$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: WQduwokQIw8iVZ3oCj9HWkhdUsYf7R7+J4x40eMGoKI= Subject key identifier: 73:CE:39:97:7F:15:81:98:AF:8D:39:C2:D0:83:1A:70:9B:27:7E:23 Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 3114A3061E6B13EE788FB4E4DB4BCD647CC3FB2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 0191 Signing time: Tue 03 Jun 2025 01:43:49 +0000 Manifest this update: Tue 03 Jun 2025 01:38:49 +0000 Manifest next update: Fri 06 Jun 2025 04:15:49 +0000 Files and hashes: 1: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: 7nqCoBs4UD5Q0zFXqw657mJUgZK2hC/5uxbKdURPAzM=) 2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: owzFX97yUwQlgrwuIyX44838/uUdwYXvl6IShRtLOss=) 3: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: 2HHwaLb6lMKbrxVN3sRgWy3qX2PVQKi4HjeU7LlFxbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 04:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:14:a3:06:1e:6b:13:ee:78:8f:b4:e4:db:4b:cd:64:7c:c3:fb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Jun 3 01:38:49 2025 GMT Not After : Jun 6 04:15:49 2025 GMT Subject: CN=73CE39977F158198AF8D39C2D0831A709B277E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:05:0a:b7:bb:bd:d6:f3:19:46:86:1a:aa: 07:cd:31:20:f9:c5:6b:2e:c2:74:7d:67:33:be:07: 54:89:b4:1d:b5:14:07:28:71:17:45:91:8e:6f:05: ce:93:be:62:e9:e5:1b:1b:0f:a7:89:4c:21:11:6e: 8f:95:02:28:ad:8d:49:6e:42:31:f4:38:8d:71:c2: 0b:02:d8:88:83:19:84:66:57:b2:49:6f:3b:f3:91: b9:84:f6:a1:cf:1c:87:16:9f:52:a4:17:db:a8:d2: c6:be:d9:e3:0f:07:b9:de:21:85:53:a0:9e:76:21: e8:ca:c8:17:ba:b9:dc:ff:74:bb:37:b3:8a:ae:7b: 34:4b:a4:86:37:7b:2b:2d:64:90:67:81:3e:78:d7: cb:b5:ce:74:07:2a:36:7f:a9:81:c7:cd:67:10:b1: cc:55:83:a3:fc:b5:93:b7:99:be:a1:6e:ea:6b:66: d1:9a:a0:29:e9:96:2b:e6:10:be:7c:b5:7d:1c:02: 67:35:18:b3:4b:56:95:23:d2:e5:34:3e:7c:b4:fc: 90:5e:b6:a4:6b:61:72:f0:dd:4e:39:09:e2:1e:bc: 42:ab:21:70:a7:f0:c0:30:80:1e:29:6a:ae:d1:09: 5a:67:eb:8d:a5:6e:c2:1c:c1:f2:37:98:af:4a:ad: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CE:39:97:7F:15:81:98:AF:8D:39:C2:D0:83:1A:70:9B:27:7E:23 X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:10:fe:bc:73:d4:bf:4a:04:5c:b5:a5:73:8d:80:16:54:dd: 73:bb:4e:2d:d4:d7:9a:08:a2:fd:1c:ba:24:cf:1b:0a:3f:56: 22:cb:e5:97:cf:a6:0c:4c:42:a3:fb:f1:16:13:36:51:4b:42: 73:c5:6c:d6:68:a2:49:f0:14:5d:e2:a6:c3:b1:0f:55:b3:6d: 6b:99:48:f7:bf:8f:92:ff:a2:f2:95:c0:fc:e4:69:61:0e:fa: 7c:27:86:bf:47:d4:52:7a:86:f5:35:5a:56:60:02:1e:7c:e7: da:18:36:dc:d4:af:f5:18:50:e9:db:0c:a6:2d:80:c2:d9:78: 18:53:c2:62:d3:29:a9:80:84:f9:fd:73:46:b8:8f:e6:de:42: 9f:7f:d8:8f:01:ab:1a:b6:8b:b2:61:45:cd:64:6e:70:a9:fd: f7:3b:86:56:df:5d:26:42:99:a0:55:a8:46:b1:d8:14:1a:59: 43:e7:3c:40:25:00:b5:21:cd:87:84:ed:c3:3a:43:41:ee:58: cb:81:de:c5:ef:14:4c:79:d7:af:7e:7a:53:52:11:b9:ca:05: 14:77:c8:d6:b1:87:f5:aa:ab:50:39:d8:66:a5:13:57:b3:93: 93:33:06:09:5a:3b:e6:17:ea:dc:ea:02:d7:bf:98:be:1c:bb: 21:eb:0c:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRSjBh5rE+54j7Tk20vNZHzD+yswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTA2MDMwMTM4NDlaFw0yNTA2MDYwNDE1NDlaMDMxMTAvBgNV BAMTKDczQ0UzOTk3N0YxNTgxOThBRjhEMzlDMkQwODMxQTcwOUIyNzdFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQAUKt7u91vMZRoYaqgfNMSD5 xWsuwnR9ZzO+B1SJtB21FAcocRdFkY5vBc6TvmLp5RsbD6eJTCERbo+VAiitjUlu QjH0OI1xwgsC2IiDGYRmV7JJbzvzkbmE9qHPHIcWn1KkF9uo0sa+2eMPB7neIYVT oJ52IejKyBe6udz/dLs3s4quezRLpIY3eystZJBngT5418u1znQHKjZ/qYHHzWcQ scxVg6P8tZO3mb6hbuprZtGaoCnplivmEL58tX0cAmc1GLNLVpUj0uU0Pny0/JBe tqRrYXLw3U45CeIevEKrIXCn8MAwgB4paq7RCVpn642lbsIcwfI3mK9KrV/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc845l38VgZivjTnC0IMacJsnfiMwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0Q/rxz1L9KBFy1pXONgBZU3XO7Ti3U15oI ov0cuiTPGwo/ViLL5ZfPpgxMQqP78RYTNlFLQnPFbNZooknwFF3ipsOxD1WzbWuZ SPe/j5L/ovKVwPzkaWEO+nwnhr9H1FJ6hvU1WlZgAh5859oYNtzUr/UYUOnbDKYt gMLZeBhTwmLTKamAhPn9c0a4j+beQp9/2I8Bqxq2i7JhRc1kbnCp/fc7hlbfXSZC maBVqEax2BQaWUPnPEAlALUhzYeE7cM6Q0HuWMuB3sXvFEx5169+elNSEbnKBRR3 yNaxh/Wqq1A52GalE1ezk5MzBglaO+YX6tzqAte/mL4cuyHrDDs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:00 2025 by rpki-client