$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: +4/TY7XqTx6EYTc02IxEzFdtrwrf6MLuFbOwxqZM+5I= Subject key identifier: B1:A5:06:D7:79:DB:11:5C:77:CF:BB:24:DD:FB:79:27:35:05:A8:97 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 641A8A1BB48D5CCC206221621DBBEE777F9A502E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: 73 Signing time: Mon 21 Jul 2025 08:11:03 +0000 Manifest this update: Mon 21 Jul 2025 08:06:03 +0000 Manifest next update: Thu 24 Jul 2025 08:39:03 +0000 Files and hashes: 1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 2: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: BcQhwq8fdD8Oma5dn5MA6Dtcb7eXpu2UI90oZIWriWg=) 3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1a:8a:1b:b4:8d:5c:cc:20:62:21:62:1d:bb:ee:77:7f:9a:50:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jul 21 08:06:03 2025 GMT Not After : Jul 24 08:39:03 2025 GMT Subject: CN=B1A506D779DB115C77CFBB24DDFB79273505A897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:7a:4e:89:1f:ce:93:9d:0e:b4:b8:d6:bd: d1:dc:7f:99:cb:fc:5e:68:a5:69:ef:2d:fe:d5:9a: 60:58:42:c4:ed:8c:7d:ff:31:d9:e5:77:f2:73:b7: a2:86:63:76:67:c1:3a:70:34:0e:7c:32:57:c3:aa: d4:26:72:d8:8b:4a:26:5e:b0:54:e7:ff:58:51:18: 24:15:c9:61:9a:18:30:e8:0c:11:fe:be:6b:30:be: df:6d:65:87:55:f0:75:2f:54:2f:8e:ac:5c:f8:77: 44:d0:2b:20:44:64:21:f7:9b:a6:29:0d:a2:f0:af: 3b:9d:5b:a7:8d:12:55:49:8c:39:cf:e0:4f:b6:fc: 75:51:06:4b:1a:32:8c:ac:97:a9:ed:3b:61:e2:8b: c8:e2:f6:d7:63:f3:2e:f5:16:9a:9c:7b:37:12:7a: 07:af:8f:91:98:a0:41:12:8a:ea:3a:9a:0a:df:c9: c9:1b:28:53:0d:f4:5f:26:95:15:bd:31:a7:3b:5c: 46:87:2b:bd:e4:af:0b:e9:12:aa:1c:cf:85:27:b2: 36:94:44:97:50:00:ea:82:f2:45:b1:00:fc:e5:07: 3f:76:9e:b5:92:a3:0b:fb:10:62:9b:a1:c5:13:e1: 02:f2:3f:7d:d5:bc:e9:93:fd:59:db:a0:32:15:b2: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A5:06:D7:79:DB:11:5C:77:CF:BB:24:DD:FB:79:27:35:05:A8:97 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:0b:a1:26:f7:4e:70:48:81:3a:6a:a8:f3:16:f2:ef:21: c6:f1:ca:7f:d9:8d:f7:25:57:5d:83:f4:23:9f:3c:69:65:1b: 63:a0:e2:34:34:b3:60:f3:03:65:bc:fa:b7:5c:c2:48:34:b0: 61:f9:72:d9:a4:72:3a:c2:64:5d:73:12:9f:04:39:72:c5:52: 62:67:93:7a:70:e4:2d:11:64:31:85:af:0b:68:7f:1e:11:8b: a5:84:2d:52:c8:b0:c9:2e:77:91:5e:44:a6:32:cc:17:cb:c5: 45:b1:79:a9:f6:7b:d9:90:a6:0e:44:58:5a:0f:a9:9a:ec:ef: f2:18:a7:52:3a:0e:45:fe:5f:19:6e:64:a5:9d:10:15:c5:ed: 52:0b:fb:82:85:ba:ee:4a:96:49:87:5a:f6:b2:85:1c:95:ba: a9:d2:35:4f:b0:ec:cf:53:f4:4f:7f:c1:d0:a6:5e:ba:30:2d: b2:d0:78:5b:dc:bf:b4:c3:25:6d:22:a3:78:13:b0:77:f2:22: 37:5c:cd:57:ec:8f:2f:50:38:e0:73:7f:c2:23:0a:85:a7:ed: 5a:47:58:c9:d5:dc:58:9d:51:f8:18:47:97:ca:e6:4d:df:d9: a6:eb:25:dd:58:19:d1:b2:42:7b:88:cb:34:60:f2:f4:0c:6f: 4d:e9:20:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBqKG7SNXMwgYiFiHbvud3+aUC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA3MjEwODA2MDNaFw0yNTA3MjQwODM5MDNaMDMxMTAvBgNV BAMTKEIxQTUwNkQ3NzlEQjExNUM3N0NGQkIyNERERkI3OTI3MzUwNUE4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8HpOiR/Ok50OtLjWvdHcf5nL /F5opWnvLf7VmmBYQsTtjH3/Mdnld/Jzt6KGY3ZnwTpwNA58MlfDqtQmctiLSiZe sFTn/1hRGCQVyWGaGDDoDBH+vmswvt9tZYdV8HUvVC+OrFz4d0TQKyBEZCH3m6Yp DaLwrzudW6eNElVJjDnP4E+2/HVRBksaMoysl6ntO2Hii8ji9tdj8y71FpqcezcS egevj5GYoEESiuo6mgrfyckbKFMN9F8mlRW9Mac7XEaHK73krwvpEqocz4UnsjaU RJdQAOqC8kWxAPzlBz92nrWSowv7EGKbocUT4QLyP33VvOmT/VnboDIVstCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsaUG13nbEVx3z7sk3ft5JzUFqJcwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuqC6Em905wSIE6aqjzFvLvIcbxyn/Zjfcl V12D9COfPGllG2Og4jQ0s2DzA2W8+rdcwkg0sGH5ctmkcjrCZF1zEp8EOXLFUmJn k3pw5C0RZDGFrwtofx4Ri6WELVLIsMkud5FeRKYyzBfLxUWxean2e9mQpg5EWFoP qZrs7/IYp1I6DkX+XxluZKWdEBXF7VIL+4KFuu5KlkmHWvayhRyVuqnSNU+w7M9T 9E9/wdCmXrowLbLQeFvcv7TDJW0io3gTsHfyIjdczVfsjy9QOOBzf8IjCoWn7VpH WMnV3FidUfgYR5fK5k3f2abrJd1YGdGyQnuIyzRg8vQMb03pIO4= -----END CERTIFICATE-----Generated at Mon Jul 21 23:43:13 2025 by rpki-client