$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: 4oW332cyJAFI+JB9vL7sZ7WuzNEYEb9gH5SPM2mrEgQ= Subject key identifier: 75:B5:06:95:75:67:AC:C0:CC:D8:F5:37:F1:5B:0D:25:3D:E8:93:A4 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 013E884B550C74DA48F91D464E5C60414B63B1A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 018B Signing time: Sat 23 Aug 2025 01:00:38 +0000 Manifest this update: Sat 23 Aug 2025 00:55:38 +0000 Manifest next update: Tue 26 Aug 2025 12:04:38 +0000 Files and hashes: 1: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: PzXcGX0x20tITxdsSOxDFzk277BbByr5TdYVzAE2msM=) 2: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=) 3: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3e:88:4b:55:0c:74:da:48:f9:1d:46:4e:5c:60:41:4b:63:b1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Aug 23 00:55:38 2025 GMT Not After : Aug 26 12:04:38 2025 GMT Subject: CN=75B506957567ACC0CCD8F537F15B0D253DE893A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:34:53:33:9f:9f:c6:9d:f1:0f:ac:cb:88: 83:5b:60:68:97:71:7f:9d:d2:35:a2:19:44:25:93: f4:77:3c:22:06:51:6a:70:ed:a3:77:a9:25:a2:b8: fd:74:a8:b5:53:53:a6:20:9e:ae:eb:59:9f:c6:71: 98:c6:43:57:6d:2f:b0:10:e6:eb:b3:e9:c7:fd:a9: cd:c4:33:b2:2c:bf:33:c0:e3:ca:5d:5d:ea:a5:c6: 78:35:0a:c2:52:42:35:b1:31:aa:26:5e:1c:53:07: 5b:48:9a:e7:a0:a7:e3:46:ca:15:81:75:de:3e:94: 05:2b:97:1e:1b:bf:8a:2a:72:d9:b7:d4:3b:67:02: dd:93:2d:8e:48:0f:68:96:6e:fc:d8:df:03:ef:75: 96:0c:e2:56:92:2b:36:52:c4:eb:e2:69:3e:0a:af: 5d:96:e4:77:89:3c:57:30:af:e5:36:51:1b:c1:41: 7d:ab:56:96:92:da:7f:aa:41:80:6d:4e:31:8c:6f: 6b:e0:2b:9d:57:03:ee:07:f7:9d:f7:17:95:f9:fb: 6c:55:76:c2:e5:91:5c:be:18:7b:9c:51:f6:68:42: bb:08:15:62:1d:1c:31:30:b0:94:06:f5:d5:f1:f8: 0f:fd:69:b0:9c:68:bc:be:ee:30:7a:68:36:0d:ea: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B5:06:95:75:67:AC:C0:CC:D8:F5:37:F1:5B:0D:25:3D:E8:93:A4 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b7:66:a1:b2:d9:36:79:29:73:7b:21:f5:67:71:aa:b5:37: c7:19:84:e2:40:d4:fd:67:65:73:1e:82:65:df:3e:55:f6:82: bc:14:d2:36:a5:36:10:7f:a0:a4:32:fe:5f:c0:22:a5:47:10: 89:1f:bb:90:9b:2c:36:41:19:1b:a8:9f:5a:7d:85:36:b0:d4: e7:b8:e7:c4:1f:07:bb:27:d0:63:49:73:ba:5e:fe:c7:8e:5d: a2:9a:88:75:d9:53:87:8b:2b:54:13:1c:4a:3f:b0:fa:68:73: a8:00:cb:af:c5:ed:53:13:a9:32:c8:ee:c7:b0:bd:f3:db:4e: 75:4a:14:c6:7b:a1:82:45:87:cb:20:8c:ef:c4:b4:72:49:1c: 2d:3f:20:02:81:5b:e3:b6:5b:93:c6:2d:1c:3c:7a:9c:35:00: c1:98:ea:50:f9:7a:c7:38:69:ef:6d:f1:bf:f1:7b:af:62:12: 90:dd:41:35:64:b3:a0:4f:e4:77:09:e3:05:81:a7:84:e2:ee: 45:44:ac:f0:cf:31:99:37:eb:fe:99:39:88:24:5b:c1:99:8b: ee:d7:78:45:78:49:81:27:0b:f5:30:a7:9d:d0:d2:01:ce:06: 40:01:34:92:c6:35:18:a1:c7:cf:ee:37:b4:08:10:c4:43:2e: d5:07:9c:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAT6IS1UMdNpI+R1GTlxgQUtjsaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTA4MjMwMDU1MzhaFw0yNTA4MjYxMjA0MzhaMDMxMTAvBgNV BAMTKDc1QjUwNjk1NzU2N0FDQzBDQ0Q4RjUzN0YxNUIwRDI1M0RFODkzQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjzRTM5+fxp3xD6zLiINbYGiX cX+d0jWiGUQlk/R3PCIGUWpw7aN3qSWiuP10qLVTU6Ygnq7rWZ/GcZjGQ1dtL7AQ 5uuz6cf9qc3EM7IsvzPA48pdXeqlxng1CsJSQjWxMaomXhxTB1tImuegp+NGyhWB dd4+lAUrlx4bv4oqctm31DtnAt2TLY5ID2iWbvzY3wPvdZYM4laSKzZSxOviaT4K r12W5HeJPFcwr+U2URvBQX2rVpaS2n+qQYBtTjGMb2vgK51XA+4H9533F5X5+2xV dsLlkVy+GHucUfZoQrsIFWIdHDEwsJQG9dXx+A/9abCcaLy+7jB6aDYN6rOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdbUGlXVnrMDM2PU38VsNJT3ok6QwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACW3ZqGy2TZ5KXN7IfVncaq1N8cZhOJA1P1n ZXMegmXfPlX2grwU0jalNhB/oKQy/l/AIqVHEIkfu5CbLDZBGRuon1p9hTaw1Oe4 58QfB7sn0GNJc7pe/seOXaKaiHXZU4eLK1QTHEo/sPpoc6gAy6/F7VMTqTLI7sew vfPbTnVKFMZ7oYJFh8sgjO/EtHJJHC0/IAKBW+O2W5PGLRw8epw1AMGY6lD5esc4 ae9t8b/xe69iEpDdQTVks6BP5HcJ4wWBp4Ti7kVErPDPMZk36/6ZOYgkW8GZi+7X eEV4SYEnC/Uwp53Q0gHOBkABNJLGNRihx8/uN7QIEMRDLtUHnBU= -----END CERTIFICATE-----Generated at Sat Aug 23 13:31:07 2025 by rpki-client