$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: fuuaw9EVQe7hrM1tF6dm7VtmGASW8lpsVDErPId38Fk= Subject key identifier: 93:EA:44:E3:20:16:70:7C:2B:1D:7E:A8:8D:34:0D:F4:B7:CA:A4:B9 Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 18EE9EC1BB7D35EA4F39EC9CB4E15D04BB1CE1EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 04E8 Signing time: Sat 05 Jul 2025 08:31:16 +0000 Manifest this update: Sat 05 Jul 2025 08:26:16 +0000 Manifest next update: Tue 08 Jul 2025 20:14:16 +0000 Files and hashes: 1: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=) 2: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=) 3: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: zBBxt+MaBrOyYZ1QTC0GfwXHAM/QCARoByAIlXzr0As=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 20:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ee:9e:c1:bb:7d:35:ea:4f:39:ec:9c:b4:e1:5d:04:bb:1c:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Jul 5 08:26:16 2025 GMT Not After : Jul 8 20:14:16 2025 GMT Subject: CN=93EA44E32016707C2B1D7EA88D340DF4B7CAA4B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:e4:b0:e0:f2:db:3a:39:40:5d:60:6b:c7: a6:6e:ac:83:72:20:cc:66:54:78:26:3b:03:84:6b: dd:0c:a6:63:a5:f3:79:89:82:c1:f0:03:72:03:4e: 58:fc:0d:34:6a:4a:47:14:bf:e1:0a:d6:14:df:88: 85:e9:67:7c:35:11:02:21:d3:d3:22:62:98:6f:ee: f0:21:d5:ac:25:93:cb:d9:5a:26:ba:04:2c:a9:17: ea:73:76:c7:02:8c:99:70:34:d2:78:b5:51:cd:64: d2:c6:73:c8:94:6b:6f:8a:06:4c:2b:09:50:63:fc: 06:a4:d4:a7:9c:c7:ec:09:26:4f:ca:4a:a7:08:21: a3:07:5a:ad:ff:bc:db:9c:3c:19:23:af:63:9c:14: 64:ed:8e:90:31:19:56:15:b7:cd:73:5f:5d:0a:94: e4:95:ca:64:3e:fe:b4:6f:10:d8:bf:50:f0:3a:4e: 18:0f:1b:47:6b:ea:b9:17:66:0f:f5:7e:41:d6:aa: 69:32:8f:24:ed:c3:e8:16:9b:dc:e8:b5:fc:13:5d: db:ed:0f:92:e8:e5:4f:79:73:80:8c:f1:63:49:c2: b9:6e:1b:c9:dc:b9:9d:e0:84:25:40:b2:f7:87:4d: 3b:b2:5c:59:43:62:7f:cf:c6:a1:dd:0a:08:a0:d3: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EA:44:E3:20:16:70:7C:2B:1D:7E:A8:8D:34:0D:F4:B7:CA:A4:B9 X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:43:1a:1a:dc:5b:d9:f0:1d:37:5f:69:c1:5e:57:e8:8d:86: 21:fe:ba:76:dd:ca:ba:fe:e6:27:ca:34:f8:a6:a6:33:ce:91: 2f:7c:fc:22:30:c5:90:9e:48:bf:f3:ce:84:0e:a7:27:4a:8b: e7:5b:d7:22:5b:6b:15:0b:a1:09:f2:9b:4b:7d:99:2c:63:7a: 98:cb:48:e1:35:f1:42:21:37:ad:7b:01:05:e8:8c:d3:03:6f: 66:bd:cf:a6:f9:2d:c3:ec:6b:a2:e2:9c:2a:f7:e1:6c:5b:0a: 1b:51:cd:38:02:60:67:45:4d:c8:1b:5f:14:9d:d7:56:25:33: e4:e5:54:fc:4e:c2:ad:8b:00:d3:be:db:1a:b4:51:b2:bd:06: 76:4c:6f:fc:38:14:58:be:5f:a4:ca:43:fd:db:23:6e:a3:a3: 88:8d:5b:ea:e1:fe:ba:f2:65:67:6b:7f:66:11:6f:e7:27:07: 99:71:26:eb:45:9f:8a:5e:88:4c:d4:62:4a:04:6f:4f:aa:95: d3:0a:48:03:8c:53:39:17:24:2e:4e:9b:09:f0:ad:80:24:26: 15:0a:72:d0:2b:20:2a:c0:d6:07:90:60:a5:e6:a5:79:56:41: 59:65:4b:81:48:d4:0f:96:47:4b:23:0f:66:65:ff:6e:f8:74: 09:3a:40:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGO6ewbt9NepPOeyctOFdBLsc4eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNTA3MDUwODI2MTZaFw0yNTA3MDgyMDE0MTZaMDMxMTAvBgNV BAMTKDkzRUE0NEUzMjAxNjcwN0MyQjFEN0VBODhEMzQwREY0QjdDQUE0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5uSw4PLbOjlAXWBrx6ZurINy IMxmVHgmOwOEa90MpmOl83mJgsHwA3IDTlj8DTRqSkcUv+EK1hTfiIXpZ3w1EQIh 09MiYphv7vAh1awlk8vZWia6BCypF+pzdscCjJlwNNJ4tVHNZNLGc8iUa2+KBkwr CVBj/Aak1Kecx+wJJk/KSqcIIaMHWq3/vNucPBkjr2OcFGTtjpAxGVYVt81zX10K lOSVymQ+/rRvENi/UPA6ThgPG0dr6rkXZg/1fkHWqmkyjyTtw+gWm9zotfwTXdvt D5Lo5U95c4CM8WNJwrluG8ncuZ3ghCVAsveHTTuyXFlDYn/PxqHdCgig0zhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+pE4yAWcHwrHX6ojTQN9LfKpLkwHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdDGhrcW9nwHTdfacFeV+iNhiH+unbdyrr+ 5ifKNPimpjPOkS98/CIwxZCeSL/zzoQOpydKi+db1yJbaxULoQnym0t9mSxjepjL SOE18UIhN617AQXojNMDb2a9z6b5LcPsa6LinCr34WxbChtRzTgCYGdFTcgbXxSd 11YlM+TlVPxOwq2LANO+2xq0UbK9BnZMb/w4FFi+X6TKQ/3bI26jo4iNW+rh/rry ZWdrf2YRb+cnB5lxJutFn4peiEzUYkoEb0+qldMKSAOMUzkXJC5OmwnwrYAkJhUK ctArICrA1geQYKXmpXlWQVllS4FI1A+WR0sjD2Zl/274dAk6QNg= -----END CERTIFICATE-----Generated at Sun Jul 6 00:09:29 2025 by rpki-client