$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: dWOJILQ2lIDK8WehJv2H8a5Mk6heXXkLkNQMNBnTo34= Subject key identifier: D4:F4:16:6C:E3:D9:1E:86:12:0F:E3:FC:D2:89:BA:19:4A:56:7E:A5 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 48B731AC9E36AC7B703727B6CFBA0F546F68728B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 98 Signing time: Wed 04 Jun 2025 19:01:44 +0000 Manifest this update: Wed 04 Jun 2025 18:56:44 +0000 Manifest next update: Sun 08 Jun 2025 05:11:44 +0000 Files and hashes: 1: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: lBoCpopR20EXVeAKaVsPq5t4eAocT152Di0oY/IG6io=) 2: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: y3qun3YnKqLEegad5Mj/9oEshJmIjzi6immxhVYw8JM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b7:31:ac:9e:36:ac:7b:70:37:27:b6:cf:ba:0f:54:6f:68:72:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Jun 4 18:56:44 2025 GMT Not After : Jun 8 05:11:44 2025 GMT Subject: CN=D4F4166CE3D91E86120FE3FCD289BA194A567EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:e8:54:33:d8:7b:00:72:f6:f6:58:d8:9a: 38:d7:02:8a:65:4b:eb:91:8c:5f:04:5f:c7:a4:ad: ff:72:39:a3:7d:87:51:99:ca:7f:de:5f:8f:b1:49: 35:3e:00:59:7b:1b:d3:fd:15:bd:4f:01:04:18:89: 36:20:d0:87:dc:3f:3b:9e:58:8d:d7:63:ca:9d:34: d8:2e:ca:92:15:be:09:fa:94:8d:66:f3:d5:88:94: 88:7c:af:cc:3d:45:e0:f6:de:f3:78:4b:3a:cf:93: 82:29:78:5a:d3:3a:a7:8d:ce:60:61:89:94:4b:fb: bc:84:08:ad:d1:d0:8d:6f:49:7d:9e:67:40:3b:3e: 17:06:f1:c1:c3:e5:8e:c8:f8:9e:fd:14:6d:a9:a8: a4:f4:e5:44:61:3b:fb:a6:73:8f:ff:72:74:80:10: 1b:12:2f:51:f6:32:96:7c:c4:a7:d1:a2:6d:37:73: 82:e1:b5:79:d0:32:9f:a5:c4:65:d1:5b:1c:87:d2: c7:88:af:72:9c:a8:22:dd:5f:cf:8d:2f:90:aa:3c: 33:fd:09:b2:89:71:f6:5a:ba:8c:01:2d:45:5f:ab: 7b:d5:e1:75:a0:fc:b2:12:73:79:63:42:93:16:c8: f6:70:e2:de:19:17:f3:fd:de:cc:8d:d0:79:03:bc: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F4:16:6C:E3:D9:1E:86:12:0F:E3:FC:D2:89:BA:19:4A:56:7E:A5 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:e2:9b:54:12:bf:3b:c9:ae:be:ec:81:95:d1:c2:d2:89: 05:3a:75:73:78:6a:b2:8d:44:d6:a4:5c:cc:7c:6b:64:4f:a4: 4f:c4:4a:40:02:ba:71:9f:6d:fe:1d:34:f8:2a:eb:8f:63:af: c8:e8:2e:25:f7:bd:3a:08:8f:92:29:c6:34:6f:3f:62:a4:87: 67:92:17:09:19:f8:ac:d4:39:d5:a9:27:fb:58:fb:65:f9:3d: 88:67:f9:4e:34:66:1b:17:8b:56:f6:41:bf:bd:0a:cf:ef:48: 1a:a6:7a:21:27:dd:f9:bd:1c:6f:70:f2:af:4b:4a:e2:76:d3: 39:3e:e7:3d:09:f1:c0:28:e8:96:0f:48:6a:4f:3d:34:f8:3c: d5:e7:34:41:c3:37:68:27:ee:86:52:ed:70:00:7d:77:87:fc: 8c:6c:c1:df:1f:d7:4d:8b:cc:46:1a:ff:06:9b:e5:a2:57:91: e4:9b:4e:84:21:d4:f2:59:0e:2f:68:2d:e5:dc:96:87:00:d8: 89:28:d0:5e:7b:38:59:6b:0a:d3:be:9e:02:d7:84:0f:42:3b: 63:4d:ac:07:50:63:f5:13:83:c7:10:19:e5:90:8e:fd:7d:d6: c9:5e:4f:a3:6f:3b:01:26:98:d3:3f:31:f1:4e:43:ec:6b:56: 55:45:dc:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLcxrJ42rHtwNye2z7oPVG9ocoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNTA2MDQxODU2NDRaFw0yNTA2MDgwNTExNDRaMDMxMTAvBgNV BAMTKEQ0RjQxNjZDRTNEOTFFODYxMjBGRTNGQ0QyODlCQTE5NEE1NjdFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MOhUM9h7AHL29ljYmjjXAopl S+uRjF8EX8ekrf9yOaN9h1GZyn/eX4+xSTU+AFl7G9P9Fb1PAQQYiTYg0IfcPzue WI3XY8qdNNguypIVvgn6lI1m89WIlIh8r8w9ReD23vN4SzrPk4IpeFrTOqeNzmBh iZRL+7yECK3R0I1vSX2eZ0A7PhcG8cHD5Y7I+J79FG2pqKT05URhO/umc4//cnSA EBsSL1H2MpZ8xKfRom03c4LhtXnQMp+lxGXRWxyH0seIr3KcqCLdX8+NL5CqPDP9 CbKJcfZauowBLUVfq3vV4XWg/LISc3ljQpMWyPZw4t4ZF/P93syN0HkDvJwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1PQWbOPZHoYSD+P80om6GUpWfqUwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjz4ptUEr87ya6+7IGV0cLSiQU6dXN4arKN RNakXMx8a2RPpE/ESkACunGfbf4dNPgq649jr8joLiX3vToIj5IpxjRvP2Kkh2eS FwkZ+KzUOdWpJ/tY+2X5PYhn+U40ZhsXi1b2Qb+9Cs/vSBqmeiEn3fm9HG9w8q9L SuJ20zk+5z0J8cAo6JYPSGpPPTT4PNXnNEHDN2gn7oZS7XAAfXeH/Ixswd8f102L zEYa/wab5aJXkeSbToQh1PJZDi9oLeXclocA2Iko0F57OFlrCtO+ngLXhA9CO2NN rAdQY/UTg8cQGeWQjv191sleT6NvOwEmmNM/MfFOQ+xrVlVF3BI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:15 2025 by rpki-client