$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: LRLDC3wiV/WbJWmIpwZq3SsD8+aXx5qiKIuqqWdW4xU= Subject key identifier: 3C:65:46:E0:94:48:4F:CF:BB:A6:DA:8A:2E:0F:C9:12:00:8E:B5:28 Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 1F4E663768FEEA948483715B196DC8700C0DA6D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 01DE Signing time: Thu 24 Jul 2025 16:02:08 +0000 Manifest this update: Thu 24 Jul 2025 15:57:08 +0000 Manifest next update: Sun 27 Jul 2025 20:37:08 +0000 Files and hashes: 1: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=) 2: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: HxhKJjSGo8qiFJ/8TpA+w6rClbNZeRh/5qxb7Q/FNHo=) 3: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=) 4: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4e:66:37:68:fe:ea:94:84:83:71:5b:19:6d:c8:70:0c:0d:a6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Jul 24 15:57:08 2025 GMT Not After : Jul 27 20:37:08 2025 GMT Subject: CN=3C6546E094484FCFBBA6DA8A2E0FC912008EB528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:44:2c:a7:2b:5e:5a:3f:e8:28:eb:72:26: 71:cd:dd:3f:92:14:5a:cf:dc:30:f3:9c:9a:de:56: 80:78:b9:50:18:e5:f1:c9:7f:32:b1:44:40:81:3a: 4f:9b:0b:89:25:28:ac:e5:0d:85:cf:df:7c:79:17: e3:91:c0:24:3d:68:65:5c:e5:59:ac:60:75:fd:9a: 0a:80:33:50:bd:fc:6f:53:11:d6:59:86:03:30:1d: 96:b5:0f:a2:db:0f:d3:5f:45:d2:a0:b3:cc:2b:bf: 66:64:2e:e3:d6:69:2d:52:87:72:7d:a6:e4:9a:3a: 10:41:89:6f:98:de:24:78:1d:c8:93:73:af:f5:0b: b6:3c:11:82:16:04:e2:23:a9:5e:3b:d2:a3:e3:02: 8c:22:b8:03:98:f7:06:04:a4:ae:a5:7b:4d:60:3a: ab:96:a8:b0:3d:1a:ab:8f:4a:9c:ec:37:ca:61:5a: 4e:32:90:30:cc:c3:44:35:44:1e:28:93:14:1f:b1: 77:47:78:0d:20:f4:9d:fa:d8:ba:e9:f7:b9:bd:00: ab:bc:ef:b8:a5:c7:f4:f3:29:cf:89:01:8f:45:f9: 6d:6e:35:33:0e:28:3b:c7:02:1e:af:fb:f4:b6:08: 89:e1:e1:fc:87:26:b7:4d:99:b9:b5:e3:db:88:59: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:65:46:E0:94:48:4F:CF:BB:A6:DA:8A:2E:0F:C9:12:00:8E:B5:28 X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:04:75:f7:9e:98:9d:1c:9b:de:c3:b5:0f:42:7c:40:d7:f5: 8f:0e:64:5f:04:03:fb:6a:be:d5:31:0f:73:4c:cd:9f:ee:6e: ea:06:a0:a1:99:05:7a:12:75:0f:17:ce:c4:f7:dc:53:b0:4d: 8a:30:07:3a:66:cb:ff:d9:4d:94:7c:f7:58:bb:b3:cc:31:ad: f6:c6:11:1b:07:3e:d5:cb:c1:d4:f7:90:6f:fd:32:bc:88:e7: 3f:e5:e7:52:c4:51:e6:cc:de:2b:2e:bc:50:a3:cb:66:00:bb: ea:85:2a:15:52:a0:6c:6b:9e:f4:a0:df:e5:7b:87:e2:a8:52: 32:d8:fa:a9:19:5e:08:85:1a:e8:8f:73:32:0d:4c:4a:6e:2a: 7e:e6:a0:53:ab:7f:eb:0f:5a:fe:51:9a:d3:f1:33:e7:c9:32: 03:a2:d1:fb:9f:26:54:11:d0:9a:f7:fc:87:a4:78:1d:aa:61: 15:94:9d:0a:04:05:cd:81:2e:74:79:1b:37:fd:2c:57:c6:eb: bc:65:dd:89:aa:9b:85:bb:a5:78:2e:89:9d:36:bc:ae:4d:6c: 92:6c:3e:a7:46:62:7f:a5:e3:5d:48:37:17:07:26:46:26:c9: 84:02:85:df:37:03:d7:e4:57:ee:57:da:71:4e:ac:b8:d6:fa: 84:55:6b:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH05mN2j+6pSEg3FbGW3IcAwNptIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTA3MjQxNTU3MDhaFw0yNTA3MjcyMDM3MDhaMDMxMTAvBgNV BAMTKDNDNjU0NkUwOTQ0ODRGQ0ZCQkE2REE4QTJFMEZDOTEyMDA4RUI1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAUQspyteWj/oKOtyJnHN3T+S FFrP3DDznJreVoB4uVAY5fHJfzKxRECBOk+bC4klKKzlDYXP33x5F+ORwCQ9aGVc 5VmsYHX9mgqAM1C9/G9TEdZZhgMwHZa1D6LbD9NfRdKgs8wrv2ZkLuPWaS1Sh3J9 puSaOhBBiW+Y3iR4HciTc6/1C7Y8EYIWBOIjqV470qPjAowiuAOY9wYEpK6le01g OquWqLA9GquPSpzsN8phWk4ykDDMw0Q1RB4okxQfsXdHeA0g9J362Lrp97m9AKu8 77ilx/TzKc+JAY9F+W1uNTMOKDvHAh6v+/S2CInh4fyHJrdNmbm149uIWfRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPGVG4JRIT8+7ptqKLg/JEgCOtSgwHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMEdfeemJ0cm97DtQ9CfEDX9Y8OZF8EA/tq vtUxD3NMzZ/ubuoGoKGZBXoSdQ8XzsT33FOwTYowBzpmy//ZTZR891i7s8wxrfbG ERsHPtXLwdT3kG/9MryI5z/l51LEUebM3isuvFCjy2YAu+qFKhVSoGxrnvSg3+V7 h+KoUjLY+qkZXgiFGuiPczINTEpuKn7moFOrf+sPWv5RmtPxM+fJMgOi0fufJlQR 0Jr3/IekeB2qYRWUnQoEBc2BLnR5Gzf9LFfG67xl3Ymqm4W7pXguiZ02vK5NbJJs PqdGYn+l411INxcHJkYmyYQChd83A9fkV+5X2nFOrLjW+oRVa6k= -----END CERTIFICATE-----Generated at Sat Jul 26 07:24:12 2025 by rpki-client