$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft File: 6437999FD06F2C7F0F16F8160CD6145F775884A4.mft (raw, json) Hash identifier: B1r6nVcd1fllJop+xB0pU7JhTZhZUrhazLcEKdk3OXA= Subject key identifier: 10:44:24:98:00:AE:E6:CE:C5:B7:E3:38:C4:39:1B:EE:9C:1F:FE:44 Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 Certificate issuer: /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Certificate serial: 34178D461726F174365E001B8BBE6868FC6C41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft Manifest number: 0228 Signing time: Tue 22 Jul 2025 23:50:03 +0000 Manifest this update: Tue 22 Jul 2025 23:45:03 +0000 Manifest next update: Sat 26 Jul 2025 02:21:03 +0000 Files and hashes: 1: 6437999FD06F2C7F0F16F8160CD6145F775884A4.crl (hash: U5uBW11bVRmmalPmidyZOAr3OOKXouyrz1uCZg9H4n4=) 2: 3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (hash: FtQ7YyJ/nXZZN06U1YB5sNs24X+l1RzMYb5gI1y1G9M=) 3: 3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (hash: b3wEoQmduATe2XsB1+5lzcIjLJ7k0E7+xb68g1ewVFQ=) 4: 3130332e3138312e3133362e302f32332d3234203d3e2039333431.roa (hash: 6kBcLlz4I+EwiYd/zHv8YINF31MEROhjhbQ+A0qjPjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:17:8d:46:17:26:f1:74:36:5e:00:1b:8b:be:68:68:fc:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4 Validity Not Before: Jul 22 23:45:03 2025 GMT Not After : Jul 26 02:21:03 2025 GMT Subject: CN=1044249800AEE6CEC5B7E338C4391BEE9C1FFE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:40:46:13:b0:a6:65:fa:61:fa:33:53:5d: 1e:eb:dd:32:71:10:fa:b8:bd:7c:6e:ef:4e:d6:03: 75:4e:69:a8:75:76:29:de:57:9c:ae:44:e9:69:d3: 25:53:f8:56:44:b0:43:ad:0b:cb:09:8d:ae:85:94: 73:9a:18:02:df:13:99:b7:85:74:8a:05:53:04:62: 0e:c5:05:5e:31:06:cd:e5:a7:76:53:ec:58:44:75: 00:f6:68:34:9c:ee:74:da:cc:b1:d4:e7:09:d8:78: 54:08:3d:54:7e:4b:e9:21:8f:ac:fa:30:c7:1c:4b: 18:10:65:68:88:f9:58:5f:4b:f5:e1:ca:2d:b7:9a: 6f:1c:e7:71:76:28:22:52:27:42:43:82:5e:39:b0: 43:62:63:27:53:80:fa:cf:3f:0a:c3:82:1f:e1:cc: 35:2f:89:36:bb:ab:1e:e3:f7:2b:f5:e8:9f:a9:70: c0:8c:7c:4f:39:ac:b1:e2:95:d0:18:6f:73:c8:3b: 05:1d:ef:51:30:61:63:d2:32:96:70:58:38:c0:c6: 3f:c8:ee:48:99:20:6c:00:9b:ad:d4:85:f7:45:6a: 10:c7:9c:18:90:37:a4:02:0f:39:ea:50:d3:32:48: 99:28:b4:b9:fd:9a:c0:be:d5:bf:c2:9b:69:89:05: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:44:24:98:00:AE:E6:CE:C5:B7:E3:38:C4:39:1B:EE:9C:1F:FE:44 X509v3 Authority Key Identifier: keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ff:93:68:e9:e1:27:9d:ff:7a:99:d6:21:75:c2:bb:91:ef: 