$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: eV8SNzuD07zSKSL+i1i89pD2uVNJKC87qJ7+uXsDzYI= Subject key identifier: FF:2A:00:12:D4:53:55:08:53:9C:BE:FE:98:04:22:FD:D8:7E:3E:85 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 3F6E5D4EBEC0FB5EB2909556255077C8F614D649 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 0111 Signing time: Sat 19 Jul 2025 05:42:14 +0000 Manifest this update: Sat 19 Jul 2025 05:37:14 +0000 Manifest next update: Tue 22 Jul 2025 12:35:14 +0000 Files and hashes: 1: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: VZT27r/OQbh8nxF8RZpyl0x1MH8ztRNE+rMC9H3Busg=) 2: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6e:5d:4e:be:c0:fb:5e:b2:90:95:56:25:50:77:c8:f6:14:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Jul 19 05:37:14 2025 GMT Not After : Jul 22 12:35:14 2025 GMT Subject: CN=FF2A0012D4535508539CBEFE980422FDD87E3E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:5a:75:1f:62:40:37:01:73:17:05:a8:05: 14:5c:fb:01:a7:04:58:d6:2e:0c:57:de:1f:83:2a: 62:57:3f:d4:75:83:9e:d3:3f:a5:f8:50:8d:08:d0: 88:d3:99:29:f1:f3:8f:b3:10:c8:ec:90:89:41:3b: fd:f4:5e:b7:b2:ee:a1:4f:0c:69:c7:c3:8d:18:65: 94:c8:20:d5:ee:c4:c1:64:00:58:b5:4f:d7:9e:4e: 60:83:f8:24:65:a5:90:47:f2:46:ae:e7:f1:6f:5b: 46:89:be:9a:2a:27:b1:6b:15:75:94:f2:50:9b:62: f2:22:62:35:98:8a:52:c4:36:46:06:1d:84:18:39: 7a:b7:58:1d:cd:0d:7a:3d:fb:06:3e:8f:4a:4b:5c: fd:44:62:88:c5:c7:98:7a:3c:39:66:f5:fa:ea:d0: ed:6f:89:b9:6e:8e:16:28:07:c7:fa:e9:de:bd:a2: 93:59:71:8d:53:7c:43:38:c4:2b:4b:cf:03:f6:51: 5c:c0:41:1c:b2:67:ac:38:cb:8b:89:d0:2f:63:c5: 59:b0:4d:33:61:57:95:d4:b5:43:f0:8d:43:5d:26: 73:47:35:d1:da:2c:be:7e:47:8e:81:49:88:ed:ae: 17:4b:3d:95:36:b1:10:1e:75:15:23:7d:9a:bd:fb: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:00:12:D4:53:55:08:53:9C:BE:FE:98:04:22:FD:D8:7E:3E:85 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:50:4e:4b:7e:9c:d5:e2:58:df:34:fb:6c:21:a2:df:4d:64: 78:a7:3e:45:da:2c:48:9e:3d:55:0b:50:33:1f:f1:b5:30:71: 0b:fa:c9:e2:0e:33:a7:aa:17:24:dd:fa:ea:0a:99:78:5c:71: b1:74:63:de:87:c6:7c:dc:26:8f:58:30:e7:42:d5:cc:28:49: df:ec:bf:1a:83:a3:c7:8d:ce:0b:79:d7:60:c7:d7:33:69:c2: 0a:a7:e0:99:db:ea:87:ff:f9:c9:4b:4c:9b:bb:70:a7:b7:8f: c7:cc:54:ae:63:1a:1d:f7:a8:cd:98:72:15:b2:49:d0:c5:97: 36:d0:3b:1a:3a:0e:38:20:f9:44:8b:10:af:e6:72:4a:69:37: 06:dc:53:7b:eb:ba:0a:ed:c3:15:49:e9:a5:00:e7:c0:bb:bf: 05:50:2a:63:cd:f8:c1:b7:94:0b:3a:eb:d2:0f:8c:60:96:f2: a1:8a:73:a5:46:06:c5:5b:e5:1b:d2:ec:d4:f6:77:c4:e9:e2: a6:29:0b:93:e6:c3:2c:82:4b:da:6a:2b:4d:c8:5f:d4:c1:4d: 74:72:e7:0d:5d:82:94:b9:28:ec:3d:85:b7:8f:72:e8:11:62: f4:8f:aa:c9:a5:41:4a:52:db:47:50:97:83:2d:bc:e6:4c:6d: 95:67:14:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP25dTr7A+16ykJVWJVB3yPYU1kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA3MTkwNTM3MTRaFw0yNTA3MjIxMjM1MTRaMDMxMTAvBgNV BAMTKEZGMkEwMDEyRDQ1MzU1MDg1MzlDQkVGRTk4MDQyMkZERDg3RTNFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGuVp1H2JANwFzFwWoBRRc+wGn BFjWLgxX3h+DKmJXP9R1g57TP6X4UI0I0IjTmSnx84+zEMjskIlBO/30Xrey7qFP DGnHw40YZZTIINXuxMFkAFi1T9eeTmCD+CRlpZBH8kau5/FvW0aJvpoqJ7FrFXWU 8lCbYvIiYjWYilLENkYGHYQYOXq3WB3NDXo9+wY+j0pLXP1EYojFx5h6PDlm9frq 0O1viblujhYoB8f66d69opNZcY1TfEM4xCtLzwP2UVzAQRyyZ6w4y4uJ0C9jxVmw TTNhV5XUtUPwjUNdJnNHNdHaLL5+R46BSYjtrhdLPZU2sRAedRUjfZq9+4sZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/yoAEtRTVQhTnL7+mAQi/dh+PoUwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVQTkt+nNXiWN80+2whot9NZHinPkXaLEie PVULUDMf8bUwcQv6yeIOM6eqFyTd+uoKmXhccbF0Y96HxnzcJo9YMOdC1cwoSd/s vxqDo8eNzgt512DH1zNpwgqn4Jnb6of/+clLTJu7cKe3j8fMVK5jGh33qM2YchWy SdDFlzbQOxo6Djgg+USLEK/mckppNwbcU3vrugrtwxVJ6aUA58C7vwVQKmPN+MG3 lAs669IPjGCW8qGKc6VGBsVb5RvS7NT2d8Tp4qYpC5PmwyyCS9pqK03IX9TBTXRy 5w1dgpS5KOw9hbePcugRYvSPqsmlQUpS20dQl4MtvOZMbZVnFJE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:39:17 2025 by rpki-client