$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft File: 139934661CE07BEBBFA824F7225502B15AE8B653.mft (raw, json) Hash identifier: DJKB1YeF/fo5mPXu1Z9AoCMez+bc5LH10rqACFm1jxM= Subject key identifier: 81:61:EE:35:32:F9:8D:BD:26:48:BA:26:1E:50:B5:2F:AE:35:5E:F8 Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653 Certificate serial: 01F97EDEEA76EFD055CE4614B337C1E38B09A3BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft Manifest number: 0253 Signing time: Sun 29 Jun 2025 11:42:18 +0000 Manifest this update: Sun 29 Jun 2025 11:37:18 +0000 Manifest next update: Wed 02 Jul 2025 15:04:18 +0000 Files and hashes: 1: 323030313a6466303a353463303a3a2f34382d3438203d3e20313431353936.roa (hash: JfuES0kaATSQOVSGSxANPI5Fc3cOe+x8BKWfAi4CWYs=) 2: 3130332e3137392e3231382e302f32342d3234203d3e20313431353936.roa (hash: 8fuakgFHy3xUm7QgcDkjO9QSLBuvkIz5uGSpSL5YMTY=) 3: 3130332e3137392e3231392e302f32342d3234203d3e20313431353936.roa (hash: A42BqVzjqFV46OV6hAZdG9PjgUwdu1Wwh4Yi98wXVBI=) 4: 139934661CE07BEBBFA824F7225502B15AE8B653.crl (hash: jAv1kX35+rI+LaRi+jPSceecmFi+zTYPGu6KiwX0bsI=) 5: 323030313a6466303a353463303a3a2f34382d3438203d3e20313439333437.roa (hash: MLL6/qDsxtEsMRa44Zl6aIIBEl0tDem6dFSdspx4PV8=) 6: 3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (hash: UDTJVQMfh18042dfeJjUO+1EVnoX+eeQWO16oZtQKXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:7e:de:ea:76:ef:d0:55:ce:46:14:b3:37:c1:e3:8b:09:a3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653 Validity Not Before: Jun 29 11:37:18 2025 GMT Not After : Jul 2 15:04:18 2025 GMT Subject: CN=8161EE3532F98DBD2648BA261E50B52FAE355EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:2f:de:1b:18:99:91:e0:84:2b:6f:dd:dd: 39:c3:45:d0:bd:5a:9d:f0:ce:e3:f6:2c:88:cc:81: bf:d7:cd:ca:77:6b:70:54:18:eb:ca:f9:34:5f:a3: 8e:fd:57:da:7a:69:c8:f7:bb:7d:33:4e:95:05:b6: 7d:ce:b1:7a:e8:06:99:6a:64:2c:ca:c4:e9:43:3c: 3e:fb:ca:16:0b:52:56:05:af:11:62:e0:fa:cc:d3: 7f:0f:37:ea:8f:08:c6:05:c1:5f:ed:b4:bb:71:a0: 77:99:87:a8:b3:bf:f1:f9:a7:9d:c4:39:bf:79:ef: db:f0:62:64:09:63:a0:3b:f8:d8:b7:4d:28:d7:d4: 00:67:4a:f1:0a:1a:fc:94:b3:ee:7f:fe:a1:2f:99: ae:f0:4f:64:b8:a7:bc:a0:e2:c7:ae:10:24:99:c7: 55:f5:3a:98:de:2f:cb:fc:c3:d9:61:89:4b:64:67: 10:96:d8:db:c5:6a:0c:7c:92:d5:e9:a8:0c:c8:7b: d1:11:47:04:eb:b5:05:20:47:28:42:c2:cc:7c:aa: 8a:30:c5:68:87:78:93:72:7b:80:50:44:ed:91:3a: f2:b2:f2:66:51:76:9b:22:cf:76:eb:0a:ad:72:72: d4:ba:64:7c:7c:87:a4:0f:94:a1:04:b7:20:e1:16: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:61:EE:35:32:F9:8D:BD:26:48:BA:26:1E:50:B5:2F:AE:35:5E:F8 