$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: FtWmBhfh9fE+AlW+oEsBX03jZ1oCOlvxJa/Yc9NcY6Y= Subject key identifier: 27:E0:45:EE:FE:27:A9:E6:58:15:BF:81:08:35:90:39:94:C0:35:A9 Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 3711E840E8113422C7F53DB72419E7641F60482D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 0160 Signing time: Sat 07 Jun 2025 03:51:43 +0000 Manifest this update: Sat 07 Jun 2025 03:46:43 +0000 Manifest next update: Tue 10 Jun 2025 14:08:43 +0000 Files and hashes: 1: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 2: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: 4XqandTOUVqRuRIY8dhoi1EGGVf8j9uZLUYr/kdT1Io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 14:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:11:e8:40:e8:11:34:22:c7:f5:3d:b7:24:19:e7:64:1f:60:48:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Jun 7 03:46:43 2025 GMT Not After : Jun 10 14:08:43 2025 GMT Subject: CN=27E045EEFE27A9E65815BF810835903994C035A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:01:48:25:9a:f7:46:90:7f:b6:4e:d4:97: 7d:a9:79:87:c5:60:da:f1:d8:20:e4:de:e0:ca:e7: b6:18:d6:93:d9:87:50:25:40:40:21:8c:c2:5a:77: 8c:01:e9:47:98:0e:c6:9c:62:40:8d:d4:fe:87:62: 6d:de:cf:fd:3c:fd:9d:c6:b4:ff:c9:2d:fd:da:20: 58:a7:b2:d5:fa:20:c8:39:d7:8b:dc:b0:14:34:47: a9:95:8a:e9:06:1b:52:09:a0:c1:88:c3:48:b2:aa: 0c:77:f7:b0:58:e9:3e:29:52:fa:86:9a:32:58:91: 9d:8e:8a:e6:e2:3c:34:0f:35:f3:21:30:2d:96:20: 65:ae:37:52:77:be:48:ec:8c:e1:ed:d2:01:02:72: 48:71:8f:41:62:61:25:79:2a:b9:41:ef:34:de:c1: 83:78:3e:0c:bc:13:e8:ee:14:a1:1a:73:c7:a6:c8: 5d:bb:cf:09:d9:9f:a3:0c:40:15:b3:48:2f:c7:e8: 68:a4:2b:8c:d8:2a:d7:78:c2:bd:19:3d:b2:f6:07: 98:d1:0f:e5:ff:21:6b:0e:af:0d:38:cb:3c:40:3f: 74:5c:3a:25:69:2e:ef:5b:1e:6a:21:16:97:9e:3d: 62:cc:9a:cc:60:45:43:43:3f:01:8c:6b:fe:eb:3b: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E0:45:EE:FE:27:A9:E6:58:15:BF:81:08:35:90:39:94:C0:35:A9 X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:05:22:fd:8b:e1:ff:59:5a:ce:9e:dc:ca:cd:af:de:10:0d: f2:5e:70:40:a2:2a:b7:59:29:c0:1b:2e:89:ba:47:d4:df:d7: f7:8e:83:2d:48:01:1c:c3:f3:79:ef:c2:af:11:d6:70:8c:5a: 51:ec:47:31:65:ad:81:01:cf:d6:8e:54:02:0b:d3:f7:0a:2b: e4:f5:f2:e0:ed:e6:c4:21:57:de:05:9a:a2:76:39:17:a3:35: df:51:59:21:c8:ab:54:a5:5c:70:a6:5b:78:57:a5:0c:ce:ad: a0:cc:a6:70:db:28:39:0a:7b:e1:1d:ec:3f:75:89:bb:9c:6c: 91:13:c9:bb:ab:e7:af:c1:f8:5c:a4:09:7c:e6:1d:43:39:e3: ea:77:0f:0f:2f:fa:f7:f5:9f:ff:7b:f6:4a:ce:e5:d4:28:7f: 23:ae:5e:66:e0:58:ff:ba:e6:16:e8:7a:ac:99:09:0c:6c:e7: 33:c3:f1:c5:d0:a9:79:5a:f7:69:59:9a:8d:96:2e:f3:66:ac: 73:d2:ba:d0:f1:74:96:6b:e5:51:0c:41:2a:99:0f:ca:88:b8: 34:d4:c5:25:bc:85:71:3f:58:29:49:06:4f:f2:01:39:9c:7f: 69:c8:93:cc:a9:24:0e:66:cc:3f:dc:bf:0f:8f:4d:48:51:d4: 95:a6:f4:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxHoQOgRNCLH9T23JBnnZB9gSC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTA2MDcwMzQ2NDNaFw0yNTA2MTAxNDA4NDNaMDMxMTAvBgNV BAMTKDI3RTA0NUVFRkUyN0E5RTY1ODE1QkY4MTA4MzU5MDM5OTRDMDM1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUggFIJZr3RpB/tk7Ul32peYfF YNrx2CDk3uDK57YY1pPZh1AlQEAhjMJad4wB6UeYDsacYkCN1P6HYm3ez/08/Z3G tP/JLf3aIFinstX6IMg514vcsBQ0R6mViukGG1IJoMGIw0iyqgx397BY6T4pUvqG mjJYkZ2OiubiPDQPNfMhMC2WIGWuN1J3vkjsjOHt0gECckhxj0FiYSV5KrlB7zTe wYN4Pgy8E+juFKEac8emyF27zwnZn6MMQBWzSC/H6GikK4zYKtd4wr0ZPbL2B5jR D+X/IWsOrw04yzxAP3RcOiVpLu9bHmohFpeePWLMmsxgRUNDPwGMa/7rO2dnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+BF7v4nqeZYFb+BCDWQOZTANakwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMFIv2L4f9ZWs6e3MrNr94QDfJecECiKrdZ KcAbLom6R9Tf1/eOgy1IARzD83nvwq8R1nCMWlHsRzFlrYEBz9aOVAIL0/cKK+T1 8uDt5sQhV94FmqJ2ORejNd9RWSHIq1SlXHCmW3hXpQzOraDMpnDbKDkKe+Ed7D91 ibucbJETybur56/B+FykCXzmHUM54+p3Dw8v+vf1n/979krO5dQofyOuXmbgWP+6 5hboeqyZCQxs5zPD8cXQqXla92lZmo2WLvNmrHPSutDxdJZr5VEMQSqZD8qIuDTU xSW8hXE/WClJBk/yATmcf2nIk8ypJA5mzD/cvw+PTUhR1JWm9Lg= -----END CERTIFICATE-----Generated at Sat Jun 7 20:54:32 2025 by rpki-client