$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: UcMPrkIg+CilsLf6mdGHMkJMVm+T+EE6McyIUmw2hKk= Subject key identifier: 00:93:99:4F:E0:2A:E7:FD:CD:7C:1B:7E:C2:71:65:69:8D:9C:1C:3F Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 0B7EB887BF2F7E660DBF9FFD03F7D27E2456319D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 029C Signing time: Fri 06 Jun 2025 19:52:31 +0000 Manifest this update: Fri 06 Jun 2025 19:47:30 +0000 Manifest next update: Mon 09 Jun 2025 21:33:30 +0000 Files and hashes: 1: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: H8eCB1ajNrVrh3omhOA+7EIUqPrlMk7lfLVZEODKpTs=) 2: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: naiqVHGT5kdZmKnhRVb2dNszIMb0Xoje27rFSqiBtYA=) 3: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 2Hf0voiLyRB5yquDwOqQGzECahxM0QLqpt8+luqMRjw=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 6kHHWGOl1WkB5FFpqU5tEepFu8NpO3D8mqOqYEjynek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7e:b8:87:bf:2f:7e:66:0d:bf:9f:fd:03:f7:d2:7e:24:56:31:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Jun 6 19:47:30 2025 GMT Not After : Jun 9 21:33:30 2025 GMT Subject: CN=0093994FE02AE7FDCD7C1B7EC27165698D9C1C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:e6:14:b7:7c:a5:cd:35:83:07:62:78:66: af:ba:2f:ce:6d:c1:d4:9f:51:ae:cf:be:18:22:33: d7:37:eb:d7:9a:5c:b2:f0:6f:ca:c1:40:0c:71:c4: ba:2e:ba:d1:cc:12:62:ec:03:f3:aa:b4:05:89:4a: 30:59:36:c4:88:52:1b:f9:9c:b3:ac:bc:7c:2b:60: 61:93:5d:a4:bd:29:b2:13:36:a6:51:58:fb:7a:47: 86:ec:c3:b1:12:9b:90:92:ce:95:01:7f:4c:07:24: 63:16:77:3f:ae:9b:01:70:d9:84:66:be:39:02:da: 7c:8e:75:6f:d6:10:7d:3e:15:df:b2:e8:ca:e7:77: d7:65:41:a3:8b:00:32:58:81:3d:0f:17:2c:f3:9f: b4:73:06:ba:71:d8:74:bd:01:5e:e0:bc:96:3e:28: eb:06:6d:5a:a2:57:14:8a:ac:59:a7:98:09:ec:75: af:fb:5a:72:b1:5a:e8:b7:dc:a9:39:fc:17:1a:44: e3:61:79:a6:6c:96:b7:eb:de:60:b2:c5:03:90:e6: f9:00:9a:67:80:8d:12:20:f6:f8:e6:7b:96:fa:ef: f0:9c:89:26:1e:dd:84:54:6f:7a:39:1e:ce:3b:f9: 40:ee:17:13:9c:2a:9b:40:1c:95:85:f7:38:ba:7a: 4c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:93:99:4F:E0:2A:E7:FD:CD:7C:1B:7E:C2:71:65:69:8D:9C:1C:3F X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0a:14:aa:ee:2c:db:e7:91:bc:56:63:1c:d9:7d:a1:57:3f: 24:61:6d:69:cb:93:ba:8e:91:f7:0b:23:89:5a:2d:c6:a5:6e: cc:b1:11:e0:74:ac:9c:42:d3:eb:79:4a:a4:ca:09:0d:13:9b: 9b:f8:d7:39:77:82:41:e0:ad:c0:d2:9e:3d:89:a4:b8:4a:6c: 2b:c6:08:f6:0a:27:13:93:91:49:3a:11:57:de:11:60:62:21: 51:85:0f:fa:88:fb:19:5e:45:80:80:e1:b3:a9:34:09:73:50: d6:9d:25:8a:bd:12:59:09:a5:25:4c:da:08:b8:22:d0:af:7e: 70:0f:a2:a0:cf:a2:05:02:32:71:09:95:8c:4f:f4:df:53:2d: 56:e8:20:a6:f0:a9:72:0b:33:d2:50:ab:14:f1:ab:80:0c:b8: d2:4c:2a:1b:7d:de:51:e8:05:f2:2f:84:16:10:c3:91:9a:3e: 4e:26:06:07:ea:05:2e:8a:da:1b:90:94:f2:bb:60:3c:d3:fc: 85:49:9f:1d:f3:ca:70:d5:7b:4c:32:a2:53:d3:6a:87:3c:eb: 0b:5f:62:8b:1d:15:de:9c:b7:21:f5:67:9d:65:ad:74:8a:5d: fc:24:da:0f:d9:56:39:37:c4:03:b4:73:45:7b:55:c9:9a:5d: 44:a7:47:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC364h78vfmYNv5/9A/fSfiRWMZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA2MDYxOTQ3MzBaFw0yNTA2MDkyMTMzMzBaMDMxMTAvBgNV BAMTKDAwOTM5OTRGRTAyQUU3RkRDRDdDMUI3RUMyNzE2NTY5OEQ5QzFDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VeYUt3ylzTWDB2J4Zq+6L85t wdSfUa7PvhgiM9c369eaXLLwb8rBQAxxxLouutHMEmLsA/OqtAWJSjBZNsSIUhv5 nLOsvHwrYGGTXaS9KbITNqZRWPt6R4bsw7ESm5CSzpUBf0wHJGMWdz+umwFw2YRm vjkC2nyOdW/WEH0+Fd+y6Mrnd9dlQaOLADJYgT0PFyzzn7RzBrpx2HS9AV7gvJY+ KOsGbVqiVxSKrFmnmAnsda/7WnKxWui33Kk5/BcaRONheaZslrfr3mCyxQOQ5vkA mmeAjRIg9vjme5b67/CciSYe3YRUb3o5Hs47+UDuFxOcKptAHJWF9zi6ekw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJOZT+Aq5/3NfBt+wnFlaY2cHD8wHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEKFKruLNvnkbxWYxzZfaFXPyRhbWnLk7qO kfcLI4laLcalbsyxEeB0rJxC0+t5SqTKCQ0Tm5v41zl3gkHgrcDSnj2JpLhKbCvG CPYKJxOTkUk6EVfeEWBiIVGFD/qI+xleRYCA4bOpNAlzUNadJYq9ElkJpSVM2gi4 ItCvfnAPoqDPogUCMnEJlYxP9N9TLVboIKbwqXILM9JQqxTxq4AMuNJMKht93lHo BfIvhBYQw5GaPk4mBgfqBS6K2huQlPK7YDzT/IVJnx3zynDVe0wyolPTaoc86wtf YosdFd6ctyH1Z51lrXSKXfwk2g/ZVjk3xAO0c0V7VcmaXUSnR2I= -----END CERTIFICATE-----Generated at Sat Jun 7 19:53:50 2025 by rpki-client