$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: Jj9NhNfzTV5bSm53lE5LZHxrJL05n1K3W42SZJgvk/A= Subject key identifier: D2:45:5E:4B:45:F8:A8:2B:47:55:2C:2D:A5:5D:B6:3B:C1:EA:2F:31 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 2A6EEF421DC8A3B06C801ABD8F8AAFBB6143D691 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: B4 Signing time: Sun 20 Jul 2025 21:20:39 +0000 Manifest this update: Sun 20 Jul 2025 21:15:39 +0000 Manifest next update: Thu 24 Jul 2025 03:12:39 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: rQVPh91/+Uho9pobNdEOWG6hiwz3ukd2Z7584VX63Rs=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6e:ef:42:1d:c8:a3:b0:6c:80:1a:bd:8f:8a:af:bb:61:43:d6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Jul 20 21:15:39 2025 GMT Not After : Jul 24 03:12:39 2025 GMT Subject: CN=D2455E4B45F8A82B47552C2DA55DB63BC1EA2F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:17:9f:05:46:36:2b:56:eb:76:a4:6d:aa: 56:75:17:fb:db:23:16:eb:8e:30:52:da:51:69:ae: 0b:6b:41:8c:f8:26:4b:0f:f5:37:a8:ca:0b:dd:7d: 39:c1:e8:ec:12:cc:f2:55:54:57:4e:75:97:fc:de: 43:93:68:03:ac:44:4d:c3:1f:a8:2c:8a:cc:25:81: 69:aa:d9:e7:1a:73:87:a1:cb:cf:71:5f:39:34:8f: c4:e6:7a:6d:91:85:bc:d8:ac:f7:ac:e9:15:05:47: b3:4d:b3:f2:3b:9a:2e:2a:08:cd:77:33:14:72:15: 58:15:54:64:d9:03:86:ca:62:f1:dc:78:9b:1e:23: e0:c3:46:8b:37:d5:51:f5:18:77:3c:00:9d:58:16: 12:ed:19:05:dc:2e:d9:91:b2:cb:6a:52:87:a9:0b: 17:2d:f0:e9:2d:34:47:f8:82:37:4a:70:01:47:62: 96:6b:0f:07:08:72:e0:63:40:80:c9:94:40:0c:78: 7e:90:70:b5:f3:ea:45:58:62:9e:6c:3e:20:28:7a: 39:ef:ee:18:41:69:ed:cc:80:6a:3d:d1:7f:cc:00: 3a:e3:c1:81:47:96:27:43:42:eb:2b:97:d0:91:56: a4:a4:a2:93:2e:f6:91:a5:b5:2c:4e:27:67:d8:26: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:5E:4B:45:F8:A8:2B:47:55:2C:2D:A5:5D:B6:3B:C1:EA:2F:31 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:70:57:2c:e2:56:c5:15:38:29:09:14:90:9e:3d:3b:89:06: 5f:cf:c1:22:41:28:0c:7c:92:f9:d6:00:a7:d6:98:c7:7d:f9: 58:0d:2e:ae:b3:c2:f1:b0:9f:48:f2:58:5a:18:78:6a:47:08: 41:c5:c4:f8:a0:ab:fe:13:2c:a1:ab:8c:f9:72:b2:f7:51:80: cb:f6:83:1c:c9:8f:eb:44:a5:48:88:53:80:34:6b:32:69:e8: fa:67:73:23:6f:e9:22:be:a7:d5:9e:bf:fe:38:48:f8:0c:5b: a0:77:6c:12:b8:25:09:32:50:17:12:45:68:aa:9c:4d:da:bb: 4e:92:5a:25:ac:df:df:83:c8:2e:99:af:16:9a:ea:1d:ad:5c: 5c:18:1b:7e:ec:58:3c:09:5a:22:4e:f6:d6:31:d0:3f:25:68: 6d:31:74:bc:39:c5:52:74:d5:5b:c1:9d:7a:31:c3:43:ca:d0: a2:e5:95:b7:1d:45:00:9c:4a:b3:01:58:39:c3:e6:db:0c:bb: ee:ca:af:ae:90:aa:14:a6:35:d3:ac:ec:c8:0e:9f:71:e7:f5: 91:88:1f:1c:f6:52:92:4b:a2:98:29:86:96:33:f3:65:b6:e1: 60:28:e0:6f:8b:46:ce:7e:1e:79:3f:65:54:01:31:7b:75:e8: f6:68:bd:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKm7vQh3Io7BsgBq9j4qvu2FD1pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA3MjAyMTE1MzlaFw0yNTA3MjQwMzEyMzlaMDMxMTAvBgNV BAMTKEQyNDU1RTRCNDVGOEE4MkI0NzU1MkMyREE1NURCNjNCQzFFQTJGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iBefBUY2K1brdqRtqlZ1F/vb IxbrjjBS2lFprgtrQYz4JksP9TeoygvdfTnB6OwSzPJVVFdOdZf83kOTaAOsRE3D H6gsiswlgWmq2ecac4ehy89xXzk0j8Tmem2RhbzYrPes6RUFR7NNs/I7mi4qCM13 MxRyFVgVVGTZA4bKYvHceJseI+DDRos31VH1GHc8AJ1YFhLtGQXcLtmRsstqUoep Cxct8OktNEf4gjdKcAFHYpZrDwcIcuBjQIDJlEAMeH6QcLXz6kVYYp5sPiAoejnv 7hhBae3MgGo90X/MADrjwYFHlidDQusrl9CRVqSkopMu9pGltSxOJ2fYJpSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0kVeS0X4qCtHVSwtpV22O8HqLzEwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9wVyziVsUVOCkJFJCePTuJBl/PwSJBKAx8 kvnWAKfWmMd9+VgNLq6zwvGwn0jyWFoYeGpHCEHFxPigq/4TLKGrjPlysvdRgMv2 gxzJj+tEpUiIU4A0azJp6PpncyNv6SK+p9Wev/44SPgMW6B3bBK4JQkyUBcSRWiq nE3au06SWiWs39+DyC6Zrxaa6h2tXFwYG37sWDwJWiJO9tYx0D8laG0xdLw5xVJ0 1VvBnXoxw0PK0KLllbcdRQCcSrMBWDnD5tsMu+7Kr66QqhSmNdOs7MgOn3Hn9ZGI Hxz2UpJLopgphpYz82W24WAo4G+LRs5+Hnk/ZVQBMXt16PZovQE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:53 2025 by rpki-client