$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: y1zQhl2jiqPSD2I4+Un+nlwlo+ydJeXywqM4pwNHRoQ= Subject key identifier: A6:88:74:7F:E2:70:F5:DE:BF:42:20:7B:83:7E:63:CD:DC:28:0C:5E Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 68A17B46BCA3CBDA459A274B7C93516E1EAAFAC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0142 Signing time: Tue 03 Jun 2025 19:01:46 +0000 Manifest this update: Tue 03 Jun 2025 18:56:46 +0000 Manifest next update: Sat 07 Jun 2025 04:16:46 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: h5SaTNJnlmk4fx6DgSFdIT/cQrsIFMp3lw3a1+YdkVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a1:7b:46:bc:a3:cb:da:45:9a:27:4b:7c:93:51:6e:1e:aa:fa:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Jun 3 18:56:46 2025 GMT Not After : Jun 7 04:16:46 2025 GMT Subject: CN=A688747FE270F5DEBF42207B837E63CDDC280C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2a:77:d3:51:c3:e3:a8:94:d0:9e:53:1e:b5: c1:5a:92:a6:52:53:75:65:72:46:4b:3b:fc:b6:eb: d5:0f:b0:e2:2e:54:b2:c6:83:ac:d5:6d:18:fb:18: f0:4f:ed:83:9a:a8:a7:9e:d4:27:6f:4d:f3:d6:ec: 08:3a:87:e6:62:f8:e5:11:56:47:f8:2b:44:a4:e7: 3e:3f:03:cf:af:df:7e:8e:d3:fa:02:84:90:5d:2d: 4a:79:47:52:1d:9a:8b:f7:9d:7a:24:e7:c2:a8:20: 55:7e:3c:55:5a:af:c4:56:6d:9c:35:77:b9:03:0a: f1:12:89:a1:5c:29:84:6d:84:19:46:1d:b1:0c:71: 33:57:3a:ce:1e:d9:95:7a:97:1c:17:21:88:d5:5a: 29:39:0c:0e:7f:5f:24:32:84:99:da:5d:d9:94:f5: 38:68:40:32:71:aa:c0:23:31:a5:90:48:fc:4d:a2: 3c:57:95:ac:79:69:d3:8d:fd:c5:b0:66:79:5a:8d: 6a:85:70:91:28:4c:46:fb:e5:39:73:5b:9d:21:40: a9:31:ce:02:64:6e:77:8d:ed:a9:bd:17:74:22:d3: 74:0c:eb:e4:1e:bf:20:6d:f9:18:b5:ea:04:b0:01: 83:37:29:5a:06:53:11:11:cd:42:3a:90:2e:33:9b: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:88:74:7F:E2:70:F5:DE:BF:42:20:7B:83:7E:63:CD:DC:28:0C:5E X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e4:fc:a9:7e:b9:20:cd:9e:62:b8:e4:9a:cd:7c:a6:1c:3a: ec:62:26:8d:4e:b3:ef:2d:a0:a9:87:72:ac:87:d3:89:8f:2c: 81:cd:56:86:15:97:52:e6:32:fb:97:0c:b0:94:5c:37:a5:64: ed:7b:84:f5:fd:89:b7:17:1a:ac:60:53:48:04:9e:e1:5f:e5: 61:fb:d2:a4:94:84:e5:12:cc:a9:0c:d0:43:f5:bb:0c:ed:02: 99:2f:10:2a:86:f7:92:db:b5:80:9c:66:d1:75:a4:ab:bd:90: 45:5d:96:94:5d:7c:a8:d8:cb:8b:df:93:b1:37:95:4d:fd:15: b1:2e:c1:8a:7c:ee:79:23:1d:75:1f:7f:6f:89:64:21:08:b8: 2c:f2:b1:37:24:47:31:e1:fa:3c:94:d9:cc:72:0a:12:de:15: 5d:25:dc:b3:6a:22:71:8c:ae:c0:a5:be:cd:b9:11:7f:9e:eb: 33:40:eb:36:98:38:9c:1e:ee:34:eb:77:76:ab:31:71:56:ee: cd:19:2f:e4:68:03:43:49:f3:4e:2b:fa:94:66:e5:08:c8:ac: b2:b8:d3:63:c9:fe:e0:32:d7:83:80:2e:66:cd:d5:a3:d8:6c: 6e:1b:e3:98:78:72:7e:d0:8d:d5:cf:ed:45:dd:80:98:27:89: e4:f7:95:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKF7Rryjy9pFmidLfJNRbh6q+sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTA2MDMxODU2NDZaFw0yNTA2MDcwNDE2NDZaMDMxMTAvBgNV BAMTKEE2ODg3NDdGRTI3MEY1REVCRjQyMjA3QjgzN0U2M0NEREMyODBDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbKnfTUcPjqJTQnlMetcFakqZS U3VlckZLO/y269UPsOIuVLLGg6zVbRj7GPBP7YOaqKee1CdvTfPW7Ag6h+Zi+OUR Vkf4K0Sk5z4/A8+v336O0/oChJBdLUp5R1Idmov3nXok58KoIFV+PFVar8RWbZw1 d7kDCvESiaFcKYRthBlGHbEMcTNXOs4e2ZV6lxwXIYjVWik5DA5/XyQyhJnaXdmU 9ThoQDJxqsAjMaWQSPxNojxXlax5adON/cWwZnlajWqFcJEoTEb75TlzW50hQKkx zgJkbneN7am9F3Qi03QM6+QevyBt+Ri16gSwAYM3KVoGUxERzUI6kC4zm0xLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpoh0f+Jw9d6/QiB7g35jzdwoDF4wHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjk/Kl+uSDNnmK45JrNfKYcOuxiJo1Os+8t oKmHcqyH04mPLIHNVoYVl1LmMvuXDLCUXDelZO17hPX9ibcXGqxgU0gEnuFf5WH7 0qSUhOUSzKkM0EP1uwztApkvECqG95LbtYCcZtF1pKu9kEVdlpRdfKjYy4vfk7E3 lU39FbEuwYp87nkjHXUff2+JZCEIuCzysTckRzHh+jyU2cxyChLeFV0l3LNqInGM rsClvs25EX+e6zNA6zaYOJwe7jTrd3arMXFW7s0ZL+RoA0NJ804r+pRm5QjIrLK4 02PJ/uAy14OALmbN1aPYbG4b45h4cn7QjdXP7UXdgJgnieT3lZA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:53 2025 by rpki-client