$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: iDVKg+qD2Ls74RzBbxhmSKFyllCifhXqjVyu6Pu8Ztw= Subject key identifier: FC:56:08:C8:DD:B8:56:88:B3:E8:46:D5:6D:43:2F:83:9D:35:1A:67 Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 34F0099B8FCFCC412F7B7C0F680144AB98F0D359 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 0156 Signing time: Sat 19 Jul 2025 23:11:11 +0000 Manifest this update: Sat 19 Jul 2025 23:06:11 +0000 Manifest next update: Wed 23 Jul 2025 00:04:11 +0000 Files and hashes: 1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: SZy1Ap0ToHDoZEOsh+IcLqFRuIh0+FiurL5NHdK6b2Q=) 2: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) 3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f0:09:9b:8f:cf:cc:41:2f:7b:7c:0f:68:01:44:ab:98:f0:d3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: Jul 19 23:06:11 2025 GMT Not After : Jul 23 00:04:11 2025 GMT Subject: CN=FC5608C8DDB85688B3E846D56D432F839D351A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:3d:6f:db:df:ac:b6:6f:d9:f1:35:67:d7: 42:1c:62:f8:90:e8:4a:98:52:90:1c:52:82:aa:84: 59:87:98:c0:40:67:80:c5:57:48:81:5d:92:53:cc: b6:8e:9b:0d:28:0c:f8:9b:d9:3f:8f:c8:2b:a3:cf: 44:b0:3f:82:9e:ad:c9:66:02:ca:da:6a:13:11:71: b3:37:60:01:7d:33:8c:6f:ab:4d:b5:90:f8:04:29: ca:fb:c6:d5:48:68:c0:0a:1e:38:9f:88:9a:df:da: 8d:6b:13:90:d8:d8:cf:f6:47:c6:c4:aa:52:bf:3a: ab:f1:a4:e9:66:cd:8a:3a:0a:6d:f6:cb:4c:6d:25: d1:b4:50:91:f1:1b:56:c2:f2:a8:f2:bf:06:a4:94: cc:e2:4d:c5:73:46:17:6d:ae:9e:83:39:de:56:5d: 54:3b:8c:f6:93:a8:3d:60:50:99:aa:0e:9e:8e:f6: 05:be:80:9a:8b:92:0a:10:69:8d:75:e2:f7:8c:80: d9:2c:d9:65:9b:26:4f:3c:ae:fd:2b:ac:4c:67:e9: 20:60:a1:cc:27:7f:13:22:14:ca:47:db:bc:ed:65: 8d:50:85:11:bd:d1:41:3b:2a:70:5b:ec:e3:86:8a: 63:df:5e:70:c7:75:4b:58:32:9b:62:ff:0d:52:69: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:56:08:C8:DD:B8:56:88:B3:E8:46:D5:6D:43:2F:83:9D:35:1A:67 X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:44:9b:f4:84:5c:4b:f2:be:38:f3:83:92:fe:cf:82:11:bf: 29:0e:1e:6c:aa:d4:08:9e:99:fa:4d:02:91:e0:a6:b4:99:18: 70:3b:a5:50:06:01:53:73:bb:40:a7:58:82:e2:e5:01:cb:77: dc:0b:1a:1e:6c:d4:10:0a:91:99:b4:42:ba:22:b5:87:56:0a: 5b:e3:8e:8e:32:39:1d:26:2b:6a:49:95:2e:ef:f2:29:b9:4c: d8:f9:06:d4:cf:a8:f8:ab:09:d6:66:4e:47:ea:42:82:66:69: 09:72:12:f0:c9:3b:d5:3f:09:10:6e:5f:b7:13:a2:3f:99:f9: 68:b8:c5:6a:2f:26:da:db:58:0d:19:d7:66:42:44:a4:40:c0: 4a:65:25:09:3f:3b:e9:a9:e2:f7:11:8d:d0:47:42:12:52:bd: b9:a3:68:e4:eb:91:ff:04:84:8f:7b:05:03:92:72:92:a6:01: 2e:de:ee:b1:a2:f9:2f:fc:2f:55:ca:6f:86:03:53:89:58:8f: 26:ac:7d:2e:c3:18:62:51:df:c4:5c:f9:29:66:5d:a9:b8:c0: 0a:58:3d:a4:53:a4:aa:41:ee:1f:a2:59:6f:fd:28:20:c9:78: aa:d3:69:f1:87:20:0d:a2:e2:27:25:88:f3:10:f7:7e:23:80: 78:6d:9d:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPAJm4/PzEEve3wPaAFEq5jw01kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTA3MTkyMzA2MTFaFw0yNTA3MjMwMDA0MTFaMDMxMTAvBgNV BAMTKEZDNTYwOEM4RERCODU2ODhCM0U4NDZENTZENDMyRjgzOUQzNTFBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8eD1v29+stm/Z8TVn10IcYviQ 6EqYUpAcUoKqhFmHmMBAZ4DFV0iBXZJTzLaOmw0oDPib2T+PyCujz0SwP4Kerclm AsraahMRcbM3YAF9M4xvq021kPgEKcr7xtVIaMAKHjifiJrf2o1rE5DY2M/2R8bE qlK/OqvxpOlmzYo6Cm32y0xtJdG0UJHxG1bC8qjyvwaklMziTcVzRhdtrp6DOd5W XVQ7jPaTqD1gUJmqDp6O9gW+gJqLkgoQaY114veMgNks2WWbJk88rv0rrExn6SBg ocwnfxMiFMpH27ztZY1QhRG90UE7KnBb7OOGimPfXnDHdUtYMpti/w1SadcVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/FYIyN24Voiz6EbVbUMvg501GmcwHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlEm/SEXEvyvjjzg5L+z4IRvykOHmyq1Aie mfpNApHgprSZGHA7pVAGAVNzu0CnWILi5QHLd9wLGh5s1BAKkZm0QroitYdWClvj jo4yOR0mK2pJlS7v8im5TNj5BtTPqPirCdZmTkfqQoJmaQlyEvDJO9U/CRBuX7cT oj+Z+Wi4xWovJtrbWA0Z12ZCRKRAwEplJQk/O+mp4vcRjdBHQhJSvbmjaOTrkf8E hI97BQOScpKmAS7e7rGi+S/8L1XKb4YDU4lYjyasfS7DGGJR38Rc+SlmXam4wApY PaRTpKpB7h+iWW/9KCDJeKrTafGHIA2i4icliPMQ934jgHhtnSA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:09 2025 by rpki-client