$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: 2lrBuiQu2UY37KdEQvo50h25sd8FczwM0RL14TwQki8= Subject key identifier: 9E:72:2B:8A:25:A9:50:96:53:68:B3:BF:02:C3:D0:5D:B5:06:41:51 Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 0F21BB2610EDDD192077B664CDBAAAF4A93750D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 016B Signing time: Thu 04 Sep 2025 14:51:09 +0000 Manifest this update: Thu 04 Sep 2025 14:46:09 +0000 Manifest next update: Sun 07 Sep 2025 22:05:09 +0000 Files and hashes: 1: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: l78l/hr9dSfdfUqamSJoc9YO8v/Dany3gRImq53rbMA=) 2: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) 3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:21:bb:26:10:ed:dd:19:20:77:b6:64:cd:ba:aa:f4:a9:37:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: Sep 4 14:46:09 2025 GMT Not After : Sep 7 22:05:09 2025 GMT Subject: CN=9E722B8A25A950965368B3BF02C3D05DB5064151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:0d:c3:f1:02:43:98:31:62:66:44:d2:15: 63:76:91:f1:a6:d7:62:01:05:82:0e:ca:b4:a2:bf: b1:e5:79:e4:6d:b8:a7:80:2d:33:28:0e:cb:54:ca: 32:01:ab:f3:01:94:5c:ea:13:3c:78:9e:62:54:f0: c2:7e:65:c8:9b:49:ea:bf:0d:91:20:f6:10:06:3e: 72:49:3f:93:5b:76:9c:af:32:b2:97:54:7d:11:7d: be:b1:54:e1:2e:68:28:54:7a:dc:93:ae:3f:d3:13: e9:af:b4:41:b9:b6:12:25:ec:0a:49:f2:3c:dd:45: e3:67:d8:6c:f4:b9:6c:e7:dc:79:97:4b:f2:a4:83: 96:f6:3b:fd:72:b8:82:56:47:9f:ca:b5:94:8f:bf: b4:dc:cc:f8:08:0a:8f:20:0b:b9:db:ae:86:53:5c: b5:17:85:ff:5f:48:f4:56:48:e4:b9:c3:8e:c0:b1: 99:ea:8f:38:a4:c7:71:b9:db:d9:75:98:20:8c:12: 3f:8d:00:b8:84:ec:9e:5c:23:f5:b0:ff:27:2d:9a: c0:70:56:cd:40:59:c1:13:b7:7e:8f:8c:44:d0:e4: b9:2f:ab:bf:c9:a6:51:6f:02:35:c0:b3:2a:a4:c8: 95:a6:33:5b:78:5c:7f:f4:79:7c:21:98:17:60:fc: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:2B:8A:25:A9:50:96:53:68:B3:BF:02:C3:D0:5D:B5:06:41:51 X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c6:3b:58:18:d0:db:3e:f1:55:82:95:9f:e3:45:31:34:88: 39:db:00:a9:38:2e:d2:ae:ea:01:ff:31:5f:8e:f7:9b:ad:36: f1:58:b4:94:50:a8:ef:13:d6:d0:41:76:5a:ce:c0:7a:24:05: 0c:9c:31:de:95:49:df:a4:16:42:06:98:ef:3c:19:8c:5b:f4: bb:00:b8:48:11:d9:ba:76:dc:9d:18:17:7d:bf:9c:4a:d1:7b: 42:37:af:3f:7a:56:d6:c2:8c:da:b4:01:66:30:f2:32:04:dd: 86:77:b2:a6:e6:7d:69:7c:37:eb:fe:98:33:1c:31:5b:7d:38: 27:8d:53:f0:5c:33:4b:26:38:b8:80:95:08:fa:af:27:18:bf: d9:e6:f7:e3:f5:81:97:4a:9f:b3:d0:f2:88:27:ca:68:00:99: e8:9b:e4:74:ab:b0:a8:97:56:c9:af:83:4a:f6:a2:6c:a3:24: 16:e8:25:08:7d:67:16:48:fe:9e:c6:02:77:1d:bd:4f:a6:60: b2:da:6b:56:51:dd:66:ef:61:66:ed:36:a9:1c:95:82:ae:83: 1e:61:4a:5c:54:98:f6:52:05:16:f9:b0:7f:aa:73:f8:86:59: 92:ee:a9:2f:6a:ee:9a:6b:18:d5:b8:72:3f:1e:64:c3:90:d6: 78:92:f6:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyG7JhDt3Rkgd7Zkzbqq9Kk3UNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTA5MDQxNDQ2MDlaFw0yNTA5MDcyMjA1MDlaMDMxMTAvBgNV BAMTKDlFNzIyQjhBMjVBOTUwOTY1MzY4QjNCRjAyQzNEMDVEQjUwNjQxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroQ3D8QJDmDFiZkTSFWN2kfGm 12IBBYIOyrSiv7HleeRtuKeALTMoDstUyjIBq/MBlFzqEzx4nmJU8MJ+ZcibSeq/ DZEg9hAGPnJJP5NbdpyvMrKXVH0Rfb6xVOEuaChUetyTrj/TE+mvtEG5thIl7ApJ 8jzdReNn2Gz0uWzn3HmXS/Kkg5b2O/1yuIJWR5/KtZSPv7TczPgICo8gC7nbroZT XLUXhf9fSPRWSOS5w47AsZnqjzikx3G529l1mCCMEj+NALiE7J5cI/Ww/yctmsBw Vs1AWcETt36PjETQ5Lkvq7/JplFvAjXAsyqkyJWmM1t4XH/0eXwhmBdg/DidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnnIriiWpUJZTaLO/AsPQXbUGQVEwHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXGO1gY0Ns+8VWClZ/jRTE0iDnbAKk4LtKu 6gH/MV+O95utNvFYtJRQqO8T1tBBdlrOwHokBQycMd6VSd+kFkIGmO88GYxb9LsA uEgR2bp23J0YF32/nErRe0I3rz96VtbCjNq0AWYw8jIE3YZ3sqbmfWl8N+v+mDMc MVt9OCeNU/BcM0smOLiAlQj6rycYv9nm9+P1gZdKn7PQ8ognymgAmeib5HSrsKiX Vsmvg0r2omyjJBboJQh9ZxZI/p7GAncdvU+mYLLaa1ZR3WbvYWbtNqkclYKugx5h SlxUmPZSBRb5sH+qc/iGWZLuqS9q7pprGNW4cj8eZMOQ1niS9v4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client