$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: JpfwzXf0KiKqeyZ8rI1f//gmqG9SSIdJWw2xjL4qbig= Subject key identifier: 5A:3D:84:45:45:F6:B9:65:AC:A7:1E:B9:91:9A:F4:F2:B8:2A:5E:36 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 572A15497825E2199E19AC3E6412464B583E730B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 017C Signing time: Sun 29 Jun 2025 23:12:09 +0000 Manifest this update: Sun 29 Jun 2025 23:07:09 +0000 Manifest next update: Thu 03 Jul 2025 10:41:09 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: 3VqVisD7clIOtmJqYmXbIKaTxEGQvBXk/G9RYLjRilc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2a:15:49:78:25:e2:19:9e:19:ac:3e:64:12:46:4b:58:3e:73:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Jun 29 23:07:09 2025 GMT Not After : Jul 3 10:41:09 2025 GMT Subject: CN=5A3D844545F6B965ACA71EB9919AF4F2B82A5E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:68:d4:f8:67:ee:de:81:66:30:69:8e:e7: 50:55:26:17:48:28:5e:7b:a5:06:45:29:01:e2:2b: cf:e8:e5:34:b8:a7:bf:61:1b:11:d7:b4:d8:dc:96: 34:0c:73:18:23:84:cb:27:98:0b:68:36:fd:ec:67: 41:d4:d5:fe:1b:e5:e7:8b:7a:1f:9c:7b:e8:42:00: a5:a0:fa:c1:28:d4:57:3e:bc:55:d1:1f:09:03:46: 4e:7f:c4:05:08:9f:82:26:50:b9:8c:8c:15:63:24: 13:5d:56:5d:54:0e:37:f3:93:c3:33:77:3b:e6:cd: d8:e9:07:16:00:67:d3:cb:14:eb:0e:dc:c4:23:b5: 49:a3:18:d1:d0:27:6b:9d:d4:22:62:a7:30:b2:ad: 14:3b:47:15:9b:2c:98:51:57:4c:81:53:a9:f5:5e: f5:89:c3:22:a8:31:9b:7d:56:38:3e:9f:c7:e4:aa: 9e:7a:3e:89:b0:24:5d:3c:72:f9:32:23:04:86:c9: b7:97:7a:45:d4:79:1b:cb:6e:09:68:e5:5b:8a:51: 4a:53:ce:b7:af:b3:f4:eb:c8:1b:38:8a:e5:81:b0: dc:a1:8c:e5:e7:b4:1a:66:a4:17:69:6b:4c:57:6a: 42:c6:9c:88:8e:b8:19:d8:48:e5:93:34:a7:45:04: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:84:45:45:F6:B9:65:AC:A7:1E:B9:91:9A:F4:F2:B8:2A:5E:36 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ce:23:12:86:e4:d1:ea:15:b3:3f:76:85:f3:4d:eb:e9:b6: 2f:8a:0e:33:ff:1e:05:7a:c0:d9:85:48:53:c0:c1:ad:77:2e: 50:d9:5b:8d:1b:c6:f7:f7:12:9e:26:97:d9:76:64:e5:08:cf: 17:b0:35:b3:57:31:6c:30:21:20:10:74:35:fb:28:15:1c:70: bd:c7:82:58:57:53:c7:0a:e7:d2:b7:46:91:c3:a1:e2:86:fb: ce:0f:00:d4:ef:ae:fe:e2:bc:09:8c:55:bc:8f:d5:80:1a:b2: 08:a0:0d:75:47:37:db:3e:0a:c6:52:3c:96:fd:2c:a6:46:c1: f0:f1:75:44:02:8b:b7:df:f7:c3:56:2b:33:0d:89:51:cd:45: 33:3a:d1:bc:84:10:46:a0:67:ab:1a:a8:8c:a4:f6:60:aa:c3: d1:0c:ba:f7:ee:74:5e:a6:e3:a6:e6:68:0d:df:98:3b:f6:f0: 73:fd:68:55:e9:84:ed:38:e4:3e:71:16:c2:3b:29:9c:23:ef: df:2f:a6:9c:c1:79:40:b7:ae:16:c8:2a:be:6d:dc:95:f9:08: 05:5b:e8:33:44:9d:15:59:1f:51:d8:8f:78:bf:e1:71:82:e9: e2:aa:46:56:7f:3f:07:21:20:59:55:48:72:06:31:a1:34:77: d0:89:23:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyoVSXgl4hmeGaw+ZBJGS1g+cwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA2MjkyMzA3MDlaFw0yNTA3MDMxMDQxMDlaMDMxMTAvBgNV BAMTKDVBM0Q4NDQ1NDVGNkI5NjVBQ0E3MUVCOTkxOUFGNEYyQjgyQTVFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtGjU+Gfu3oFmMGmO51BVJhdI KF57pQZFKQHiK8/o5TS4p79hGxHXtNjcljQMcxgjhMsnmAtoNv3sZ0HU1f4b5eeL eh+ce+hCAKWg+sEo1Fc+vFXRHwkDRk5/xAUIn4ImULmMjBVjJBNdVl1UDjfzk8Mz dzvmzdjpBxYAZ9PLFOsO3MQjtUmjGNHQJ2ud1CJipzCyrRQ7RxWbLJhRV0yBU6n1 XvWJwyKoMZt9Vjg+n8fkqp56PomwJF08cvkyIwSGybeXekXUeRvLbglo5VuKUUpT zrevs/TryBs4iuWBsNyhjOXntBpmpBdpa0xXakLGnIiOuBnYSOWTNKdFBC/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWj2ERUX2uWWspx65kZr08rgqXjYwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzOIxKG5NHqFbM/doXzTevpti+KDjP/HgV6 wNmFSFPAwa13LlDZW40bxvf3Ep4ml9l2ZOUIzxewNbNXMWwwISAQdDX7KBUccL3H glhXU8cK59K3RpHDoeKG+84PANTvrv7ivAmMVbyP1YAasgigDXVHN9s+CsZSPJb9 LKZGwfDxdUQCi7ff98NWKzMNiVHNRTM60byEEEagZ6saqIyk9mCqw9EMuvfudF6m 46bmaA3fmDv28HP9aFXphO045D5xFsI7KZwj798vppzBeUC3rhbIKr5t3JX5CAVb 6DNEnRVZH1HYj3i/4XGC6eKqRlZ/PwchIFlVSHIGMaE0d9CJI0Q= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:15 2025 by rpki-client