$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: fXxb7bp6P2MzFZ2w3PcPZvX0VBae4shcFCRL/4nvjB8= Subject key identifier: 1F:E3:58:65:0B:61:34:95:57:D5:7A:C5:E9:26:80:17:3E:AC:51:38 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 7D1E2F898D6ADBB10E6D4F6D75E61B96C2C27B8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 6A Signing time: Wed 23 Jul 2025 15:01:24 +0000 Manifest this update: Wed 23 Jul 2025 14:56:24 +0000 Manifest next update: Sat 26 Jul 2025 20:44:24 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 2: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: DcKvZYGlGLngTHX9o+b9Ml1orBq/sFq3nQvs+7CUGFc=) 3: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1e:2f:89:8d:6a:db:b1:0e:6d:4f:6d:75:e6:1b:96:c2:c2:7b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Jul 23 14:56:24 2025 GMT Not After : Jul 26 20:44:24 2025 GMT Subject: CN=1FE358650B61349557D57AC5E92680173EAC5138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:5d:f2:0d:33:38:01:d2:84:a0:07:06:50: 23:9b:24:9a:04:64:2f:77:6f:5c:03:dd:97:9e:be: a0:d2:ee:5a:1b:b5:20:b1:ec:50:2a:16:32:f1:51: 78:e2:6f:c9:b9:64:a2:6a:3d:43:9d:17:ee:fe:d1: ad:41:3b:0c:6e:03:37:9a:b9:f4:5b:89:30:fd:3d: 00:27:f2:6d:68:c6:87:8b:cd:ec:8e:5b:c5:ff:4b: e9:b6:69:da:66:c1:54:c9:b2:09:c5:68:90:ae:01: 0a:64:ec:4d:5d:9e:f9:49:e8:b0:86:71:ea:0d:1d: ee:9e:d5:9d:aa:ca:6e:e4:01:27:55:2c:05:3e:55: c5:d3:79:9a:6e:32:f9:06:de:1f:4e:3a:e9:72:7a: a1:7c:d2:9e:06:ed:35:78:3a:fa:b7:0e:42:57:0b: 32:2a:81:0b:92:30:60:38:1d:19:30:2b:60:c1:75: d7:1a:e7:98:cf:5e:20:b4:d2:80:b5:79:cd:c1:1b: e7:34:03:f6:82:d1:f1:59:6c:de:4b:b2:d5:b4:fe: 8d:71:43:4c:a5:e8:9e:48:cb:d8:83:3d:e8:8b:07: 6c:b8:fe:ab:e2:ec:52:31:1a:86:47:b1:28:af:28: 57:09:f4:a9:cd:73:cc:94:01:85:2e:da:66:e1:f7: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E3:58:65:0B:61:34:95:57:D5:7A:C5:E9:26:80:17:3E:AC:51:38 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c1:49:51:33:e1:85:88:2b:9c:a8:e8:0b:66:f0:98:7c:80: 60:cb:2a:a9:de:f6:26:8b:60:fa:11:22:6b:0c:38:9f:2c:e4: 41:db:99:80:2f:e5:04:76:ba:98:2a:18:39:54:ba:b4:6c:e5: 88:cf:71:59:18:45:28:54:76:af:bc:7a:6d:4d:55:e6:05:c4: 9f:78:1c:91:84:d9:c6:9d:db:99:47:26:7d:a0:e7:92:2f:d6: 87:db:a5:00:77:a8:4f:c9:03:f7:51:4a:f0:e1:1f:2f:4f:18: 19:e4:8c:68:c7:fc:82:30:53:2d:8b:83:a8:ad:f2:cd:c5:b8: b9:f4:da:e6:66:93:57:c4:06:03:8f:b7:0b:c5:90:b0:ce:cf: c2:e8:61:8e:14:b9:7f:82:9c:9e:43:84:2d:03:29:8b:1e:f9: d2:bf:e1:bd:8b:82:bb:bd:d4:7a:0a:6d:65:69:a3:07:be:e5: ae:2e:91:28:0e:e2:af:9f:55:de:59:aa:f9:87:c0:f7:b3:24: b5:64:c0:40:67:42:a1:ba:68:ba:79:8a:6e:b1:85:7c:ba:c0: 03:a8:0f:62:0d:93:4d:e3:1a:bc:b3:c1:a0:2c:93:fd:56:86: a7:5d:6a:d0:6c:76:ee:6a:7f:c2:bb:59:77:d1:32:54:37:5c: 0b:d7:9a:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfR4viY1q27EObU9tdeYblsLCe4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA3MjMxNDU2MjRaFw0yNTA3MjYyMDQ0MjRaMDMxMTAvBgNV BAMTKDFGRTM1ODY1MEI2MTM0OTU1N0Q1N0FDNUU5MjY4MDE3M0VBQzUxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0V3yDTM4AdKEoAcGUCObJJoE ZC93b1wD3ZeevqDS7lobtSCx7FAqFjLxUXjib8m5ZKJqPUOdF+7+0a1BOwxuAzea ufRbiTD9PQAn8m1oxoeLzeyOW8X/S+m2adpmwVTJsgnFaJCuAQpk7E1dnvlJ6LCG ceoNHe6e1Z2qym7kASdVLAU+VcXTeZpuMvkG3h9OOulyeqF80p4G7TV4Ovq3DkJX CzIqgQuSMGA4HRkwK2DBddca55jPXiC00oC1ec3BG+c0A/aC0fFZbN5LstW0/o1x Q0yl6J5Iy9iDPeiLB2y4/qvi7FIxGoZHsSivKFcJ9KnNc8yUAYUu2mbh96dNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+NYZQthNJVX1XrF6SaAFz6sUTgwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/BSVEz4YWIK5yo6Atm8Jh8gGDLKqne9iaL YPoRImsMOJ8s5EHbmYAv5QR2upgqGDlUurRs5YjPcVkYRShUdq+8em1NVeYFxJ94 HJGE2cad25lHJn2g55Iv1ofbpQB3qE/JA/dRSvDhHy9PGBnkjGjH/IIwUy2Lg6it 8s3FuLn02uZmk1fEBgOPtwvFkLDOz8LoYY4UuX+CnJ5DhC0DKYse+dK/4b2Lgru9 1HoKbWVpowe+5a4ukSgO4q+fVd5ZqvmHwPezJLVkwEBnQqG6aLp5im6xhXy6wAOo D2INk03jGryzwaAsk/1WhqddatBsdu5qf8K7WXfRMlQ3XAvXmn8= -----END CERTIFICATE-----Generated at Thu Jul 24 08:13:47 2025 by rpki-client