$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft (raw, json) Hash identifier: VEjNG6Gswcm5nAiOmEasbUWsLU1IaEcJLq34N0F2NVE= Subject key identifier: CE:97:59:6F:2F:F5:6D:B9:3C:84:93:A4:BE:81:7D:54:31:EA:77:C2 Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Certificate issuer: /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Certificate serial: 58A7B491F33200A66D05F02DC440CC0CD53F0DE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft Manifest number: 0179 Signing time: Wed 04 Jun 2025 00:11:00 +0000 Manifest this update: Wed 04 Jun 2025 00:06:00 +0000 Manifest next update: Sat 07 Jun 2025 04:32:00 +0000 Files and hashes: 1: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl (hash: 4T/uk7NxFj49W+667WaMoSz+ifm5pKs3FHcB0I5sIfw=) 2: 3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (hash: b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=) 3: 3130332e3137342e31332e302f32342d3234203d3e20313437313730.roa (hash: kjQ8hcW53xDDF2TSl/oKmMOppcQp+2CjRJ4hz4Fg5v4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a7:b4:91:f3:32:00:a6:6d:05:f0:2d:c4:40:cc:0c:d5:3f:0d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Validity Not Before: Jun 4 00:06:00 2025 GMT Not After : Jun 7 04:32:00 2025 GMT Subject: CN=CE97596F2FF56DB93C8493A4BE817D5431EA77C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b9:b5:87:d0:dc:21:c5:7b:50:f9:7a:05:c5: 5e:22:9e:41:62:ae:ad:c3:71:61:c8:ae:c4:21:d1: 9e:5a:fe:cd:9d:0a:62:07:61:49:e2:07:d8:8f:e7: 9b:b6:11:46:83:ae:f6:31:b5:7e:e8:a7:78:c1:16: e4:03:23:8f:d0:7a:5b:f5:a6:af:02:2e:75:96:1e: 7e:63:1a:11:ee:82:0a:f6:2f:e7:f3:e6:90:4c:1c: 7c:7f:64:6b:61:a0:49:43:84:4b:d0:65:ca:df:a3: dc:82:ad:ab:bc:92:f5:a2:8a:91:1e:34:09:f8:f5: a5:ad:66:19:75:e0:5d:b9:a6:11:1d:eb:67:16:fb: 2a:a3:b8:08:c5:b7:1e:fd:b8:8d:85:1a:1c:bd:d1: 30:48:d2:22:ea:ca:56:9d:45:dd:2b:8c:fa:e4:e3: 32:98:2d:4d:ed:50:b0:b8:77:52:b6:0d:f4:e9:e6: 4a:ed:5a:a3:9c:b0:8d:b5:a4:ef:a4:81:e1:e6:c2: d4:fa:57:59:43:8a:d9:c9:f3:22:22:e6:f7:41:93: e1:22:96:81:67:d9:ab:93:68:18:01:4a:36:06:06: 36:e5:25:18:d7:7f:5f:a2:7d:76:f6:5a:91:67:a2: 72:47:49:22:b0:a9:3e:18:97:6a:a4:26:35:73:59: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:97:59:6F:2F:F5:6D:B9:3C:84:93:A4:BE:81:7D:54:31:EA:77:C2 X509v3 Authority Key Identifier: keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ac:f2:de:58:65:bd:e0:b0:03:7e:c4:59:dd:af:70:b2:a4: 6b:9d:06:60:91:d6:1a:ed:e0:17:15:d2:84:62:30:da:b7:78: 48:37:b8:62:0b:7a:b3:97:9f:89:da:2e:f5:1c:9d:0b:33:22: 03:16:d4:62:4c:2a:02:fc:6e:43:63:fb:9f:d6:7d:7a:4d:37: 84:ba:4c:3c:68:3f:39:97:ed:4e:11:c7:9a:fd:51:e2:03:b7: 39:6b:2e:32:65:96:76:6d:db:3e:22:a5:eb:10:18:dc:f2:af: 2e:f8:d9:75:92:7d:7f:bc:e1:f1:74:6b:04:90:d1:5d:b6:50: 25:19:8a:47:75:56:49:b9:b4:07:9e:ee:bb:bd:e4:a4:92:72: 29:9c:45:3f:5a:66:80:5a:b0:90:7d:9d:46:81:7b:d2:78:23: 5f:8f:29:4e:27:70:db:30:6b:8b:45:62:a6:71:ec:dc:7a:89: d4:7d:e1:5d:f4:a4:c3:03:4a:16:f0:87:09:c8:81:01:3c:c1: 39:28:e6:96:8c:ec:8f:29:05:00:f6:a1:74:46:3b:a8:ab:d8: 55:51:e1:d6:d8:be:7a:8c:7e:97:a1:7b:c1:1a:21:2f:3e:00: da:61:72:fc:2b:50:66:b5:d0:64:f4:bb:af:23:d7:ff:c7:b6: 05:a9:f7:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKe0kfMyAKZtBfAtxEDMDNU/DeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw MEVGNUM3MDAeFw0yNTA2MDQwMDA2MDBaFw0yNTA2MDcwNDMyMDBaMDMxMTAvBgNV BAMTKENFOTc1OTZGMkZGNTZEQjkzQzg0OTNBNEJFODE3RDU0MzFFQTc3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4ubWH0NwhxXtQ+XoFxV4inkFi rq3DcWHIrsQh0Z5a/s2dCmIHYUniB9iP55u2EUaDrvYxtX7op3jBFuQDI4/Qelv1 pq8CLnWWHn5jGhHuggr2L+fz5pBMHHx/ZGthoElDhEvQZcrfo9yCrau8kvWiipEe NAn49aWtZhl14F25phEd62cW+yqjuAjFtx79uI2FGhy90TBI0iLqyladRd0rjPrk 4zKYLU3tULC4d1K2DfTp5krtWqOcsI21pO+kgeHmwtT6V1lDitnJ8yIi5vdBk+Ei loFn2auTaBgBSjYGBjblJRjXf1+ifXb2WpFnonJHSSKwqT4Yl2qkJjVzWTe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpdZby/1bbk8hJOkvoF9VDHqd8IwHwYDVR0j BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG NUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkZTFmMGUtMjMxZi00NGNlLTkw YzMtMzJhY2RmOWQyNmMwLzAvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMy NzIwMEVGNUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEms8t5YZb3gsAN+xFndr3CypGudBmCR1hrt 4BcV0oRiMNq3eEg3uGILerOXn4naLvUcnQszIgMW1GJMKgL8bkNj+5/WfXpNN4S6 TDxoPzmX7U4Rx5r9UeIDtzlrLjJllnZt2z4ipesQGNzyry742XWSfX+84fF0awSQ 0V22UCUZikd1Vkm5tAee7ru95KSScimcRT9aZoBasJB9nUaBe9J4I1+PKU4ncNsw a4tFYqZx7Nx6idR94V30pMMDShbwhwnIgQE8wTko5paM7I8pBQD2oXRGO6ir2FVR 4dbYvnqMfpehe8EaIS8+ANphcvwrUGa10GT0u68j1//HtgWp97g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:52 2025 by rpki-client