$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: +NE5BRuZ7aFwyVuH6IG3TL1nREtNhdTMnvU7zYyn2Ok= Subject key identifier: 66:0B:F4:37:EC:22:CA:89:C3:C0:16:58:4F:E3:B1:CD:A5:7B:9C:6F Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 4B67E4BC9CA87CBE80F27061B369545860697633 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 01F3 Signing time: Mon 30 Jun 2025 23:10:46 +0000 Manifest this update: Mon 30 Jun 2025 23:05:46 +0000 Manifest next update: Fri 04 Jul 2025 02:57:46 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 0BWjl5P155m35iG6z4d5ofVWD1KwIdM4uWlxy+LGQA0=) 2: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: coi32ZAGddQRv9xSavHye+NxyczoAlv7Px9Iix0E8hg=) 3: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: u8WfQ7ViwC8c62RjjiP6fTb34ki+LT2D/raqeIObUTI=) 4: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: L2EmD81aMJH/5FIYqmAaBN4dVwGTSb3agMBVp5kZ0Sc=) 5: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: dHpN7ub4KrmBCyTXelnoFJDCLhoYO0X3bUz4MMj77nQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:67:e4:bc:9c:a8:7c:be:80:f2:70:61:b3:69:54:58:60:69:76:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Jun 30 23:05:46 2025 GMT Not After : Jul 4 02:57:46 2025 GMT Subject: CN=660BF437EC22CA89C3C016584FE3B1CDA57B9C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:92:4c:35:23:cf:28:ba:a2:8c:65:21:bf: 8d:1f:bb:e1:65:94:45:3e:0a:4a:06:58:37:04:13: 74:52:69:dc:74:46:ad:6c:c0:c3:59:b8:ed:c6:0b: 80:e6:b6:4c:3f:0f:0d:26:02:93:eb:f4:80:87:0d: 3d:f5:07:b7:d9:56:09:d9:dd:22:8e:42:26:a8:fb: a3:26:25:96:85:f9:c4:6e:18:cd:27:a2:43:50:f9: 7d:b9:d9:ac:48:32:e7:84:ca:f4:d3:1e:31:d3:af: 8c:4a:ee:64:d5:b3:f6:e3:e2:b4:32:b8:e2:e8:98: e3:cc:23:d4:b2:ce:5b:9a:3c:47:e8:30:8c:8d:dc: 29:5e:d3:8f:90:fc:6b:1d:a9:1b:f3:33:22:d4:75: 45:83:65:d7:3f:fc:5e:07:35:a2:95:12:7f:a2:65: 1b:27:e1:0c:6d:05:b3:d8:c6:8f:ab:de:3b:47:13: c8:84:74:07:0f:6e:13:2e:31:ef:6d:f5:75:c3:b9: 9f:29:d6:c4:26:9f:aa:bb:93:ad:d5:5c:c1:c2:68: 28:6b:d0:11:ff:ab:62:5d:8b:0f:0d:70:03:e6:28: 6b:88:d4:c9:28:89:ab:bc:82:ac:68:cf:62:b3:e8: 70:83:24:df:7c:37:14:82:15:60:72:d7:97:66:ba: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:F4:37:EC:22:CA:89:C3:C0:16:58:4F:E3:B1:CD:A5:7B:9C:6F X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:23:80:18:78:77:f6:47:b5:65:76:d8:69:9e:d8:1d:75: c3:e9:96:76:25:dd:97:81:3b:e1:0e:c0:f0:73:5c:2c:70:92: 0a:8a:9f:44:05:f6:7e:ed:ca:22:35:be:05:74:dd:fd:20:64: f3:47:05:40:9f:4d:47:ef:29:12:0c:3c:64:ea:96:31:b6:56: 63:44:e8:dc:95:0d:f4:6f:ab:01:c7:73:c2:f0:5c:e6:25:7b: cb:c7:21:26:0c:c4:d1:14:dc:8a:52:75:b9:15:ba:21:67:0e: e3:ca:4e:3f:a0:12:15:df:5b:64:9e:75:ed:aa:e3:c7:e1:9d: 63:90:a2:8f:4c:33:a8:7a:7b:9b:12:7b:b9:30:80:1d:e0:af: ee:bd:79:87:f7:66:5b:34:fa:d2:19:8a:1d:60:5f:51:23:f2: 28:46:98:88:9e:af:8c:6f:6c:7b:07:55:23:08:c9:5a:a1:a9: bf:3d:dc:03:01:07:20:30:70:76:34:d1:b7:ce:84:bd:73:62: cd:60:7e:16:7e:b5:a3:d0:83:7e:33:70:d2:55:0b:84:ce:b9: 7b:b2:d2:98:b7:78:97:89:a3:9b:51:51:50:5d:54:54:e3:a9: e6:7b:32:95:70:46:45:d6:80:5b:80:46:1b:ac:68:bb:3e:67: 1b:87:e9:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2fkvJyofL6A8nBhs2lUWGBpdjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA2MzAyMzA1NDZaFw0yNTA3MDQwMjU3NDZaMDMxMTAvBgNV BAMTKDY2MEJGNDM3RUMyMkNBODlDM0MwMTY1ODRGRTNCMUNEQTU3QjlDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH25JMNSPPKLqijGUhv40fu+Fl lEU+CkoGWDcEE3RSadx0Rq1swMNZuO3GC4Dmtkw/Dw0mApPr9ICHDT31B7fZVgnZ 3SKOQiao+6MmJZaF+cRuGM0nokNQ+X252axIMueEyvTTHjHTr4xK7mTVs/bj4rQy uOLomOPMI9SyzluaPEfoMIyN3Cle04+Q/GsdqRvzMyLUdUWDZdc//F4HNaKVEn+i ZRsn4QxtBbPYxo+r3jtHE8iEdAcPbhMuMe9t9XXDuZ8p1sQmn6q7k63VXMHCaChr 0BH/q2Jdiw8NcAPmKGuI1Mkoiau8gqxoz2Kz6HCDJN98NxSCFWBy15dmusMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgv0N+wiyonDwBZYT+OxzaV7nG8wHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGatI4AYeHf2R7VldthpntgddcPplnYl3ZeB O+EOwPBzXCxwkgqKn0QF9n7tyiI1vgV03f0gZPNHBUCfTUfvKRIMPGTqljG2VmNE 6NyVDfRvqwHHc8LwXOYle8vHISYMxNEU3IpSdbkVuiFnDuPKTj+gEhXfW2Sede2q 48fhnWOQoo9MM6h6e5sSe7kwgB3gr+69eYf3Zls0+tIZih1gX1Ej8ihGmIier4xv bHsHVSMIyVqhqb893AMBByAwcHY00bfOhL1zYs1gfhZ+taPQg34zcNJVC4TOuXuy 0pi3eJeJo5tRUVBdVFTjqeZ7MpVwRkXWgFuARhusaLs+ZxuH6SQ= -----END CERTIFICATE-----Generated at Wed Jul 2 03:40:45 2025 by rpki-client