$ rpki-client -vvf repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft File: 3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft (raw, json) Hash identifier: IQwUORoQqktOR4HCRiZkuV5dfEUTeZXVmps+9i+pfr0= Subject key identifier: EC:CD:BD:93:AC:2A:A7:03:39:46:82:0B:AB:A7:21:ED:ED:D1:9C:7F Authority key identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 Certificate issuer: /CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Certificate serial: 63861C56700B2A64AA26B65446CA64A00EAFEB4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft Manifest number: 0479 Signing time: Sun 20 Jul 2025 13:52:13 +0000 Manifest this update: Sun 20 Jul 2025 13:47:13 +0000 Manifest next update: Wed 23 Jul 2025 22:48:13 +0000 Files and hashes: 1: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: 0GSE1PDB0X1nNRLhLL+YFIj25TLvzXb3P+1q7y2DYeY=) 2: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: qMdSXe2z67bVJOmODSeb4BQMQ40LX9lF9FYmIAv+p7A=) 3: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: Y2PTe5fMMDYclXsLhLsiwjVncBgzuq5ROa1U1eOC/Wc=) 4: 3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl (hash: soov3LhXQdKaaaEpR438rafBqN3zdC8gWOSf09H0oeM=) 5: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: yg0Ga2BI5N+zhlTssMp6B5+VROj1HXmBfDxoTWvqgpA=) 6: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: WgrIRzdaFJ0g4e27LMgAxhh+yicucERWndK+pSX36cg=) 7: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: bPWP0OQUIp2Y9GGXuX0UNuWcLsy7WT1L06MXLwlNCSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:86:1c:56:70:0b:2a:64:aa:26:b6:54:46:ca:64:a0:0e:af:eb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Validity Not Before: Jul 20 13:47:13 2025 GMT Not After : Jul 23 22:48:13 2025 GMT Subject: CN=ECCDBD93AC2AA7033946820BABA721EDEDD19C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:db:55:77:28:83:0a:f7:9b:f0:bf:bc:dd: 3b:c2:54:4f:85:46:d8:5c:41:cf:dc:f8:32:70:45: fb:4b:a4:21:1e:b1:82:33:4f:37:21:8f:f7:a6:ca: 3b:e3:1c:16:ae:88:c9:23:3b:f0:b2:b2:04:61:7a: b5:a7:57:bf:f3:db:3e:72:39:2d:8c:5d:e9:6d:0d: 27:c7:c3:a0:4e:46:db:bb:e7:2c:37:5c:9c:85:b4: 74:98:6d:70:da:30:52:6c:60:46:c2:33:5b:31:7a: 9b:c9:f9:7a:02:69:16:84:24:47:ed:04:ec:0c:cd: 16:b3:2f:a6:27:e6:3f:a9:3f:66:89:da:b5:35:20: 1f:d8:f5:01:8a:55:39:7f:22:7a:78:d3:64:aa:a5: df:68:da:fd:be:6f:03:12:3c:51:1d:c9:d9:a1:e7: 38:c6:aa:2c:aa:55:bf:c1:62:ff:d7:7a:85:be:21: 23:16:e9:44:2a:2d:d3:c9:4f:78:c5:14:4a:23:f6: 76:3e:03:9c:a9:54:d7:fe:4c:48:f1:80:94:ed:de: 9b:6b:b7:71:e2:08:b1:71:98:73:84:63:0f:f2:3d: a5:9e:9f:b2:b5:88:5b:90:12:ff:74:5a:63:ac:03: