$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json) Hash identifier: KK6ad75rFmJnNX+inS6RJj+UW5a0lHHm5mwpA7nxtFY= Subject key identifier: 35:00:2B:60:87:12:FE:68:76:F6:42:12:B5:08:48:B8:9B:70:60:B2 Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Certificate serial: 648A29540C489EBF4B0BE3F512156157859A42BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft Manifest number: 01A2 Signing time: Tue 22 Jul 2025 05:01:19 +0000 Manifest this update: Tue 22 Jul 2025 04:56:19 +0000 Manifest next update: Fri 25 Jul 2025 13:15:19 +0000 Files and hashes: 1: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 1GaxlmyMBH5Av+K+s7DcySXoa/4RweD6yLZx8aQoKzc=) 2: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: 7TMrUjvM21yk82OCpeV5TNTWiObqIYyLevwRMcunZb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:29:54:0c:48:9e:bf:4b:0b:e3:f5:12:15:61:57:85:9a:42:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Validity Not Before: Jul 22 04:56:19 2025 GMT Not After : Jul 25 13:15:19 2025 GMT Subject: CN=35002B608712FE6876F64212B50848B89B7060B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:78:91:97:24:22:1b:57:f3:40:e0:32:e2: f3:b0:c6:ec:36:ce:bb:77:24:dd:2f:ef:f0:fc:08: a2:c3:83:58:e1:f1:cc:24:84:7b:12:4e:00:f3:ed: b3:cc:f4:a0:38:fd:77:c5:d8:fa:18:de:b5:0a:57: 7f:fb:49:bf:d7:55:65:a6:f0:5a:76:7f:ae:82:71: d9:af:42:b9:e3:b4:00:fc:a0:0c:d2:2f:27:58:fc: 30:e9:ea:f6:4f:11:fc:c9:9c:a5:aa:1f:97:9e:cf: ce:75:c4:34:5a:a4:09:31:33:f0:af:70:98:5c:bb: 1b:53:e8:c5:41:82:58:d1:b7:c3:f1:8e:87:93:27: f6:43:a2:d5:0d:5f:74:18:ba:31:dd:45:fe:e1:d5: ab:d3:05:1f:af:48:78:cc:22:c6:00:48:d5:74:41: 02:09:1e:0c:6d:67:ad:0f:33:10:7d:34:17:f1:e6: b5:58:f6:15:af:ed:a8:e3:d1:48:cc:fe:e5:7e:4c: a1:82:84:e6:9f:ee:47:6a:83:63:b9:a1:09:14:8c: 88:13:04:e9:3d:38:4f:ad:05:26:9c:0e:a4:fd:cd: c3:bb:7d:51:9c:22:1d:bf:67:1f:2d:64:4b:df:8c: 02:c7:b3:8c:e3:0b:37:44:6c:8f:88:3a:82:35:e8: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:2B:60:87:12:FE:68:76:F6:42:12:B5:08:48:B8:9B:70:60:B2 X509v3 Authority Key Identifier: keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b2:02:b1:34:52:7a:3a:08:04:53:25:09:57:f1:65:bb:fe: 56:71:bf:22:97:24:da:3b:f2:2c:43:ba:92:f9:0b:20:2d:e2: 92:ef:c8:38:83:53:44:a8:e8:ad:d4:22:6c:37:6a:0a:00:a4: bc:9e:19:38:96:93:7d:f1:e3:83:90:19:31:2d:60:48:61:40: b2:5e:e9:77:ee:07:b1:29:64:b2:ba:32:0c:2a:29:d8:e1:ff: d9:22:82:a2:a6:8b:15:12:80:0b:e0:cc:42:91:0d:44:17:d8: 69:45:da:18:6a:ee:c5:b2:c0:73:f9:9c:6f:42:dc:d4:a6:b3: f7:13:4f:59:9d:d8:64:d4:94:e8:d2:02:ff:87:d5:89:35:a1: 9c:48:9a:24:1d:5a:23:76:2c:fa:7a:e0:f5:0c:20:53:56:d6: 74:9a:cb:7d:f2:85:4d:a9:fd:88:a7:66:b8:38:3c:de:0c:c3: 8d:5f:ac:09:50:3c:37:82:97:fa:e2:a1:19:82:c6:3a:c2:a4: aa:81:0e:76:b9:e8:90:04:51:dc:e8:06:52:d9:d9:c0:8b:34: d0:d3:a3:c3:ae:04:cf:e2:e5:79:64:6a:e9:1c:f5:8d:b3:31: bb:fc:75:26:89:11:98:50:5e:74:c7:9e:d8:d0:5d:12:1d:5f: 63:36:65:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIopVAxInr9LC+P1EhVhV4WaQrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1 RUMzODcxRjAeFw0yNTA3MjIwNDU2MTlaFw0yNTA3MjUxMzE1MTlaMDMxMTAvBgNV BAMTKDM1MDAyQjYwODcxMkZFNjg3NkY2NDIxMkI1MDg0OEI4OUI3MDYwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnniRlyQiG1fzQOAy4vOwxuw2 zrt3JN0v7/D8CKLDg1jh8cwkhHsSTgDz7bPM9KA4/XfF2PoY3rUKV3/7Sb/XVWWm 8Fp2f66CcdmvQrnjtAD8oAzSLydY/DDp6vZPEfzJnKWqH5eez851xDRapAkxM/Cv cJhcuxtT6MVBgljRt8PxjoeTJ/ZDotUNX3QYujHdRf7h1avTBR+vSHjMIsYASNV0 QQIJHgxtZ60PMxB9NBfx5rVY9hWv7ajj0UjM/uV+TKGChOaf7kdqg2O5oQkUjIgT BOk9OE+tBSacDqT9zcO7fVGcIh2/Zx8tZEvfjALHs4zjCzdEbI+IOoI16GH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQArYIcS/mh29kIStQhIuJtwYLIwHwYDVR0j BBgwFoAUZ6Qo09yJ3e9b56xD+3yIF17Dhx8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjZhOGYyOC05YTAzLTQzNzYtYjYxMi0zMWY1YWQxYzFlZDYvMC82N0E0MjhEM0RD ODlEREVGNUJFN0FDNDNGQjdDODgxNzVFQzM4NzFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1RUMz ODcxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4 MTc1RUMzODcxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKyArE0Uno6CARTJQlX8WW7/lZxvyKXJNo7 8ixDupL5CyAt4pLvyDiDU0So6K3UImw3agoApLyeGTiWk33x44OQGTEtYEhhQLJe 6XfuB7EpZLK6MgwqKdjh/9kigqKmixUSgAvgzEKRDUQX2GlF2hhq7sWywHP5nG9C 3NSms/cTT1md2GTUlOjSAv+H1Yk1oZxImiQdWiN2LPp64PUMIFNW1nSay33yhU2p /YinZrg4PN4Mw41frAlQPDeCl/rioRmCxjrCpKqBDna56JAEUdzoBlLZ2cCLNNDT o8OuBM/i5Xlkaukc9Y2zMbv8dSaJEZhQXnTHntjQXRIdX2M2ZXw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:01 2025 by rpki-client