$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: mAlall0VTss0Opn+CxFOhPDfzteO6aG1FUFGdAcwVmg= Subject key identifier: 95:AE:05:45:4B:22:A0:79:F6:99:AD:3D:83:EA:76:7D:E5:9A:31:7E Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 6BD8C0AB73E7F7400F6EA4856BEFAE296D42FD70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 0191 Signing time: Fri 05 Sep 2025 17:50:37 +0000 Manifest this update: Fri 05 Sep 2025 17:45:37 +0000 Manifest next update: Tue 09 Sep 2025 05:25:37 +0000 Files and hashes: 1: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: cUUZD1YdebHVC5x2xBmhfjozQtMyWwv0oGKQcG+eVE0=) 2: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 05:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:c0:ab:73:e7:f7:40:0f:6e:a4:85:6b:ef:ae:29:6d:42:fd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Sep 5 17:45:37 2025 GMT Not After : Sep 9 05:25:37 2025 GMT Subject: CN=95AE05454B22A079F699AD3D83EA767DE59A317E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:53:9b:ef:28:0c:bf:c3:b9:97:36:de:c2: c7:06:d3:0a:2d:65:ad:61:b0:4e:19:67:1c:2f:ed: 89:14:f5:37:c6:fa:8b:d0:1f:89:fa:9d:dc:4b:e7: 79:c8:d3:d1:45:bc:f4:2e:c3:1f:33:e9:77:85:bd: f1:4a:f8:85:81:32:f7:ef:df:e1:b9:99:8e:b1:45: 14:b1:92:5c:b5:d5:61:21:ac:0b:a3:cc:9a:9e:08: ac:f1:fe:ea:ae:42:8c:14:c2:91:fa:f0:e2:48:30: 4c:07:96:3b:a9:26:35:fe:34:ab:10:3d:a8:84:27: 21:95:f7:03:31:88:f8:eb:dd:a0:4d:a7:81:e8:1d: 89:b9:c0:e5:5c:79:27:9d:be:4f:16:22:ab:af:f6: 18:0e:42:fc:a7:40:02:83:37:af:78:96:6f:ec:7f: 9e:bc:f1:4c:31:94:25:54:da:da:0d:a9:a6:4b:97: 5f:14:24:b2:e8:27:af:89:70:86:fa:6a:46:01:ea: 02:2a:12:34:df:85:6e:42:e1:bc:2c:cf:8c:3a:a4: 5d:54:63:bf:c4:eb:81:4f:c8:d3:29:6c:66:f8:30: 25:82:72:53:d5:ae:e3:8d:5e:33:26:9d:6e:90:a5: 2d:3e:5f:68:6e:d7:4b:4b:e9:21:b7:db:5c:ca:fb: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AE:05:45:4B:22:A0:79:F6:99:AD:3D:83:EA:76:7D:E5:9A:31:7E X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:71:db:a2:cd:65:31:a1:ee:b9:74:a2:6e:ab:01:b4:f7:ac: 87:1f:8c:23:0c:0c:8d:ee:99:27:0e:34:4e:3e:a7:31:b9:4c: dc:61:24:0b:80:80:ae:ff:dc:fe:81:22:bd:3f:60:67:c0:83: 6c:6f:0d:66:4e:c9:e5:bf:41:61:71:f7:14:f7:51:83:58:0e: c4:75:af:b5:2d:c9:1d:18:a8:02:8b:5e:42:97:5c:de:01:65: a3:91:dc:c7:1e:67:ba:9f:a9:d5:26:b4:df:92:24:43:90:60: 04:18:12:73:85:80:dc:39:59:00:61:cf:9e:54:d0:04:47:e4: f1:c3:ad:ea:15:21:66:24:6f:65:91:6b:97:55:2a:73:59:af: 6d:0c:22:07:a0:29:b3:6f:72:c7:d4:de:a2:9e:1e:fd:bb:19: 8a:04:41:90:df:e2:9d:8c:3c:fd:d8:a5:e6:d2:ab:11:a7:50: f1:a0:c1:9e:62:d3:aa:fe:c9:85:1c:6a:f0:2c:66:a2:a1:da: 22:7d:98:aa:05:69:c8:b0:21:c7:33:ff:12:04:3d:9b:f9:16: d8:8b:81:6f:3c:85:a6:9f:ea:5f:98:5d:53:13:4d:ac:62:a3: 6f:93:05:1a:24:5c:6e:72:34:4d:35:31:55:ea:2d:9c:bf:03: 4c:aa:65:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9jAq3Pn90APbqSFa++uKW1C/XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTA5MDUxNzQ1MzdaFw0yNTA5MDkwNTI1MzdaMDMxMTAvBgNV BAMTKDk1QUUwNTQ1NEIyMkEwNzlGNjk5QUQzRDgzRUE3NjdERTU5QTMxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLM1Ob7ygMv8O5lzbewscG0wot Za1hsE4ZZxwv7YkU9TfG+ovQH4n6ndxL53nI09FFvPQuwx8z6XeFvfFK+IWBMvfv 3+G5mY6xRRSxkly11WEhrAujzJqeCKzx/uquQowUwpH68OJIMEwHljupJjX+NKsQ PaiEJyGV9wMxiPjr3aBNp4HoHYm5wOVceSedvk8WIquv9hgOQvynQAKDN694lm/s f5688UwxlCVU2toNqaZLl18UJLLoJ6+JcIb6akYB6gIqEjTfhW5C4bwsz4w6pF1U Y7/E64FPyNMpbGb4MCWCclPVruONXjMmnW6QpS0+X2hu10tL6SG321zK+1H3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUla4FRUsioHn2ma09g+p2feWaMX4wHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVx26LNZTGh7rl0om6rAbT3rIcfjCMMDI3u mScONE4+pzG5TNxhJAuAgK7/3P6BIr0/YGfAg2xvDWZOyeW/QWFx9xT3UYNYDsR1 r7UtyR0YqAKLXkKXXN4BZaOR3MceZ7qfqdUmtN+SJEOQYAQYEnOFgNw5WQBhz55U 0ARH5PHDreoVIWYkb2WRa5dVKnNZr20MIgegKbNvcsfU3qKeHv27GYoEQZDf4p2M PP3YpebSqxGnUPGgwZ5i06r+yYUcavAsZqKh2iJ9mKoFaciwIccz/xIEPZv5FtiL gW88haaf6l+YXVMTTaxio2+TBRokXG5yNE01MVXqLZy/A0yqZUM= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:09 2025 by rpki-client