$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: zhQGnhs/p/7IcfucPIEdRAFce13XGTPU0iKQlhPkag8= Subject key identifier: D8:23:AF:99:BE:B3:08:CD:36:3E:8E:99:3E:1E:B2:BF:99:B6:E2:6D Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 67C8F4F8CD12C5D8E2442A0DA1F47880CF8E8136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0317 Signing time: Sat 19 Jul 2025 18:41:44 +0000 Manifest this update: Sat 19 Jul 2025 18:36:44 +0000 Manifest next update: Wed 23 Jul 2025 02:48:44 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 2: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) 3: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: bFSRaKvDsWo2Vkjw1Td/8JWxJZZOU3z2SBZc3NHDvbA=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c8:f4:f8:cd:12:c5:d8:e2:44:2a:0d:a1:f4:78:80:cf:8e:81:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Jul 19 18:36:44 2025 GMT Not After : Jul 23 02:48:44 2025 GMT Subject: CN=D823AF99BEB308CD363E8E993E1EB2BF99B6E26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:05:f8:23:17:38:5b:71:79:7c:2d:ed:cf: 0a:15:10:76:7f:cc:7a:65:dc:dd:80:99:d3:13:3f: 1f:1b:7c:47:99:e4:91:82:1d:81:28:6f:ce:75:67: 03:3e:f3:0a:cb:e2:8f:65:4a:e9:93:3b:e3:5f:ac: e9:80:51:31:4c:8a:12:58:da:22:e1:79:fb:b1:46: 2a:7c:af:d1:a6:fd:27:7c:10:03:42:e1:8f:c2:8a: 48:61:5a:59:e9:d0:fa:4a:cb:c1:a3:3f:cd:ac:ac: 08:61:0d:bd:ab:8d:ce:b4:a7:49:d3:60:79:8f:a5: 9d:3f:88:46:ce:26:93:c3:ce:5d:15:17:f7:d1:be: b5:d0:30:fb:b4:e1:e5:63:e5:59:04:23:7d:08:15: 87:3e:29:2a:56:4d:d6:3b:b7:16:2b:48:40:9f:13: 01:d6:a6:35:98:51:fb:33:49:b0:0e:79:b6:79:0a: d2:72:75:9a:5c:75:a2:b7:33:5b:27:3c:e1:78:e4: 39:16:36:e2:69:d2:df:e3:3f:e6:ac:41:c6:b2:ff: 9f:c5:fa:2b:82:2d:1f:47:eb:c9:06:14:bc:ec:9f: 6a:9b:81:ca:83:e2:33:7f:83:93:da:09:1d:99:67: 47:6a:33:48:43:ad:62:c2:e4:f8:87:94:ab:5c:32: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:23:AF:99:BE:B3:08:CD:36:3E:8E:99:3E:1E:B2:BF:99:B6:E2:6D X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:34:f0:9a:f9:90:51:87:5a:0f:f4:f2:e6:f9:52:95:b2:35: 23:3b:92:04:60:4b:92:44:7a:73:c7:41:c8:59:a9:f4:1b:f1: 6d:ed:33:4f:9b:c9:ba:80:ad:3c:f1:f2:12:d3:4f:d9:1e:6c: 17:b1:e5:d5:ce:af:67:54:96:65:08:c3:f0:af:e9:2f:d2:d7: c3:24:3e:7f:8b:73:fd:a6:6c:13:be:3c:cf:4f:7b:c4:29:58: b2:ff:10:94:a4:53:09:41:f9:c3:9f:29:76:ef:00:b3:3e:da: 0e:4c:ac:ae:f3:aa:4f:05:7b:66:c4:2c:cc:86:b1:dc:16:50: 85:c8:c7:01:9b:83:dc:29:1c:a1:b4:71:78:30:82:d8:16:e5: 49:26:5b:31:49:30:58:54:ec:e1:3c:71:6b:78:5d:2e:d5:a9: 23:85:14:2c:88:4c:ec:e5:20:d4:aa:2b:7e:23:e1:cb:02:df: 7a:ea:95:4f:19:3e:7e:89:20:11:f3:cb:76:13:c8:c7:95:85: b6:bc:59:c2:bb:45:b3:69:6e:2d:52:17:c5:b1:69:a3:51:10: c8:93:80:b3:45:56:5a:07:0b:7b:aa:c0:6a:85:87:c7:2c:fb: 77:c5:7d:0a:61:40:36:c0:23:63:97:82:b7:ae:f9:47:f0:44: 97:84:4f:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8j0+M0SxdjiRCoNofR4gM+OgTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTA3MTkxODM2NDRaFw0yNTA3MjMwMjQ4NDRaMDMxMTAvBgNV BAMTKEQ4MjNBRjk5QkVCMzA4Q0QzNjNFOEU5OTNFMUVCMkJGOTlCNkUyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCQX4Ixc4W3F5fC3tzwoVEHZ/ zHpl3N2AmdMTPx8bfEeZ5JGCHYEob851ZwM+8wrL4o9lSumTO+NfrOmAUTFMihJY 2iLhefuxRip8r9Gm/Sd8EANC4Y/CikhhWlnp0PpKy8GjP82srAhhDb2rjc60p0nT YHmPpZ0/iEbOJpPDzl0VF/fRvrXQMPu04eVj5VkEI30IFYc+KSpWTdY7txYrSECf EwHWpjWYUfszSbAOebZ5CtJydZpcdaK3M1snPOF45DkWNuJp0t/jP+asQcay/5/F +iuCLR9H68kGFLzsn2qbgcqD4jN/g5PaCR2ZZ0dqM0hDrWLC5PiHlKtcMmsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2COvmb6zCM02Po6ZPh6yv5m24m0wHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ808Jr5kFGHWg/08ub5UpWyNSM7kgRgS5JE enPHQchZqfQb8W3tM0+bybqArTzx8hLTT9kebBex5dXOr2dUlmUIw/Cv6S/S18Mk Pn+Lc/2mbBO+PM9Pe8QpWLL/EJSkUwlB+cOfKXbvALM+2g5MrK7zqk8Fe2bELMyG sdwWUIXIxwGbg9wpHKG0cXgwgtgW5UkmWzFJMFhU7OE8cWt4XS7VqSOFFCyITOzl INSqK34j4csC33rqlU8ZPn6JIBHzy3YTyMeVhba8WcK7RbNpbi1SF8WxaaNREMiT gLNFVloHC3uqwGqFh8cs+3fFfQphQDbAI2OXgreu+UfwRJeET5Y= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:00 2025 by rpki-client