$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: WRGUPyS1gsDWGXi+6VLC7sedTsrfBSBMWVhiwsxN29g= Subject key identifier: A2:45:17:31:29:D5:B0:45:0C:14:1F:C4:B2:41:62:22:80:5F:55:43 Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 7EEBF29219783DDFBC2B785FEA1205D917A0830E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 50 Signing time: Fri 27 Jun 2025 14:00:46 +0000 Manifest this update: Fri 27 Jun 2025 13:55:46 +0000 Manifest next update: Mon 30 Jun 2025 19:27:46 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: LZ6/f3laecq/Whed0eq9DqMEAtn7JZgXq3yxSCf+ud0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:eb:f2:92:19:78:3d:df:bc:2b:78:5f:ea:12:05:d9:17:a0:83:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Jun 27 13:55:46 2025 GMT Not After : Jun 30 19:27:46 2025 GMT Subject: CN=A245173129D5B0450C141FC4B2416222805F5543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:21:ae:68:6d:45:d7:5a:51:18:f8:7a:f7: e4:e0:cb:9a:ee:6a:ff:cf:19:d1:6b:23:ab:62:4d: 40:a7:33:3d:de:50:2a:27:77:5e:88:c2:42:30:2a: f4:92:99:90:2f:1d:86:03:31:e3:28:50:8b:8d:48: 32:7a:a0:c3:a8:60:57:5d:37:7f:89:e4:2f:28:f0: 0b:8a:3d:eb:af:92:a9:25:c9:6e:fe:3d:71:f1:90: ed:82:64:d7:43:66:c8:40:16:40:71:df:18:d6:d3: 05:ff:42:cd:51:05:fd:0c:72:a0:a9:d4:23:d7:1c: dc:7f:75:84:86:0e:02:19:14:39:03:3d:d5:e7:16: 8f:a1:31:73:99:f1:ba:c2:b0:30:51:13:f0:3c:21: 47:29:18:2d:2b:94:31:7e:44:95:80:62:93:e4:1b: 5c:1f:ed:c1:17:ec:de:b0:09:2e:6d:68:91:1a:c2: 25:00:08:70:74:6d:86:f3:54:81:ac:a2:b2:80:b6: 94:67:b9:00:b0:70:c1:be:f5:7f:83:f9:1a:7f:ee: 24:66:c2:15:ef:6a:fe:75:3a:07:ab:13:0b:15:91: d1:d5:d7:1b:e4:6f:5b:46:e6:ff:aa:49:57:37:11: c4:a7:d5:2a:6e:76:51:a4:60:11:b6:dd:a5:60:b3: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:45:17:31:29:D5:B0:45:0C:14:1F:C4:B2:41:62:22:80:5F:55:43 X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:44:cb:d1:60:9b:e1:97:27:ce:3c:50:92:17:97:47:d9:94: 7a:5b:92:f4:4e:3e:95:67:a3:4d:62:69:8d:73:d4:d4:d2:f1: ef:ed:83:6e:69:f5:43:bf:21:2f:78:d9:33:85:de:e7:e5:57: 2e:17:e0:dc:5e:e8:0a:49:52:43:57:52:5b:b3:ea:68:60:77: b6:24:dd:2d:c5:55:10:9a:7e:ea:1d:ec:e3:dd:80:30:49:6e: 8d:93:cf:9b:9a:a9:3b:67:0b:5c:c2:06:5a:c3:b0:7d:74:29: 8f:42:12:55:d0:6a:7d:c8:cd:6a:d6:8a:e9:b5:bb:11:36:cb: c8:fd:81:67:08:f7:c1:b1:32:f2:16:a7:2c:36:5e:a7:95:8b: 1f:ab:f9:20:de:3e:2b:15:59:86:fe:27:59:65:27:29:4a:a7: 47:ca:34:d7:e3:48:be:a9:24:5b:47:c1:34:de:0f:ed:32:40: f7:07:b9:34:ca:6d:ee:c4:fd:ae:6a:9d:41:cf:3e:75:d8:cf: d9:c4:c2:a7:c5:5c:c6:bb:2a:14:01:e2:11:90:d8:c9:90:9a: 56:8d:74:d6:c5:23:4f:29:e5:ef:08:d3:91:89:70:3c:ba:92: b4:f2:88:4f:46:d2:a2:c0:72:9d:77:d7:6f:db:f1:97:5f:72: 02:6e:1e:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuvykhl4Pd+8K3hf6hIF2Reggw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTA2MjcxMzU1NDZaFw0yNTA2MzAxOTI3NDZaMDMxMTAvBgNV BAMTKEEyNDUxNzMxMjlENUIwNDUwQzE0MUZDNEIyNDE2MjIyODA1RjU1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1iGuaG1F11pRGPh69+Tgy5ru av/PGdFrI6tiTUCnMz3eUCond16IwkIwKvSSmZAvHYYDMeMoUIuNSDJ6oMOoYFdd N3+J5C8o8AuKPeuvkqklyW7+PXHxkO2CZNdDZshAFkBx3xjW0wX/Qs1RBf0McqCp 1CPXHNx/dYSGDgIZFDkDPdXnFo+hMXOZ8brCsDBRE/A8IUcpGC0rlDF+RJWAYpPk G1wf7cEX7N6wCS5taJEawiUACHB0bYbzVIGsorKAtpRnuQCwcMG+9X+D+Rp/7iRm whXvav51OgerEwsVkdHV1xvkb1tG5v+qSVc3EcSn1SpudlGkYBG23aVgs5aTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokUXMSnVsEUMFB/EskFiIoBfVUMwHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhEy9Fgm+GXJ848UJIXl0fZlHpbkvROPpVn o01iaY1z1NTS8e/tg25p9UO/IS942TOF3uflVy4X4Nxe6ApJUkNXUluz6mhgd7Yk 3S3FVRCafuod7OPdgDBJbo2Tz5uaqTtnC1zCBlrDsH10KY9CElXQan3IzWrWium1 uxE2y8j9gWcI98GxMvIWpyw2XqeVix+r+SDePisVWYb+J1llJylKp0fKNNfjSL6p JFtHwTTeD+0yQPcHuTTKbe7E/a5qnUHPPnXYz9nEwqfFXMa7KhQB4hGQ2MmQmlaN dNbFI08p5e8I05GJcDy6krTyiE9G0qLAcp1312/b8ZdfcgJuHq0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:53 2025 by rpki-client