$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: XB+OEWGvPeTRgE8inuFFLMDvga11iuJvitSKVOonmmk= Subject key identifier: 5C:0F:16:B7:09:E9:87:22:3C:1F:83:11:4A:D4:F2:8C:8F:48:18:63 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 75D2D88B8F74BC3D6152A4353841E44C34BA9671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 01E8 Signing time: Fri 06 Jun 2025 10:40:47 +0000 Manifest this update: Fri 06 Jun 2025 10:35:47 +0000 Manifest next update: Mon 09 Jun 2025 19:53:47 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) 2: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) 3: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) 4: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: gfLc3m7wwj9TcUzuBilAQTJ+kxm+YEq3L6+qmFhxbr4=) 5: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d2:d8:8b:8f:74:bc:3d:61:52:a4:35:38:41:e4:4c:34:ba:96:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Jun 6 10:35:47 2025 GMT Not After : Jun 9 19:53:47 2025 GMT Subject: CN=5C0F16B709E987223C1F83114AD4F28C8F481863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:37:b8:4b:1e:67:00:bf:73:92:4c:86:a0: 7c:5a:17:ff:f1:7e:8c:99:56:59:16:a2:92:d3:ca: ac:02:c0:8d:fb:9a:c2:d7:3b:f4:2b:45:ee:d5:e9: 1f:17:1f:0c:af:f7:ff:39:33:22:f4:86:90:3a:13: b6:a2:68:af:10:8f:fd:f4:16:1b:a8:ce:43:4f:7e: bd:c3:a4:8b:34:93:cd:c3:a0:73:00:9f:a9:28:76: 7f:58:c5:be:ab:4d:41:1e:b3:7d:a9:8e:f2:c6:6c: e2:53:e3:95:b7:c7:3c:42:84:8a:fb:6f:a5:8c:59: 07:64:3f:8c:06:54:56:0d:f8:de:1e:eb:6c:82:20: b2:89:e1:23:50:f6:65:34:5a:55:14:e2:1b:30:ea: 12:1d:95:f5:44:b4:2c:e1:9a:01:4c:e5:02:bf:62: 98:98:ce:68:fd:ab:50:7f:1c:26:aa:0e:85:8c:a2: bb:d8:c7:57:2c:87:ce:b0:76:1d:50:37:ab:15:aa: 82:a7:06:73:c5:4d:9c:fc:14:c3:70:46:1a:b8:d6: b6:f6:b6:6a:88:9a:41:8b:c4:a4:e4:26:82:58:cc: f4:f4:75:be:60:87:03:9f:8d:79:02:60:78:e5:94: 42:82:f9:96:47:54:a7:d7:a2:cb:71:fc:47:00:9e: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:16:B7:09:E9:87:22:3C:1F:83:11:4A:D4:F2:8C:8F:48:18:63 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4a:e2:2c:c3:4d:7a:31:39:60:27:5c:37:55:db:ac:dc:49: bd:e4:d9:93:e2:21:8f:4e:3f:7c:50:57:ce:c6:eb:41:44:4e: 40:74:37:0f:58:21:e2:e4:7b:10:d1:73:60:1e:0b:f0:21:36: 4d:f9:54:8c:26:10:4c:ef:d4:62:cd:e5:78:e3:ab:3e:0f:f3: 56:b2:92:36:ca:5a:ab:38:66:86:5f:25:50:2f:d6:55:89:b2: 10:40:15:81:f7:c2:f7:a6:ae:11:8c:4d:1a:5f:d4:e8:64:ed: e2:7b:f4:c8:a3:bb:7b:a2:1c:d3:b2:1e:d2:8a:d9:63:2b:53: 1b:39:90:d5:f6:73:65:9b:2d:99:93:51:7d:b2:8e:7d:a3:68: 44:c8:1f:44:15:ef:73:9a:43:35:a3:b2:e0:41:45:90:99:a9: b5:aa:ca:83:35:60:85:1f:2e:72:33:9c:d4:14:3e:92:08:11: 06:34:19:e8:45:cb:7d:93:01:bc:f6:9e:5f:d0:f7:22:0a:35: c9:d3:fb:2b:1a:55:9e:2c:c4:0e:23:2b:fd:71:99:88:b6:c7: 61:cd:f0:66:54:86:7a:4b:53:6c:0b:30:cb:53:e4:c7:2a:26: 08:0b:c0:97:e5:6d:1c:ae:83:20:6e:37:69:6f:a3:3d:92:d0: f8:d5:58:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddLYi490vD1hUqQ1OEHkTDS6lnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA2MDYxMDM1NDdaFw0yNTA2MDkxOTUzNDdaMDMxMTAvBgNV BAMTKDVDMEYxNkI3MDlFOTg3MjIzQzFGODMxMTRBRDRGMjhDOEY0ODE4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguDe4Sx5nAL9zkkyGoHxaF//x foyZVlkWopLTyqwCwI37msLXO/QrRe7V6R8XHwyv9/85MyL0hpA6E7aiaK8Qj/30 FhuozkNPfr3DpIs0k83DoHMAn6kodn9Yxb6rTUEes32pjvLGbOJT45W3xzxChIr7 b6WMWQdkP4wGVFYN+N4e62yCILKJ4SNQ9mU0WlUU4hsw6hIdlfVEtCzhmgFM5QK/ YpiYzmj9q1B/HCaqDoWMorvYx1csh86wdh1QN6sVqoKnBnPFTZz8FMNwRhq41rb2 tmqImkGLxKTkJoJYzPT0db5ghwOfjXkCYHjllEKC+ZZHVKfXostx/EcAnvs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXA8WtwnphyI8H4MRStTyjI9IGGMwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpK4izDTXoxOWAnXDdV26zcSb3k2ZPiIY9O P3xQV87G60FETkB0Nw9YIeLkexDRc2AeC/AhNk35VIwmEEzv1GLN5Xjjqz4P81ay kjbKWqs4ZoZfJVAv1lWJshBAFYH3wvemrhGMTRpf1Ohk7eJ79Miju3uiHNOyHtKK 2WMrUxs5kNX2c2WbLZmTUX2yjn2jaETIH0QV73OaQzWjsuBBRZCZqbWqyoM1YIUf LnIznNQUPpIIEQY0GehFy32TAbz2nl/Q9yIKNcnT+ysaVZ4sxA4jK/1xmYi2x2HN 8GZUhnpLU2wLMMtT5McqJggLwJflbRyugyBuN2lvoz2S0PjVWIA= -----END CERTIFICATE-----Generated at Sun Jun 8 17:53:00 2025 by rpki-client