$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json) Hash identifier: kJQ+YbOeym20LVL9qDSV0BXzubQW8ZXqQpDYjAUg2Eo= Subject key identifier: 39:F0:18:79:CA:93:45:41:2C:1B:F7:F1:0C:E9:A4:0B:F4:93:4B:69 Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Certificate serial: 7F66B03BA05BE37CC2C148B9A1211378359A133E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft Manifest number: 0165 Signing time: Thu 21 Aug 2025 23:31:11 +0000 Manifest this update: Thu 21 Aug 2025 23:26:11 +0000 Manifest next update: Mon 25 Aug 2025 03:05:11 +0000 Files and hashes: 1: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=) 2: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: Qh4NkqdLEX3azCWhTl8CizeNJhplW1N5SIlASxA3v6M=) 3: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: tIbwoMZK41wfJ142ETUMWiif6nOoigy0JRS2kkbypRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:66:b0:3b:a0:5b:e3:7c:c2:c1:48:b9:a1:21:13:78:35:9a:13:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47 Validity Not Before: Aug 21 23:26:11 2025 GMT Not After : Aug 25 03:05:11 2025 GMT Subject: CN=39F01879CA9345412C1BF7F10CE9A40BF4934B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:47:48:d7:28:7e:bd:c4:92:a9:ae:c9:91: 56:1b:a7:bb:c6:ff:c2:b6:62:b8:ce:95:47:d9:1a: 8d:ad:6f:4c:3b:94:bc:ea:32:0e:97:8b:e9:dd:b4: 52:13:12:1c:3a:89:d6:b5:4e:d7:65:ff:0e:c8:de: 29:b3:b7:84:d6:74:62:55:2e:e1:d1:de:b3:f2:67: 42:a9:27:df:f4:69:c2:45:a5:e5:96:69:5e:af:f9: 4d:17:45:13:94:ca:af:4f:97:23:9b:47:72:71:f2: 4c:2f:84:6b:24:20:1d:7d:b3:2d:6f:6f:d3:6b:33: ed:62:45:ba:d1:d6:60:fe:79:ad:81:97:68:42:c9: 01:05:70:19:b6:8d:8d:6a:da:9f:fa:2c:8e:15:32: d4:e3:4b:63:0b:f5:c3:36:52:f2:42:7c:15:31:34: 4c:8f:3d:6d:1f:71:23:7c:50:7d:bb:90:2f:a2:e1: da:5c:dc:25:b3:c0:eb:12:76:2b:23:43:58:7f:80: 55:1f:34:5f:fa:ef:46:46:21:03:46:4f:59:df:a3: 5a:82:37:e6:0d:1f:12:8b:a3:62:81:c9:20:ef:5a: 53:31:23:7e:e4:8c:a0:af:42:0f:63:e3:67:1d:e1: 90:85:72:fb:db:4c:97:3b:e3:20:2f:41:f0:2f:83: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F0:18:79:CA:93:45:41:2C:1B:F7:F1:0C:E9:A4:0B:F4:93:4B:69 X509v3 Authority Key Identifier: keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bd:2d:8e:82:24:f7:1f:25:ae:e0:d0:c0:15:a8:f5:0a:ce: 68:05:89:34:cf:ae:48:78:e2:97:6a:e1:0c:ad:b9:1d:08:cb: 20:67:9a:d8:7c:ec:dd:42:05:6d:42:67:20:2f:1d:c4:f2:03: f3:67:e5:aa:f3:10:0b:1a:a2:19:75:78:13:c1:9f:15:01:50: bd:76:46:3d:b4:de:27:41:bf:25:bc:47:98:c4:a0:96:7a:8a: cd:17:cf:a4:b3:fa:35:ee:b0:57:bd:ff:26:2b:bd:5e:70:27: 49:23:d0:b3:ef:ac:11:ec:77:af:0b:28:34:df:6e:40:1e:0f: 8b:25:ff:dd:a2:32:2c:18:80:13:3f:4e:66:f0:2f:19:f7:3a: 36:d7:13:57:b8:0a:b2:b6:cd:a5:c3:cb:a4:ce:98:49:3b:fd: c9:47:94:f2:82:4c:64:c2:e0:6a:65:c1:e5:2a:f5:c6:59:e0: 56:1c:44:17:3d:4f:ef:bd:1b:78:f8:c1:c9:91:0b:f9:fb:41: 7f:ac:ae:bf:93:24:62:9a:78:e8:71:79:dd:2e:53:c6:de:ff: 8e:10:b4:e4:f8:6e:a8:91:91:59:73:35:97:05:c7:4c:84:9e: f6:ed:8a:41:9d:7a:63:53:18:82:a9:bd:6b:7d:fb:96:10:54: 0c:22:50:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2awO6Bb43zCwUi5oSETeDWaEz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4 ODYwNEQ0NzAeFw0yNTA4MjEyMzI2MTFaFw0yNTA4MjUwMzA1MTFaMDMxMTAvBgNV BAMTKDM5RjAxODc5Q0E5MzQ1NDEyQzFCRjdGMTBDRTlBNDBCRjQ5MzRCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGEdI1yh+vcSSqa7JkVYbp7vG /8K2YrjOlUfZGo2tb0w7lLzqMg6Xi+ndtFITEhw6ida1Ttdl/w7I3imzt4TWdGJV LuHR3rPyZ0KpJ9/0acJFpeWWaV6v+U0XRROUyq9PlyObR3Jx8kwvhGskIB19sy1v b9NrM+1iRbrR1mD+ea2Bl2hCyQEFcBm2jY1q2p/6LI4VMtTjS2ML9cM2UvJCfBUx NEyPPW0fcSN8UH27kC+i4dpc3CWzwOsSdisjQ1h/gFUfNF/670ZGIQNGT1nfo1qC N+YNHxKLo2KBySDvWlMxI37kjKCvQg9j42cd4ZCFcvvbTJc74yAvQfAvg0vtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfAYecqTRUEsG/fxDOmkC/STS2kwHwYDVR0j BBgwFoAUZ3SaBlu88eV3aPQgfhsv54hgTUcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTE1N2NlZC1lODJjLTQzMzQtOTAzYS1jY2NiYmU5Y2ZlODkvMC82Nzc0OUEwNjVC QkNGMUU1Nzc2OEY0MjA3RTFCMkZFNzg4NjA0RDQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJGRTc4ODYw NEQ0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkxNTdjZWQtZTgyYy00MzM0LTkw M2EtY2NjYmJlOWNmZTg5LzAvNjc3NDlBMDY1QkJDRjFFNTc3NjhGNDIwN0UxQjJG RTc4ODYwNEQ0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe9LY6CJPcfJa7g0MAVqPUKzmgFiTTPrkh4 4pdq4QytuR0IyyBnmth87N1CBW1CZyAvHcTyA/Nn5arzEAsaohl1eBPBnxUBUL12 Rj203idBvyW8R5jEoJZ6is0Xz6Sz+jXusFe9/yYrvV5wJ0kj0LPvrBHsd68LKDTf bkAeD4sl/92iMiwYgBM/TmbwLxn3OjbXE1e4CrK2zaXDy6TOmEk7/clHlPKCTGTC 4GplweUq9cZZ4FYcRBc9T++9G3j4wcmRC/n7QX+srr+TJGKaeOhxed0uU8be/44Q tOT4bqiRkVlzNZcFx0yEnvbtikGdemNTGIKpvWt9+5YQVAwiUDM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:50 2025 by rpki-client