04:43:10:5e:52:d2:ff:10:cd:07:aa:c3:ee:48:5e:fe:97:bd: 70:29:c5:e3:41:76:4e:ff:92:9c:37:a3:9f:b6:35:16:a3:e5: 29:a7:f2:a1:d3:5b:e8:b4:a8:25:c5:59:c9:2f:b1:31:d7:ca: 18:45:23:6f:a1:ff:a6:af:54:05:3b:a6:4e:f7:0b:cd:0e:cc: 51:2c:42:38:a5:a3:3e:34:bf:88:45:9b:d6:de:fd:d1:a8:7e: 42:9a:7d:b5:ff:9a:e2:fd:03:fd:aa:88:67:bd:3c:d2:54:1c: 01:30:4e:40:0d:37:75:c5:21:42:cb:40:e8:98:d6:b7:8d:84: b0:48:ba:cf:30:f5:6e:2a:25:e2:27:3c:0b:87:0e:ca:3d:89: 63:57:03:a2:8c:f4:ea:5d:ce:0f:50:30:8e:c3:94:5c:90:a4: 48:c3:78:69:13:94:0f:68:cc:11:67:f8:56:1f:6b:85:c2:9c: 4c:77:ff:c6:d8:c3:a7:8b:15:2b:81:0d:5b:43:f7:0a:2b:fc: 24:49:2d:82:e2:2c:ec:1c:fe:3e:b1:7e:c3:eb:b1:6d:cf:43: 9d:1d:03:a7:13:51:6e:d8:35:b7:92:06:f0:db:18:65:cb:39: 32:6a:36:df -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITNBeNRhcm8XQ2XgAbi75oaPxsQTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2NDM3OTk5RkQwNkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3 NTg4NEE0MB4XDTI1MDcyMjIzNDUwM1oXDTI1MDcyNjAyMjEwM1owMzExMC8GA1UE AxMoMTA0NDI0OTgwMEFFRTZDRUM1QjdFMzM4QzQzOTFCRUU5QzFGRkU0NDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANVrQEYTsKZl+mH6M1NdHuvdMnEQ +ri9fG7vTtYDdU5pqHV2Kd5XnK5E6WnTJVP4VkSwQ60LywmNroWUc5oYAt8TmbeF dIoFUwRiDsUFXjEGzeWndlPsWER1APZoNJzudNrMsdTnCdh4VAg9VH5L6SGPrPow xxxLGBBlaIj5WF9L9eHKLbeabxzncXYoIlInQkOCXjmwQ2JjJ1OA+s8/CsOCH+HM NS+JNrurHuP3K/Xon6lwwIx8TzmsseKV0Bhvc8g7BR3vUTBhY9IylnBYOMDGP8ju SJkgbACbrdSF90VqEMecGJA3pAIPOepQ0zJImSi0uf2awL7Vv8KbaYkFWIECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQQRCSYAK7mzsW34zjEORvunB/+RDAfBgNVHSME GDAWgBRkN5mf0G8sfw8W+BYM1hRfd1iEpDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3 NmZkYzYwLTgwMjMtNDBjZC1hYWE0LWNkNmVkMjJjNGQ0NS8wLzY0Mzc5OTlGRDA2 RjJDN0YwRjE2RjgxNjBDRDYxNDVGNzc1ODg0QTQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi82NDM3OTk5RkQwNkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1Rjc3NTg4 NEE0LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84NzZmZGM2MC04MDIzLTQwY2QtYWFh NC1jZDZlZDIyYzRkNDUvMC82NDM3OTk5RkQwNkYyQzdGMEYxNkY4MTYwQ0Q2MTQ1 Rjc3NTg4NEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAYP+TaOnhJ53/epnWIXXCu5HvBEMQXlLS/xDN B6rD7khe/pe9cCnF40F2Tv+SnDejn7Y1FqPlKafyodNb6LSoJcVZyS+xMdfKGEUj b6H/pq9UBTumTvcLzQ7MUSxCOKWjPjS/iEWb1t790ah+Qpp9tf+a4v0D/aqIZ708 0lQcATBOQA03dcUhQstA6JjWt42EsEi6zzD1biol4ic8C4cOyj2JY1cDooz06l3O D1AwjsOUXJCkSMN4aROUD2jMEWf4Vh9rhcKcTHf/xtjDp4sVK4ENW0P3Civ8JEkt guIs7Bz+PrF+w+uxbc9DnR0DpxNRbtg1t5IG8NsYZcs5Mmo23w== -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:50 2025 by rpki-client