$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: 09e6GMGj3+Ve0dZB2rWCfz59mtrcWr4NOVO8B5lsK1U= Subject key identifier: CC:DE:17:FB:B0:B6:78:86:F5:77:8B:F6:EE:95:91:1E:0B:A1:54:C4 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 1A1669DEB288DD351D9B119023E711E83979EB77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: C7 Signing time: Tue 22 Jul 2025 08:52:21 +0000 Manifest this update: Tue 22 Jul 2025 08:47:21 +0000 Manifest next update: Fri 25 Jul 2025 15:57:21 +0000 Files and hashes: 1: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: qEei14KDYu8tC8O4nIie0misd7sYU1F237xKjccaEik=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:16:69:de:b2:88:dd:35:1d:9b:11:90:23:e7:11:e8:39:79:eb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Jul 22 08:47:21 2025 GMT Not After : Jul 25 15:57:21 2025 GMT Subject: CN=CCDE17FBB0B67886F5778BF6EE95911E0BA154C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:32:be:8b:26:d2:be:83:14:e6:75:7a:6d: cf:3f:d5:43:df:e1:9a:2e:e4:1a:14:bf:56:e7:37: 41:96:be:29:cd:aa:22:6a:90:6b:bf:24:6c:68:c9: 23:92:0a:17:c6:b3:63:e5:96:1e:98:98:4b:b4:9c: 14:d3:04:13:0c:d6:c7:13:08:99:15:5a:11:a1:c3: df:a7:fe:25:f2:ac:51:e3:0b:8b:44:0d:db:ae:fc: bc:a3:dd:d1:4e:49:7c:e2:97:d0:cf:00:17:71:9b: 34:35:3b:6c:75:17:49:a7:46:52:1d:64:7d:5e:0c: ce:fe:bf:2e:ca:98:d4:e8:12:88:d8:c8:1a:fc:f2: 13:3a:4c:b2:a0:6b:53:57:3b:ed:62:d6:33:37:23: 72:9a:b3:d3:9c:c9:d0:d2:c8:28:45:0c:9c:16:9c: 55:73:4c:da:83:46:cc:07:4f:50:58:83:10:8c:48: 84:bc:34:32:58:cc:33:9f:68:60:a3:b8:3f:1c:c1: c0:a1:ad:ae:93:8b:12:dd:3a:ce:7b:58:68:0a:e3: 9b:24:3f:8e:f5:a7:df:44:14:03:da:68:83:b6:af: a8:21:48:46:a1:a7:c1:f1:61:64:d8:e7:4a:2c:79: a6:8c:46:9b:ae:1f:ec:95:d3:b6:d3:70:db:7a:84: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DE:17:FB:B0:B6:78:86:F5:77:8B:F6:EE:95:91:1E:0B:A1:54:C4 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:0b:2c:ae:fe:83:5c:81:4d:fc:20:bd:a1:bf:cb:17:dd:b8: d8:69:d4:29:6b:dd:80:71:2c:da:99:16:ce:ac:ec:99:b6:2a: 24:90:b6:1b:2b:04:37:2b:28:28:0d:bf:d5:48:26:6f:9a:12: 3c:ef:2f:13:b8:3f:98:1a:07:3c:4a:6d:cc:16:d9:70:da:a5: a1:d9:ef:fd:1a:c0:65:7a:f1:6a:61:7d:22:70:3a:ef:fa:b5: 38:a3:16:66:8f:4c:23:33:28:2f:41:7a:b4:e0:68:1e:60:a0: 63:28:0b:c5:f0:71:52:c6:6b:b1:0b:34:2f:51:55:24:57:c3: 3e:ce:00:63:1b:b2:1e:fa:53:f0:e9:8c:34:e4:23:cc:b9:b9: 41:cc:09:9a:4b:32:63:31:56:7b:d1:3d:c3:b1:e6:74:48:04: be:8a:bf:56:4c:c2:59:fc:39:bc:e1:50:44:e0:3a:2b:15:fb: c9:89:f3:ab:9a:db:a3:4b:1f:f3:ed:91:3b:3c:22:53:86:49: 79:09:96:cf:23:41:fa:87:39:51:a9:4b:5e:c7:a4:41:89:7b: 24:09:62:57:63:1b:4f:ed:c2:2d:4c:a9:ce:7c:e2:f1:ff:66: 7d:ba:36:80:0c:33:41:13:16:ad:6d:76:e4:17:aa:cf:3b:7e: 72:a8:4a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhZp3rKI3TUdmxGQI+cR6Dl563cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTA3MjIwODQ3MjFaFw0yNTA3MjUxNTU3MjFaMDMxMTAvBgNV BAMTKENDREUxN0ZCQjBCNjc4ODZGNTc3OEJGNkVFOTU5MTFFMEJBMTU0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONjK+iybSvoMU5nV6bc8/1UPf 4Zou5BoUv1bnN0GWvinNqiJqkGu/JGxoySOSChfGs2Pllh6YmEu0nBTTBBMM1scT CJkVWhGhw9+n/iXyrFHjC4tEDduu/Lyj3dFOSXzil9DPABdxmzQ1O2x1F0mnRlId ZH1eDM7+vy7KmNToEojYyBr88hM6TLKga1NXO+1i1jM3I3Kas9OcydDSyChFDJwW nFVzTNqDRswHT1BYgxCMSIS8NDJYzDOfaGCjuD8cwcChra6TixLdOs57WGgK45sk P471p99EFAPaaIO2r6ghSEahp8HxYWTY50oseaaMRpuuH+yV07bTcNt6hLdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzN4X+7C2eIb1d4v27pWRHguhVMQwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMILLK7+g1yBTfwgvaG/yxfduNhp1Clr3YBx LNqZFs6s7Jm2KiSQthsrBDcrKCgNv9VIJm+aEjzvLxO4P5gaBzxKbcwW2XDapaHZ 7/0awGV68WphfSJwOu/6tTijFmaPTCMzKC9BerTgaB5goGMoC8XwcVLGa7ELNC9R VSRXwz7OAGMbsh76U/DpjDTkI8y5uUHMCZpLMmMxVnvRPcOx5nRIBL6Kv1ZMwln8 ObzhUETgOisV+8mJ86ua26NLH/PtkTs8IlOGSXkJls8jQfqHOVGpS17HpEGJeyQJ YldjG0/twi1Mqc584vH/Zn26NoAMM0ETFq1tduQXqs87fnKoSug= -----END CERTIFICATE-----Generated at Wed Jul 23 12:17:00 2025 by rpki-client