$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft File: C619643EEB518333DAE2A79933BEB1320C89CA87.mft (raw, json) Hash identifier: lrhq6944n1eHKI9uL5T3BxMgOAWQYy5bzsG0kyw1jAo= Subject key identifier: E8:3F:8D:32:2B:43:CD:6B:65:0B:D3:35:72:45:8A:F7:CC:20:F8:DD Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 Certificate issuer: /CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Certificate serial: 7BAF384C9437092BE7F8DE9BFCFB9A66064192B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft Manifest number: 67 Signing time: Mon 02 Jun 2025 09:41:13 +0000 Manifest this update: Mon 02 Jun 2025 09:36:13 +0000 Manifest next update: Thu 05 Jun 2025 19:27:13 +0000 Files and hashes: 1: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: hIlg+Qt1QESY9Y8aeztegkZN8iCL71JNX4sa7hGChZk=) 2: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: 7jJX4tA0NHHCSnCkhJQuXs74UXPq++JdHUV1H/oU7A0=) 3: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: gsHh3wTMSE0Um3OSJBZIKaO5EpyUMdma+U85cb050E4=) 4: C619643EEB518333DAE2A79933BEB1320C89CA87.crl (hash: ttOLI8EcsPSvVrjhrBuyTT9eB83rqIzSRedRK49B2rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:af:38:4c:94:37:09:2b:e7:f8:de:9b:fc:fb:9a:66:06:41:92:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Validity Not Before: Jun 2 09:36:13 2025 GMT Not After : Jun 5 19:27:13 2025 GMT Subject: CN=E83F8D322B43CD6B650BD33572458AF7CC20F8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:cc:68:82:ab:b8:9a:3a:a1:80:86:71:6a: c8:84:fd:9b:24:0d:75:1d:32:ac:f4:7b:89:99:09: cf:0a:fc:47:ef:54:9c:72:c9:c2:dc:a7:78:c7:e2: da:c6:4a:7c:d9:20:ee:cd:dd:67:e2:ef:b8:52:54: 4f:8a:ca:3b:82:a7:ec:5c:17:5c:17:ff:c9:67:be: 65:d9:23:19:35:13:37:2e:40:22:66:bc:20:46:1a: ec:3a:7a:95:12:c2:7e:38:aa:fd:56:40:14:33:89: e3:c4:2c:14:03:47:85:83:42:90:ab:b9:6e:3b:bd: a4:76:23:d5:ab:42:bf:94:83:6b:0a:13:38:5d:9e: b9:c6:d2:1d:5c:31:4c:36:6f:9e:a6:47:0a:c2:84: e8:c1:5a:61:9f:37:9f:6f:97:ae:b7:e0:7d:14:f2: 24:6e:06:44:82:d9:1d:11:26:d8:03:70:56:fa:1d: 65:70:25:19:f7:7b:88:ca:96:e5:ca:7b:d6:49:13: f8:8b:f6:18:ab:0b:86:9c:15:a0:56:f8:21:6c:b1: 35:4f:80:31:57:7b:db:c7:76:8b:57:c4:81:94:42: 27:83:59:e5:5c:60:43:ed:e1:be:61:3a:01:9a:e7: 75:10:57:f9:45:09:03:4f:ea:a3:53:22:b2:99:7a: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:8D:32:2B:43:CD:6B:65:0B:D3:35:72:45:8A:F7:CC:20:F8:DD X509v3 Authority Key Identifier: keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:74:56:77:7c:e0:22:f5:ad:6b:07:26:bc:4a:79:14:f5: 42:9c:6c:bb:93:45:4b:02:55:7d:55:be:c8:ef:90:77:01:52: 88:93:bd:2d:37:f7:38:99:c8:3f:06:9f:54:a4:83:5b:e4:91: 9f:fa:ef:e8:fc:61:a9:4e:85:11:f0:49:8a:e2:5c:d6:c0:ab: 66:c7:66:66:17:9b:5c:a0:ab:97:3a:ec:dd:4f:13:73:a1:4a: 9c:6c:16:76:e0:f1:cc:ab:1e:33:d9:b8:cc:0b:3b:5e:3b:ef: 1e:e6:88:9d:42:1f:b1:69:94:18:bb:4b:6c:83:87:d5:a3:cd: a3:94:62:33:4f:a1:e4:df:2f:21:25:0b:27:62:1a:ea:b1:3c: 8d:e4:7a:d4:fa:a2:ea:ab:f8:0d:03:89:c1:79:05:2a:d4:08: 6b:23:5a:3a:88:4a:e9:ff:29:47:61:50:c0:72:3a:58:19:1e: 82:b0:e5:93:93:27:d3:35:d0:3b:c1:34:9f:0e:75:60:b7:2f: a7:ea:cb:7b:91:72:3e:23:1e:98:50:f2:7b:0b:7b:87:95:ed: 97:2a:62:6b:f6:75:af:c1:70:08:86:c0:1e:90:b3:1e:f3:87: 70:b2:e9:90:c8:35:e8:a5:dd:43:fe:a8:ad:90:12:ee:a9:f7: d7:0f:b1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe684TJQ3CSvn+N6b/PuaZgZBkrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIw Qzg5Q0E4NzAeFw0yNTA2MDIwOTM2MTNaFw0yNTA2MDUxOTI3MTNaMDMxMTAvBgNV BAMTKEU4M0Y4RDMyMkI0M0NENkI2NTBCRDMzNTcyNDU4QUY3Q0MyMEY4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4O8xogqu4mjqhgIZxasiE/Zsk DXUdMqz0e4mZCc8K/EfvVJxyycLcp3jH4trGSnzZIO7N3Wfi77hSVE+KyjuCp+xc F1wX/8lnvmXZIxk1EzcuQCJmvCBGGuw6epUSwn44qv1WQBQziePELBQDR4WDQpCr uW47vaR2I9WrQr+Ug2sKEzhdnrnG0h1cMUw2b56mRwrChOjBWmGfN59vl6634H0U 8iRuBkSC2R0RJtgDcFb6HWVwJRn3e4jKluXKe9ZJE/iL9hirC4acFaBW+CFssTVP gDFXe9vHdotXxIGUQieDWeVcYEPt4b5hOgGa53UQV/lFCQNP6qNTIrKZeiyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6D+NMitDzWtlC9M1ckWK98wg+N0wHwYDVR0j BBgwFoAUxhlkPutRgzPa4qeZM76xMgyJyocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmMzMGM3MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9DNjE5NjQzRUVC NTE4MzMzREFFMkE3OTkzM0JFQjEzMjBDODlDQTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIwQzg5 Q0E4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIx MzIwQzg5Q0E4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTidFZ3fOAi9a1rBya8SnkU9UKcbLuTRUsC VX1VvsjvkHcBUoiTvS039ziZyD8Gn1Skg1vkkZ/67+j8YalOhRHwSYriXNbAq2bH ZmYXm1ygq5c67N1PE3OhSpxsFnbg8cyrHjPZuMwLO1477x7miJ1CH7FplBi7S2yD h9WjzaOUYjNPoeTfLyElCydiGuqxPI3ketT6ouqr+A0DicF5BSrUCGsjWjqISun/ KUdhUMByOlgZHoKw5ZOTJ9M10DvBNJ8OdWC3L6fqy3uRcj4jHphQ8nsLe4eV7Zcq Ymv2da/BcAiGwB6Qsx7zh3Cy6ZDINeil3UP+qK2QEu6p99cPsZ0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:29 2025 by rpki-client