$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: 6pHZDXYKIDVhgx+zRhbsxzWbBJviwptWnoaejrRHv/k= Subject key identifier: 7F:D3:1A:F3:4A:17:11:D1:A7:8D:89:70:1F:F7:3C:F9:F1:A6:4D:7D Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 18FDE4ACFF10C7BFA2477C43B7F3E6B47447E01A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: B3 Signing time: Sat 07 Jun 2025 08:01:04 +0000 Manifest this update: Sat 07 Jun 2025 07:56:04 +0000 Manifest next update: Tue 10 Jun 2025 09:10:04 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) 2: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: VH/pcBm40pqsKz8vTOZ7ivreo5GPrfyJFvdDLiIk5Y4=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 4: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fd:e4:ac:ff:10:c7:bf:a2:47:7c:43:b7:f3:e6:b4:74:47:e0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Jun 7 07:56:04 2025 GMT Not After : Jun 10 09:10:04 2025 GMT Subject: CN=7FD31AF34A1711D1A78D89701FF73CF9F1A64D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:6e:14:e1:57:c6:05:23:c3:d3:65:87:3e: 24:a3:50:19:cc:23:ee:0f:78:3b:f4:ed:17:8a:53: a9:4f:c0:e9:13:03:c6:5d:87:4d:6a:64:25:cd:0e: 4b:4f:b5:a2:5e:e3:79:77:a4:3d:99:c3:ad:d1:85: 82:a2:e7:27:f8:f6:0f:97:23:dc:02:b8:73:9b:1d: ee:37:be:f4:3f:50:fb:65:d1:5c:b6:01:b2:18:67: 60:2a:e7:17:14:79:f6:9d:ed:a1:cb:b9:00:91:cf: 44:ba:5a:d9:0f:c7:49:ac:d4:1f:cb:f8:d0:ed:01: 39:6b:dd:44:82:64:ae:83:91:8f:5b:05:d9:97:6b: bd:e3:70:52:aa:43:d6:f2:fd:84:5b:8d:c3:ce:20: b7:c7:78:a1:f6:2a:97:ac:ec:b7:43:53:19:a7:2e: 57:ba:c1:fa:3b:ef:5e:9e:62:48:c9:5e:6d:8e:c9: 8b:3c:cf:10:df:b6:d3:0b:d8:1c:28:83:a1:00:d1: 98:7d:8f:29:54:40:b2:d9:0e:ed:fc:9d:60:40:46: ae:83:38:eb:98:24:35:89:2a:96:fc:30:dd:7e:9f: e6:ef:ba:26:88:78:35:1e:9c:10:44:33:8e:46:a1: 8f:c9:0b:b6:8b:f0:c5:78:0d:ca:47:4c:bd:82:24: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:1A:F3:4A:17:11:D1:A7:8D:89:70:1F:F7:3C:F9:F1:A6:4D:7D X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:59:c4:6e:82:a8:a3:a9:15:93:8f:10:3e:ce:c7:69:e1:a3: 39:3c:e5:ee:7c:6a:10:45:66:bd:39:0b:9e:f3:f2:ea:5d:dd: 56:a9:69:3d:90:09:aa:1f:92:35:23:3d:f7:5c:9b:7d:7b:6f: a5:c1:d3:2d:aa:b2:e6:94:c0:d4:04:9e:8a:5e:92:40:58:76: 97:dc:ca:d9:1c:68:08:e8:78:8f:2a:a8:4e:c9:68:37:10:2f: c4:9b:5e:8e:a9:08:4b:6f:38:09:6d:02:2f:a3:0d:db:5d:d1: 4a:ba:d7:b9:b5:64:16:3b:a5:68:06:4a:62:f2:86:58:6d:93: 83:de:bc:93:4d:9e:ed:a6:62:9e:45:ca:83:a9:c4:3a:a1:51: d7:39:ee:18:e7:3c:2f:72:9e:f9:bf:cb:57:b1:e4:d4:5f:7c: 0e:60:47:ab:02:b2:b4:d5:39:19:40:91:e2:54:d7:98:c4:01: 40:9b:f4:e6:71:fe:c5:77:58:ef:4d:ac:81:52:75:dd:8c:0b: c5:61:a6:4a:22:6b:0a:f7:a2:7e:22:15:f4:62:34:74:ba:7c: 99:46:7f:f5:d1:11:0f:34:76:fe:d8:6f:89:c5:d6:ea:e6:18: 9b:a3:e8:cc:24:d1:0c:c9:89:2d:fa:62:b3:f0:f1:0e:48:39: c5:79:2b:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGP3krP8Qx7+iR3xDt/PmtHRH4BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTA2MDcwNzU2MDRaFw0yNTA2MTAwOTEwMDRaMDMxMTAvBgNV BAMTKDdGRDMxQUYzNEExNzExRDFBNzhEODk3MDFGRjczQ0Y5RjFBNjREN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyG4U4VfGBSPD02WHPiSjUBnM I+4PeDv07ReKU6lPwOkTA8Zdh01qZCXNDktPtaJe43l3pD2Zw63RhYKi5yf49g+X I9wCuHObHe43vvQ/UPtl0Vy2AbIYZ2Aq5xcUefad7aHLuQCRz0S6WtkPx0ms1B/L +NDtATlr3USCZK6DkY9bBdmXa73jcFKqQ9by/YRbjcPOILfHeKH2Kpes7LdDUxmn Lle6wfo7716eYkjJXm2OyYs8zxDfttML2Bwog6EA0Zh9jylUQLLZDu38nWBARq6D OOuYJDWJKpb8MN1+n+bvuiaIeDUenBBEM45GoY/JC7aL8MV4DcpHTL2CJAkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9Ma80oXEdGnjYlwH/c8+fGmTX0wHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9ZxG6CqKOpFZOPED7Ox2nhozk85e58ahBF Zr05C57z8upd3VapaT2QCaofkjUjPfdcm317b6XB0y2qsuaUwNQEnopekkBYdpfc ytkcaAjoeI8qqE7JaDcQL8SbXo6pCEtvOAltAi+jDdtd0Uq617m1ZBY7pWgGSmLy hlhtk4PevJNNnu2mYp5FyoOpxDqhUdc57hjnPC9ynvm/y1ex5NRffA5gR6sCsrTV ORlAkeJU15jEAUCb9OZx/sV3WO9NrIFSdd2MC8Vhpkoiawr3on4iFfRiNHS6fJlG f/XREQ80dv7Yb4nF1urmGJuj6Mwk0QzJiS36YrPw8Q5IOcV5K20= -----END CERTIFICATE-----Generated at Sat Jun 7 11:32:10 2025 by rpki-client