$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft File: C619643EEB518333DAE2A79933BEB1320C89CA87.mft (raw, json) Hash identifier: uuKLhGERsyHS+k4XHbJ7uZCx+O5Ab/1NxJQkuROtKtY= Subject key identifier: 95:4E:AE:92:DD:A1:32:6C:E8:5D:59:0B:8F:50:F1:4E:33:8A:B4:3F Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 Certificate issuer: /CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Certificate serial: 651DB688AB3DFD15FF8E6EB6417324AD05709EEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft Manifest number: 7C Signing time: Sat 19 Jul 2025 19:31:18 +0000 Manifest this update: Sat 19 Jul 2025 19:26:18 +0000 Manifest next update: Wed 23 Jul 2025 01:45:18 +0000 Files and hashes: 1: C619643EEB518333DAE2A79933BEB1320C89CA87.crl (hash: fsrty5Hvasr7ROyT8RXNtQBWLVgy84UjM2mtVXv68Ic=) 2: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: gsHh3wTMSE0Um3OSJBZIKaO5EpyUMdma+U85cb050E4=) 3: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: hIlg+Qt1QESY9Y8aeztegkZN8iCL71JNX4sa7hGChZk=) 4: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: 7jJX4tA0NHHCSnCkhJQuXs74UXPq++JdHUV1H/oU7A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1d:b6:88:ab:3d:fd:15:ff:8e:6e:b6:41:73:24:ad:05:70:9e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Validity Not Before: Jul 19 19:26:18 2025 GMT Not After : Jul 23 01:45:18 2025 GMT Subject: CN=954EAE92DDA1326CE85D590B8F50F14E338AB43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:b4:f8:f2:bf:5b:47:20:74:61:df:d8:f2: fb:15:3c:5e:05:3d:0e:6a:53:39:f8:8d:a6:2b:67: 90:28:c9:f3:b5:7d:a7:ef:1d:08:5c:f1:1f:ae:28: 1a:bc:1f:a8:d6:9e:c1:27:32:36:93:ee:4e:f8:4b: 48:e7:ed:4d:d5:9f:ef:90:7b:5c:c8:47:bb:2b:95: 2b:42:78:9f:2e:cf:b8:14:b8:fe:ad:64:de:d9:58: 30:2c:54:2f:ff:de:cd:b4:97:0d:79:a1:69:4e:98: bf:93:58:55:57:61:d9:0e:8e:22:e9:09:31:2c:a0: ef:99:38:02:77:6c:88:87:78:56:08:c6:e4:ef:84: e4:83:d2:12:31:bf:bd:e0:3b:b9:8d:6d:33:c5:19: f3:20:6e:94:6c:6a:ea:24:fb:c2:b7:a8:ae:28:a2: a5:99:bf:3a:b3:d8:28:13:a3:62:be:92:b4:00:0e: 98:8e:fd:f9:15:c8:37:4a:26:44:23:52:c3:e1:77: fb:20:8f:07:c0:74:33:f9:ec:18:f1:31:58:46:14: 49:62:e4:9e:a3:f9:2b:f4:a9:d5:8b:aa:7a:33:54: 60:5d:75:89:9a:b9:63:44:c5:8b:a4:5b:67:08:f5: c6:d9:a2:92:57:d3:6c:aa:ce:36:12:74:0f:a6:75: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4E:AE:92:DD:A1:32:6C:E8:5D:59:0B:8F:50:F1:4E:33:8A:B4:3F X509v3 Authority Key Identifier: keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:42:11:52:0b:38:09:5a:fc:5e:86:55:b5:13:72:8c:90:e6: a7:90:05:16:6c:c1:84:5f:4f:ad:09:67:f9:bb:83:aa:87:c0: 4d:81:fe:c9:77:5a:79:54:fb:ae:61:21:80:0b:f1:9b:9c:80: 78:ff:38:7a:fd:a6:56:ae:80:2b:69:2a:67:11:d4:d5:0b:d7: 84:d3:7c:85:ba:4a:b8:22:c0:7a:ec:1a:d9:86:ba:61:54:71: 36:ed:58:24:26:99:62:9c:33:67:74:21:c9:6a:7b:74:0d:cc: 00:af:e5:3a:c5:7e:b7:67:d3:b8:35:4e:e9:85:e9:19:8c:72: 02:17:aa:a7:d1:ff:22:8e:e8:02:3f:8c:e0:29:2c:c0:88:01: 71:a1:f4:94:87:d5:fb:f8:5d:7e:eb:60:e5:45:fd:20:5b:33: 77:e3:46:c2:06:3f:5b:43:31:c9:40:f5:63:c6:c8:3a:71:7c: 55:85:eb:a1:92:b0:5d:e3:48:39:9b:0b:ff:79:19:11:3c:a4: 0c:65:01:ed:dc:30:c2:15:39:f0:8d:83:a3:cc:56:ae:41:18: 90:64:04:ae:2b:bd:31:6d:3a:4d:89:44:de:d4:c0:6c:04:e9: 2d:ba:41:9b:8e:d2:14:ba:07:74:ee:be:31:18:33:b5:53:34: b5:ee:19:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZR22iKs9/RX/jm62QXMkrQVwnuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIw Qzg5Q0E4NzAeFw0yNTA3MTkxOTI2MThaFw0yNTA3MjMwMTQ1MThaMDMxMTAvBgNV BAMTKDk1NEVBRTkyRERBMTMyNkNFODVENTkwQjhGNTBGMTRFMzM4QUI0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAObT48r9bRyB0Yd/Y8vsVPF4F PQ5qUzn4jaYrZ5AoyfO1fafvHQhc8R+uKBq8H6jWnsEnMjaT7k74S0jn7U3Vn++Q e1zIR7srlStCeJ8uz7gUuP6tZN7ZWDAsVC//3s20lw15oWlOmL+TWFVXYdkOjiLp CTEsoO+ZOAJ3bIiHeFYIxuTvhOSD0hIxv73gO7mNbTPFGfMgbpRsauok+8K3qK4o oqWZvzqz2CgTo2K+krQADpiO/fkVyDdKJkQjUsPhd/sgjwfAdDP57BjxMVhGFEli 5J6j+Sv0qdWLqnozVGBddYmauWNExYukW2cI9cbZopJX02yqzjYSdA+mdRNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlU6ukt2hMmzoXVkLj1DxTjOKtD8wHwYDVR0j BBgwFoAUxhlkPutRgzPa4qeZM76xMgyJyocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmMzMGM3MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9DNjE5NjQzRUVC NTE4MzMzREFFMkE3OTkzM0JFQjEzMjBDODlDQTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIwQzg5 Q0E4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIx MzIwQzg5Q0E4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRCEVILOAla/F6GVbUTcoyQ5qeQBRZswYRf T60JZ/m7g6qHwE2B/sl3WnlU+65hIYAL8ZucgHj/OHr9plaugCtpKmcR1NUL14TT fIW6SrgiwHrsGtmGumFUcTbtWCQmmWKcM2d0Iclqe3QNzACv5TrFfrdn07g1TumF 6RmMcgIXqqfR/yKO6AI/jOApLMCIAXGh9JSH1fv4XX7rYOVF/SBbM3fjRsIGP1tD MclA9WPGyDpxfFWF66GSsF3jSDmbC/95GRE8pAxlAe3cMMIVOfCNg6PMVq5BGJBk BK4rvTFtOk2JRN7UwGwE6S26QZuO0hS6B3TuvjEYM7VTNLXuGVk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:35 2025 by rpki-client