$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: R2gpXTiL0/QJYPGCdhtxetPjsj9wCpFH1oIJ4rJ00bI= Subject key identifier: CA:EA:30:3D:8D:E2:0A:ED:38:08:9D:63:C5:37:0F:81:D0:3A:0F:DC Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 653DE84A23950172DF5856DFA245425C7F4506F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: 5D Signing time: Thu 05 Jun 2025 09:21:04 +0000 Manifest this update: Thu 05 Jun 2025 09:16:04 +0000 Manifest next update: Sun 08 Jun 2025 18:28:04 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: t/FbAmQ01CekCoje7ic9acb64PjUj432FXP8x4d5rLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3d:e8:4a:23:95:01:72:df:58:56:df:a2:45:42:5c:7f:45:06:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jun 5 09:16:04 2025 GMT Not After : Jun 8 18:28:04 2025 GMT Subject: CN=CAEA303D8DE20AED38089D63C5370F81D03A0FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:7b:18:c5:30:66:3e:1e:5b:45:12:98:a7: 3a:fa:44:48:22:14:7e:bc:1a:73:58:dc:c0:34:68: 91:09:d7:0a:b9:db:58:47:ec:45:60:05:7a:0a:4f: 3c:a6:e2:9f:d3:38:58:28:d7:f4:81:41:fa:36:cd: 30:bb:2a:ee:33:2f:0c:d5:3c:09:12:64:de:3a:a9: b4:79:51:b7:72:b4:09:d1:fc:01:d7:6e:00:77:6d: fe:43:69:a3:6a:6e:d1:5f:60:2b:d9:96:da:5a:ef: 88:69:79:df:0e:35:22:db:c1:bf:83:1d:a1:a4:fa: 35:c2:d5:cf:3f:b3:29:c3:b6:33:43:45:f0:b3:d6: 80:34:ba:e6:90:21:71:b5:d7:8f:f6:ce:05:79:3a: eb:89:6b:25:02:3b:07:61:10:de:94:e8:9d:59:88: e5:b0:dd:66:8d:d5:8c:69:61:b2:a5:05:a8:c4:7b: 32:52:53:41:f6:8b:97:37:88:2e:75:65:ee:4e:42: b5:06:e8:b8:b0:c7:3d:9b:de:fc:aa:57:47:15:61: da:af:3a:7f:cb:90:26:e6:7e:00:30:b9:8a:dd:e3: 1a:9c:37:34:b9:f8:d7:82:51:73:a6:b1:cc:d3:37: 0e:b4:f1:f5:5d:c4:64:8f:be:f4:81:9d:26:f9:e3: de:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:30:3D:8D:E2:0A:ED:38:08:9D:63:C5:37:0F:81:D0:3A:0F:DC X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ed:92:99:43:74:1d:83:07:09:61:39:fa:4c:bf:e3:99:d0: 47:62:7b:54:19:db:41:74:1b:4d:d8:02:4d:4e:ef:db:90:91: 8d:58:da:bd:a1:a7:1a:94:00:27:01:13:4f:90:15:33:67:34: 91:e1:f0:0c:f6:14:63:34:80:13:04:02:96:d9:c0:1c:e4:95: cb:06:dc:b3:a7:d4:2b:7d:e1:2d:c2:e6:01:9f:c3:82:5f:72: c1:3a:1e:a0:06:72:11:2c:5d:49:0b:74:c0:01:77:17:04:15: 26:d5:22:b8:5f:62:df:dd:1a:31:00:99:61:6e:d4:9d:ec:dd: 60:ba:d3:1d:fc:3e:68:58:36:0e:5b:58:4c:0f:3f:e4:4f:12: 11:36:14:16:58:e2:8f:ce:53:0f:a1:fe:bf:5b:c9:ce:dd:3b: 8a:31:f8:cb:b5:1a:32:e4:97:70:2a:80:92:f7:b6:95:bf:00: 31:8b:40:5c:b8:c4:76:44:f4:0e:a7:11:5e:81:8d:3c:56:dd: ef:fe:99:53:95:0b:5f:65:a1:07:ee:5d:82:92:40:88:ea:e4: 97:3a:06:68:71:a0:7b:6b:3c:ec:ed:99:25:ff:15:a8:e8:60: 32:bd:94:91:56:ef:7c:ff:59:aa:48:06:fb:c7:08:49:c9:8a: b0:40:8b:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZT3oSiOVAXLfWFbfokVCXH9FBvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA2MDUwOTE2MDRaFw0yNTA2MDgxODI4MDRaMDMxMTAvBgNV BAMTKENBRUEzMDNEOERFMjBBRUQzODA4OUQ2M0M1MzcwRjgxRDAzQTBGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiXsYxTBmPh5bRRKYpzr6REgi FH68GnNY3MA0aJEJ1wq521hH7EVgBXoKTzym4p/TOFgo1/SBQfo2zTC7Ku4zLwzV PAkSZN46qbR5UbdytAnR/AHXbgB3bf5DaaNqbtFfYCvZltpa74hped8ONSLbwb+D HaGk+jXC1c8/synDtjNDRfCz1oA0uuaQIXG114/2zgV5OuuJayUCOwdhEN6U6J1Z iOWw3WaN1YxpYbKlBajEezJSU0H2i5c3iC51Ze5OQrUG6Liwxz2b3vyqV0cVYdqv On/LkCbmfgAwuYrd4xqcNzS5+NeCUXOmsczTNw608fVdxGSPvvSBnSb5494jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuowPY3iCu04CJ1jxTcPgdA6D9wwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPtkplDdB2DBwlhOfpMv+OZ0Edie1QZ20F0 G03YAk1O79uQkY1Y2r2hpxqUACcBE0+QFTNnNJHh8Az2FGM0gBMEApbZwBzklcsG 3LOn1Ct94S3C5gGfw4JfcsE6HqAGchEsXUkLdMABdxcEFSbVIrhfYt/dGjEAmWFu 1J3s3WC60x38PmhYNg5bWEwPP+RPEhE2FBZY4o/OUw+h/r9byc7dO4ox+Mu1GjLk l3AqgJL3tpW/ADGLQFy4xHZE9A6nEV6BjTxW3e/+mVOVC19loQfuXYKSQIjq5Jc6 BmhxoHtrPOztmSX/FajoYDK9lJFW73z/WapIBvvHCEnJirBAixA= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:14 2025 by rpki-client