$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: fztkkBkbr6j+fAeJdd5lSlRP5xIp1+dp2E/KkraQGoo= Subject key identifier: FA:0F:6C:F2:67:E6:A5:71:97:5B:FB:80:7E:BA:5C:C8:93:49:CA:CC Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 07510CDCADBDD20D8D0CC7159E1ADA45962E6A56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 01A4 Signing time: Sat 07 Jun 2025 09:41:03 +0000 Manifest this update: Sat 07 Jun 2025 09:36:03 +0000 Manifest next update: Tue 10 Jun 2025 21:05:03 +0000 Files and hashes: 1: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: M890dag6EE1qtsFlPkd3PB/fu3TZaGNSDr48ih7+xpg=) 2: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: 0P8RiV2EV8KtV2wVPDkhbbfmwCyYhPd1bfzDVq451ls=) 3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: 9VCyBS9IIeec/M2Dmo8IoJQFogFZ4Fro1YlaePTTG58=) 4: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: j0JNFX+aqI4+xOMR6vWyQWpXpBz4+twEcom2gSrIwYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:51:0c:dc:ad:bd:d2:0d:8d:0c:c7:15:9e:1a:da:45:96:2e:6a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Jun 7 09:36:03 2025 GMT Not After : Jun 10 21:05:03 2025 GMT Subject: CN=FA0F6CF267E6A571975BFB807EBA5CC89349CACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:29:36:6a:38:67:33:90:16:ce:4d:4d:46: 81:7d:aa:b8:2e:5e:56:be:59:c7:91:e0:e7:2e:07: b4:df:14:4b:6e:66:f9:73:76:30:b1:94:03:b0:f0: aa:95:c7:21:ab:db:c1:c1:b4:d1:ce:2a:05:45:8b: 01:5d:24:f3:bb:57:6a:da:db:58:4b:73:2c:93:a3: bf:69:6f:c7:47:27:57:75:97:f1:6b:e0:46:23:28: 3e:04:4e:e1:39:2f:ae:47:06:e1:71:ff:b0:6e:50: c5:03:2a:9a:49:0e:80:45:fe:19:9f:8a:6c:c0:29: 86:37:e9:84:7a:8d:e7:14:ab:8b:48:da:ab:c5:20: 16:4d:99:5d:4e:d4:d7:4f:f1:ec:6f:5a:6d:60:9e: e2:ff:e6:54:41:ee:5d:f3:34:26:92:f2:31:ce:80: c9:ef:32:f4:a7:34:72:a4:83:9f:77:82:f7:e0:24: 43:22:40:1c:f5:36:ee:cf:e9:bb:f8:3d:9f:40:a9: db:1a:e9:bb:c2:70:c2:eb:fd:53:58:c7:95:0a:58: 86:ae:96:34:98:fb:fc:b8:e9:05:b3:a2:2b:a3:4e: b6:f9:02:29:fe:66:a8:fb:35:1c:a7:84:c3:48:85: f6:98:96:8e:52:bc:c0:25:8d:04:6f:88:44:48:ee: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0F:6C:F2:67:E6:A5:71:97:5B:FB:80:7E:BA:5C:C8:93:49:CA:CC X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:27:a1:82:1c:32:4a:b7:a2:c9:b8:87:2e:c5:59:c3:10:c4: 29:fd:9a:ea:71:51:78:0e:8f:f0:d7:b8:32:a6:01:ed:8b:54: 19:03:67:fb:f7:8d:ea:90:35:08:72:f3:15:ce:39:b0:55:31: 58:2a:91:9a:2c:d9:96:94:61:bc:83:c6:df:83:75:a9:08:28: 2f:32:42:0e:64:55:1c:81:d2:9a:f5:d6:42:ef:d7:38:47:b1: 6b:81:26:84:42:c7:e2:74:b7:74:a1:3b:87:d5:5a:7e:4d:e3: 3f:eb:00:af:69:6d:99:93:3a:20:36:e7:41:5a:e0:97:b2:44: f1:c9:37:ad:52:24:2e:a6:7c:5d:29:a4:c5:91:f5:3e:0c:42: 29:26:cc:39:af:e8:3a:74:b0:82:74:12:bf:bf:05:65:bc:c6: 6f:e0:65:42:4d:6d:ba:cd:40:18:be:77:6c:98:38:11:93:29: e9:7e:eb:5f:e4:28:56:95:05:ff:6e:90:33:88:f9:99:de:c5: fe:f9:c9:93:62:ce:04:f6:f7:83:1f:3f:7e:0c:60:24:e8:e4: 6f:25:8f:ad:87:69:b6:41:82:d1:04:6e:23:a5:7a:a5:00:f2: 10:db:2f:d5:77:8a:aa:f8:d9:de:3d:43:d5:32:87:71:9f:93: a6:04:4a:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1EM3K290g2NDMcVnhraRZYualYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTA2MDcwOTM2MDNaFw0yNTA2MTAyMTA1MDNaMDMxMTAvBgNV BAMTKEZBMEY2Q0YyNjdFNkE1NzE5NzVCRkI4MDdFQkE1Q0M4OTM0OUNBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gCk2ajhnM5AWzk1NRoF9qrgu Xla+WceR4OcuB7TfFEtuZvlzdjCxlAOw8KqVxyGr28HBtNHOKgVFiwFdJPO7V2ra 21hLcyyTo79pb8dHJ1d1l/Fr4EYjKD4ETuE5L65HBuFx/7BuUMUDKppJDoBF/hmf imzAKYY36YR6jecUq4tI2qvFIBZNmV1O1NdP8exvWm1gnuL/5lRB7l3zNCaS8jHO gMnvMvSnNHKkg593gvfgJEMiQBz1Nu7P6bv4PZ9Aqdsa6bvCcMLr/VNYx5UKWIau ljSY+/y46QWzoiujTrb5Ain+Zqj7NRynhMNIhfaYlo5SvMAljQRviERI7iX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+g9s8mfmpXGXW/uAfrpcyJNJyswwHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwnoYIcMkq3osm4hy7FWcMQxCn9mupxUXgO j/DXuDKmAe2LVBkDZ/v3jeqQNQhy8xXOObBVMVgqkZos2ZaUYbyDxt+DdakIKC8y Qg5kVRyB0pr11kLv1zhHsWuBJoRCx+J0t3ShO4fVWn5N4z/rAK9pbZmTOiA250Fa 4JeyRPHJN61SJC6mfF0ppMWR9T4MQikmzDmv6Dp0sIJ0Er+/BWW8xm/gZUJNbbrN QBi+d2yYOBGTKel+61/kKFaVBf9ukDOI+Znexf75yZNizgT294MfP34MYCTo5G8l j62HabZBgtEEbiOleqUA8hDbL9V3iqr42d49Q9Uyh3Gfk6YESh0= -----END CERTIFICATE-----Generated at Sat Jun 7 22:21:36 2025 by rpki-client