$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: v1Lg6iplr64gvi9wdkeUMdR+CHwAKeX1nU6A5XAd+gA= Subject key identifier: 74:33:B3:DB:27:1E:72:03:83:79:2C:02:F5:A2:7E:80:B5:F4:DA:61 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 54A230D20522914B984AC76E94BE1C34E276D744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 04AA Signing time: Sun 01 Jun 2025 17:41:43 +0000 Manifest this update: Sun 01 Jun 2025 17:36:43 +0000 Manifest next update: Thu 05 Jun 2025 03:47:43 +0000 Files and hashes: 1: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: lMm04bbrV0DrDR/LfrROVfPhtdVsje7cFfAvFrg0iac=) 2: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: t2JkAO4RGOdwgjllPAyKujK/HVSkrKZfup0TzzlD7iQ=) 3: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: FX4/z1ZjL2TxO4nL/+fN0NPqafwQ6Y45CF6ZSz/pDoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a2:30:d2:05:22:91:4b:98:4a:c7:6e:94:be:1c:34:e2:76:d7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Jun 1 17:36:43 2025 GMT Not After : Jun 5 03:47:43 2025 GMT Subject: CN=7433B3DB271E720383792C02F5A27E80B5F4DA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:d6:8f:e1:71:66:fb:41:5d:cf:bb:e9:78: ad:7c:2a:2d:fc:9e:17:60:93:b9:a2:e0:d8:58:50: 25:b9:c5:76:00:8a:0b:02:30:27:20:89:10:db:11: cf:d9:95:8b:c2:d4:04:04:69:b9:44:9e:4d:84:59: a3:32:af:2a:57:0b:c6:aa:0e:b0:2a:1a:c2:fa:03: 48:09:ed:5a:ef:08:9f:44:3b:ad:fe:c5:ae:82:19: 33:38:f4:49:66:d0:76:0c:b1:4d:e8:75:f7:b1:e0: 32:6a:b2:96:d3:e9:6b:a9:bd:4c:c9:5a:dc:b7:e8: f7:11:91:c7:ed:62:78:c4:93:69:69:93:05:6c:de: 59:33:d5:b4:b2:e0:74:5a:b5:50:8a:98:0c:6a:44: 9b:61:23:90:74:a4:66:8a:3b:98:48:6d:53:8b:d3: bf:55:66:63:d6:22:a6:4c:65:ef:0c:96:06:d7:ee: d7:d3:19:db:54:21:20:8c:68:f8:93:8d:d3:05:22: ec:0a:43:fc:58:e6:d1:df:2b:b5:68:38:84:99:91: 37:15:42:80:b3:85:74:e8:69:c2:5a:75:f8:cd:f9: 6e:82:3c:78:f3:9c:8a:22:c5:22:29:fc:d3:5c:a7: 35:27:d8:49:4f:9a:43:c5:61:70:c4:6a:62:45:26: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:B3:DB:27:1E:72:03:83:79:2C:02:F5:A2:7E:80:B5:F4:DA:61 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c7:f0:8c:73:51:37:65:ec:9e:7e:28:d3:47:95:1d:bc:fb: c3:33:94:c3:3c:0d:ed:04:fd:6f:c9:d5:34:f9:81:8c:09:27: 3d:b5:3c:e4:51:04:98:8a:ad:43:a4:46:3a:09:8e:11:8c:a7: 04:8d:e9:b8:d2:33:fc:c6:72:16:65:f2:c2:e6:40:ac:77:d8: f8:8d:fc:f7:0d:18:e4:74:22:ca:50:2a:b1:c9:ef:00:b0:6c: 29:20:dd:fe:0b:58:7e:10:cb:f9:fa:f5:0e:32:7a:15:a3:bd: 7f:ea:52:77:b4:87:57:8c:3a:0b:fa:d3:42:56:bd:91:dd:f3: a3:c9:80:05:54:63:22:3a:1a:f6:1f:fb:90:d9:cf:23:10:44: 7a:09:be:bf:74:81:72:4c:67:18:f1:12:5a:d8:b3:5b:aa:9c: c7:e1:13:80:33:de:70:f6:78:91:08:1b:f7:25:04:4c:30:35: a3:4c:6b:08:fd:5e:10:e0:0d:d8:19:ba:21:26:96:ff:e3:57: 6a:64:cb:18:27:d4:bb:26:6e:e7:4c:da:2a:19:ab:dc:65:21: 1b:b3:63:2c:89:ad:1a:17:c8:fc:23:e8:cd:b1:9b:64:ad:3b: 48:a2:ec:30:2a:9b:f9:61:ee:8b:3b:98:8f:2e:a1:9d:86:0e: a9:14:e7:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKIw0gUikUuYSsdulL4cNOJ210QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTA2MDExNzM2NDNaFw0yNTA2MDUwMzQ3NDNaMDMxMTAvBgNV BAMTKDc0MzNCM0RCMjcxRTcyMDM4Mzc5MkMwMkY1QTI3RTgwQjVGNERBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwtaP4XFm+0Fdz7vpeK18Ki38 nhdgk7mi4NhYUCW5xXYAigsCMCcgiRDbEc/ZlYvC1AQEablEnk2EWaMyrypXC8aq DrAqGsL6A0gJ7VrvCJ9EO63+xa6CGTM49Elm0HYMsU3odfex4DJqspbT6WupvUzJ Wty36PcRkcftYnjEk2lpkwVs3lkz1bSy4HRatVCKmAxqRJthI5B0pGaKO5hIbVOL 079VZmPWIqZMZe8MlgbX7tfTGdtUISCMaPiTjdMFIuwKQ/xY5tHfK7VoOISZkTcV QoCzhXToacJadfjN+W6CPHjznIoixSIp/NNcpzUn2ElPmkPFYXDEamJFJqHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDOz2ycecgODeSwC9aJ+gLX02mEwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7H8IxzUTdl7J5+KNNHlR28+8MzlMM8De0E /W/J1TT5gYwJJz21PORRBJiKrUOkRjoJjhGMpwSN6bjSM/zGchZl8sLmQKx32PiN /PcNGOR0IspQKrHJ7wCwbCkg3f4LWH4Qy/n69Q4yehWjvX/qUne0h1eMOgv600JW vZHd86PJgAVUYyI6GvYf+5DZzyMQRHoJvr90gXJMZxjxElrYs1uqnMfhE4Az3nD2 eJEIG/clBEwwNaNMawj9XhDgDdgZuiEmlv/jV2pkyxgn1LsmbudM2ioZq9xlIRuz YyyJrRoXyPwj6M2xm2StO0ii7DAqm/lh7os7mI8uoZ2GDqkU54U= -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:28 2025 by rpki-client