$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: qFBUeslan3GwQX0X3dfb7IbGSW8YbCb6HzpKisI28TM= Subject key identifier: 42:98:16:F0:6F:15:9C:4B:2D:C3:E1:A3:E0:FB:C7:A5:71:36:46:E6 Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 32D070039774545D1B3DDA4124E619F04A2E35F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01B4 Signing time: Fri 27 Jun 2025 08:20:37 +0000 Manifest this update: Fri 27 Jun 2025 08:15:37 +0000 Manifest next update: Mon 30 Jun 2025 19:32:37 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=) 2: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) 3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=) 4: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: f0wPcFaNMRq1AZIWAhXCaNw6bQlGvIE+4S9t73iWviI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d0:70:03:97:74:54:5d:1b:3d:da:41:24:e6:19:f0:4a:2e:35:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Jun 27 08:15:37 2025 GMT Not After : Jun 30 19:32:37 2025 GMT Subject: CN=429816F06F159C4B2DC3E1A3E0FBC7A5713646E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:c5:da:42:39:41:bd:74:6d:ae:69:19:13: 4a:d1:3a:f1:67:f6:9e:46:5f:b5:ff:2c:99:3b:be: be:8c:98:4e:d7:08:51:36:33:7f:ff:65:71:6f:a4: d2:f3:81:32:de:3d:de:77:9b:6a:be:f5:19:3c:8a: 1a:68:7b:79:53:31:05:ec:e0:8a:29:0a:b6:ea:cf: b8:e6:44:a0:d6:a7:fe:e9:f7:6d:57:88:e8:6c:c6: 29:71:5a:ca:de:b1:4a:31:c8:d2:c1:36:7d:fd:b3: 88:c1:c1:12:23:55:5b:4c:eb:b0:06:67:5c:65:da: 7c:8b:b1:cb:bf:cb:53:03:0e:eb:24:5e:c2:81:51: 51:dc:36:64:5b:aa:b5:3e:b1:4d:4c:a2:47:31:25: 57:88:8f:14:80:ea:4b:19:3f:eb:de:05:65:3a:34: f2:f3:25:f3:72:83:43:81:7f:d9:49:41:a3:ed:6a: 28:75:6a:18:1c:ed:44:21:56:2b:51:40:e9:49:f0: 2d:05:e6:17:92:ed:ad:e2:1e:82:d5:2a:49:b1:10: 6d:ac:fa:05:44:09:12:70:52:92:a1:7c:2f:4a:f3: c6:07:42:1e:9c:97:0f:91:05:be:e8:b9:47:f1:7d: d3:cf:f1:72:00:77:76:97:2f:b9:8d:25:f4:c7:79: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:16:F0:6F:15:9C:4B:2D:C3:E1:A3:E0:FB:C7:A5:71:36:46:E6 X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:af:92:7f:e0:3f:0b:d9:18:74:d8:e2:ac:5e:99:dd:ef:c2: 0a:b9:c5:c2:63:40:fb:e1:8b:06:15:98:58:23:cf:31:c8:fa: b4:de:d6:a2:4f:37:e1:63:cd:52:79:8a:e9:52:e7:61:2a:7f: b1:2e:23:de:97:14:9d:c3:0d:f4:dc:bc:db:27:2e:0f:2f:db: e1:2c:db:65:00:1a:7b:64:c2:c9:ff:a2:df:35:8f:9d:ce:36: ba:ba:40:dd:f8:75:09:fc:fc:4d:34:f1:03:0d:84:7a:b9:c7: 9a:e7:0a:6a:42:06:38:8a:8d:93:ea:cb:0e:2b:8b:d1:18:1d: 6f:43:02:e7:b1:06:42:ce:d8:d3:8c:32:78:dd:0e:a3:3a:20: b5:61:6a:94:9f:f0:4e:79:bb:58:fd:08:4c:e9:60:43:57:a6: b4:26:c7:be:d1:74:84:93:99:c9:95:6f:6c:7b:34:35:15:1e: d5:46:9f:3f:ee:63:97:dc:2a:f1:d9:8a:d9:54:4d:9e:b9:09: 2e:8f:6e:ce:17:1e:44:00:35:31:3a:f7:3a:0b:ae:ea:2f:bb: 7f:fc:cd:b1:01:73:65:87:e8:03:06:a9:e1:13:f0:df:d7:67: 58:4a:13:67:89:a4:23:ad:80:78:17:cd:3f:96:b8:6a:d8:6e: 69:af:c1:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtBwA5d0VF0bPdpBJOYZ8EouNfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTA2MjcwODE1MzdaFw0yNTA2MzAxOTMyMzdaMDMxMTAvBgNV BAMTKDQyOTgxNkYwNkYxNTlDNEIyREMzRTFBM0UwRkJDN0E1NzEzNjQ2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6cXaQjlBvXRtrmkZE0rROvFn 9p5GX7X/LJk7vr6MmE7XCFE2M3//ZXFvpNLzgTLePd53m2q+9Rk8ihpoe3lTMQXs 4IopCrbqz7jmRKDWp/7p921XiOhsxilxWsresUoxyNLBNn39s4jBwRIjVVtM67AG Z1xl2nyLscu/y1MDDuskXsKBUVHcNmRbqrU+sU1MokcxJVeIjxSA6ksZP+veBWU6 NPLzJfNyg0OBf9lJQaPtaih1ahgc7UQhVitRQOlJ8C0F5heS7a3iHoLVKkmxEG2s +gVECRJwUpKhfC9K88YHQh6clw+RBb7ouUfxfdPP8XIAd3aXL7mNJfTHed9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpgW8G8VnEstw+Gj4PvHpXE2RuYwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOvkn/gPwvZGHTY4qxemd3vwgq5xcJjQPvh iwYVmFgjzzHI+rTe1qJPN+FjzVJ5iulS52Eqf7EuI96XFJ3DDfTcvNsnLg8v2+Es 22UAGntkwsn/ot81j53ONrq6QN34dQn8/E008QMNhHq5x5rnCmpCBjiKjZPqyw4r i9EYHW9DAuexBkLO2NOMMnjdDqM6ILVhapSf8E55u1j9CEzpYENXprQmx77RdIST mcmVb2x7NDUVHtVGnz/uY5fcKvHZitlUTZ65CS6Pbs4XHkQANTE69zoLruovu3/8 zbEBc2WH6AMGqeET8N/XZ1hKE2eJpCOtgHgXzT+WuGrYbmmvwfg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:02 2025 by rpki-client