X509v3 Authority Key Identifier: keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9d:cc:00:3d:f7:3f:04:50:a9:64:9c:b2:74:d5:38:82:d1: cc:fe:68:ed:38:17:33:a5:4f:0f:46:35:ff:74:69:3b:73:f7: 70:99:3a:b5:b1:c8:79:f5:7c:02:5a:d9:ba:5e:c3:35:e4:55: 5b:bd:bf:0a:82:2e:67:b7:aa:a1:64:80:77:45:36:b6:74:0e: 0c:e1:98:85:6e:8c:c0:51:cd:b4:9c:d2:dc:e5:c0:81:66:c5: 9c:b6:6a:d7:49:81:5c:1c:b3:25:41:58:ca:78:4a:2b:5b:4b: 50:bc:0d:fe:43:c1:fb:a8:ba:a2:6c:29:b5:4b:45:10:e0:f4: 59:96:c3:1a:88:23:6a:74:81:81:25:e4:be:a1:6d:22:f1:5d: 3f:3c:26:2a:b5:e6:a9:00:fc:b4:f9:a7:87:91:52:1a:84:7d: 34:4e:6a:58:8d:64:ad:02:b0:a8:41:d4:57:4b:bd:23:23:fe: 8c:a7:15:b3:2d:85:1a:90:a1:cc:76:88:27:52:61:ce:e5:83: 31:b7:81:28:00:ee:a7:b8:6a:c8:53:69:b3:37:13:11:53:45: 5f:ee:c8:bc:b2:91:3c:41:3f:f7:75:1e:c1:2b:af:12:df:8b: e6:9f:9f:3a:8f:6e:66:d2:c7:9f:d5:b7:e0:fd:4d:0f:2b:12: 5a:ea:ee:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAfl+3up279BVzkYUszfB44sJo74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1 QUU4QjY1MzAeFw0yNTA2MjkxMTM3MThaFw0yNTA3MDIxNTA0MThaMDMxMTAvBgNV BAMTKDgxNjFFRTM1MzJGOThEQkQyNjQ4QkEyNjFFNTBCNTJGQUUzNTVFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDC/eGxiZkeCEK2/d3TnDRdC9 Wp3wzuP2LIjMgb/Xzcp3a3BUGOvK+TRfo479V9p6acj3u30zTpUFtn3OsXroBplq ZCzKxOlDPD77yhYLUlYFrxFi4PrM038PN+qPCMYFwV/ttLtxoHeZh6izv/H5p53E Ob9579vwYmQJY6A7+Ni3TSjX1ABnSvEKGvyUs+5//qEvma7wT2S4p7yg4seuECSZ x1X1OpjeL8v8w9lhiUtkZxCW2NvFagx8ktXpqAzIe9ERRwTrtQUgRyhCwsx8qoow xWiHeJNye4BQRO2ROvKy8mZRdpsiz3brCq1yctS6ZHx8h6QPlKEEtyDhFoxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWHuNTL5jb0mSLomHlC1L641XvgwHwYDVR0j BBgwFoAUE5k0Zhzge+u/qCT3IlUCsVrotlMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2EyOTJiMi00YWU0LTQxZGYtODg3YS1jMTcyYzNlMWFlNzMvMC8xMzk5MzQ2NjFD RTA3QkVCQkZBODI0RjcyMjU1MDJCMTVBRThCNjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAyQjE1QUU4 QjY1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNhMjkyYjItNGFlNC00MWRmLTg4 N2EtYzE3MmMzZTFhZTczLzAvMTM5OTM0NjYxQ0UwN0JFQkJGQTgyNEY3MjI1NTAy QjE1QUU4QjY1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+dzAA99z8EUKlknLJ01TiC0cz+aO04FzOl Tw9GNf90aTtz93CZOrWxyHn1fAJa2bpewzXkVVu9vwqCLme3qqFkgHdFNrZ0Dgzh mIVujMBRzbSc0tzlwIFmxZy2atdJgVwcsyVBWMp4SitbS1C8Df5DwfuouqJsKbVL RRDg9FmWwxqII2p0gYEl5L6hbSLxXT88Jiq15qkA/LT5p4eRUhqEfTROaliNZK0C sKhB1FdLvSMj/oynFbMthRqQocx2iCdSYc7lgzG3gSgA7qe4ashTabM3ExFTRV/u yLyykTxBP/d1HsErrxLfi+afnzqPbmbSx5/Vt+D9TQ8rElrq7mY= -----END CERTIFICATE-----Generated at Tue Jul 1 12:36:35 2025 by rpki-client