$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: QK9ymVl+qjVv2VTMm1RC2/gI6TfgEI4PkwiFzJ0PcLY= Subject key identifier: 84:76:45:6D:66:B5:01:84:3B:73:F4:08:A1:D5:96:50:70:82:DE:C4 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 71FA6AA6A47896AFFA33F68FE95F1C76FDE3C72A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: C7 Signing time: Mon 21 Jul 2025 17:01:02 +0000 Manifest this update: Mon 21 Jul 2025 16:56:02 +0000 Manifest next update: Thu 24 Jul 2025 18:46:02 +0000 Files and hashes: 1: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: hnGMr3if0RVpArQ4KMbgqnDul4vp3eqhtB2zfnR60Oo=) 2: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 4: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fa:6a:a6:a4:78:96:af:fa:33:f6:8f:e9:5f:1c:76:fd:e3:c7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Jul 21 16:56:02 2025 GMT Not After : Jul 24 18:46:02 2025 GMT Subject: CN=8476456D66B501843B73F408A1D596507082DEC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:b1:eb:c5:e5:1c:04:ae:87:9e:30:5e:fa: 6e:de:cf:05:75:23:a2:29:27:60:cc:e3:5b:42:b6: 56:a7:1f:04:c2:a2:0c:1f:76:a1:78:05:da:7c:5e: 78:16:27:6d:d6:74:29:43:ad:72:a3:2f:14:30:33: 6d:73:4b:0a:03:c3:8b:bd:f1:37:9e:8d:70:e2:4e: 66:3e:f7:32:58:bb:4a:33:8e:1b:9c:96:1d:b5:4c: d8:fc:da:97:d4:29:76:f6:75:4b:50:4e:23:38:b4: 4a:f3:6f:e5:85:25:d1:7d:66:9f:0f:55:a8:e2:ea: 12:c7:ff:13:52:76:56:35:83:1a:f0:8e:0f:1d:d4: 46:9f:64:42:2a:51:c3:2e:0c:2f:22:43:8d:cb:42: ac:c4:17:2a:b9:f1:37:ea:8f:9c:16:f2:b0:0d:4b: e2:d8:91:3c:64:65:3f:fe:69:4b:db:57:68:b4:aa: e4:a0:f2:75:4d:03:1b:96:5c:9a:0e:b8:b8:02:3c: 75:45:e9:b3:4a:be:41:e0:91:6e:bb:7a:a7:18:ad: f5:49:66:4c:11:d5:7e:50:03:7a:28:e8:9a:72:f7: b1:2c:f1:91:ac:8a:fc:17:2c:78:33:a9:bb:3c:65: 85:b1:02:19:de:a5:d7:60:0f:97:dc:aa:64:84:22: 03:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:76:45:6D:66:B5:01:84:3B:73:F4:08:A1:D5:96:50:70:82:DE:C4 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:25:88:57:31:a9:bb:6a:df:5a:b9:f7:00:ec:bb:b2:ee:2b: b8:5c:36:b7:11:fe:9b:bb:b4:4f:46:e4:7d:ab:f9:70:2e:15: f7:70:00:82:98:94:5b:03:32:ab:ff:0c:b9:24:c0:b9:33:c7: 43:0d:3a:dc:b7:f0:0f:23:ac:12:f1:f6:a8:e8:78:bd:4b:a3: d6:4e:a4:a5:89:2a:d7:6c:38:a6:f2:41:57:32:e6:20:22:ed: d3:19:c9:26:46:78:f7:3f:85:69:e4:4b:52:e7:80:03:9a:da: b2:a5:b4:32:c6:40:0c:5d:55:f0:9a:7e:e8:b0:e6:6d:3e:f6: f1:3b:af:36:39:07:bb:5a:c0:1b:55:9e:bc:d4:24:39:8e:1d: 22:fa:85:0c:85:5b:13:32:e8:31:67:88:72:14:0c:9d:46:aa: bc:2c:d6:18:eb:95:da:70:bf:23:de:2e:83:12:60:e4:25:17: da:cd:bc:4d:67:2e:3e:54:fe:82:ad:6a:ba:be:4e:ee:f5:65: 0e:0c:36:cd:9e:70:f9:7a:e2:29:e8:18:f6:7b:5e:5a:7e:bf: 5d:be:15:a0:2f:df:14:db:b1:aa:aa:fd:4a:10:6d:ea:95:e3: 16:bd:17:96:a6:41:1e:01:20:e4:b6:e6:73:42:2a:48:54:50: 6e:64:2f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfpqpqR4lq/6M/aP6V8cdv3jxyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTA3MjExNjU2MDJaFw0yNTA3MjQxODQ2MDJaMDMxMTAvBgNV BAMTKDg0NzY0NTZENjZCNTAxODQzQjczRjQwOEExRDU5NjUwNzA4MkRFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqbHrxeUcBK6HnjBe+m7ezwV1 I6IpJ2DM41tCtlanHwTCogwfdqF4Bdp8XngWJ23WdClDrXKjLxQwM21zSwoDw4u9 8TeejXDiTmY+9zJYu0ozjhuclh21TNj82pfUKXb2dUtQTiM4tErzb+WFJdF9Zp8P Vaji6hLH/xNSdlY1gxrwjg8d1EafZEIqUcMuDC8iQ43LQqzEFyq58Tfqj5wW8rAN S+LYkTxkZT/+aUvbV2i0quSg8nVNAxuWXJoOuLgCPHVF6bNKvkHgkW67eqcYrfVJ ZkwR1X5QA3oo6Jpy97Es8ZGsivwXLHgzqbs8ZYWxAhnepddgD5fcqmSEIgP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHZFbWa1AYQ7c/QIodWWUHCC3sQwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAliFcxqbtq31q59wDsu7LuK7hcNrcR/pu7 tE9G5H2r+XAuFfdwAIKYlFsDMqv/DLkkwLkzx0MNOty38A8jrBLx9qjoeL1Lo9ZO pKWJKtdsOKbyQVcy5iAi7dMZySZGePc/hWnkS1LngAOa2rKltDLGQAxdVfCafuiw 5m0+9vE7rzY5B7tawBtVnrzUJDmOHSL6hQyFWxMy6DFniHIUDJ1Gqrws1hjrldpw vyPeLoMSYOQlF9rNvE1nLj5U/oKtarq+Tu71ZQ4MNs2ecPl64inoGPZ7Xlp+v12+ FaAv3xTbsaqq/UoQbeqV4xa9F5amQR4BIOS25nNCKkhUUG5kL3Y= -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:23 2025 by rpki-client