$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: NPb6qvTaHiI0HeK8mhIUTPqxgOxX4EUIImTTjdsSC40= Subject key identifier: 4E:8F:3C:9C:4F:38:7B:D0:8D:6B:EC:CD:E8:5F:DE:FA:6E:C1:90:0B Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 169F2E89345D6898DAED39E4DB03303A98D19506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 01CA Signing time: Fri 06 Jun 2025 07:00:36 +0000 Manifest this update: Fri 06 Jun 2025 06:55:36 +0000 Manifest next update: Mon 09 Jun 2025 18:31:36 +0000 Files and hashes: 1: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) 2: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) 3: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) 4: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) 5: 2985976A4B3081770748882703E16497964D05A6.crl (hash: vmSpHKJS9QhdK/BfMuPi/PX0Av+YrWwzMyojDK9YAMY=) 6: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9f:2e:89:34:5d:68:98:da:ed:39:e4:db:03:30:3a:98:d1:95:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Jun 6 06:55:36 2025 GMT Not After : Jun 9 18:31:36 2025 GMT Subject: CN=4E8F3C9C4F387BD08D6BECCDE85FDEFA6EC1900B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:29:2f:56:ea:0f:63:10:a1:7e:5a:51:e2: 01:64:b9:b8:b6:f0:68:74:08:3a:a4:5c:21:4d:87: b5:48:e6:32:c1:d8:29:57:9a:b5:ab:b5:4f:b2:96: 4a:0c:ff:f8:de:28:86:da:cd:e1:d9:31:fe:3f:5f: d7:c9:49:4c:9f:43:99:ec:2b:b3:a8:2e:c3:21:42: 62:cc:70:d3:44:64:4b:62:24:f9:86:06:48:3b:4d: 92:8c:dd:d1:b0:ac:68:d4:2b:65:55:be:b8:42:b6: d7:c2:65:c5:68:a5:4d:dd:21:fb:85:47:ad:61:08: f2:1c:f4:9b:33:a3:77:53:33:ec:c1:a6:24:0c:fb: fb:d5:fd:79:9f:af:0c:fb:63:ea:a5:be:98:bc:4b: bd:e1:39:3c:42:cf:ef:8c:87:17:a4:e3:8b:0e:26: d7:c5:6a:d5:9e:fd:d0:7f:14:f0:9b:39:ea:fa:db: d7:22:ac:dc:2b:81:0a:8f:90:ba:19:0c:ae:54:d4: 96:79:53:ac:7a:5f:0f:3c:38:14:9b:1d:c1:a2:d9: 10:c3:26:ef:57:45:ba:9c:05:44:ea:a2:96:48:44: e5:fe:31:0b:74:2b:28:be:7e:b6:cf:9a:7d:58:b8: fe:e9:d4:65:52:ea:41:44:ea:29:d5:bb:29:ae:1c: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8F:3C:9C:4F:38:7B:D0:8D:6B:EC:CD:E8:5F:DE:FA:6E:C1:90:0B X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:80:84:cf:10:eb:21:a7:8b:7b:56:39:3a:e6:dc:2e:ca:ff: 3d:ce:e7:26:ce:5b:bd:26:1f:6e:dd:c1:73:f1:ae:be:83:23: 25:6c:09:9c:71:b1:ae:32:60:05:36:b1:7f:b2:d9:06:89:ea: b1:65:08:bc:e5:21:59:8c:21:b9:e7:80:07:a7:24:ab:f3:3e: 64:05:d6:8a:d9:cd:db:da:f7:3a:c7:38:d5:85:11:8c:b7:9b: 83:6a:04:fa:6e:7c:f0:4d:2b:cc:b8:e4:aa:b1:09:2d:d3:6d: c5:6a:78:20:c3:b8:91:29:9b:2a:c9:3e:52:43:db:3b:47:c4: 53:8b:04:13:7c:f2:16:a9:53:5a:28:53:1f:f6:f5:d8:f8:c4: b4:86:66:54:cc:e1:7b:c0:3f:e3:aa:0e:d9:46:8a:18:1f:4e: c6:97:9a:ca:ac:da:a4:13:ab:c3:42:96:bb:35:fc:d3:bd:32: 2e:e0:70:8e:1f:89:c4:9c:0b:e3:e4:6b:00:ab:46:e7:e5:99: fb:4c:2a:5a:ec:5c:da:dc:48:71:98:de:60:64:95:6f:9f:25: ad:95:83:fd:7a:fe:cb:5b:81:fa:e8:a3:c8:e9:9b:4e:78:2f: f2:bf:a3:c0:38:a8:5b:82:0b:cf:45:fc:ac:d0:e2:86:c6:c1: 89:e2:b3:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFp8uiTRdaJja7Tnk2wMwOpjRlQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNTA2MDYwNjU1MzZaFw0yNTA2MDkxODMxMzZaMDMxMTAvBgNV BAMTKDRFOEYzQzlDNEYzODdCRDA4RDZCRUNDREU4NUZERUZBNkVDMTkwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RSkvVuoPYxChflpR4gFkubi2 8Gh0CDqkXCFNh7VI5jLB2ClXmrWrtU+ylkoM//jeKIbazeHZMf4/X9fJSUyfQ5ns K7OoLsMhQmLMcNNEZEtiJPmGBkg7TZKM3dGwrGjUK2VVvrhCttfCZcVopU3dIfuF R61hCPIc9Jszo3dTM+zBpiQM+/vV/Xmfrwz7Y+qlvpi8S73hOTxCz++Mhxek44sO JtfFatWe/dB/FPCbOer629cirNwrgQqPkLoZDK5U1JZ5U6x6Xw88OBSbHcGi2RDD Ju9XRbqcBUTqopZIROX+MQt0Kyi+frbPmn1YuP7p1GVS6kFE6inVuymuHKcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTo88nE84e9CNa+zN6F/e+m7BkAswHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+AhM8Q6yGni3tWOTrm3C7K/z3O5ybOW70m H27dwXPxrr6DIyVsCZxxsa4yYAU2sX+y2QaJ6rFlCLzlIVmMIbnngAenJKvzPmQF 1orZzdva9zrHONWFEYy3m4NqBPpufPBNK8y45KqxCS3TbcVqeCDDuJEpmyrJPlJD 2ztHxFOLBBN88hapU1ooUx/29dj4xLSGZlTM4XvAP+OqDtlGihgfTsaXmsqs2qQT q8NClrs1/NO9Mi7gcI4ficScC+PkawCrRuflmftMKlrsXNrcSHGY3mBklW+fJa2V g/16/stbgfroo8jpm054L/K/o8A4qFuCC89F/KzQ4obGwYnisyg= -----END CERTIFICATE-----Generated at Sun Jun 8 08:20:58 2025 by rpki-client