 2025 09:26:58 +0000 Files and hashes: 1: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 2: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 3: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 4: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 5: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 6: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 7: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 9: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: dH8Ea0Yk3VA73ZitupJaINAPxkOa6z38c2pHy7/Ffm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:79:e3:ce:41:70:a4:63:f2:26:8d:7c:54:72:bb:04:c4:c9:cb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Jul 18 22:35:58 2025 GMT Not After : Jul 22 09:26:58 2025 GMT Subject: CN=C6419794084CFC2240F04D8450A16F6BE1874475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:ea:33:4a:eb:2d:4c:c8:b6:e1:c9:53:61: db:b7:9c:e6:3b:4a:e3:b0:b7:1f:63:01:fa:af:59: b7:30:4e:32:64:6c:3d:bb:44:a9:c5:71:25:87:76: 24:5f:4e:e6:a5:e1:ee:f6:a3:8a:a2:15:8f:69:97: 29:37:65:7f:72:2d:36:82:d1:27:18:a6:23:d5:07: e4:e4:2b:b9:af:56:b8:a0:04:ce:16:77:0b:a8:42: 54:db:c6:43:26:e0:ea:70:f9:1b:00:b8:60:b5:e6: a3:b8:34:3c:4f:b5:ce:43:b3:8e:e6:84:f2:f7:ff: 92:4e:48:0a:13:24:e2:ba:55:84:7c:b6:b7:ad:a1: d6:5d:7e:ac:fc:bc:ce:92:88:22:82:f1:2e:4c:55: 3f:2b:5d:14:b6:31:f4:cc:6c:06:0a:d5:c2:68:55: 1a:b0:32:75:ad:26:cc:04:45:a8:4f:cb:85:a9:ad: e8:98:d7:06:ee:9c:08:48:d9:9f:4d:8f:a3:93:d3: 53:bf:62:cd:e6:a4:df:2e:a0:4b:c5:f2:04:83:a6: e8:e8:b4:55:59:91:d6:ef:4a:49:ff:14:18:22:d2: dd:03:32:3b:7d:94:f5:fc:b1:88:36:52:d3:fa:90: 10:ca:22:fc:05:2e:66:8e:64:cf:4c:4e:6c:2a:81: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:41:97:94:08:4C:FC:22:40:F0:4D:84:50:A1:6F:6B:E1:87:44:75 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:da:90:fa:6b:2f:f4:18:33:a4:b8:88:fd:9f:79:ad:0c:53: 59:9c:ff:0a:3c:f5:a2:dd:ba:38:63:e9:74:8c:85:5d:a7:cc: e3:91:28:fc:66:39:4d:8d:a3:2d:c6:4d:40:07:f0:83:53:f4: fc:d5:f6:bf:8d:eb:ee:0c:3c:7f:84:44:66:4b:24:a1:3d:39: 26:8c:24:1d:8c:b6:9b:42:5e:8c:59:04:a8:12:16:dd:bc:d0: 0c:ed:2a:28:b2:6e:2f:3f:de:53:bb:98:df:1a:c5:cf:f1:2a: 6c:38:05:b6:1c:31:fe:fb:8c:b3:5f:70:23:5a:60:78:d1:10: df:5f:76:98:a1:8d:28:e4:ad:0a:90:36:08:d0:8d:0b:8b:57: 88:be:2a:13:d2:99:d6:c7:94:93:34:fd:d3:66:47:5d:de:47: a0:ff:de:3d:c3:ce:60:34:0f:ef:db:df:4f:94:73:2d:b4:9a: 2a:0e:ac:de:97:3e:44:54:85:57:71:54:b6:f1:47:60:72:11: e0:ea:da:82:6f:b7:1a:f1:f6:59:51:d5:77:a1:89:04:31:0d: 1e:f3:ad:9c:2e:1f:03:51:dd:ba:da:a0:4e:cc:1b:b7:01:bf: 22:97:40:e7:87:88:95:c6:d2:32:fc:83:db:f9:e4:ed:80:1b: 5f:f7:c1:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnnjzkFwpGPyJo18VHK7BMTJy1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA3MTgyMjM1NThaFw0yNTA3MjIwOTI2NThaMDMxMTAvBgNV BAMTKEM2NDE5Nzk0MDg0Q0ZDMjI0MEYwNEQ4NDUwQTE2RjZCRTE4NzQ0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyI+ozSustTMi24clTYdu3nOY7 SuOwtx9jAfqvWbcwTjJkbD27RKnFcSWHdiRfTual4e72o4qiFY9plyk3ZX9yLTaC 0ScYpiPVB+TkK7mvVrigBM4WdwuoQlTbxkMm4Opw+RsAuGC15qO4NDxPtc5Ds47m hPL3/5JOSAoTJOK6VYR8tretodZdfqz8vM6SiCKC8S5MVT8rXRS2MfTMbAYK1cJo VRqwMnWtJswERahPy4WpreiY1wbunAhI2Z9Nj6OT01O/Ys3mpN8uoEvF8gSDpujo tFVZkdbvSkn/FBgi0t0DMjt9lPX8sYg2UtP6kBDKIvwFLmaOZM9MTmwqgQEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxkGXlAhM/CJA8E2EUKFva+GHRHUwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvakPprL/QYM6S4iP2fea0MU1mc/wo89aLd ujhj6XSMhV2nzOORKPxmOU2Noy3GTUAH8INT9PzV9r+N6+4MPH+ERGZLJKE9OSaM JB2MtptCXoxZBKgSFt280AztKiiybi8/3lO7mN8axc/xKmw4BbYcMf77jLNfcCNa YHjREN9fdpihjSjkrQqQNgjQjQuLV4i+KhPSmdbHlJM0/dNmR13eR6D/3j3DzmA0 D+/b30+Ucy20mioOrN6XPkRUhVdxVLbxR2ByEeDq2oJvtxrx9llR1XehiQQxDR7z rZwuHwNR3braoE7MG7cBvyKXQOeHiJXG0jL8g9v55O2AG1/3wXs= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:39 2025 by rpki-client