$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: HHLm/BVEKirWnwtW3aJ3rjCEonXVuUoiiFc9OskLy4w= Subject key identifier: D3:90:E0:2C:01:3A:BB:8C:D8:77:F1:F0:18:E9:30:79:92:75:15:CA Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 170229E2D35425FE2A4A22DE016C8DA62A404BAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01CB Signing time: Fri 06 Jun 2025 22:31:39 +0000 Manifest this update: Fri 06 Jun 2025 22:26:39 +0000 Manifest next update: Mon 09 Jun 2025 23:35:39 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 2: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 3: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 4: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: gTVmOTalY9p6rQYk7Pk3vL5Z06ZeeX/ftRforZfOaiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:02:29:e2:d3:54:25:fe:2a:4a:22:de:01:6c:8d:a6:2a:40:4b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Jun 6 22:26:39 2025 GMT Not After : Jun 9 23:35:39 2025 GMT Subject: CN=D390E02C013ABB8CD877F1F018E93079927515CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5a:72:f8:95:98:f6:18:1a:39:35:f0:e4:a7: 4d:9d:91:db:52:bd:52:53:7c:cb:eb:41:83:93:71: 2b:3f:b3:7f:19:81:74:2d:c5:e0:66:b0:6a:f5:60: cd:f4:6c:e3:21:94:5f:05:f9:ed:79:47:35:74:7b: 2c:17:d5:93:fc:7a:ef:2c:e0:53:6c:7d:7d:fd:73: b2:19:2b:ad:22:dd:28:5e:99:9f:0f:8b:aa:61:d8: 37:00:52:0f:e5:fa:ea:6d:3a:9c:4d:20:a5:fb:33: f0:bf:c2:38:d8:a8:58:70:49:ed:a8:e4:5b:91:fd: 18:0b:b2:c2:a0:fa:16:b6:34:a6:c4:47:90:86:75: 3c:a6:a5:49:40:d4:17:2b:ad:13:15:c5:b9:58:fe: 28:19:d3:ff:ed:d6:30:0b:21:a9:73:35:fa:88:7e: 81:cf:c3:b2:2e:4c:c3:c6:a0:3c:f5:1f:8a:0f:d8: 59:72:2a:b9:70:c6:4b:28:11:83:fb:3b:f3:08:b0: c4:d4:7f:ff:fd:19:80:65:4a:7c:b3:e2:6f:10:7b: ea:b5:75:5f:17:c8:4a:78:5d:f6:7b:00:87:2d:30: c9:a7:e9:29:5f:91:4c:2b:cf:a3:d5:8d:e9:ea:76: e3:23:14:4e:d5:e3:0a:26:60:cb:e9:9c:89:57:31: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:E0:2C:01:3A:BB:8C:D8:77:F1:F0:18:E9:30:79:92:75:15:CA X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ee:ca:8a:60:ed:d1:db:d0:56:f9:ba:04:20:a7:f1:44:4f: 57:5f:c3:20:8f:a0:a1:b3:57:29:e3:77:63:b4:72:e6:a4:ea: 19:7c:51:3b:16:88:dd:52:9a:03:df:6c:bc:95:8d:2b:e6:27: 7b:f8:db:0a:67:77:38:fd:3f:a8:16:3b:67:00:ac:fc:5f:a1: 80:f1:bf:36:31:b7:cc:b3:23:15:6e:d9:d8:17:75:39:6c:5f: 4a:90:fd:a4:ee:94:69:cb:d9:53:93:62:f7:62:1f:fd:32:bd: 10:4b:16:6a:f2:64:18:ea:74:0c:15:b3:ea:c8:66:a5:bf:6c: ff:91:c9:fe:fb:b1:92:b4:cd:13:07:80:9b:50:ad:30:02:f2: f8:0f:09:13:b6:3a:ec:6a:7e:96:da:11:cc:4f:4c:56:6f:2f: 42:d5:f1:92:83:b7:e7:b6:50:62:c4:a4:43:d7:9a:a1:85:11: ec:19:f8:ae:3d:b3:65:f1:f1:41:7d:bd:20:d7:3a:f7:da:74: f0:16:8b:39:94:53:1a:83:5b:b6:31:9f:22:56:c5:66:c7:45: 6a:3a:1c:a5:ea:56:17:32:7e:09:53:b0:b6:8f:99:93:8e:35: d5:82:1a:29:12:84:2a:cd:79:3b:52:a0:74:70:cd:bc:26:f1: a9:51:2d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwIp4tNUJf4qSiLeAWyNpipAS6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA2MDYyMjI2MzlaFw0yNTA2MDkyMzM1MzlaMDMxMTAvBgNV BAMTKEQzOTBFMDJDMDEzQUJCOENEODc3RjFGMDE4RTkzMDc5OTI3NTE1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjWnL4lZj2GBo5NfDkp02dkdtS vVJTfMvrQYOTcSs/s38ZgXQtxeBmsGr1YM30bOMhlF8F+e15RzV0eywX1ZP8eu8s 4FNsfX39c7IZK60i3ShemZ8Pi6ph2DcAUg/l+uptOpxNIKX7M/C/wjjYqFhwSe2o 5FuR/RgLssKg+ha2NKbER5CGdTympUlA1BcrrRMVxblY/igZ0//t1jALIalzNfqI foHPw7IuTMPGoDz1H4oP2FlyKrlwxksoEYP7O/MIsMTUf//9GYBlSnyz4m8Qe+q1 dV8XyEp4XfZ7AIctMMmn6SlfkUwrz6PVjenqduMjFE7V4womYMvpnIlXMbb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05DgLAE6u4zYd/HwGOkweZJ1FcowHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALuyopg7dHb0Fb5ugQgp/FET1dfwyCPoKGz Vynjd2O0cuak6hl8UTsWiN1SmgPfbLyVjSvmJ3v42wpndzj9P6gWO2cArPxfoYDx vzYxt8yzIxVu2dgXdTlsX0qQ/aTulGnL2VOTYvdiH/0yvRBLFmryZBjqdAwVs+rI ZqW/bP+Ryf77sZK0zRMHgJtQrTAC8vgPCRO2OuxqfpbaEcxPTFZvL0LV8ZKDt+e2 UGLEpEPXmqGFEewZ+K49s2Xx8UF9vSDXOvfadPAWizmUUxqDW7YxnyJWxWbHRWo6 HKXqVhcyfglTsLaPmZOONdWCGikShCrNeTtSoHRwzbwm8alRLXw= -----END CERTIFICATE-----Generated at Sat Jun 7 18:37:27 2025 by rpki-client