$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft File: D85F6D41E807D8825356A681A7518FA27664A965.mft (raw, json) Hash identifier: AZi6qr1+wWe2JH45SrXJALAn11L1KwWR6EODCqJiEWM= Subject key identifier: 09:1F:3D:3F:B2:58:3D:D2:62:5E:BA:3F:3E:E3:4A:EC:72:D7:69:E0 Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 23A7C226E18943A30D433B8DE68C86FAD7FE060E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft Manifest number: 0142 Signing time: Fri 06 Jun 2025 05:22:12 +0000 Manifest this update: Fri 06 Jun 2025 05:17:12 +0000 Manifest next update: Mon 09 Jun 2025 09:24:12 +0000 Files and hashes: 1: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: mLhBYPkwACBbxlJsTnV03pPrOs7jfGDROaGC1YIb24I=) 2: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: X3XCCURHmUEWOKsujokS9KRQ2ATuG6WfjZ6Xo/ilPmk=) 3: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: hFj4Uh0PGeOBka7Cx4rmARhSt9TGPmz98D01cPT+PF4=) 4: D85F6D41E807D8825356A681A7518FA27664A965.crl (hash: WNa6yInwSw4hiW1dHHnwg2PtkTxNX7xa+uRA4nzgBj0=) 5: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: 2X5KoMU/cWrAj0o88iqREF+W66XbV79s9jtdMfDvn84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:c2:26:e1:89:43:a3:0d:43:3b:8d:e6:8c:86:fa:d7:fe:06:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Jun 6 05:17:12 2025 GMT Not After : Jun 9 09:24:12 2025 GMT Subject: CN=091F3D3FB2583DD2625EBA3F3EE34AEC72D769E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:46:57:5e:7b:6a:6f:25:9b:c6:87:74:4e: 5e:24:a4:61:ec:6b:b1:df:62:47:54:5a:d6:fa:5f: 32:8b:12:93:cf:06:f9:c7:5f:76:b5:fa:c2:dc:96: c3:c6:44:00:31:77:5a:bf:34:73:16:81:0d:f1:2e: fd:4d:8e:e3:c2:35:46:29:c3:2f:b3:46:63:c5:9e: ee:b4:ce:f3:e7:20:95:21:1b:fa:20:90:fa:59:c7: 1f:7f:7d:4d:0c:ce:82:61:b7:9f:be:06:7f:d6:71: 9a:a1:a1:43:c8:9a:89:54:39:cc:d1:b1:f7:51:55: 24:18:29:d2:e1:cb:8e:e7:ec:f4:a0:a2:fa:ce:a3: 02:9c:20:44:83:5c:5a:69:46:83:ab:08:32:76:87: 7c:c7:37:f3:b6:7e:a2:b4:62:b1:00:43:62:c3:2e: bc:4d:b9:fd:95:87:b9:92:aa:91:32:37:86:24:4e: 7c:8e:03:31:d6:55:77:8f:9c:8e:9b:f2:59:5b:28: 69:c0:c4:f8:97:12:e4:cd:ae:e7:c6:df:91:75:53: 80:cd:2a:ce:db:8b:f3:6d:6c:40:cf:16:51:9f:33: 95:b6:1a:d9:83:53:11:d8:6d:dc:f1:54:07:af:8e: 48:04:68:a9:00:d1:3f:55:6d:16:19:67:33:76:ce: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1F:3D:3F:B2:58:3D:D2:62:5E:BA:3F:3E:E3:4A:EC:72:D7:69:E0 X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6f:f0:af:57:40:7f:71:c0:10:e0:ff:8f:1f:3e:7a:54:bd: 9f:43:65:85:c4:ee:cc:25:fd:91:9a:ea:65:d0:be:ac:39:41: ed:bd:db:a6:e1:33:c9:e2:b1:76:1c:98:84:00:45:55:1f:31: dd:b0:90:3d:10:40:59:50:d5:53:a6:8a:ce:5e:7e:7e:67:4d: ee:18:37:06:19:73:05:bc:44:72:87:4f:04:30:92:b6:cd:c5: 09:ee:dc:df:7d:bf:a3:26:58:1b:80:f6:12:20:8b:97:cc:58: 5c:47:40:1c:99:b3:1d:0f:d0:6a:0e:4f:79:42:a6:20:fa:30: 79:bf:ce:2c:c3:99:b1:58:38:d9:23:40:97:c7:0f:76:5e:a5: 81:29:b9:58:e7:19:bc:1b:18:8a:f5:14:b0:90:c8:b4:22:91: a4:3e:04:13:a0:1b:99:66:26:7e:82:75:09:37:55:67:6e:2b: 86:92:e0:6a:18:fb:00:93:5b:3e:6d:cc:48:f0:28:b3:bf:aa: 56:49:f5:95:40:44:41:75:d6:ae:21:a4:01:a2:49:e4:56:bc: d7:63:2e:55:c2:c9:72:d9:e1:72:87:95:f6:b9:d6:98:08:27: 32:f2:d0:ff:7b:77:dd:97:e8:76:62:f9:db:b6:81:c0:d3:ae: b2:da:b5:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6fCJuGJQ6MNQzuN5oyG+tf+Bg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNTA2MDYwNTE3MTJaFw0yNTA2MDkwOTI0MTJaMDMxMTAvBgNV BAMTKDA5MUYzRDNGQjI1ODNERDI2MjVFQkEzRjNFRTM0QUVDNzJENzY5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQUZXXntqbyWbxod0Tl4kpGHs a7HfYkdUWtb6XzKLEpPPBvnHX3a1+sLclsPGRAAxd1q/NHMWgQ3xLv1NjuPCNUYp wy+zRmPFnu60zvPnIJUhG/ogkPpZxx9/fU0MzoJht5++Bn/WcZqhoUPImolUOczR sfdRVSQYKdLhy47n7PSgovrOowKcIESDXFppRoOrCDJ2h3zHN/O2fqK0YrEAQ2LD LrxNuf2Vh7mSqpEyN4YkTnyOAzHWVXePnI6b8llbKGnAxPiXEuTNrufG35F1U4DN Ks7bi/NtbEDPFlGfM5W2GtmDUxHYbdzxVAevjkgEaKkA0T9VbRYZZzN2zuRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCR89P7JYPdJiXro/PuNK7HLXaeAwHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThG QTI3NjY0QTk2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1v8K9XQH9xwBDg/48fPnpUvZ9DZYXE7swl /ZGa6mXQvqw5Qe2926bhM8nisXYcmIQARVUfMd2wkD0QQFlQ1VOmis5efn5nTe4Y NwYZcwW8RHKHTwQwkrbNxQnu3N99v6MmWBuA9hIgi5fMWFxHQByZsx0P0GoOT3lC piD6MHm/zizDmbFYONkjQJfHD3ZepYEpuVjnGbwbGIr1FLCQyLQikaQ+BBOgG5lm Jn6CdQk3VWduK4aS4GoY+wCTWz5tzEjwKLO/qlZJ9ZVAREF11q4hpAGiSeRWvNdj LlXCyXLZ4XKHlfa51pgIJzLy0P97d92X6HZi+du2gcDTrrLatZo= -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:53 2025 by rpki-client