$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: DBJCey5aSS83f7xqpRVglj65+GpopRYrlHKduggN+Ww= Subject key identifier: 4A:3A:36:8A:C1:B9:2D:32:09:86:71:84:7D:30:30:F8:79:E9:AB:1E Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 78101501EFE82446F4CE3124D1C358A085926C0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 0171 Signing time: Thu 05 Jun 2025 07:02:12 +0000 Manifest this update: Thu 05 Jun 2025 06:57:12 +0000 Manifest next update: Sun 08 Jun 2025 16:04:12 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: rbC/nCj1+SbQoqsh0Fpxsc0/MqArDJreAWCSSyqhM4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 16:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:10:15:01:ef:e8:24:46:f4:ce:31:24:d1:c3:58:a0:85:92:6c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Jun 5 06:57:12 2025 GMT Not After : Jun 8 16:04:12 2025 GMT Subject: CN=4A3A368AC1B92D32098671847D3030F879E9AB1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:fd:95:5b:fb:2e:f3:0c:ed:dd:07:0e:51: dd:81:2d:7c:d8:00:e1:3c:e0:1c:97:9c:21:9b:3a: 26:b4:42:a6:26:01:3c:30:af:4a:a3:b5:e7:e6:3d: 09:98:65:90:7e:27:e2:5e:32:67:8f:18:61:ff:01: 45:a1:a7:92:3b:4c:3a:d2:dc:b0:ac:4b:ab:32:2b: 31:be:e8:e4:c8:16:6e:05:f7:f9:8f:70:4a:fb:98: 21:42:2a:7f:88:ef:48:97:c0:ff:f7:27:27:3d:8a: d2:19:5c:0c:2c:f9:b7:42:c4:ad:6d:a8:c0:11:c7: 34:7d:f5:42:6a:3e:7b:91:4c:7f:1d:72:94:92:c8: 97:f3:91:45:b8:d7:62:04:38:b6:fd:f2:b6:09:c8: cd:35:de:87:d2:97:af:f0:c0:79:09:39:8f:c7:7d: 88:5c:e7:28:35:90:25:1b:d8:76:10:99:5c:ef:95: 0e:29:b2:f2:2c:c0:9f:e4:8e:af:40:f8:20:2b:67: 2a:2b:6e:f6:73:24:29:f5:d6:02:72:68:54:e1:d8: 0e:8c:c4:af:03:98:bd:71:b1:1d:17:86:ac:43:8b: da:49:f9:41:3d:07:7b:cd:e8:90:fd:36:c4:d7:6e: 77:8b:b6:85:4b:91:d6:e6:a2:96:e5:9f:6a:53:5a: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:36:8A:C1:B9:2D:32:09:86:71:84:7D:30:30:F8:79:E9:AB:1E X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:07:ec:1c:a4:f5:5e:c3:2b:bd:32:f0:61:f2:85:bc:70:f6: 39:ca:1f:a0:d7:46:8b:32:b4:02:c3:24:06:92:38:53:69:1e: 3e:86:a6:61:62:7d:b0:15:0d:35:fa:12:ba:cf:1e:13:4e:fb: c2:4d:e1:be:0d:a7:16:45:1d:c5:ec:46:ba:21:22:81:ce:5b: 4c:6e:0f:c6:72:12:b0:a5:40:7f:da:ec:91:09:ae:58:7f:2f: e9:50:15:8b:b3:42:76:41:16:d8:3c:e8:f9:2f:09:bd:69:c9: 24:92:de:19:4c:05:c7:33:10:fd:32:2a:73:cf:68:b0:dc:20: a8:2f:4d:35:74:de:ad:24:e8:21:68:f4:1c:97:55:4c:49:29: 35:e8:94:4c:fb:d0:07:3e:45:17:c4:3b:a0:35:bd:b7:ac:39: c5:0f:49:71:21:2f:83:bf:0b:90:e8:e2:99:3c:27:50:78:10: 96:1f:5d:e3:09:7e:5f:db:14:a8:68:d1:b0:b2:a8:0d:a9:9d: 8a:24:c0:8d:fa:1a:79:7c:e9:5c:db:25:e5:17:e0:ee:37:81: 5a:95:81:3b:c2:f1:48:29:55:69:ea:e8:f6:eb:f6:b9:5c:64: c5:0d:78:ea:9b:47:e9:74:75:db:4a:1d:83:29:17:84:7f:96: 20:45:3c:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBAVAe/oJEb0zjEk0cNYoIWSbA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA2MDUwNjU3MTJaFw0yNTA2MDgxNjA0MTJaMDMxMTAvBgNV BAMTKDRBM0EzNjhBQzFCOTJEMzIwOTg2NzE4NDdEMzAzMEY4NzlFOUFCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCX/2VW/su8wzt3QcOUd2BLXzY AOE84ByXnCGbOia0QqYmATwwr0qjtefmPQmYZZB+J+JeMmePGGH/AUWhp5I7TDrS 3LCsS6syKzG+6OTIFm4F9/mPcEr7mCFCKn+I70iXwP/3Jyc9itIZXAws+bdCxK1t qMARxzR99UJqPnuRTH8dcpSSyJfzkUW412IEOLb98rYJyM013ofSl6/wwHkJOY/H fYhc5yg1kCUb2HYQmVzvlQ4psvIswJ/kjq9A+CArZyorbvZzJCn11gJyaFTh2A6M xK8DmL1xsR0XhqxDi9pJ+UE9B3vN6JD9NsTXbneLtoVLkdbmopbln2pTWhHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSjo2isG5LTIJhnGEfTAw+Hnpqx4wHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoH7Byk9V7DK70y8GHyhbxw9jnKH6DXRosy tALDJAaSOFNpHj6GpmFifbAVDTX6ErrPHhNO+8JN4b4NpxZFHcXsRrohIoHOW0xu D8ZyErClQH/a7JEJrlh/L+lQFYuzQnZBFtg86PkvCb1pySSS3hlMBcczEP0yKnPP aLDcIKgvTTV03q0k6CFo9ByXVUxJKTXolEz70Ac+RRfEO6A1vbesOcUPSXEhL4O/ C5Do4pk8J1B4EJYfXeMJfl/bFKho0bCyqA2pnYokwI36Gnl86VzbJeUX4O43gVqV gTvC8UgpVWnq6Pbr9rlcZMUNeOqbR+l0ddtKHYMpF4R/liBFPMc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:43 2025 by rpki-client