$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: s3GxaKjmfFq1P8UjZCB+JyA8nxqqCB2gXDM7/k21vxg= Subject key identifier: 1E:D7:94:F1:97:32:77:80:12:CC:CB:B1:69:E3:26:24:02:0E:15:3D Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 3A9430429910D854E1CD0AE1EE122B83074BDFB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 04F4 Signing time: Sun 20 Jul 2025 08:41:33 +0000 Manifest this update: Sun 20 Jul 2025 08:36:33 +0000 Manifest next update: Wed 23 Jul 2025 20:22:33 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: qVXTsGEHfsGoltRsgelGlKm/WEBdwwDfn2IV+w3br5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:94:30:42:99:10:d8:54:e1:cd:0a:e1:ee:12:2b:83:07:4b:df:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Jul 20 08:36:33 2025 GMT Not After : Jul 23 20:22:33 2025 GMT Subject: CN=1ED794F19732778012CCCBB169E32624020E153D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3b:3b:9a:2c:ad:3c:01:e8:17:ab:b4:1c:f5: 14:bf:94:94:c9:4e:87:8f:22:6e:33:71:b2:fe:d5: 15:b1:d2:70:b7:17:65:9a:9c:32:01:3d:c2:f1:23: 6c:20:71:45:2f:6d:0c:e5:91:5e:ce:c4:6f:49:7e: 3c:8e:3d:80:d9:5b:9e:a7:0c:0f:95:b2:a3:f5:21: d5:1e:d5:51:32:b6:ee:84:79:06:05:52:04:c7:80: fa:2e:b5:4f:78:5f:34:60:6b:8a:31:c9:8e:33:41: a7:79:6b:fa:b2:1d:2a:f5:55:39:65:8e:ac:4c:49: b6:a1:fc:63:12:b7:34:f5:ab:18:34:6d:d0:a7:2f: b9:7d:01:3e:7c:94:76:d9:ac:66:43:0e:db:bf:e5: 0f:12:ee:3b:ea:6d:28:0e:8b:00:5e:d5:44:4a:53: 80:40:53:ed:3f:b9:18:45:a1:d8:59:bb:2a:f8:45: 56:84:81:85:ae:48:85:c1:b5:4b:e4:15:f3:57:23: d6:b6:73:8b:80:f8:d5:77:a6:10:2d:0f:f7:78:25: 5d:54:08:83:b6:57:30:c9:0c:e0:94:74:0f:1b:cc: 3f:50:b4:de:76:27:6c:73:49:64:e6:99:e1:c4:a8: 46:9f:f7:cf:56:98:d3:b5:d9:15:e9:5c:64:66:a2: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D7:94:F1:97:32:77:80:12:CC:CB:B1:69:E3:26:24:02:0E:15:3D X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f3:0e:c6:7e:60:f5:ea:bc:52:cf:ab:a1:31:f1:c6:9c:27: 21:f6:43:77:d1:cf:a9:75:57:e1:af:42:58:2e:ac:e0:05:e5: 8c:0e:25:25:23:75:5e:4b:d2:72:d6:df:9f:35:ff:ba:18:dd: 05:7d:21:e4:e3:63:9a:e8:b7:fa:cd:55:db:d9:a1:2d:81:b4: 1d:96:fd:a8:ff:60:6a:50:9e:de:f4:ce:0c:d1:5e:19:ea:5a: cc:5b:1f:09:bf:e7:ca:60:89:27:e5:99:ac:77:bd:e7:11:25: fe:63:2d:ed:86:e2:e6:ea:73:b8:13:45:34:e7:19:7d:5f:2a: 0d:27:ee:a5:aa:2e:6e:4e:c7:b4:ce:22:7b:fb:76:bf:f9:7c: 46:c6:98:90:35:09:c5:82:1f:da:66:e0:00:7f:96:2c:a1:90: 06:45:5e:71:ea:a7:ed:88:fe:6a:34:23:d2:70:21:e1:f6:7c: e7:a3:4d:88:61:74:46:e2:db:9c:0c:3c:93:44:71:11:9a:7f: 15:a1:48:45:9d:0c:cb:4b:51:76:77:5f:37:96:db:21:41:49: 5e:41:ca:45:da:f2:47:77:84:cc:b9:e3:c4:8a:af:93:c0:85: c4:43:85:88:ca:e5:f8:f6:dc:22:94:b0:b3:d6:e7:cc:9d:3f: 26:9f:1d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpQwQpkQ2FThzQrh7hIrgwdL37kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA3MjAwODM2MzNaFw0yNTA3MjMyMDIyMzNaMDMxMTAvBgNV BAMTKDFFRDc5NEYxOTczMjc3ODAxMkNDQ0JCMTY5RTMyNjI0MDIwRTE1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyOzuaLK08AegXq7Qc9RS/lJTJ ToePIm4zcbL+1RWx0nC3F2WanDIBPcLxI2wgcUUvbQzlkV7OxG9JfjyOPYDZW56n DA+VsqP1IdUe1VEytu6EeQYFUgTHgPoutU94XzRga4oxyY4zQad5a/qyHSr1VTll jqxMSbah/GMStzT1qxg0bdCnL7l9AT58lHbZrGZDDtu/5Q8S7jvqbSgOiwBe1URK U4BAU+0/uRhFodhZuyr4RVaEgYWuSIXBtUvkFfNXI9a2c4uA+NV3phAtD/d4JV1U CIO2VzDJDOCUdA8bzD9QtN52J2xzSWTmmeHEqEaf989WmNO12RXpXGRmogthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHteU8Zcyd4ASzMuxaeMmJAIOFT0wHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDzDsZ+YPXqvFLPq6Ex8cacJyH2Q3fRz6l1 V+GvQlgurOAF5YwOJSUjdV5L0nLW3581/7oY3QV9IeTjY5rot/rNVdvZoS2BtB2W /aj/YGpQnt70zgzRXhnqWsxbHwm/58pgiSflmax3vecRJf5jLe2G4ubqc7gTRTTn GX1fKg0n7qWqLm5Ox7TOInv7dr/5fEbGmJA1CcWCH9pm4AB/liyhkAZFXnHqp+2I /mo0I9JwIeH2fOejTYhhdEbi25wMPJNEcRGafxWhSEWdDMtLUXZ3XzeW2yFBSV5B ykXa8kd3hMy548SKr5PAhcRDhYjK5fj23CKUsLPW58ydPyafHfY= -----END CERTIFICATE-----Generated at Tue Jul 22 18:56:54 2025 by rpki-client