$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: OsyqN/9ujAL7IG0MTNiQNelv1UHz2We1KdgTUSJGyqY= Subject key identifier: 94:5E:95:93:03:6B:C4:09:EE:EA:75:94:D6:56:2E:52:7D:A2:3E:C6 Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 4BF75E9CA66E7D7C049FA0E770F73728CAD41E86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 0200 Signing time: Wed 04 Jun 2025 20:50:04 +0000 Manifest this update: Wed 04 Jun 2025 20:45:04 +0000 Manifest next update: Sun 08 Jun 2025 04:38:04 +0000 Files and hashes: 1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: i1mbSAG5v/hk6iE5VIwftw7GrMObLNrBsclhRfEwMlk=) 2: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: 6gEpief7n0b1o5LDXUhCiEL/rkB2mrhMUs19uxqg/vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f7:5e:9c:a6:6e:7d:7c:04:9f:a0:e7:70:f7:37:28:ca:d4:1e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: Jun 4 20:45:04 2025 GMT Not After : Jun 8 04:38:04 2025 GMT Subject: CN=945E9593036BC409EEEA7594D6562E527DA23EC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:dc:53:7b:7f:6e:5e:5f:3e:0a:56:77:de: 9b:4f:8a:76:2a:ac:1d:40:48:8d:4e:9f:a4:95:5a: 82:b2:22:90:19:ed:52:94:b9:91:33:97:a5:80:56: bb:42:a3:9e:ff:a2:0e:62:19:5e:36:bd:2e:5d:fc: 02:fb:68:75:03:5c:89:39:7f:c9:a9:08:10:2d:8c: fe:b4:b0:a6:fb:5c:9e:75:57:c9:d7:3d:fd:be:6e: 33:0c:03:5a:df:d7:e0:37:7d:bd:e3:0a:81:c9:28: 6e:e0:8c:df:bf:82:a6:88:2b:98:99:24:39:b4:39: 2f:8a:f7:bc:26:9f:54:bf:0a:16:ab:73:c1:47:6c: 8c:17:56:09:66:1a:8c:7f:42:c7:5c:1a:03:03:87: 7a:97:8d:47:95:10:ba:bb:1b:cf:88:64:7d:25:45: 00:04:ed:cf:95:47:4f:86:8d:a9:6b:ca:a1:52:81: 36:ad:92:03:d4:e5:c5:e4:65:fe:91:f5:c8:ec:25: c8:32:9d:b9:ad:7c:e1:12:c1:66:e6:40:13:6f:18: f6:68:c4:47:06:63:98:c8:a7:03:67:9b:26:53:07: a8:40:df:ae:0c:d9:5c:bf:84:df:07:a3:ca:32:84: fa:aa:ba:fd:1c:d6:b3:48:62:25:7e:90:89:09:b3: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5E:95:93:03:6B:C4:09:EE:EA:75:94:D6:56:2E:52:7D:A2:3E:C6 X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:39:3d:64:ce:ab:a7:86:32:a8:32:c4:89:96:0e:6b:55:e8: 5b:30:67:8a:5a:8f:6a:38:09:bb:89:d3:aa:10:6d:da:ea:79: 69:2e:d6:f0:34:63:ab:b7:a7:f6:6d:40:3d:26:c9:6a:3c:02: 19:4c:1e:38:8f:97:18:35:aa:72:ce:9c:e1:4d:f4:0b:71:c9: 39:d1:a8:c3:7f:a3:31:40:39:0f:02:a2:57:5c:6b:b4:76:a8: f7:bb:08:93:c8:3b:7c:ff:84:21:dc:d0:05:77:a7:c0:2a:e9: 08:73:1d:9f:73:b4:28:ec:f0:b1:5f:f1:5b:04:d8:ff:97:e1: e5:02:81:49:21:90:63:55:b9:d9:15:aa:e6:ba:dd:93:06:dc: 21:f2:cb:1e:3e:95:ed:53:01:34:be:a2:54:23:f8:70:f1:25: 3b:a3:34:77:44:4c:85:27:2c:b9:63:67:29:55:ef:32:c6:d2: f2:48:0d:6d:2e:ca:e0:b0:bf:3f:c4:35:28:b7:23:ee:58:cd: 27:67:9b:56:78:86:77:3f:5c:68:6e:84:5a:aa:fd:35:c4:34: c9:d2:e2:44:a3:56:20:48:39:63:8c:8f:fe:d9:ce:00:83:f4: 55:0b:fd:9f:95:2f:93:ae:7d:d1:c8:6b:fb:32:31:4b:26:d3: 76:42:f8:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/denKZufXwEn6DncPc3KMrUHoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNTA2MDQyMDQ1MDRaFw0yNTA2MDgwNDM4MDRaMDMxMTAvBgNV BAMTKDk0NUU5NTkzMDM2QkM0MDlFRUVBNzU5NEQ2NTYyRTUyN0RBMjNFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWWdxTe39uXl8+ClZ33ptPinYq rB1ASI1On6SVWoKyIpAZ7VKUuZEzl6WAVrtCo57/og5iGV42vS5d/AL7aHUDXIk5 f8mpCBAtjP60sKb7XJ51V8nXPf2+bjMMA1rf1+A3fb3jCoHJKG7gjN+/gqaIK5iZ JDm0OS+K97wmn1S/Charc8FHbIwXVglmGox/QsdcGgMDh3qXjUeVELq7G8+IZH0l RQAE7c+VR0+GjalryqFSgTatkgPU5cXkZf6R9cjsJcgynbmtfOESwWbmQBNvGPZo xEcGY5jIpwNnmyZTB6hA364M2Vy/hN8Ho8oyhPqquv0c1rNIYiV+kIkJs9PxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlF6VkwNrxAnu6nWU1lYuUn2iPsYwHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM85PWTOq6eGMqgyxImWDmtV6FswZ4paj2o4 CbuJ06oQbdrqeWku1vA0Y6u3p/ZtQD0myWo8AhlMHjiPlxg1qnLOnOFN9AtxyTnR qMN/ozFAOQ8Coldca7R2qPe7CJPIO3z/hCHc0AV3p8Aq6QhzHZ9ztCjs8LFf8VsE 2P+X4eUCgUkhkGNVudkVqua63ZMG3CHyyx4+le1TATS+olQj+HDxJTujNHdETIUn LLljZylV7zLG0vJIDW0uyuCwvz/ENSi3I+5YzSdnm1Z4hnc/XGhuhFqq/TXENMnS 4kSjViBIOWOMj/7ZzgCD9FUL/Z+VL5OufdHIa/syMUsm03ZC+GM= -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:59 2025 by rpki-client