$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: wM1aDj8rF1tDVNU2UazGbnAAixIAqTbGQTTDv0QUkzw= Subject key identifier: 90:C2:50:A9:21:03:CB:87:75:0B:7D:75:E1:EC:FF:CB:38:04:0B:8A Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 6D415C4AEC5D1A968616E35D30F9D273A49ABF60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 0185 Signing time: Sun 20 Jul 2025 17:22:09 +0000 Manifest this update: Sun 20 Jul 2025 17:17:09 +0000 Manifest next update: Wed 23 Jul 2025 18:44:09 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: v+A08X+JwNnw+tF+wgy13iY/Vmon4ER/uLYLJAPvUO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:41:5c:4a:ec:5d:1a:96:86:16:e3:5d:30:f9:d2:73:a4:9a:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Jul 20 17:17:09 2025 GMT Not After : Jul 23 18:44:09 2025 GMT Subject: CN=90C250A92103CB87750B7D75E1ECFFCB38040B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:f5:4f:dd:5f:27:2b:66:a9:63:e3:11:10: 15:64:56:32:18:7e:e7:a0:3a:a8:76:d9:87:34:e2: 30:a1:19:46:45:d2:c9:a7:00:b2:78:60:e9:99:98: 29:00:ca:b9:3b:37:fd:bd:94:53:89:20:cb:18:f7: 3b:f8:cb:7d:06:13:07:ce:10:ce:41:2d:c3:d3:da: 9a:b2:90:f3:29:ed:a3:df:a3:ad:1e:70:f4:59:00: 8c:c1:db:41:b5:9b:b9:b6:38:2c:f6:75:26:61:52: b7:0e:77:f4:33:20:6c:23:bd:00:68:d7:2a:90:d3: bc:80:11:c0:48:2a:c7:fd:77:2e:43:03:02:03:fd: db:44:69:a5:f4:6b:f3:14:d5:15:66:5f:22:67:51: d9:33:23:0c:cb:d5:f1:64:cd:80:08:9e:82:a3:5d: dc:b0:ed:67:46:eb:d1:0f:8b:19:7a:b2:16:2d:fd: ac:5e:04:1c:9e:31:6c:15:60:f1:58:31:21:4b:8b: 1f:c9:8d:66:b3:5e:a4:90:2e:14:28:e8:11:ca:01: 14:27:1f:f2:38:23:98:00:77:20:5c:9f:96:0c:00: f9:75:ad:9b:14:56:4d:e6:14:0f:81:7d:75:06:cb: 55:5d:e4:bb:bd:80:69:63:79:e4:42:72:79:a8:41: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C2:50:A9:21:03:CB:87:75:0B:7D:75:E1:EC:FF:CB:38:04:0B:8A X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:50:96:3f:08:31:28:a6:00:b5:20:5b:d3:2f:70:5d:8e:a5: 8e:b2:45:75:e7:a8:f1:be:08:fc:4f:51:37:23:67:75:48:66: e6:c6:2d:78:9e:ba:aa:13:48:98:61:5a:83:21:2c:09:45:0a: f0:49:9c:97:79:c1:8a:fb:f4:b0:63:f6:37:8d:73:fa:d5:a2: 2a:26:c9:3a:a7:aa:fa:9b:b2:2b:b1:a9:e1:ec:00:a7:24:e9: 38:50:96:53:b1:68:3b:b8:9a:77:f1:54:6b:91:5c:4e:07:10: a1:1c:f3:d8:4b:13:0f:5e:c2:55:f0:9f:89:49:09:af:1c:0d: 08:02:86:c8:2f:8f:0d:d3:be:1c:24:b4:dc:4b:3b:d0:e7:c1: 39:59:da:8f:54:e6:c6:f4:0d:9d:4c:f7:a2:53:f0:69:0a:58: 33:39:de:5c:47:fb:2e:8d:00:38:c0:90:55:54:43:42:eb:d4: 26:0d:ee:45:3a:e4:1e:26:be:bc:5e:81:9f:d7:1b:96:80:f8: 2b:26:49:6f:81:2d:1d:36:38:58:11:fc:3e:94:89:13:53:51: 0a:a2:89:65:9d:ca:97:c3:16:32:df:d7:bf:a4:a7:da:24:8f: 22:77:37:93:69:51:f1:b3:03:25:06:3c:d2:9f:02:0a:db:ee: 76:74:ae:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUFcSuxdGpaGFuNdMPnSc6Sav2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA3MjAxNzE3MDlaFw0yNTA3MjMxODQ0MDlaMDMxMTAvBgNV BAMTKDkwQzI1MEE5MjEwM0NCODc3NTBCN0Q3NUUxRUNGRkNCMzgwNDBCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcb/VP3V8nK2apY+MREBVkVjIY fuegOqh22Yc04jChGUZF0smnALJ4YOmZmCkAyrk7N/29lFOJIMsY9zv4y30GEwfO EM5BLcPT2pqykPMp7aPfo60ecPRZAIzB20G1m7m2OCz2dSZhUrcOd/QzIGwjvQBo 1yqQ07yAEcBIKsf9dy5DAwID/dtEaaX0a/MU1RVmXyJnUdkzIwzL1fFkzYAInoKj Xdyw7WdG69EPixl6shYt/axeBByeMWwVYPFYMSFLix/JjWazXqSQLhQo6BHKARQn H/I4I5gAdyBcn5YMAPl1rZsUVk3mFA+BfXUGy1Vd5Lu9gGljeeRCcnmoQYCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMJQqSEDy4d1C3114ez/yzgEC4owHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtQlj8IMSimALUgW9MvcF2OpY6yRXXnqPG+ CPxPUTcjZ3VIZubGLXieuqoTSJhhWoMhLAlFCvBJnJd5wYr79LBj9jeNc/rVoiom yTqnqvqbsiuxqeHsAKck6ThQllOxaDu4mnfxVGuRXE4HEKEc89hLEw9ewlXwn4lJ Ca8cDQgChsgvjw3TvhwktNxLO9DnwTlZ2o9U5sb0DZ1M96JT8GkKWDM53lxH+y6N ADjAkFVUQ0Lr1CYN7kU65B4mvrxegZ/XG5aA+CsmSW+BLR02OFgR/D6UiRNTUQqi iWWdypfDFjLf17+kp9okjyJ3N5NpUfGzAyUGPNKfAgrb7nZ0ruc= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:22 2025 by rpki-client