$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: 8cRQEkcdH8B3cZBYTkYxNiO4V56Eqa+nObKheHqc82c= Subject key identifier: 48:69:56:1F:8D:FB:BA:1C:B8:99:36:01:8C:5A:BF:50:F3:DB:26:1D Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 52CB12A08E302C5EDF3AB62202E2DE1A00034AF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 021D Signing time: Wed 04 Jun 2025 13:12:07 +0000 Manifest this update: Wed 04 Jun 2025 13:07:07 +0000 Manifest next update: Sat 07 Jun 2025 21:24:07 +0000 Files and hashes: 1: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: iNFBLvB5id05sOD+V+u3Ty0i54uF6gY2wjNxHgRdccE=) 2: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: HjnjcIAlEbD12BMzcHxCNpVIKs/pBGaMX5CkdC5ReWc=) 3: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: rpmDubCh8ghWxGZsNQF0QQPtIiBo6ONgFBKC1N35ALo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cb:12:a0:8e:30:2c:5e:df:3a:b6:22:02:e2:de:1a:00:03:4a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Jun 4 13:07:07 2025 GMT Not After : Jun 7 21:24:07 2025 GMT Subject: CN=4869561F8DFBBA1CB89936018C5ABF50F3DB261D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:4a:9b:4e:2e:ef:0d:3c:6f:af:c5:22:a4: 4d:a1:29:9a:50:9e:96:8a:1b:86:0d:f4:2e:48:00: 59:75:8a:cd:3d:48:bc:3b:70:de:f7:62:2a:ff:45: e4:9c:00:97:3e:fd:6a:08:58:c3:e2:9f:54:2d:16: df:25:ea:39:80:2b:63:17:45:2c:9f:ca:39:70:5d: 92:68:a6:f5:b6:73:14:60:c0:49:6a:aa:1a:3f:ac: 89:62:36:b2:5d:53:81:53:d0:e6:7e:d0:0c:da:6f: e8:4f:df:9b:6a:0f:b6:ca:1e:90:a0:fd:2f:0c:d5: f6:d3:4e:be:b5:d1:22:df:9a:93:a9:56:d8:8c:23: 00:b6:01:f5:88:35:e3:70:a4:0a:c4:a4:e9:97:22: c5:f5:77:90:3a:cd:4f:2d:9c:62:42:d8:c3:99:c1: 5c:e1:8f:0b:12:5f:ca:bc:fb:cf:f8:9c:60:3d:c4: 36:31:ed:5d:e5:68:37:45:4c:62:0e:af:67:ae:02: 5a:ce:37:8a:c9:46:a4:39:08:95:33:39:66:e4:9f: 4a:a7:70:16:35:0f:d8:9f:a0:f1:e0:9f:f4:99:d0: 88:b4:4b:1d:f8:52:01:a3:50:24:8b:2b:56:96:6a: f5:96:aa:41:1b:e3:af:e1:ff:41:32:5e:cc:90:ee: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:56:1F:8D:FB:BA:1C:B8:99:36:01:8C:5A:BF:50:F3:DB:26:1D X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:99:a6:82:e3:a1:df:3a:9d:f0:34:80:1b:14:39:87:8d:7f: 71:69:f1:57:12:6c:41:0a:e4:46:db:2f:ad:fd:12:4c:58:8a: 04:12:79:b8:e6:1b:86:d3:3a:72:58:48:af:ff:0f:80:88:43: 5d:16:86:e0:72:64:6e:34:fd:2b:1e:9c:4d:5a:b9:8d:83:ef: 91:b8:5a:f0:ec:7a:d4:c4:28:3f:38:9f:7c:23:48:17:bf:e8: ef:7e:99:36:e7:b4:76:3b:65:95:f5:f6:c0:21:eb:0e:e6:a2: 94:75:02:4a:94:07:90:16:46:9e:26:3c:4e:9c:e4:da:1a:3c: 04:28:b2:8f:b1:8b:c3:17:ab:d8:f5:4a:fc:a6:ae:2f:50:4f: 34:04:f7:9c:71:3c:ed:55:84:69:70:91:55:23:e9:3b:e0:7a: e8:ed:53:f2:d5:5d:b7:13:a6:37:0a:a3:b4:d3:20:1b:bf:88: 08:9d:05:3c:f7:28:ee:1c:bc:44:ac:63:d9:fd:71:75:0a:1c: 0b:0a:dc:fc:a7:a3:d1:f1:18:8b:be:80:4d:fe:27:f8:f5:5a: 4f:cb:ac:1c:80:74:90:5c:c4:d1:0e:1b:89:57:65:30:b5:61: 95:5c:22:ba:44:62:c7:f9:b1:18:6b:30:b3:9a:46:bb:df:2c: 50:e1:d2:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUssSoI4wLF7fOrYiAuLeGgADSvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTA2MDQxMzA3MDdaFw0yNTA2MDcyMTI0MDdaMDMxMTAvBgNV BAMTKDQ4Njk1NjFGOERGQkJBMUNCODk5MzYwMThDNUFCRjUwRjNEQjI2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWx0qbTi7vDTxvr8UipE2hKZpQ npaKG4YN9C5IAFl1is09SLw7cN73Yir/ReScAJc+/WoIWMPin1QtFt8l6jmAK2MX RSyfyjlwXZJopvW2cxRgwElqqho/rIliNrJdU4FT0OZ+0Azab+hP35tqD7bKHpCg /S8M1fbTTr610SLfmpOpVtiMIwC2AfWINeNwpArEpOmXIsX1d5A6zU8tnGJC2MOZ wVzhjwsSX8q8+8/4nGA9xDYx7V3laDdFTGIOr2euAlrON4rJRqQ5CJUzOWbkn0qn cBY1D9ifoPHgn/SZ0Ii0Sx34UgGjUCSLK1aWavWWqkEb46/h/0EyXsyQ7m4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSGlWH437uhy4mTYBjFq/UPPbJh0wHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6ZpoLjod86nfA0gBsUOYeNf3Fp8VcSbEEK 5EbbL639EkxYigQSebjmG4bTOnJYSK//D4CIQ10WhuByZG40/SsenE1auY2D75G4 WvDsetTEKD84n3wjSBe/6O9+mTbntHY7ZZX19sAh6w7mopR1AkqUB5AWRp4mPE6c 5NoaPAQoso+xi8MXq9j1Svymri9QTzQE95xxPO1VhGlwkVUj6TvgeujtU/LVXbcT pjcKo7TTIBu/iAidBTz3KO4cvESsY9n9cXUKHAsK3Pyno9HxGIu+gE3+J/j1Wk/L rByAdJBcxNEOG4lXZTC1YZVcIrpEYsf5sRhrMLOaRrvfLFDh0l8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:31 2025 by rpki-client