d7:a6:96:52:9f:c6:01:e4:aa:4a:0c:4e:79:05:60: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CD:BD:93:AC:2A:A7:03:39:46:82:0B:AB:A7:21:ED:ED:D1:9C:7F X509v3 Authority Key Identifier: keyid:3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:05:73:3a:77:fd:66:9d:f7:18:12:a0:a2:44:91:c4:11: 24:c5:03:22:d8:32:bc:19:84:0f:64:a8:37:08:7f:3d:d5:0c: ae:5c:44:86:5d:42:54:31:7e:1e:4b:66:d0:bf:37:3b:03:01: bf:3e:71:f3:84:fa:aa:6c:91:28:1e:12:5b:59:1c:cd:d4:21: cb:39:fe:6e:08:0d:05:d0:d2:23:e8:a6:2c:5a:26:61:09:8b: 96:33:80:4d:57:97:8a:00:63:04:c1:1c:b4:70:37:68:46:97: f6:c7:74:ca:5b:cd:a7:d6:99:97:50:5b:1f:cd:ef:e7:12:1f: b7:cd:aa:12:76:31:84:8e:33:ff:66:50:a1:81:67:e5:6c:35: 98:8e:fb:0c:7e:39:a6:26:ba:08:27:f7:21:27:60:78:87:24: 39:bb:44:ad:8c:2c:48:8f:3e:58:fb:ae:62:bd:53:26:48:5c: 5e:94:17:72:f6:a8:11:a9:8c:0b:6e:8b:84:85:58:42:4c:ea: 51:a7:1d:89:43:76:31:a2:8a:dc:8c:34:bb:81:fc:dd:b8:f1: e3:33:d7:6f:fd:d7:23:0e:dd:1e:1b:f1:d4:7e:1a:86:f6:20: 16:cb:0c:f5:0f:ef:cd:d9:5c:0b:5b:f4:f6:b0:cc:8e:b5:e3: 82:01:d9:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4YcVnALKmSqJrZURspkoA6v60owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIwRTFE QzlBMTI2OTAeFw0yNTA3MjAxMzQ3MTNaFw0yNTA3MjMyMjQ4MTNaMDMxMTAvBgNV BAMTKEVDQ0RCRDkzQUMyQUE3MDMzOTQ2ODIwQkFCQTcyMUVERUREMTlDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQttVdyiDCveb8L+83TvCVE+F RthcQc/c+DJwRftLpCEesYIzTzchj/emyjvjHBauiMkjO/CysgRherWnV7/z2z5y OS2MXeltDSfHw6BORtu75yw3XJyFtHSYbXDaMFJsYEbCM1sxepvJ+XoCaRaEJEft BOwMzRazL6Yn5j+pP2aJ2rU1IB/Y9QGKVTl/Inp402Sqpd9o2v2+bwMSPFEdydmh 5zjGqiyqVb/BYv/XeoW+ISMW6UQqLdPJT3jFFEoj9nY+A5ypVNf+TEjxgJTt3ptr t3HiCLFxmHOEYw/yPaWen7K1iFuQEv90WmOsA9emllKfxgHkqkoMTnkFYMutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7M29k6wqpwM5RoILq6ch7e3RnH8wHwYDVR0j BBgwFoAUPRPG+52yLOE0cGMlNXwg4dyaEmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDFlZTVlMi0zMzhjLTRkMjAtODA3ZS1lNTBiNzU1ODNkYjgvMC8zRDEzQzZGQjlE QjIyQ0UxMzQ3MDYzMjUzNTdDMjBFMURDOUExMjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIwRTFEQzlB MTI2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIw RTFEQzlBMTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBwBXM6d/1mnfcYEqCiRJHEESTFAyLYMrwZ hA9kqDcIfz3VDK5cRIZdQlQxfh5LZtC/NzsDAb8+cfOE+qpskSgeEltZHM3UIcs5 /m4IDQXQ0iPopixaJmEJi5YzgE1Xl4oAYwTBHLRwN2hGl/bHdMpbzafWmZdQWx/N 7+cSH7fNqhJ2MYSOM/9mUKGBZ+VsNZiO+wx+OaYmuggn9yEnYHiHJDm7RK2MLEiP Plj7rmK9UyZIXF6UF3L2qBGpjAtui4SFWEJM6lGnHYlDdjGiityMNLuB/N248eMz 12/91yMO3R4b8dR+Gob2IBbLDPUP783ZXAtb9PawzI6144IB2bA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:51 2025 by rpki-client