$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: 2xXzUWhDP25wh2gcb4iWaGxjqOJLLOrh5mg9w8jUog4= Subject key identifier: D7:42:85:D5:4C:E3:9D:B8:83:C4:53:16:B0:A1:30:25:0A:70:A4:21 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 5C4DB5841030EF4AC318C92549B81328FF8A2BD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 0220 Signing time: Fri 06 Jun 2025 04:00:53 +0000 Manifest this update: Fri 06 Jun 2025 03:55:53 +0000 Manifest next update: Mon 09 Jun 2025 10:00:53 +0000 Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) 2: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=) 3: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=) 4: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 5: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=) 6: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 7: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: Glku54XesGfBpBDwMjSnb8QyskxrGhbDwuZ4VlKxAJU=) 8: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=) 9: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4d:b5:84:10:30:ef:4a:c3:18:c9:25:49:b8:13:28:ff:8a:2b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Jun 6 03:55:53 2025 GMT Not After : Jun 9 10:00:53 2025 GMT Subject: CN=D74285D54CE39DB883C45316B0A130250A70A421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:27:d6:e4:45:65:0c:64:08:1e:9f:1e:e5: b9:cb:8c:2a:06:99:6c:33:d3:8a:84:1d:a5:6e:f3: ac:db:ad:47:e0:28:0d:f2:d0:5e:9e:73:b3:c7:ec: 43:2a:bb:3e:77:c5:00:70:fe:8f:84:c7:a5:a2:2b: fe:8b:dc:45:96:1d:52:ae:0c:cf:9f:3d:c5:60:43: 3e:46:b9:4a:14:de:b5:6f:64:a8:6c:5e:d2:89:cf: 31:f6:79:d5:d2:72:39:dd:5f:c8:39:9d:9c:ae:d5: 44:ff:0b:e0:7d:c7:40:ed:74:f5:31:60:69:5d:03: 3c:8b:7f:d1:7e:e8:82:96:f2:20:57:97:e8:49:38: 9a:bf:48:65:dc:a6:b1:a0:b4:86:fe:df:0b:cc:37: 2e:82:4b:dc:df:22:3b:a7:91:d4:4d:fc:38:85:26: 2b:b7:9b:7c:cd:f5:27:9d:12:06:37:1b:f9:9c:ef: 8e:5d:8c:9a:97:24:c1:3e:ff:08:01:03:8a:60:83: ce:c5:89:2e:22:7d:13:6a:f3:2d:81:b9:b3:0f:ef: 13:60:33:8e:76:d2:8d:94:15:00:5e:2a:83:30:ad: 03:5e:6d:3f:87:65:fd:79:66:8f:36:0c:62:6e:ab: 79:67:46:d1:86:81:c5:58:c2:cc:51:24:87:88:6a: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:85:D5:4C:E3:9D:B8:83:C4:53:16:B0:A1:30:25:0A:70:A4:21 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c7:ad:4b:67:dd:9b:a1:8a:f0:3e:63:bf:95:2d:d8:ed:29: 1e:55:79:5c:30:27:02:45:e8:5e:5b:a0:52:76:b7:b1:f7:51: d0:11:7d:a0:40:06:cb:8b:05:82:ea:eb:b6:e0:b2:13:ed:f2: 26:ff:58:6d:33:77:dd:fb:4a:62:8a:fa:aa:81:f5:64:6a:d5: 67:7c:ef:04:82:8f:5a:ff:b5:ef:23:c4:34:82:e1:ac:0a:91: ef:18:5f:16:7e:76:46:65:1a:db:1a:dd:b0:20:cf:42:97:28: 1a:45:47:3c:46:c4:92:67:7a:50:ee:09:78:8a:0c:23:12:d6: 4b:04:31:10:81:8f:a6:0d:66:df:8f:5f:c2:53:ad:2f:e6:2d: 81:aa:3a:dc:bd:fc:43:c4:d6:86:14:a7:03:6e:7e:72:10:9f: 7c:a3:9d:d4:0c:9d:94:47:07:9d:58:9f:e9:83:15:f2:92:bd: 13:b6:4d:11:7a:b1:d9:34:1b:33:1c:db:88:4c:13:8e:45:3a: e2:77:b3:0c:be:f3:b9:17:64:3e:b3:37:1c:21:41:19:47:02: 37:4b:3d:7f:50:4b:14:97:b6:27:b3:0e:bf:b6:2d:7a:8b:db: 5d:a9:cc:e9:57:f6:b4:d4:ef:7e:2e:c4:7f:d5:bf:db:9f:0e: 4c:13:e1:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXE21hBAw70rDGMklSbgTKP+KK9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA2MDYwMzU1NTNaFw0yNTA2MDkxMDAwNTNaMDMxMTAvBgNV BAMTKEQ3NDI4NUQ1NENFMzlEQjg4M0M0NTMxNkIwQTEzMDI1MEE3MEE0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXifW5EVlDGQIHp8e5bnLjCoG mWwz04qEHaVu86zbrUfgKA3y0F6ec7PH7EMquz53xQBw/o+Ex6WiK/6L3EWWHVKu DM+fPcVgQz5GuUoU3rVvZKhsXtKJzzH2edXScjndX8g5nZyu1UT/C+B9x0DtdPUx YGldAzyLf9F+6IKW8iBXl+hJOJq/SGXcprGgtIb+3wvMNy6CS9zfIjunkdRN/DiF Jiu3m3zN9SedEgY3G/mc745djJqXJME+/wgBA4pgg87FiS4ifRNq8y2BubMP7xNg M4520o2UFQBeKoMwrQNebT+HZf15Zo82DGJuq3lnRtGGgcVYwsxRJIeIao0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU10KF1UzjnbiDxFMWsKEwJQpwpCEwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjHrUtn3ZuhivA+Y7+VLdjtKR5VeVwwJwJF 6F5boFJ2t7H3UdARfaBABsuLBYLq67bgshPt8ib/WG0zd937SmKK+qqB9WRq1Wd8 7wSCj1r/te8jxDSC4awKke8YXxZ+dkZlGtsa3bAgz0KXKBpFRzxGxJJnelDuCXiK DCMS1ksEMRCBj6YNZt+PX8JTrS/mLYGqOty9/EPE1oYUpwNufnIQn3yjndQMnZRH B51Yn+mDFfKSvRO2TRF6sdk0GzMc24hME45FOuJ3swy+87kXZD6zNxwhQRlHAjdL PX9QSxSXtiezDr+2LXqL212pzOlX9rTU734uxH/Vv9ufDkwT4es= -----END CERTIFICATE-----Generated at Sun Jun 8 04:23:26 2025 by rpki-client