$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: wajIk0ihKw8I/u0W5ISftTcbARoTGUuUeEEcOM64IyU= Subject key identifier: B6:DD:03:B9:93:BA:23:78:06:1C:CC:C7:12:AB:19:47:20:34:B6:A0 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 40349B8ED3ADCF1ACF24A92E0ED181D7B4F30C8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01CF Signing time: Sat 06 Sep 2025 20:01:46 +0000 Manifest this update: Sat 06 Sep 2025 19:56:46 +0000 Manifest next update: Wed 10 Sep 2025 03:53:46 +0000 Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) 2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: Z7kFd8UKTgY4N+yCgNdTfSEaJlA8dWV7DrdEx/AVC74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:34:9b:8e:d3:ad:cf:1a:cf:24:a9:2e:0e:d1:81:d7:b4:f3:0c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Sep 6 19:56:46 2025 GMT Not After : Sep 10 03:53:46 2025 GMT Subject: CN=B6DD03B993BA2378061CCCC712AB19472034B6A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:cc:a0:19:bc:60:17:50:70:39:fb:4c:7c: 99:04:c7:41:59:5b:47:ba:c6:21:d6:69:6e:2d:a8: 71:63:e7:3f:23:d7:10:1e:b6:67:56:45:2b:a5:b0: 6b:40:db:32:bb:de:4f:c8:ae:64:6e:df:ac:33:05: 29:a3:8a:aa:6a:40:02:35:c9:d8:bc:63:7b:82:2b: ac:41:88:24:58:a7:de:6b:8f:85:1b:7f:22:70:ee: 4a:04:46:3b:41:99:90:ca:21:bc:8e:d2:64:44:99: 81:fe:ba:d1:bf:b2:b5:0a:3b:87:4f:4e:7c:80:2f: b8:10:b0:fa:99:14:10:59:d3:70:30:c0:6f:48:4b: 50:82:aa:51:5c:e8:7e:78:91:23:db:58:65:b5:ef: bf:26:0a:bd:52:43:63:15:66:d8:2c:e0:4d:ae:be: 31:41:59:9c:f6:c8:01:40:a0:6d:74:2a:fb:f2:c5: d2:a9:c0:17:0e:b1:de:e0:a4:6d:65:c1:7c:32:6f: d2:a0:9b:56:97:05:b0:0f:d5:4f:58:1e:83:66:cf: 67:3b:32:89:c2:63:70:d9:81:33:9e:3f:1a:3e:5f: d0:bb:c1:6f:ae:5e:06:58:ab:75:c3:1c:a5:1d:e8: 0a:37:c6:1a:af:39:e5:37:76:8d:ed:31:37:de:49: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DD:03:B9:93:BA:23:78:06:1C:CC:C7:12:AB:19:47:20:34:B6:A0 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2d:30:f3:ef:30:6c:36:03:b6:c4:57:a0:bb:84:1a:cd:77: 7a:65:59:66:4a:29:07:89:5f:37:3f:dc:45:16:1a:ee:2d:40: 81:66:48:a5:3d:2c:31:e3:ae:9b:b6:81:20:37:cd:d8:ee:88: e1:a4:14:5e:e5:ad:61:20:59:7a:7c:32:70:d8:73:a6:5b:3e: e6:42:4d:63:35:d3:1a:21:f9:75:a8:ff:f2:a4:81:dc:b2:6e: 01:fc:ab:e7:ab:4b:dc:18:67:dd:de:d9:cf:b4:d1:63:93:23: 00:58:89:08:7b:e4:2a:2c:12:23:29:4f:76:aa:ed:bc:0e:3f: d1:27:dc:57:4b:d6:c7:82:d5:31:46:a6:1f:04:e8:6d:8b:22: 60:f6:3f:e9:be:5b:26:80:f9:eb:18:52:9e:7b:3c:ff:6c:1d: d7:fe:85:44:b9:aa:4c:b4:58:57:57:ce:cf:d0:85:f8:6f:fe: ed:26:00:c3:2f:79:be:86:72:e4:39:59:d6:6d:a5:2e:c7:a1: 8c:39:46:2c:f5:af:51:3a:d0:4b:38:44:7e:e4:5b:45:62:92: e7:81:d1:02:7e:41:ce:66:0a:a0:5d:70:24:09:97:5f:6c:31: ac:a7:4b:87:87:fc:35:98:82:ee:65:80:06:b7:de:71:0d:6f: 36:3c:ac:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDSbjtOtzxrPJKkuDtGB17TzDIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTA5MDYxOTU2NDZaFw0yNTA5MTAwMzUzNDZaMDMxMTAvBgNV BAMTKEI2REQwM0I5OTNCQTIzNzgwNjFDQ0NDNzEyQUIxOTQ3MjAzNEI2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7MygGbxgF1BwOftMfJkEx0FZ W0e6xiHWaW4tqHFj5z8j1xAetmdWRSulsGtA2zK73k/IrmRu36wzBSmjiqpqQAI1 ydi8Y3uCK6xBiCRYp95rj4UbfyJw7koERjtBmZDKIbyO0mREmYH+utG/srUKO4dP TnyAL7gQsPqZFBBZ03AwwG9IS1CCqlFc6H54kSPbWGW1778mCr1SQ2MVZtgs4E2u vjFBWZz2yAFAoG10KvvyxdKpwBcOsd7gpG1lwXwyb9Kgm1aXBbAP1U9YHoNmz2c7 MonCY3DZgTOePxo+X9C7wW+uXgZYq3XDHKUd6Ao3xhqvOeU3do3tMTfeSQaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtt0DuZO6I3gGHMzHEqsZRyA0tqAwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHItMPPvMGw2A7bEV6C7hBrNd3plWWZKKQeJ Xzc/3EUWGu4tQIFmSKU9LDHjrpu2gSA3zdjuiOGkFF7lrWEgWXp8MnDYc6ZbPuZC TWM10xoh+XWo//KkgdyybgH8q+erS9wYZ93e2c+00WOTIwBYiQh75CosEiMpT3aq 7bwOP9En3FdL1seC1TFGph8E6G2LImD2P+m+WyaA+esYUp57PP9sHdf+hUS5qky0 WFdXzs/Qhfhv/u0mAMMveb6GcuQ5WdZtpS7HoYw5Riz1r1E60Es4RH7kW0VikueB 0QJ+Qc5mCqBdcCQJl19sMaynS4eH/DWYgu5lgAa33nENbzY8rFA= -----END CERTIFICATE-----Generated at Mon Sep 8 10:44:11 2025 by rpki-client