$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: P6tBGwTc7KEvIuiquNdfkDd2kCiajomellt1bI9sCio= Subject key identifier: CF:33:74:66:E3:B5:A3:5A:A5:10:00:F5:9A:AF:83:02:3D:9E:07:DF Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 03E889168344F4E26B5054389A51047C6555A037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0919 Signing time: Sun 01 Jun 2025 21:01:46 +0000 Manifest this update: Sun 01 Jun 2025 20:56:46 +0000 Manifest next update: Thu 05 Jun 2025 01:34:46 +0000 Files and hashes: 1: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: 4UL5nuvdiBFMceG++k9UC/y48YSRSF0p9utwafu7x5E=) 2: AS142395.roa (hash: vW3zaDs4B/0B4dgk4xj07ZGjVrPmOv0iMJHfXVSfu34=) 3: AS48.roa (hash: tnIHiyydMBODQZAGAIWJ55BdRFMyohaiaQfvZCTRwvM=) 4: AS59282.roa (hash: rn/foQIRZPZaJbefF4yS1h7Rqlzl8RA4UhyiMvZtbyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 01:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e8:89:16:83:44:f4:e2:6b:50:54:38:9a:51:04:7c:65:55:a0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Jun 1 20:56:46 2025 GMT Not After : Jun 5 01:34:46 2025 GMT Subject: CN=CF337466E3B5A35AA51000F59AAF83023D9E07DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:5c:25:8b:c7:44:f5:ce:b2:9e:00:b0:89: 24:42:3b:39:d7:bd:71:7d:ae:2a:df:fd:b0:3b:96: 37:3f:52:e3:ce:d1:1e:46:37:c7:a3:c0:a3:5a:28: ec:e8:a2:e2:48:e9:44:ca:01:72:ca:e3:3e:15:c5: a8:2a:8b:02:20:7b:3f:de:9e:51:68:7b:21:cd:e5: c6:6d:4b:ef:46:b7:da:7c:ec:d6:77:e0:7d:9a:32: 27:39:86:f2:c3:c7:14:07:d8:a5:9f:40:9f:f3:68: cd:a4:1a:7b:3f:a5:42:aa:00:83:9f:39:26:af:d3: 95:85:8f:4a:38:62:cc:33:f9:c1:0c:70:d0:ce:fc: af:e1:1a:a6:8d:1b:2e:84:12:ee:62:b1:5a:4c:e1: 5b:21:0b:ef:1b:94:04:32:cd:07:be:19:1f:71:13: 12:1e:3d:27:15:ce:89:23:b7:af:fc:c4:55:e9:83: c9:ec:5a:80:6e:7b:1d:7e:f2:51:6a:3b:c1:0e:3a: de:ef:ab:86:c2:b4:f8:d6:c4:75:32:13:9b:75:df: 1b:7a:ae:e0:0e:0d:58:d7:bc:d8:de:3e:d0:9f:7f: ac:ea:c6:e4:74:31:9c:96:ad:d3:19:85:96:cc:7c: 0a:6f:4f:fd:5c:7b:4d:d4:03:e3:65:c7:60:a3:be: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:74:66:E3:B5:A3:5A:A5:10:00:F5:9A:AF:83:02:3D:9E:07:DF X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:03:b8:71:2a:19:fe:6a:b0:fe:c4:ee:6a:4b:75:3f:87:60: f7:0a:17:5f:19:2c:4d:c2:74:a1:67:c8:5e:36:8e:77:8f:9c: cf:15:9e:9b:a5:90:1e:89:23:af:fe:65:7f:ec:0d:f6:5d:8e: ed:0b:ac:db:44:bc:54:f6:a3:09:77:ec:be:c3:39:ce:d9:78: 1b:2d:31:bb:8a:bd:73:da:6a:02:22:ed:ae:3c:9d:3a:54:83: 5d:ed:ff:0a:5b:08:8c:b7:b0:5d:e5:d8:d5:9a:de:05:ec:0b: 8c:0c:53:65:21:90:73:ca:8a:fd:0c:c3:5c:16:e8:de:b3:f9: 3f:80:bb:56:dc:54:52:e7:23:80:0a:ca:92:43:42:89:c9:e4: da:da:a8:29:72:e8:1c:69:17:cf:b6:69:1b:3d:b5:fb:4a:93: 9e:4e:5c:b2:a1:68:05:dc:62:02:53:48:b7:9a:c8:89:bd:ce: ab:75:f1:e4:39:37:00:a8:7c:e4:2c:27:fb:c5:1e:e7:4d:6c: c4:cf:5e:9d:a0:7d:f5:22:56:2c:5f:d6:a5:ef:d8:07:cf:5c: 4e:19:fd:ab:94:a1:90:35:87:ed:e7:a8:39:74:69:83:7a:12: 17:f9:f3:ee:03:8d:0e:1c:a0:ab:cf:6d:ae:20:03:95:b1:cd: 99:88:e3:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+iJFoNE9OJrUFQ4mlEEfGVVoDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA2MDEyMDU2NDZaFw0yNTA2MDUwMTM0NDZaMDMxMTAvBgNV BAMTKENGMzM3NDY2RTNCNUEzNUFBNTEwMDBGNTlBQUY4MzAyM0Q5RTA3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIP1wli8dE9c6yngCwiSRCOznX vXF9rirf/bA7ljc/UuPO0R5GN8ejwKNaKOzoouJI6UTKAXLK4z4VxagqiwIgez/e nlFoeyHN5cZtS+9Gt9p87NZ34H2aMic5hvLDxxQH2KWfQJ/zaM2kGns/pUKqAIOf OSav05WFj0o4Yswz+cEMcNDO/K/hGqaNGy6EEu5isVpM4VshC+8blAQyzQe+GR9x ExIePScVzokjt6/8xFXpg8nsWoBuex1+8lFqO8EOOt7vq4bCtPjWxHUyE5t13xt6 ruAODVjXvNjePtCff6zqxuR0MZyWrdMZhZbMfApvT/1ce03UA+Nlx2CjvjLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzN0ZuO1o1qlEAD1mq+DAj2eB98wHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcDuHEqGf5qsP7E7mpLdT+HYPcKF18ZLE3C dKFnyF42jnePnM8VnpulkB6JI6/+ZX/sDfZdju0LrNtEvFT2owl37L7DOc7ZeBst MbuKvXPaagIi7a48nTpUg13t/wpbCIy3sF3l2NWa3gXsC4wMU2UhkHPKiv0Mw1wW 6N6z+T+Au1bcVFLnI4AKypJDQonJ5NraqCly6BxpF8+2aRs9tftKk55OXLKhaAXc YgJTSLeayIm9zqt18eQ5NwCofOQsJ/vFHudNbMTPXp2gffUiVixf1qXv2AfPXE4Z /auUoZA1h+3nqDl0aYN6Ehf58+4DjQ4coKvPba4gA5WxzZmI4/o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:50 2025 by rpki-client