$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: jSxgObHYVmgKw97+qP/lIGU3vGkwofoJk1dTLuMdtUg= Subject key identifier: DC:D6:E6:9E:D5:AD:5B:77:79:D8:DF:72:09:37:33:97:52:22:C2:BD Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 0C2380B176091B69B15E858360CC69F84EBB343F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 01D7 Signing time: Mon 21 Jul 2025 02:21:25 +0000 Manifest this update: Mon 21 Jul 2025 02:16:25 +0000 Manifest next update: Thu 24 Jul 2025 12:49:25 +0000 Files and hashes: 1: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: OxPlP0O+iE4SIO/YnFMq0hNBOR6xjxNKvY2VbmNMAjE=) 2: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 3: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 4: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 5: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:23:80:b1:76:09:1b:69:b1:5e:85:83:60:cc:69:f8:4e:bb:34:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Jul 21 02:16:25 2025 GMT Not After : Jul 24 12:49:25 2025 GMT Subject: CN=DCD6E69ED5AD5B7779D8DF72093733975222C2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:03:fa:cc:65:f3:94:b2:76:85:3a:cf:38: f4:d8:31:59:ad:50:6c:01:d1:45:71:59:90:22:8b: d2:a4:5a:f1:d3:ba:f7:36:6e:d6:b0:80:ad:96:94: 65:ed:91:c6:aa:e3:1d:05:dc:2d:84:e5:ae:8e:5d: 05:f5:2b:78:5f:cf:04:db:bb:cd:4a:c0:94:33:b2: 55:f6:96:79:d8:e1:4b:fa:21:1a:37:81:a4:0c:d6: 70:ec:e1:95:6e:5d:d0:f8:4a:43:24:98:dd:a8:75: 39:31:47:87:e9:2f:42:88:89:6a:3c:ab:94:e6:29: 36:06:2f:6d:3b:68:bb:d4:02:af:cc:75:4f:e5:9b: f7:24:4d:f0:7a:14:e0:e6:8a:28:9d:10:19:26:46: 85:b3:81:f8:41:0b:b0:fa:bb:6a:d9:54:73:d6:c8: dc:8e:2a:df:23:2c:11:07:b9:4c:3e:80:25:26:09: 4a:99:52:9f:28:3f:50:a6:79:3c:7d:0f:db:8a:72: ba:4c:ab:78:48:c6:0e:ef:a5:dc:f0:07:58:f4:ef: 8b:27:5f:41:4a:56:7c:34:c0:74:02:44:8d:23:4a: 4f:14:f8:7e:0f:76:00:4d:e8:35:4c:38:36:7b:23: 3a:97:48:0f:10:47:05:33:6f:b2:84:28:af:b9:9c: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:E6:9E:D5:AD:5B:77:79:D8:DF:72:09:37:33:97:52:22:C2:BD X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b4:99:d0:10:f0:4b:dc:40:e6:c2:24:ad:dc:48:3a:64:4f: d1:19:3b:0a:33:71:f2:6a:dd:03:4e:48:50:b9:2b:fe:4b:5e: b1:f7:d8:47:27:21:07:e2:ed:f8:d2:49:b4:d3:a2:ef:ba:56: 9c:07:01:58:c1:c0:02:5a:a6:89:c8:30:91:17:44:0d:30:c6: c1:ff:2f:c6:1a:9c:73:5f:e7:e4:4c:80:aa:98:f8:81:67:0c: 9b:64:cb:15:27:09:b6:b5:38:3c:e8:dc:30:08:2e:77:de:5c: e2:1b:a5:6d:02:58:08:3e:73:84:28:e5:7e:02:50:9f:a1:a6: 31:fb:fc:c1:ea:99:ab:b3:af:18:11:e2:96:f4:dc:a3:be:df: 28:79:ca:59:07:fc:2d:d2:5e:96:88:a4:66:12:3c:4b:07:a3: 26:d0:09:d9:20:9d:c9:b5:e7:ec:38:ed:ad:1e:d7:77:dd:a1: 9f:28:2d:89:70:97:5b:54:99:6d:b1:9d:47:fc:95:3a:78:22: be:d2:c7:df:31:e7:54:b5:b0:6f:46:2b:96:0f:28:d5:ad:66: e1:6f:b9:fe:1e:41:1a:44:ee:79:48:94:17:30:15:6e:fb:f8: 07:9e:67:8a:52:53:78:16:ef:50:d9:2f:86:97:09:ad:9e:79: f6:31:77:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCOAsXYJG2mxXoWDYMxp+E67ND8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTA3MjEwMjE2MjVaFw0yNTA3MjQxMjQ5MjVaMDMxMTAvBgNV BAMTKERDRDZFNjlFRDVBRDVCNzc3OUQ4REY3MjA5MzczMzk3NTIyMkMyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76AP6zGXzlLJ2hTrPOPTYMVmt UGwB0UVxWZAii9KkWvHTuvc2btawgK2WlGXtkcaq4x0F3C2E5a6OXQX1K3hfzwTb u81KwJQzslX2lnnY4Uv6IRo3gaQM1nDs4ZVuXdD4SkMkmN2odTkxR4fpL0KIiWo8 q5TmKTYGL207aLvUAq/MdU/lm/ckTfB6FODmiiidEBkmRoWzgfhBC7D6u2rZVHPW yNyOKt8jLBEHuUw+gCUmCUqZUp8oP1CmeTx9D9uKcrpMq3hIxg7vpdzwB1j074sn X0FKVnw0wHQCRI0jSk8U+H4PdgBN6DVMODZ7IzqXSA8QRwUzb7KEKK+5nKWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NbmntWtW3d52N9yCTczl1Iiwr0wHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq0mdAQ8EvcQObCJK3cSDpkT9EZOwozcfJq 3QNOSFC5K/5LXrH32EcnIQfi7fjSSbTTou+6VpwHAVjBwAJaponIMJEXRA0wxsH/ L8YanHNf5+RMgKqY+IFnDJtkyxUnCba1ODzo3DAILnfeXOIbpW0CWAg+c4Qo5X4C UJ+hpjH7/MHqmauzrxgR4pb03KO+3yh5ylkH/C3SXpaIpGYSPEsHoybQCdkgncm1 5+w47a0e13fdoZ8oLYlwl1tUmW2xnUf8lTp4Ir7Sx98x51S1sG9GK5YPKNWtZuFv uf4eQRpE7nlIlBcwFW77+AeeZ4pSU3gW71DZL4aXCa2eefYxd/4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:13 2025 by rpki-client