$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: RucysxzxcEpT2yZCPAoh+N1DVw53J9btR0QJB8CqHLo= Subject key identifier: 23:1D:B4:FE:D4:B4:A8:20:4A:66:0F:6F:43:DF:72:DA:1B:57:83:A7 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 60260BE49EFDE725322B70AE15F7E71EC7F9CE7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: AE Signing time: Fri 06 Jun 2025 18:51:09 +0000 Manifest this update: Fri 06 Jun 2025 18:46:09 +0000 Manifest next update: Mon 09 Jun 2025 23:38:09 +0000 Files and hashes: 1: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: bLJG3lz+87zYSQlqGFr5ZiCv2fnyKvf0o8Xmr594ip4=) 2: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 3: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 4: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:26:0b:e4:9e:fd:e7:25:32:2b:70:ae:15:f7:e7:1e:c7:f9:ce:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Jun 6 18:46:09 2025 GMT Not After : Jun 9 23:38:09 2025 GMT Subject: CN=231DB4FED4B4A8204A660F6F43DF72DA1B5783A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:c8:41:39:35:42:87:6a:77:ca:67:e5:bb: 6b:52:12:e5:1a:19:4c:04:89:66:72:cf:20:a2:f9: d8:ff:e7:9e:e1:1e:40:7b:c9:42:e3:ec:41:5f:1b: 75:97:2e:ce:89:ef:68:f0:77:7a:a9:48:aa:de:0d: c7:52:f4:9e:4b:c6:6c:a9:5f:ef:9e:a7:39:d9:c9: 50:9f:20:9d:8b:b5:e4:11:17:69:6e:89:67:02:55: 0f:a8:46:eb:61:66:0c:82:75:a3:74:7e:61:09:23: 56:7f:e8:5f:a1:0d:ef:37:ab:ae:1b:dd:63:23:8d: ee:c2:26:6f:22:20:e6:7c:cb:45:19:d1:95:6e:54: 0d:52:7a:a4:d1:7a:c4:b1:d0:e8:19:1e:2b:50:9f: b3:e0:5d:a2:57:71:26:55:82:63:03:21:d6:ae:8d: a7:f5:b8:bb:29:28:68:cb:ce:be:4f:29:cb:4e:05: 9b:46:ac:d6:17:99:ff:02:2b:dd:3f:4a:27:08:a7: 40:e8:e7:65:c1:1b:39:3c:d0:1c:a8:5d:e1:d8:d6: 61:4a:7b:49:6b:aa:e0:64:e0:21:16:e9:29:6e:28: bb:e3:43:e0:f5:76:ee:2e:93:d2:7c:6e:a0:b7:35: 6c:b6:df:8e:83:6d:c2:8f:e7:6b:63:2b:ad:e0:72: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:B4:FE:D4:B4:A8:20:4A:66:0F:6F:43:DF:72:DA:1B:57:83:A7 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:e7:c9:35:30:b5:e6:cd:de:86:57:a3:4d:4a:fd:6e:6b: e5:4b:24:fb:7f:0f:cc:88:fc:3c:17:05:37:9a:c0:7e:a9:cd: 7b:1c:1f:a3:6d:32:62:be:a5:fa:f0:07:a6:5f:30:5f:8a:99: 81:16:00:80:f8:96:2b:6b:6f:f3:6e:8a:f6:3e:31:24:44:50: a0:23:d5:1e:ed:db:75:4a:45:b5:14:cf:f3:26:fc:12:b1:44: 28:95:a2:2e:7f:c0:40:e1:95:7e:3d:04:38:df:a7:6e:e2:e9: a9:62:40:94:8c:4f:98:4b:89:d8:67:95:b5:06:ed:03:ac:76: 11:90:4f:cc:fb:b7:a4:32:fa:7b:39:f6:92:e0:fd:8f:71:01: 1d:96:a8:aa:70:fe:fb:c1:c8:06:9b:6e:de:84:c8:27:7b:f0: 34:fc:a0:89:f4:eb:39:22:60:9e:94:18:3a:4c:f4:75:66:a8: 29:d2:df:e9:a6:71:aa:61:0b:01:74:89:69:a4:b5:76:a2:14: 81:44:5f:ab:5f:f2:64:a2:74:40:0c:74:b5:1f:83:78:de:e5: e0:96:7e:33:1b:ab:de:31:a7:13:49:48:e7:1f:87:10:25:b1: 5d:b1:af:13:60:06:04:6b:1b:bd:d2:15:ae:9c:e8:25:64:94: bf:0a:7c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCYL5J795yUyK3CuFffnHsf5zn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTA2MDYxODQ2MDlaFw0yNTA2MDkyMzM4MDlaMDMxMTAvBgNV BAMTKDIzMURCNEZFRDRCNEE4MjA0QTY2MEY2RjQzREY3MkRBMUI1NzgzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sshBOTVCh2p3ymflu2tSEuUa GUwEiWZyzyCi+dj/557hHkB7yULj7EFfG3WXLs6J72jwd3qpSKreDcdS9J5Lxmyp X++epznZyVCfIJ2LteQRF2luiWcCVQ+oRuthZgyCdaN0fmEJI1Z/6F+hDe83q64b 3WMjje7CJm8iIOZ8y0UZ0ZVuVA1SeqTResSx0OgZHitQn7PgXaJXcSZVgmMDIdau jaf1uLspKGjLzr5PKctOBZtGrNYXmf8CK90/SicIp0Do52XBGzk80ByoXeHY1mFK e0lrquBk4CEW6SluKLvjQ+D1du4uk9J8bqC3NWy2346DbcKP52tjK63gcuMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIx20/tS0qCBKZg9vQ99y2htXg6cwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsz58k1MLXmzd6GV6NNSv1ua+VLJPt/D8yI /DwXBTeawH6pzXscH6NtMmK+pfrwB6ZfMF+KmYEWAID4litrb/NuivY+MSREUKAj 1R7t23VKRbUUz/Mm/BKxRCiVoi5/wEDhlX49BDjfp27i6aliQJSMT5hLidhnlbUG 7QOsdhGQT8z7t6Qy+ns59pLg/Y9xAR2WqKpw/vvByAabbt6EyCd78DT8oIn06zki YJ6UGDpM9HVmqCnS3+mmcaphCwF0iWmktXaiFIFEX6tf8mSidEAMdLUfg3je5eCW fjMbq94xpxNJSOcfhxAlsV2xrxNgBgRrG73SFa6c6CVklL8KfJU= -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:51 2025 by rpki-client