$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: ouIb71JQy4MAEmeN2/U3qWXR3VX6eGQgZ9tfp5X3Ft8= Subject key identifier: 7E:1C:78:E1:5B:22:45:1E:C7:6D:4C:C3:91:17:B3:55:C7:54:2F:F3 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 347954A737DBB3EF6BF2E7FB4FCA3C2848636DE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 016D Signing time: Sat 19 Jul 2025 22:10:55 +0000 Manifest this update: Sat 19 Jul 2025 22:05:55 +0000 Manifest next update: Tue 22 Jul 2025 23:51:55 +0000 Files and hashes: 1: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 2: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 3: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 4: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: hf1+upG753AFxMho4AexU7ZbM1WR2saBIeqeYT3Lb14=) 5: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:79:54:a7:37:db:b3:ef:6b:f2:e7:fb:4f:ca:3c:28:48:63:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Jul 19 22:05:55 2025 GMT Not After : Jul 22 23:51:55 2025 GMT Subject: CN=7E1C78E15B22451EC76D4CC39117B355C7542FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:b1:04:19:32:6c:20:1c:10:8d:6c:b7:18: d7:09:50:2b:45:eb:6f:ac:ab:ba:66:9e:9c:b1:96: 50:31:cc:e5:10:ea:72:8d:7b:8d:44:bd:36:3a:43: 66:33:64:f8:3c:cb:76:44:8e:eb:7f:d1:c9:6d:36: ab:7e:7d:be:11:43:ef:97:a7:47:99:f7:e0:a8:5a: b8:12:ff:00:73:58:76:e2:87:fc:89:b9:59:6a:20: cc:f1:17:01:48:be:4d:50:7e:2f:e0:f9:70:5e:00: 13:3b:fe:02:7d:7b:0a:94:f7:63:7b:ca:8f:3d:38: 8d:05:b0:25:84:7d:b8:0b:53:12:b3:e4:32:00:32: 83:d1:7b:73:e6:d3:93:64:15:f5:01:64:21:54:e8: 9c:cd:46:93:d4:82:24:b4:6d:22:01:1b:bf:26:49: eb:7d:12:06:9e:ae:ee:ab:1a:29:73:db:02:21:72: c4:15:fe:85:e6:54:20:62:96:dc:20:20:f4:b6:7e: 19:ec:bc:6d:bc:bf:d9:f4:94:6c:51:9a:75:b0:e7: 03:fe:98:fe:36:0c:5f:47:da:e0:3b:b5:57:76:92: 68:12:80:c1:f9:12:6a:89:f4:7d:aa:be:47:e6:a0: 31:b5:cd:da:d4:2b:a7:9b:1b:21:5e:78:45:16:a8: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1C:78:E1:5B:22:45:1E:C7:6D:4C:C3:91:17:B3:55:C7:54:2F:F3 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:de:44:fb:62:23:74:71:99:4c:6a:35:6d:96:17:33:2a:46: de:97:6f:9d:31:2b:8a:44:c4:ce:12:c6:f8:34:be:9d:bd:12: 9f:ca:f9:66:8e:eb:a7:8d:e6:ad:b0:11:71:a7:97:03:b4:5d: b4:f2:b4:bc:3c:d6:23:e4:2b:ec:90:87:e4:ef:99:b0:ca:70: ca:52:04:3b:b3:1a:cb:74:7f:94:77:3f:ee:77:55:8d:56:fd: 62:7b:1e:8a:1d:77:7b:f9:d0:da:ab:b0:ff:68:e9:94:3f:7f: 4b:30:20:57:82:cf:d3:05:a1:1f:33:eb:f3:ee:24:58:72:49: 89:44:99:12:14:40:c2:4a:e2:cc:85:2e:35:84:9d:5e:fc:bd: 99:53:99:84:3e:1f:7b:08:06:30:41:a9:75:10:e6:8f:95:5e: 2c:f1:40:7d:82:b6:f1:99:9e:d2:cd:34:8b:29:77:67:df:44: 30:6d:53:4e:3c:9d:35:d9:9e:b1:65:0d:f9:96:f3:b5:66:e4: 84:d6:0d:df:16:81:c1:fb:03:9d:0c:58:c2:e4:18:e2:06:6c: 9a:b7:68:6f:dc:9b:2d:c4:e3:ec:bd:be:1b:b2:c1:14:1a:99: 84:3c:e1:ee:0e:b8:11:fa:e0:3e:e0:8f:a2:17:94:31:b6:56: 16:5a:18:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHlUpzfbs+9r8uf7T8o8KEhjbeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTA3MTkyMjA1NTVaFw0yNTA3MjIyMzUxNTVaMDMxMTAvBgNV BAMTKDdFMUM3OEUxNUIyMjQ1MUVDNzZENENDMzkxMTdCMzU1Qzc1NDJGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjU7EEGTJsIBwQjWy3GNcJUCtF 62+sq7pmnpyxllAxzOUQ6nKNe41EvTY6Q2YzZPg8y3ZEjut/0cltNqt+fb4RQ++X p0eZ9+CoWrgS/wBzWHbih/yJuVlqIMzxFwFIvk1Qfi/g+XBeABM7/gJ9ewqU92N7 yo89OI0FsCWEfbgLUxKz5DIAMoPRe3Pm05NkFfUBZCFU6JzNRpPUgiS0bSIBG78m Set9Egaeru6rGilz2wIhcsQV/oXmVCBiltwgIPS2fhnsvG28v9n0lGxRmnWw5wP+ mP42DF9H2uA7tVd2kmgSgMH5EmqJ9H2qvkfmoDG1zdrUK6ebGyFeeEUWqGY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfhx44VsiRR7HbUzDkRezVcdUL/MwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfeRPtiI3RxmUxqNW2WFzMqRt6Xb50xK4pE xM4Sxvg0vp29Ep/K+WaO66eN5q2wEXGnlwO0XbTytLw81iPkK+yQh+TvmbDKcMpS BDuzGst0f5R3P+53VY1W/WJ7Hoodd3v50NqrsP9o6ZQ/f0swIFeCz9MFoR8z6/Pu JFhySYlEmRIUQMJK4syFLjWEnV78vZlTmYQ+H3sIBjBBqXUQ5o+VXizxQH2CtvGZ ntLNNIspd2ffRDBtU048nTXZnrFlDfmW87Vm5ITWDd8WgcH7A50MWMLkGOIGbJq3 aG/cmy3E4+y9vhuywRQamYQ84e4OuBH64D7gj6IXlDG2VhZaGFM= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:09 2025 by rpki-client