$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: ehM/aoB3PwbxVP4RDixWv7HLbHAY1cJchFKnTs/o3w8= Subject key identifier: 36:C7:3B:26:83:C7:68:45:DC:4C:8A:E8:DE:B9:0D:83:E3:36:45:83 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 74F711F461DCEB5CBE5BBBDB2759B1D7875B3048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01D4 Signing time: Thu 05 Jun 2025 22:42:08 +0000 Manifest this update: Thu 05 Jun 2025 22:37:08 +0000 Manifest next update: Mon 09 Jun 2025 04:11:08 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: io88owvmytmJCtCJSwLOIeIt7oCUhihH23xRdClcA3o=) 2: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 3: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 04:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f7:11:f4:61:dc:eb:5c:be:5b:bb:db:27:59:b1:d7:87:5b:30:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Jun 5 22:37:08 2025 GMT Not After : Jun 9 04:11:08 2025 GMT Subject: CN=36C73B2683C76845DC4C8AE8DEB90D83E3364583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:db:ed:10:14:a8:10:0c:51:30:b6:d7:f9: c9:d7:b7:33:80:e6:6c:ca:93:c3:ac:c3:66:82:55: 49:2c:eb:89:e6:68:eb:2d:78:2d:ff:b6:a4:7e:49: 57:13:1d:e4:ac:f8:1c:05:2c:76:e5:34:94:10:e5: cb:93:37:50:34:a0:0b:13:ee:d8:be:f2:13:23:74: ac:4d:1e:c4:a7:f7:d5:b1:24:b9:30:88:d8:ef:4e: d5:a6:0c:28:b7:42:5c:38:2c:8a:bf:37:af:1f:54: cc:b9:ab:dc:95:6e:53:7d:78:a1:b5:df:68:96:55: 42:5d:e5:f3:c8:86:5f:70:0f:a7:42:d3:78:60:52: 06:79:ac:fa:42:99:ca:21:a1:45:77:d6:bf:df:c9: 16:c8:fb:5a:61:c6:70:f6:97:9d:d5:db:2c:fb:36: 7a:df:02:cc:aa:22:d6:b3:c2:48:4b:b3:80:45:d5: 0e:c2:e9:81:bd:9e:81:d6:c1:ec:55:23:d4:a0:3d: 65:13:2e:6c:09:47:53:c2:07:bd:d3:ba:47:a3:b6: c4:57:f9:65:5f:2d:12:37:fb:4d:6e:7c:d3:21:a6: 97:2e:41:6e:90:eb:72:1f:39:da:5d:8b:90:96:20: c3:67:21:ae:8a:36:6f:3b:6d:50:b1:7c:7b:dd:f9: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C7:3B:26:83:C7:68:45:DC:4C:8A:E8:DE:B9:0D:83:E3:36:45:83 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9f:04:70:f8:44:06:1c:93:72:bd:70:f8:61:82:d7:8a:9f: 36:9e:b3:13:d4:d2:6c:86:b4:aa:3c:b1:ac:96:8e:c3:3e:bf: 20:1d:0d:3b:ba:8e:3a:13:64:78:71:f2:cf:70:16:0a:58:ef: 8d:fc:a5:cf:78:cd:5b:1a:69:31:cd:39:67:f7:02:8b:da:0b: 46:d4:7d:69:49:d1:21:63:e1:99:5c:81:1d:89:28:d0:c9:2c: 43:4a:86:6c:20:41:2d:ef:72:96:90:1e:bf:30:a0:f7:3f:bb: 70:72:ff:73:50:30:09:3b:05:a7:e6:df:6c:a7:9a:b5:be:9d: 1f:15:b3:d7:fc:3d:27:27:23:e3:a3:16:a6:0b:d3:85:97:bc: cd:c0:42:21:aa:b7:4e:fc:de:9c:35:bb:5a:4a:28:0a:28:32: 2b:92:d6:a4:78:36:7d:8b:3e:8f:73:5e:75:6a:16:46:cb:29: 98:32:e0:8e:8b:5d:6d:39:a2:96:5a:00:4b:e5:dd:a4:a2:9c: 31:f0:09:a7:8b:e7:a8:2c:75:35:d1:2a:63:00:7a:87:41:1d: 8d:f2:98:57:d4:17:c3:e7:de:97:c2:39:84:d3:39:bf:8c:f5: 3f:1f:ba:e3:f4:df:c6:37:d7:67:92:b0:6b:ac:5a:fe:3c:51: 20:d3:d5:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPcR9GHc61y+W7vbJ1mx14dbMEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA2MDUyMjM3MDhaFw0yNTA2MDkwNDExMDhaMDMxMTAvBgNV BAMTKDM2QzczQjI2ODNDNzY4NDVEQzRDOEFFOERFQjkwRDgzRTMzNjQ1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpsNvtEBSoEAxRMLbX+cnXtzOA 5mzKk8Osw2aCVUks64nmaOsteC3/tqR+SVcTHeSs+BwFLHblNJQQ5cuTN1A0oAsT 7ti+8hMjdKxNHsSn99WxJLkwiNjvTtWmDCi3Qlw4LIq/N68fVMy5q9yVblN9eKG1 32iWVUJd5fPIhl9wD6dC03hgUgZ5rPpCmcohoUV31r/fyRbI+1phxnD2l53V2yz7 NnrfAsyqItazwkhLs4BF1Q7C6YG9noHWwexVI9SgPWUTLmwJR1PCB73TukejtsRX +WVfLRI3+01ufNMhppcuQW6Q63IfOdpdi5CWIMNnIa6KNm87bVCxfHvd+SNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNsc7JoPHaEXcTIro3rkNg+M2RYMwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWfBHD4RAYck3K9cPhhgteKnzaesxPU0myG tKo8sayWjsM+vyAdDTu6jjoTZHhx8s9wFgpY7438pc94zVsaaTHNOWf3AovaC0bU fWlJ0SFj4ZlcgR2JKNDJLENKhmwgQS3vcpaQHr8woPc/u3By/3NQMAk7Bafm32yn mrW+nR8Vs9f8PScnI+OjFqYL04WXvM3AQiGqt0783pw1u1pKKAooMiuS1qR4Nn2L Po9zXnVqFkbLKZgy4I6LXW05opZaAEvl3aSinDHwCaeL56gsdTXRKmMAeodBHY3y mFfUF8Pn3pfCOYTTOb+M9T8fuuP038Y312eSsGusWv48USDT1aI= -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:28 2025 by rpki-client