$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: +kFVrCRpRwNIHo2oinSLJquy0/ZVqaYx3jrGoZob554= Subject key identifier: 96:F4:B3:39:9F:F2:0B:28:D0:81:09:0F:1E:20:6D:8F:D6:62:22:E3 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 3F91F3D0394419BC1EFBBF5E86A1FF16068F5F63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: 4C Signing time: Thu 05 Jun 2025 21:42:31 +0000 Manifest this update: Thu 05 Jun 2025 21:37:31 +0000 Manifest next update: Mon 09 Jun 2025 07:43:31 +0000 Files and hashes: 1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: fqiXSWFrV4Z0D5yqXoXK9XZMReITknWjxG8w3sRklHU=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: cD5gEx0dEwrvz2WzKOdtUwoUqNknlxD9hmW2YZ3iQCE=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: enj3SoRMhX6a8NQDCBELu61h3RYzLEaRVwkwNREoJPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:91:f3:d0:39:44:19:bc:1e:fb:bf:5e:86:a1:ff:16:06:8f:5f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Jun 5 21:37:31 2025 GMT Not After : Jun 9 07:43:31 2025 GMT Subject: CN=96F4B3399FF20B28D081090F1E206D8FD66222E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:8f:b2:3e:24:6c:c1:bc:c3:ed:3b:fd:78: 20:8f:19:72:1e:87:4c:bb:4c:0a:3c:60:c0:d9:f4: a4:a0:45:e8:e2:bf:a6:49:2e:9a:db:aa:b6:ea:e2: 9c:d1:20:67:03:1f:29:cc:d1:82:98:2b:ab:db:fe: 94:ac:9d:c6:4a:7e:0c:b6:a4:c4:c1:c9:d0:68:bd: 3c:97:8c:dd:b1:6e:ab:0a:12:69:7c:a4:f1:9d:af: f0:14:c7:1c:34:2d:5d:b6:f9:90:25:e5:7a:3e:24: f4:dc:06:5c:66:51:b1:97:da:b2:c3:0e:f5:e2:7a: 22:43:1e:3f:c7:49:32:da:e0:0e:69:8f:76:ac:29: 2e:e0:b6:c3:bd:3f:fb:9d:b0:ac:50:42:0c:1d:63: f3:be:60:d3:9d:2e:bb:eb:42:32:d8:9d:f2:83:aa: 1c:59:be:04:8f:61:71:b1:34:da:62:c0:4c:c7:f9: 64:54:08:c6:a0:dd:3f:8a:74:60:fc:a7:e3:cd:39: ce:9b:9e:8a:19:90:4a:38:11:6f:1a:b7:57:12:79: 08:a5:81:f3:36:e9:06:a7:37:f8:10:56:c3:74:7f: 62:d5:03:aa:96:10:90:e3:9b:c4:64:2d:c7:53:a1: d0:83:7b:f2:94:06:b5:3f:2b:69:00:c3:67:01:42: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F4:B3:39:9F:F2:0B:28:D0:81:09:0F:1E:20:6D:8F:D6:62:22:E3 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:9f:8d:2b:ad:3b:3e:9f:ad:c7:00:30:53:4b:09:ea:41:4c: 08:5a:f9:f7:bd:b7:8c:09:5f:d0:59:2d:aa:f4:95:fb:82:d2: b7:b6:e5:70:15:9d:a3:84:67:bb:73:18:2e:b6:a9:f6:86:7e: 6d:65:a7:10:16:31:cb:4f:d8:68:99:ac:fe:69:2c:ec:5b:70: 5e:b3:76:8e:17:97:c9:32:c9:25:c3:8b:33:3f:4c:22:15:4f: 3e:a1:42:2d:a0:17:e9:82:df:b6:e1:ae:10:31:19:ba:91:1b: 6e:7d:3c:d1:a6:5f:11:01:43:ec:a2:79:67:25:c5:b9:1d:c0: fd:a5:89:2f:5c:e7:ec:5c:1b:d9:b5:2a:cd:34:22:6f:c6:df: ea:a0:6e:be:60:10:40:a7:bd:c0:d9:d7:4a:49:15:5e:5b:22: b3:db:57:0a:a6:cf:cf:05:88:de:48:45:fc:45:10:d9:aa:7a: 73:f2:ef:84:e8:07:9b:27:da:67:3c:72:45:ff:2e:39:40:a7: db:09:a2:7f:c4:eb:a7:f6:81:a9:ab:73:2e:5f:3f:41:b3:cf: 66:f4:50:30:d0:a0:a7:d8:ac:b4:13:a5:c7:8c:6d:51:bf:e6: 12:88:7e:e0:1d:ee:d7:0e:35:26:1e:00:84:04:74:e1:dc:50: 24:2c:d9:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5Hz0DlEGbwe+79ehqH/FgaPX2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTA2MDUyMTM3MzFaFw0yNTA2MDkwNzQzMzFaMDMxMTAvBgNV BAMTKDk2RjRCMzM5OUZGMjBCMjhEMDgxMDkwRjFFMjA2RDhGRDY2MjIyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BY+yPiRswbzD7Tv9eCCPGXIe h0y7TAo8YMDZ9KSgRejiv6ZJLprbqrbq4pzRIGcDHynM0YKYK6vb/pSsncZKfgy2 pMTBydBovTyXjN2xbqsKEml8pPGdr/AUxxw0LV22+ZAl5Xo+JPTcBlxmUbGX2rLD DvXieiJDHj/HSTLa4A5pj3asKS7gtsO9P/udsKxQQgwdY/O+YNOdLrvrQjLYnfKD qhxZvgSPYXGxNNpiwEzH+WRUCMag3T+KdGD8p+PNOc6bnooZkEo4EW8at1cSeQil gfM26QanN/gQVsN0f2LVA6qWEJDjm8RkLcdTodCDe/KUBrU/K2kAw2cBQgkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvSzOZ/yCyjQgQkPHiBtj9ZiIuMwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSfjSutOz6frccAMFNLCepBTAha+fe9t4wJ X9BZLar0lfuC0re25XAVnaOEZ7tzGC62qfaGfm1lpxAWMctP2GiZrP5pLOxbcF6z do4Xl8kyySXDizM/TCIVTz6hQi2gF+mC37bhrhAxGbqRG259PNGmXxEBQ+yieWcl xbkdwP2liS9c5+xcG9m1Ks00Im/G3+qgbr5gEECnvcDZ10pJFV5bIrPbVwqmz88F iN5IRfxFENmqenPy74ToB5sn2mc8ckX/LjlAp9sJon/E66f2gamrcy5fP0Gzz2b0 UDDQoKfYrLQTpceMbVG/5hKIfuAd7tcONSYeAIQEdOHcUCQs2VU= -----END CERTIFICATE-----Generated at Sun Jun 8 00:42:06 2025 by rpki-client