$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: Nkv5x9yUgER8Gk0/bvBqiFmQ+xY56X8lRlindOWwToQ= Subject key identifier: B9:57:07:0F:CF:09:BF:61:8E:D6:DE:30:83:94:06:5D:C0:52:3A:5C Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 3CE3DEC0840324F1D0E80EEFB1160506C69BDB4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: FD Signing time: Fri 06 Jun 2025 11:41:22 +0000 Manifest this update: Fri 06 Jun 2025 11:36:22 +0000 Manifest next update: Mon 09 Jun 2025 23:16:22 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: P7QsgIeBI6Jlmylg4E9bqTZzbWkEwew+La7Hoh4W7Lw=) 2: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: s7CAFaTLpULGdiToNj/HMr0zJFJ24B3wSDyJbhSvqGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e3:de:c0:84:03:24:f1:d0:e8:0e:ef:b1:16:05:06:c6:9b:db:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Jun 6 11:36:22 2025 GMT Not After : Jun 9 23:16:22 2025 GMT Subject: CN=B957070FCF09BF618ED6DE308394065DC0523A5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:5c:5c:cd:6d:8a:ec:aa:b2:1a:e4:8d:37: 4d:a1:81:b7:aa:c9:92:c7:73:6f:7d:1e:2c:25:f3: 6a:c3:33:ed:c3:65:40:7d:be:95:68:82:21:4e:3c: 1d:11:f7:b6:5d:fb:e2:bc:cf:10:c0:3c:61:7b:fb: 5e:bd:97:a1:23:2d:63:b1:5f:d0:a1:59:31:4a:ac: 15:c1:4d:c4:5f:f4:02:4c:0b:45:53:9b:d0:b9:fb: 8b:bf:db:18:da:01:6f:a7:8b:8e:7c:bb:05:24:d6: ef:3e:5b:24:cb:e4:05:16:11:08:c1:e6:2e:3c:17: dd:cc:88:43:ab:13:30:36:39:e4:de:a7:ed:c5:8a: 76:d0:17:03:5a:80:01:93:72:f4:3c:b4:bd:28:eb: 79:33:9f:96:45:7c:e0:fe:68:bc:1b:06:df:6b:15: 06:ff:3f:d6:15:d0:ea:ed:0b:b2:d5:03:0d:90:11: ff:1a:65:49:88:03:36:3c:0e:47:ed:37:2c:9d:99: 93:77:ae:69:50:94:60:36:6b:7c:87:97:2b:19:91: 06:fb:08:60:3e:58:e3:de:84:11:e6:93:26:98:d2: 4d:3d:d9:2c:f5:1b:4b:85:1f:d7:d6:4c:9b:38:65: 0d:4a:a3:f4:77:7c:47:e9:7c:c2:8a:d8:57:3f:7f: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:07:0F:CF:09:BF:61:8E:D6:DE:30:83:94:06:5D:C0:52:3A:5C X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:19:16:c5:88:27:af:a1:18:ba:aa:e9:f9:02:a2:d7:3a:92: d3:dc:cf:b6:90:a7:8f:7c:b6:03:4e:a7:c8:2f:16:02:0a:71: c0:7e:81:7f:18:82:c0:f8:e7:b6:6a:1e:a5:80:d0:79:84:e3: dc:67:fd:63:e1:58:e3:fd:ca:75:ff:62:a7:a8:22:e4:8c:1a: a4:49:c8:0f:2b:ef:df:21:78:76:b9:25:b0:35:64:96:28:cd: c5:ba:c9:16:cf:57:49:fe:84:05:e4:89:f8:20:1e:dd:e8:0b: c4:5d:e4:01:e7:7b:83:ea:ee:4f:31:a4:89:90:7f:1f:7b:3a: 8c:02:3d:da:63:39:2a:35:a7:48:27:08:86:18:08:85:6d:ae: 3c:a3:0b:b8:b9:24:4c:6a:dd:ae:81:64:07:bf:d3:50:4b:cd: bd:5f:0e:3e:8f:89:39:75:1d:14:55:7c:52:1c:55:5e:a3:87: d4:1e:e0:31:e4:51:47:b8:81:57:36:bb:bd:63:f7:00:e3:b6: 20:33:db:2e:a1:8c:2a:37:f5:b6:66:f2:f8:45:58:1a:b0:7d: e5:4a:a0:60:0c:de:87:95:6d:a4:e0:23:6d:7e:e8:82:3b:88: 45:85:a9:5a:5e:7f:72:e9:d9:e8:aa:d4:59:ad:01:25:0a:51: 94:c5:80:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOPewIQDJPHQ6A7vsRYFBsab20swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTA2MDYxMTM2MjJaFw0yNTA2MDkyMzE2MjJaMDMxMTAvBgNV BAMTKEI5NTcwNzBGQ0YwOUJGNjE4RUQ2REUzMDgzOTQwNjVEQzA1MjNBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSa1xczW2K7KqyGuSNN02hgbeq yZLHc299Hiwl82rDM+3DZUB9vpVogiFOPB0R97Zd++K8zxDAPGF7+169l6EjLWOx X9ChWTFKrBXBTcRf9AJMC0VTm9C5+4u/2xjaAW+ni458uwUk1u8+WyTL5AUWEQjB 5i48F93MiEOrEzA2OeTep+3FinbQFwNagAGTcvQ8tL0o63kzn5ZFfOD+aLwbBt9r FQb/P9YV0OrtC7LVAw2QEf8aZUmIAzY8DkftNyydmZN3rmlQlGA2a3yHlysZkQb7 CGA+WOPehBHmkyaY0k092Sz1G0uFH9fWTJs4ZQ1Ko/R3fEfpfMKK2Fc/f90PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVcHD88Jv2GO1t4wg5QGXcBSOlwwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQZFsWIJ6+hGLqq6fkCotc6ktPcz7aQp498 tgNOp8gvFgIKccB+gX8YgsD457ZqHqWA0HmE49xn/WPhWOP9ynX/YqeoIuSMGqRJ yA8r798heHa5JbA1ZJYozcW6yRbPV0n+hAXkifggHt3oC8Rd5AHne4Pq7k8xpImQ fx97OowCPdpjOSo1p0gnCIYYCIVtrjyjC7i5JExq3a6BZAe/01BLzb1fDj6PiTl1 HRRVfFIcVV6jh9Qe4DHkUUe4gVc2u71j9wDjtiAz2y6hjCo39bZm8vhFWBqwfeVK oGAM3oeVbaTgI21+6II7iEWFqVpef3Lp2eiq1FmtASUKUZTFgL8= -----END CERTIFICATE-----Generated at Sat Jun 7 23:21:47 2025 by rpki-client