$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: kBFAcUOr3KaCyW+m7h+YEbJ7to4HXhUV0wSAJQWJBig= Subject key identifier: 58:CD:BD:C2:9F:59:B7:60:FA:F4:C7:67:32:A5:DE:1E:1F:D6:CC:0A Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 028280C209FD6E426337E81FCF2B63CEA91157E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: D6 Signing time: Mon 21 Jul 2025 21:32:20 +0000 Manifest this update: Mon 21 Jul 2025 21:27:20 +0000 Manifest next update: Fri 25 Jul 2025 01:53:20 +0000 Files and hashes: 1: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: 26HTBGgubUQMEHGFUZLZbk0bPZPqTGpy+z4t0ifKWeg=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 3: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 4: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:82:80:c2:09:fd:6e:42:63:37:e8:1f:cf:2b:63:ce:a9:11:57:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Jul 21 21:27:20 2025 GMT Not After : Jul 25 01:53:20 2025 GMT Subject: CN=58CDBDC29F59B760FAF4C76732A5DE1E1FD6CC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:c4:76:fe:b2:d9:f1:c4:e6:6c:22:4c:3d: 1a:02:d4:4a:1a:ce:35:d1:79:03:12:f3:f5:04:96: 89:fd:a3:6a:bd:1a:77:63:fd:85:db:15:a6:80:ce: c0:ea:3c:b3:1d:83:e1:b4:74:17:96:7c:ff:1c:ef: e6:a2:9a:e2:17:9c:fc:b9:42:87:2d:a9:20:e0:af: e5:ad:7a:63:16:e5:04:0a:2e:1b:48:59:a4:36:bc: 94:6e:d6:78:d0:6e:8d:3e:41:7a:4a:6d:43:1d:fe: a1:ef:8e:6e:d9:1c:43:5a:c7:19:78:fe:25:22:40: 3b:74:49:68:b4:75:50:ab:1c:5b:a9:cd:0e:f2:7b: 99:8b:86:82:aa:95:68:0c:ec:3f:56:5e:6f:0a:96: 19:45:20:4c:09:1e:e5:97:38:7f:4a:c9:25:db:22: 74:3a:d3:2a:2b:07:6f:d3:71:d0:c9:65:1c:ab:b3: 08:b0:66:bf:81:13:3f:a0:fe:9b:77:f5:1c:e7:cc: e3:05:ad:29:f0:6f:a7:83:05:ea:78:64:01:cc:3d: 42:cd:13:d6:41:90:3c:e2:e1:85:db:36:e4:44:83: 93:73:d2:f6:09:df:0c:7a:73:70:45:63:6a:eb:e7: cc:be:a3:ba:4a:2a:fe:f4:86:45:77:9a:07:93:19: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:BD:C2:9F:59:B7:60:FA:F4:C7:67:32:A5:DE:1E:1F:D6:CC:0A X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:14:82:d5:33:da:3a:d8:d9:b8:8d:a1:32:27:ed:0f:88:ad: cb:da:99:53:72:af:ad:8e:05:0f:82:f3:ab:3d:c8:98:c9:74: 12:33:49:6e:6f:ae:b5:65:06:aa:04:4d:76:26:44:72:d3:4c: f7:0a:07:09:ef:d1:39:94:e8:4b:0a:73:8e:ec:33:8a:c0:95: 79:2b:3d:02:1b:67:69:8d:c6:97:b9:ed:f1:32:53:ae:e3:76: 6e:cc:cb:c5:9b:fe:a6:14:0b:3b:12:f9:46:91:16:12:f2:9c: c6:51:93:b2:77:26:5a:4e:6a:9b:6d:2d:d6:e0:a5:d0:5e:11: 0f:36:77:da:00:3f:7f:b4:6d:b3:a9:eb:ee:bb:21:43:5e:95: d1:f5:b0:6b:ea:a2:4a:3e:2d:a5:ff:ac:7d:c2:7e:ad:b7:63: 6b:1c:4a:00:22:9e:48:e5:a3:e1:e5:26:a9:0a:9f:42:93:a3: 31:0b:a0:98:f2:5a:40:87:fd:75:54:c2:f9:8d:80:12:2e:2e: 48:f9:74:44:1a:46:2f:a1:0c:52:37:ac:63:b1:f7:44:95:8e: df:46:21:d7:12:aa:f2:bb:61:70:79:55:24:86:f8:b0:21:92: 69:38:c7:bd:e6:17:bb:b0:eb:6b:da:7f:38:01:38:eb:1f:69: 7a:5a:12:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoKAwgn9bkJjN+gfzytjzqkRV+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTA3MjEyMTI3MjBaFw0yNTA3MjUwMTUzMjBaMDMxMTAvBgNV BAMTKDU4Q0RCREMyOUY1OUI3NjBGQUY0Qzc2NzMyQTVERTFFMUZENkNDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZX8R2/rLZ8cTmbCJMPRoC1Eoa zjXReQMS8/UElon9o2q9Gndj/YXbFaaAzsDqPLMdg+G0dBeWfP8c7+aimuIXnPy5 QoctqSDgr+WtemMW5QQKLhtIWaQ2vJRu1njQbo0+QXpKbUMd/qHvjm7ZHENaxxl4 /iUiQDt0SWi0dVCrHFupzQ7ye5mLhoKqlWgM7D9WXm8KlhlFIEwJHuWXOH9KySXb InQ60yorB2/TcdDJZRyrswiwZr+BEz+g/pt39RznzOMFrSnwb6eDBep4ZAHMPULN E9ZBkDzi4YXbNuREg5Nz0vYJ3wx6c3BFY2rr58y+o7pKKv70hkV3mgeTGUGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWM29wp9Zt2D69MdnMqXeHh/WzAowHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0UgtUz2jrY2biNoTIn7Q+IrcvamVNyr62O BQ+C86s9yJjJdBIzSW5vrrVlBqoETXYmRHLTTPcKBwnv0TmU6EsKc47sM4rAlXkr PQIbZ2mNxpe57fEyU67jdm7My8Wb/qYUCzsS+UaRFhLynMZRk7J3JlpOapttLdbg pdBeEQ82d9oAP3+0bbOp6+67IUNeldH1sGvqoko+LaX/rH3Cfq23Y2scSgAinkjl o+HlJqkKn0KTozELoJjyWkCH/XVUwvmNgBIuLkj5dEQaRi+hDFI3rGOx90SVjt9G IdcSqvK7YXB5VSSG+LAhkmk4x73mF7uw62vafzgBOOsfaXpaEvI= -----END CERTIFICATE-----Generated at Wed Jul 23 06:00:02 2025 by rpki-client