$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: SnQbGepo7YFYxSBiURVfFRrHPE/3khSHAl1xZce0i6Y= Subject key identifier: 16:72:7D:AF:01:58:79:CD:5F:BA:F3:67:76:DD:5B:82:98:FE:23:34 Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 6470C3A030E970514CC12975925F10CE6D95A0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: EE Signing time: Wed 04 Jun 2025 15:31:11 +0000 Manifest this update: Wed 04 Jun 2025 15:26:11 +0000 Manifest next update: Sat 07 Jun 2025 18:03:11 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: XFasMZzoRSDIFj71IoLVda4R8GOG8x0jsJHFolhOXYs=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: ZJ83A8Bc0PE4yZLYxFCZBSb8MhHQthKCMAtJAy92tfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:70:c3:a0:30:e9:70:51:4c:c1:29:75:92:5f:10:ce:6d:95:a0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Jun 4 15:26:11 2025 GMT Not After : Jun 7 18:03:11 2025 GMT Subject: CN=16727DAF015879CD5FBAF36776DD5B8298FE2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:17:f7:11:a1:1c:8b:4b:74:77:38:32:c8: 1f:23:6d:91:c0:ca:0d:70:2e:d8:0d:fc:f1:f7:de: de:d2:5d:06:64:d6:9e:0e:16:d4:99:58:dd:d5:b4: 61:47:35:c7:8c:d7:fc:a1:c9:65:60:49:e2:be:2e: b6:67:89:fd:0c:07:0e:70:a9:8e:89:64:15:e0:72: 9f:63:b0:07:a0:68:88:e4:48:39:cc:d1:df:d7:e2: 7c:95:b0:57:da:a0:42:d6:71:0f:f7:37:0f:b7:25: 97:75:b7:ad:9b:19:2c:c2:e0:75:f8:3c:db:f5:bf: de:35:7a:a1:40:78:ba:1f:ad:fd:1b:a1:b3:3a:6e: e2:ad:b0:32:2b:59:0d:5d:7f:d2:2b:1f:f4:6a:1d: f1:04:2f:8f:8f:fe:20:e4:d1:25:1f:3b:35:a6:5a: 4f:7c:f8:9f:bb:c7:50:6e:93:8a:ff:96:34:b6:be: 94:4e:e1:b4:b3:39:c1:a5:b2:f0:8a:7d:26:1b:84: 2a:c3:e8:0e:43:30:86:c0:cf:ab:85:55:6b:6d:a6: 09:fd:79:f1:82:49:ff:78:29:32:2c:10:6b:ec:9d: 8b:30:c7:98:e9:32:24:1d:5f:9a:a1:af:eb:15:47: 86:a9:4d:a9:f4:41:c6:3f:fd:50:4a:44:ad:3b:80: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:72:7D:AF:01:58:79:CD:5F:BA:F3:67:76:DD:5B:82:98:FE:23:34 X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a9:fe:cb:5a:50:4c:15:73:b3:8d:9c:ea:88:83:3d:be:d5: 60:0a:17:45:69:1a:6e:3e:27:a4:e9:b7:cc:d3:1c:78:49:c4: ec:da:f1:04:af:9a:4a:b7:1d:e2:1b:fe:b7:c1:bb:a0:35:51: d2:d0:20:5c:7e:74:5a:ef:26:52:ee:00:7f:6c:7d:ee:01:3a: fa:9e:77:ca:a7:30:29:07:73:e6:1f:86:34:97:0a:bb:f1:f5: 50:53:96:c3:b9:bc:40:49:f7:6b:ed:53:a0:3a:10:9c:38:2d: 6c:3a:31:b1:e7:11:94:c0:5c:28:bf:eb:69:4e:59:54:3e:22: ce:c4:62:47:dc:76:58:f2:2c:3d:d1:04:9e:fa:80:f7:a5:70: cc:82:bf:58:f3:90:cb:b9:c7:77:5d:3a:ca:b6:33:46:c5:ed: ea:cf:aa:a9:46:ae:c4:78:a2:0a:92:99:5e:6e:a3:60:6f:f4: 3c:3d:e3:d7:0a:43:75:ff:94:92:36:38:78:f9:3e:85:75:5c: dc:d4:f1:1c:5b:18:74:f6:d5:ef:a9:48:2c:e0:89:ad:55:c2: c8:e7:a0:87:b0:07:d7:92:75:ad:63:d8:68:7c:c7:d4:43:e5: 50:8c:95:fa:63:30:0e:06:4f:a6:7d:9b:34:e4:58:77:3b:8d: 15:f8:26:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHDDoDDpcFFMwSl1kl8Qzm2VoLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNTA2MDQxNTI2MTFaFw0yNTA2MDcxODAzMTFaMDMxMTAvBgNV BAMTKDE2NzI3REFGMDE1ODc5Q0Q1RkJBRjM2Nzc2REQ1QjgyOThGRTIzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCERf3EaEci0t0dzgyyB8jbZHA yg1wLtgN/PH33t7SXQZk1p4OFtSZWN3VtGFHNceM1/yhyWVgSeK+LrZnif0MBw5w qY6JZBXgcp9jsAegaIjkSDnM0d/X4nyVsFfaoELWcQ/3Nw+3JZd1t62bGSzC4HX4 PNv1v941eqFAeLofrf0bobM6buKtsDIrWQ1df9IrH/RqHfEEL4+P/iDk0SUfOzWm Wk98+J+7x1Buk4r/ljS2vpRO4bSzOcGlsvCKfSYbhCrD6A5DMIbAz6uFVWttpgn9 efGCSf94KTIsEGvsnYswx5jpMiQdX5qhr+sVR4apTan0QcY//VBKRK07gFGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFnJ9rwFYec1fuvNndt1bgpj+IzQwHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGp/staUEwVc7ONnOqIgz2+1WAKF0VpGm4+ J6Tpt8zTHHhJxOza8QSvmkq3HeIb/rfBu6A1UdLQIFx+dFrvJlLuAH9sfe4BOvqe d8qnMCkHc+YfhjSXCrvx9VBTlsO5vEBJ92vtU6A6EJw4LWw6MbHnEZTAXCi/62lO WVQ+Is7EYkfcdljyLD3RBJ76gPelcMyCv1jzkMu5x3ddOsq2M0bF7erPqqlGrsR4 ogqSmV5uo2Bv9Dw949cKQ3X/lJI2OHj5PoV1XNzU8RxbGHT21e+pSCzgia1Vwsjn oIewB9eSda1j2Gh8x9RD5VCMlfpjMA4GT6Z9mzTkWHc7jRX4JmM= -----END CERTIFICATE-----Generated at Fri Jun 6 17:02:53 2025 by rpki-client