$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: 34TkanUzMAVxtQX7z316v0iFLkPoih3jlUi/XzEnKSs= Subject key identifier: 1A:69:43:7E:5F:02:1E:C9:77:B3:9E:56:66:E3:CB:52:EE:81:EE:B4 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 6578D9DA706ED13AF478732BCCE09BEE0F96E257 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 04BF Signing time: Sun 20 Jul 2025 12:12:14 +0000 Manifest this update: Sun 20 Jul 2025 12:07:14 +0000 Manifest next update: Wed 23 Jul 2025 20:47:14 +0000 Files and hashes: 1: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: e40kdwd9RGaDzut85pUqofV0tIg/vdE6e4M9mcDTUZU=) 2: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: fr5BMGMZ4/JWAtuc82Bwpon8VOaBOapImuPEr/qDXGY=) 3: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: TSzj0y0RLOtTpQuBwiLwBrCzNlptF+l89906qNUC2LM=) 4: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: QmUK5t+kPBhbRYikNscX9LWrBhBp5pP7CeGdlMn53Do=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: AqVeGkcCeQqSSxTzFMHfgh7oeb2WJE9ZcEpymir7iqI=) 6: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: rdX2P/62Fs2A7bSHrzzBOblACv/dlOvxDsyqbDOTmes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:78:d9:da:70:6e:d1:3a:f4:78:73:2b:cc:e0:9b:ee:0f:96:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Jul 20 12:07:14 2025 GMT Not After : Jul 23 20:47:14 2025 GMT Subject: CN=1A69437E5F021EC977B39E5666E3CB52EE81EEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:4c:21:11:0a:36:8d:e6:3e:b6:84:38:10: d6:8a:db:58:b9:29:f3:7f:c8:fd:63:35:6b:89:c9: ce:91:9b:28:f6:c3:a8:d4:d1:9e:2f:73:8a:0d:f0: b0:09:1c:16:05:65:82:6b:1d:a5:be:18:9f:3e:4d: e1:53:d6:d2:02:0c:3d:17:a5:32:f1:ab:fe:6c:8e: f8:31:80:6b:d0:bf:eb:38:63:45:b6:80:9d:b2:75: f1:7f:ca:97:69:6f:10:12:59:9f:3b:4b:60:00:b5: c6:4b:ad:50:25:f8:26:08:dc:07:53:9f:0c:bc:bb: d7:d9:6b:16:71:50:6e:fb:29:36:38:b2:fc:a3:62: 63:6e:68:e5:62:3e:a1:4a:60:28:56:af:91:ac:5d: fb:c1:12:ec:12:62:e9:0d:2e:3b:c8:6b:48:66:5d: ce:f2:25:0d:60:4d:09:15:46:fa:ed:a1:7c:f9:96: 50:df:52:0a:13:3d:8d:b8:fe:a4:e9:72:8f:db:c2: 99:ec:a9:a6:f0:d5:4d:53:33:42:e3:cd:b8:55:05: c4:ec:a7:dc:2d:98:46:17:26:65:73:74:a5:88:8b: a6:a8:ca:a3:60:e7:3f:94:00:ef:1e:20:ea:e1:a6: 21:04:8b:c6:20:b4:5e:29:34:31:6d:a3:9f:b7:00: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:69:43:7E:5F:02:1E:C9:77:B3:9E:56:66:E3:CB:52:EE:81:EE:B4 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0e:14:6f:4d:ca:d8:eb:e9:c9:4b:2e:f4:7d:6d:30:67:9b: f9:9c:7a:47:c5:d7:2a:21:60:0d:e8:2c:f6:84:70:50:43:a0: e8:03:85:cd:17:b8:55:5e:78:b8:16:54:69:5d:1b:03:8c:1f: b0:e6:3d:5a:26:b2:fc:57:a3:03:83:7a:c8:7e:49:7f:22:b0: d8:1d:16:ef:77:d3:35:af:19:0d:1e:7b:fe:7a:90:e1:15:9d: 1b:8a:50:b6:87:c3:cf:c7:df:98:7a:02:21:06:cb:8c:22:81: c1:1f:aa:83:24:55:97:a9:f5:6a:38:bf:d5:a8:4d:0b:25:83: a4:30:66:2b:7e:ad:e9:83:15:68:e3:ec:e8:9f:0d:37:65:11: 53:d4:39:7a:75:10:3f:38:05:a1:87:74:d6:f4:d2:ec:19:01: ee:fc:5a:0c:47:66:0d:c3:55:06:66:bc:39:92:49:c0:0d:52: 13:e1:9f:9e:23:bf:0a:4d:fe:70:40:d1:d4:a5:2c:fe:b9:be: dd:16:84:2e:bf:9e:07:18:ff:5b:bd:2b:49:34:24:37:72:8a: 96:48:01:ae:e7:3d:cb:f6:a9:6e:1b:cf:ea:e9:0b:5e:52:ae: cc:7c:c5:50:1f:ae:49:ce:a7:b5:8d:f3:c8:b9:ff:f5:9b:95: a3:80:fc:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXjZ2nBu0Tr0eHMrzOCb7g+W4lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTA3MjAxMjA3MTRaFw0yNTA3MjMyMDQ3MTRaMDMxMTAvBgNV BAMTKDFBNjk0MzdFNUYwMjFFQzk3N0IzOUU1NjY2RTNDQjUyRUU4MUVFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgEwhEQo2jeY+toQ4ENaK21i5 KfN/yP1jNWuJyc6Rmyj2w6jU0Z4vc4oN8LAJHBYFZYJrHaW+GJ8+TeFT1tICDD0X pTLxq/5sjvgxgGvQv+s4Y0W2gJ2ydfF/ypdpbxASWZ87S2AAtcZLrVAl+CYI3AdT nwy8u9fZaxZxUG77KTY4svyjYmNuaOViPqFKYChWr5GsXfvBEuwSYukNLjvIa0hm Xc7yJQ1gTQkVRvrtoXz5llDfUgoTPY24/qTpco/bwpnsqabw1U1TM0LjzbhVBcTs p9wtmEYXJmVzdKWIi6aoyqNg5z+UAO8eIOrhpiEEi8YgtF4pNDFto5+3AN0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmlDfl8CHsl3s55WZuPLUu6B7rQwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIOFG9Nytjr6clLLvR9bTBnm/mcekfF1yoh YA3oLPaEcFBDoOgDhc0XuFVeeLgWVGldGwOMH7DmPVomsvxXowODesh+SX8isNgd Fu930zWvGQ0ee/56kOEVnRuKULaHw8/H35h6AiEGy4wigcEfqoMkVZep9Wo4v9Wo TQslg6QwZit+remDFWjj7OifDTdlEVPUOXp1ED84BaGHdNb00uwZAe78WgxHZg3D VQZmvDmSScANUhPhn54jvwpN/nBA0dSlLP65vt0WhC6/ngcY/1u9K0k0JDdyipZI Aa7nPcv2qW4bz+rpC15Srsx8xVAfrknOp7WN88i5//WblaOA/Lc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:26 2025 by rpki-client