$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: 02KZu3E+gPKjk/jXdlH7s+/PbVOFV/gqpEU+ME6YZvM= Subject key identifier: 0E:B4:7B:1F:7E:4F:AC:47:64:1D:E8:75:A5:B2:A4:81:09:29:C3:10 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 1F7202237C579E87B617854F6862C4CF8D0FFD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01BA Signing time: Tue 22 Jul 2025 11:51:34 +0000 Manifest this update: Tue 22 Jul 2025 11:46:34 +0000 Manifest next update: Fri 25 Jul 2025 13:30:34 +0000 Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: dVyAgZUXuyz+nY8sTdVsk2xuXCyUeskNn+BZ9x4ZcyI=) 2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: tNggBLDS35MSWTaws1jQt4BiqhEZt317olGi11bLEls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:72:02:23:7c:57:9e:87:b6:17:85:4f:68:62:c4:cf:8d:0f:fd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Jul 22 11:46:34 2025 GMT Not After : Jul 25 13:30:34 2025 GMT Subject: CN=0EB47B1F7E4FAC47641DE875A5B2A4810929C310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:83:ee:38:ce:06:10:9d:00:d5:28:dc:45: 82:4f:d6:84:6c:d2:97:ed:1e:f8:42:4a:8d:a2:41: 3b:e3:5f:58:b0:f7:e6:11:41:21:9c:9a:ae:33:06: 48:37:49:a2:aa:8c:50:0d:8d:50:70:b8:9c:6b:ed: 05:57:39:59:99:24:46:de:29:19:80:af:1a:31:bb: db:44:9e:49:ab:9a:26:d3:f9:91:ca:03:51:97:8d: 38:51:89:7c:03:e7:a5:9a:86:ed:98:f6:93:f6:ba: 80:34:fc:fb:de:ef:8a:ab:f7:0c:9a:b3:c1:58:f2: 33:5e:5a:27:be:2d:7d:d2:b8:0d:7b:41:57:3f:e6: e2:4b:4f:32:e6:55:bb:f2:25:7e:1a:73:9b:d0:bd: 4e:0d:e8:33:2f:b3:8f:94:4f:72:f5:c3:23:3b:37: d1:53:05:d8:cb:d7:f4:d4:74:4c:b1:d1:ed:29:b6: e2:be:c8:34:2f:3e:05:f3:a0:33:69:ae:46:d3:ab: 64:14:b8:5e:25:4e:e4:5a:1d:5e:df:ed:3a:85:97: 44:9b:be:43:47:da:a8:14:5c:3e:aa:78:23:2a:82: c1:34:a6:10:1b:dc:03:e9:c3:f1:8c:f1:57:2a:00: 34:ff:64:d3:ec:e0:f9:32:e1:61:f0:70:ae:1e:79: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B4:7B:1F:7E:4F:AC:47:64:1D:E8:75:A5:B2:A4:81:09:29:C3:10 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:69:a7:95:53:b3:94:c3:5b:a8:ed:10:e0:1b:6b:1f:18:8d: 78:eb:82:30:1a:01:05:e8:de:cc:d6:7a:d5:d2:3a:7b:a7:1d: 63:a0:71:f3:f0:28:b9:8b:d3:dc:6a:f2:1f:4e:39:6c:c6:48: 18:da:6f:17:1d:81:8f:4f:1b:97:a1:ba:ce:01:48:4a:5b:21: ba:9e:84:15:15:1f:61:3d:8e:ee:01:e9:23:34:b2:9a:89:d4: b4:9c:96:55:5f:50:87:1d:93:a8:4d:f0:e7:e6:c7:0b:c1:9d: d4:fc:28:9e:88:80:34:f2:d6:dd:1f:3b:72:19:a9:30:92:34: 04:2a:bc:ea:9e:1b:85:ef:df:83:64:42:b0:3d:bb:28:ae:a2: c1:1b:4f:7f:34:45:e0:e8:78:74:7e:28:32:6f:0c:f9:61:94: 3a:e9:0f:9e:cc:49:0d:71:66:86:f4:7d:1d:2f:49:8a:0f:3a: 44:b9:42:cc:13:95:09:6e:5c:b5:24:fe:3f:4e:ae:09:b6:56: d9:a1:4c:45:21:fa:d2:8a:bb:07:0a:13:7d:55:36:d4:04:a2: ce:36:20:31:ab:eb:81:d4:fa:fb:87:86:52:87:36:b3:2a:5e: dd:5c:ff:20:fe:e5:03:30:e4:c9:02:fb:9b:f7:fd:84:3c:fb: a4:37:2f:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3ICI3xXnoe2F4VPaGLEz40P/XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTA3MjIxMTQ2MzRaFw0yNTA3MjUxMzMwMzRaMDMxMTAvBgNV BAMTKDBFQjQ3QjFGN0U0RkFDNDc2NDFERTg3NUE1QjJBNDgxMDkyOUMzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2oPuOM4GEJ0A1SjcRYJP1oRs 0pftHvhCSo2iQTvjX1iw9+YRQSGcmq4zBkg3SaKqjFANjVBwuJxr7QVXOVmZJEbe KRmArxoxu9tEnkmrmibT+ZHKA1GXjThRiXwD56Wahu2Y9pP2uoA0/Pve74qr9wya s8FY8jNeWie+LX3SuA17QVc/5uJLTzLmVbvyJX4ac5vQvU4N6DMvs4+UT3L1wyM7 N9FTBdjL1/TUdEyx0e0ptuK+yDQvPgXzoDNprkbTq2QUuF4lTuRaHV7f7TqFl0Sb vkNH2qgUXD6qeCMqgsE0phAb3APpw/GM8VcqADT/ZNPs4Pky4WHwcK4eecgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrR7H35PrEdkHeh1pbKkgQkpwxAwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBpp5VTs5TDW6jtEOAbax8YjXjrgjAaAQXo 3szWetXSOnunHWOgcfPwKLmL09xq8h9OOWzGSBjabxcdgY9PG5ehus4BSEpbIbqe hBUVH2E9ju4B6SM0spqJ1LScllVfUIcdk6hN8OfmxwvBndT8KJ6IgDTy1t0fO3IZ qTCSNAQqvOqeG4Xv34NkQrA9uyiuosEbT380ReDoeHR+KDJvDPlhlDrpD57MSQ1x Zob0fR0vSYoPOkS5QswTlQluXLUk/j9Orgm2VtmhTEUh+tKKuwcKE31VNtQEos42 IDGr64HU+vuHhlKHNrMqXt1c/yD+5QMw5MkC+5v3/YQ8+6Q3L+s= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:42 2025 by rpki-client