$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: PBtgtjBaYG6qneretlYxTCVbksgE5TkjbS2eIUZltQs= Subject key identifier: FB:42:73:75:CE:19:64:F1:55:BA:E8:A9:C6:6F:A5:1E:46:5E:85:A9 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 18D4FAB1DD056E39059A4F09AB1359C194680B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 021A Signing time: Thu 05 Jun 2025 02:01:24 +0000 Manifest this update: Thu 05 Jun 2025 01:56:24 +0000 Manifest next update: Sun 08 Jun 2025 02:31:24 +0000 Files and hashes: 1: 3130332e3136392e312e302f32342d3234203d3e20313432333235.roa (hash: QVwXZiEUDkzJTFJTP2kak0B1PFcbgFpWZtYiCacvLzc=) 2: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: VKFCEr3zufxt455C2C5T+Nm330x0kmMCjHrGdSEJphQ=) 3: 3130332e3136392e302e302f32332d3234203d3e20313432333235.roa (hash: kS5BqB0fQsybN4YzA6LLybAUUgYhEkwegd5mZxZdL2I=) 4: 3130332e3136392e302e302f32342d3234203d3e20313432333235.roa (hash: BHsnMPpdFZL0d9XOfOmW0tnCHE686u/F/UGOnWHulsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d4:fa:b1:dd:05:6e:39:05:9a:4f:09:ab:13:59:c1:94:68:0b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Jun 5 01:56:24 2025 GMT Not After : Jun 8 02:31:24 2025 GMT Subject: CN=FB427375CE1964F155BAE8A9C66FA51E465E85A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:1e:35:21:89:cc:46:e2:6a:d1:95:c8:2a: a3:f4:ad:bd:f1:f9:e6:64:9d:0c:4e:9f:0c:8a:e6: ed:e9:12:ff:ff:19:76:18:c8:65:11:9d:89:fe:1e: b5:fe:6d:49:20:33:2c:a6:25:83:a9:9e:8e:97:75: 90:2d:07:24:51:5f:44:f1:4f:aa:50:c1:45:3d:90: 5d:b0:5b:b7:2e:55:81:77:c8:e8:52:f1:c5:69:96: 7e:7e:72:e6:ba:e7:b8:75:d2:9d:75:8a:1e:5c:7f: 3b:cb:6e:27:36:86:16:ef:f0:be:a0:f1:4d:88:22: 01:f3:73:49:1e:43:5f:d5:86:b8:10:a2:80:83:b9: fb:b8:a0:34:2c:dd:0f:f3:49:77:e7:f1:18:63:ea: fb:d3:72:aa:67:8c:35:35:a7:75:c9:0e:91:c7:c4: ab:40:cd:21:67:e4:cf:46:d9:b5:8a:44:ae:8a:25: 3a:6e:9b:3e:1c:66:f1:8f:7b:8b:82:cc:78:95:ab: bf:09:d4:ef:d7:3e:8e:78:a4:17:f7:de:b3:2d:99: 1a:6f:de:67:a9:2b:b9:6a:7c:27:88:af:60:f0:c1: 8d:f8:43:1a:d2:85:73:56:74:29:8f:32:c3:74:f8: 64:5c:51:92:f5:ea:eb:07:b4:0a:10:9a:fd:3d:60: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:73:75:CE:19:64:F1:55:BA:E8:A9:C6:6F:A5:1E:46:5E:85:A9 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f1:81:ce:05:74:5b:e1:68:1e:09:e6:75:86:de:db:0d:2b: 28:90:17:58:68:6b:cf:e9:08:a3:78:ad:11:7c:20:aa:b8:be: 81:2e:da:c5:7f:85:2e:27:5d:37:bf:d5:27:2e:a1:ce:2d:84: 16:a3:1c:b6:6b:7c:0b:b4:dd:c5:ad:2d:ad:fc:65:a5:ee:42: 24:3b:ba:6d:56:5d:9d:05:b4:dd:39:29:cd:77:fb:28:bb:34: 0a:93:44:01:d7:02:18:c5:08:27:3b:36:4d:f5:d0:89:65:97: c2:08:44:f5:d2:1d:55:da:15:8e:b4:98:e1:49:f7:23:f9:fa: 9e:8b:fa:0d:8e:a1:56:10:b3:3f:d0:88:59:07:f0:7e:df:6b: d9:fc:98:f2:cd:f1:bc:c6:35:69:d7:fe:9e:45:d5:7a:11:b2: c8:76:cf:a3:3a:c5:c5:4e:c0:8e:ef:07:6f:63:2a:fd:6d:bf: f2:74:1a:06:02:e7:e0:03:70:31:b6:b3:6a:1c:19:36:26:f4: 07:06:27:54:4b:3e:28:65:72:e1:8c:17:0f:eb:bd:0e:f8:0f: b1:b9:de:68:c8:5e:7f:91:a1:7d:b5:4e:00:1f:85:fd:c5:ee: db:f4:49:d9:0f:1e:e5:42:90:fd:a1:c6:57:1b:27:75:b5:69: ee:fe:cb:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNT6sd0FbjkFmk8JqxNZwZRoCwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTA2MDUwMTU2MjRaFw0yNTA2MDgwMjMxMjRaMDMxMTAvBgNV BAMTKEZCNDI3Mzc1Q0UxOTY0RjE1NUJBRThBOUM2NkZBNTFFNDY1RTg1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/R41IYnMRuJq0ZXIKqP0rb3x +eZknQxOnwyK5u3pEv//GXYYyGURnYn+HrX+bUkgMyymJYOpno6XdZAtByRRX0Tx T6pQwUU9kF2wW7cuVYF3yOhS8cVpln5+cua657h10p11ih5cfzvLbic2hhbv8L6g 8U2IIgHzc0keQ1/VhrgQooCDufu4oDQs3Q/zSXfn8Rhj6vvTcqpnjDU1p3XJDpHH xKtAzSFn5M9G2bWKRK6KJTpumz4cZvGPe4uCzHiVq78J1O/XPo54pBf33rMtmRpv 3mepK7lqfCeIr2DwwY34QxrShXNWdCmPMsN0+GRcUZL16usHtAoQmv09YBBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+0Jzdc4ZZPFVuuipxm+lHkZehakwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbxgc4FdFvhaB4J5nWG3tsNKyiQF1hoa8/p CKN4rRF8IKq4voEu2sV/hS4nXTe/1Scuoc4thBajHLZrfAu03cWtLa38ZaXuQiQ7 um1WXZ0FtN05Kc13+yi7NAqTRAHXAhjFCCc7Nk310Illl8IIRPXSHVXaFY60mOFJ 9yP5+p6L+g2OoVYQsz/QiFkH8H7fa9n8mPLN8bzGNWnX/p5F1XoRssh2z6M6xcVO wI7vB29jKv1tv/J0GgYC5+ADcDG2s2ocGTYm9AcGJ1RLPihlcuGMFw/rvQ74D7G5 3mjIXn+RoX21TgAfhf3F7tv0SdkPHuVCkP2hxlcbJ3W1ae7+y6s= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:15 2025 by rpki-client