$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: ev2OBF/beCgcV3T5X1AI8DKwt4ji2L3HMYReoXHO2Us= Subject key identifier: 69:2A:BA:28:C3:EF:63:9A:22:D3:77:BB:C1:C6:B9:AB:81:18:43:1C Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 082912A9BF9A131A3EFA55F04D1681041FD995EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 04F8 Signing time: Wed 04 Jun 2025 23:40:40 +0000 Manifest this update: Wed 04 Jun 2025 23:35:40 +0000 Manifest next update: Sun 08 Jun 2025 07:20:40 +0000 Files and hashes: 1: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: N575Rd04sdWuljy+/gWPBi8EMbVoyPyHMDMfsQ5bHKg=) 2: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: nfsLnRfSeh3RjyioRfkPhd79OBeQRpRe47CvurR+Ya8=) 3: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: 0aRFrXTSbHUOy2mZwEH0txx1Tk9Q/AHJdIJdOAn4gUw=) 4: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:29:12:a9:bf:9a:13:1a:3e:fa:55:f0:4d:16:81:04:1f:d9:95:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Jun 4 23:35:40 2025 GMT Not After : Jun 8 07:20:40 2025 GMT Subject: CN=692ABA28C3EF639A22D377BBC1C6B9AB8118431C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:df:7e:3d:9f:c1:18:a4:a7:c8:16:18:02: 02:c1:3f:f0:22:04:e3:61:16:d2:b7:71:a8:b3:eb: d3:1a:2d:09:00:ef:b8:20:fa:9e:73:84:ea:2f:83: e0:48:22:3b:37:aa:5e:97:2e:2a:e9:40:3e:33:28: 83:29:cb:3d:38:2b:78:26:ec:90:f8:fa:8d:b2:52: 8a:ce:42:b4:12:3b:fb:66:80:1e:32:53:5a:67:e7: 20:b1:4b:be:cc:80:26:41:55:cb:07:74:f7:7a:94: 30:7e:e2:f5:d0:96:b1:ce:27:66:92:eb:e9:b3:1f: 92:1b:c3:b3:7a:84:ae:71:5e:fd:0c:2e:37:19:a8: c8:5f:40:9d:9a:22:72:b1:35:76:73:d9:84:6d:dd: 1b:30:8c:2c:a8:f9:32:09:f0:d4:c4:56:36:57:7e: da:01:aa:ba:31:e4:d4:95:a2:3c:05:b5:b6:4b:db: 2a:3b:cc:95:a6:73:30:f9:5f:bf:e2:d8:c9:31:1c: 13:17:32:6f:d2:00:6c:c0:b5:b0:cf:97:27:15:bd: 5a:be:f4:c6:9e:bf:b2:4c:77:9a:87:cc:8d:8d:b9: 01:19:ce:e8:e7:34:1f:94:1e:c8:32:ef:d3:5b:9e: 8a:68:99:88:83:8a:d4:03:40:da:2b:44:52:6b:bf: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:BA:28:C3:EF:63:9A:22:D3:77:BB:C1:C6:B9:AB:81:18:43:1C X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ae:22:b2:eb:d8:8e:c4:84:a6:1a:43:4c:81:98:e2:cd:c7: f2:98:e1:2b:89:1d:e9:14:80:16:32:66:15:be:31:8b:b5:6c: 9b:59:86:f3:53:bc:ae:d4:f7:4b:ca:ce:18:17:bb:b1:93:43: 85:fa:e8:09:1d:43:57:ed:c0:20:3d:08:cb:06:f8:99:85:6e: cb:95:67:c4:61:d0:55:87:3c:a4:e1:b0:a2:18:64:26:23:29: c8:96:1d:33:33:5e:c5:31:ad:14:b1:5c:5c:0c:08:1b:0d:c1: 71:12:10:19:0e:37:6f:ab:52:5a:27:60:27:b1:dd:b3:94:10: 49:32:f8:d4:03:34:5a:fd:e0:12:1c:df:81:c4:a4:be:54:15: 0c:17:3a:63:3d:7a:94:d3:29:f3:00:c5:30:6e:4d:ef:77:a4: e1:f6:ae:cc:d3:c7:65:14:a5:b8:38:4d:df:81:f9:e6:63:68: 60:02:62:03:ca:cf:60:68:6a:a6:16:fb:d3:c6:18:e1:4e:d6: b1:ce:72:76:ca:3d:00:5f:11:44:e7:df:8a:ba:73:60:2a:bc: 31:67:be:59:17:1f:58:e4:35:86:58:8d:a8:ae:0e:0f:96:b6: 96:49:77:cf:62:82:a5:a6:98:70:99:e8:07:b2:f2:98:89:0f: 9c:9c:cc:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCkSqb+aExo++lXwTRaBBB/Zle4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA2MDQyMzM1NDBaFw0yNTA2MDgwNzIwNDBaMDMxMTAvBgNV BAMTKDY5MkFCQTI4QzNFRjYzOUEyMkQzNzdCQkMxQzZCOUFCODExODQzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauN9+PZ/BGKSnyBYYAgLBP/Ai BONhFtK3caiz69MaLQkA77gg+p5zhOovg+BIIjs3ql6XLirpQD4zKIMpyz04K3gm 7JD4+o2yUorOQrQSO/tmgB4yU1pn5yCxS77MgCZBVcsHdPd6lDB+4vXQlrHOJ2aS 6+mzH5Ibw7N6hK5xXv0MLjcZqMhfQJ2aInKxNXZz2YRt3RswjCyo+TIJ8NTEVjZX ftoBqrox5NSVojwFtbZL2yo7zJWmczD5X7/i2MkxHBMXMm/SAGzAtbDPlycVvVq+ 9Maev7JMd5qHzI2NuQEZzujnNB+UHsgy79NbnopomYiDitQDQNorRFJrv4DxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaSq6KMPvY5oi03e7wca5q4EYQxwwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWuIrLr2I7EhKYaQ0yBmOLNx/KY4SuJHekU gBYyZhW+MYu1bJtZhvNTvK7U90vKzhgXu7GTQ4X66AkdQ1ftwCA9CMsG+JmFbsuV Z8Rh0FWHPKThsKIYZCYjKciWHTMzXsUxrRSxXFwMCBsNwXESEBkON2+rUlonYCex 3bOUEEky+NQDNFr94BIc34HEpL5UFQwXOmM9epTTKfMAxTBuTe93pOH2rszTx2UU pbg4Td+B+eZjaGACYgPKz2BoaqYW+9PGGOFO1rHOcnbKPQBfEUTn34q6c2AqvDFn vlkXH1jkNYZYjaiuDg+WtpZJd89igqWmmHCZ6Aey8piJD5yczCE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:14 2025 by rpki-client