$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: hPI/VasBhcYpfiPtUIfpKaaFWCz8Sagv5cDj0pu0ZhM= Subject key identifier: 8B:96:CF:EB:B1:28:56:17:CC:0C:97:FE:0B:E2:4D:F6:89:1C:CB:8A Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 3940492027B1A75D74185A24CF3B26EF6822081A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 0172 Signing time: Sat 28 Jun 2025 01:00:38 +0000 Manifest this update: Sat 28 Jun 2025 00:55:38 +0000 Manifest next update: Tue 01 Jul 2025 07:25:38 +0000 Files and hashes: 1: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: ofbvTdfOxM/XJn9ei0JIzGhej7sLaY5dsj1BDY0yT88=) 2: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: nDE4tdDR8WhfxsC/YRE+tt+1XSAX7EsFc/5T1xijpks=) 3: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: hITEAhN4Z4hdYgmSoKRjqxI7LgKwNJ5gi1UgSjobSws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 07:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:40:49:20:27:b1:a7:5d:74:18:5a:24:cf:3b:26:ef:68:22:08:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Jun 28 00:55:38 2025 GMT Not After : Jul 1 07:25:38 2025 GMT Subject: CN=8B96CFEBB1285617CC0C97FE0BE24DF6891CCB8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:94:eb:47:16:96:25:9e:f1:d8:b3:f2:81: b8:d0:53:b2:11:ae:0e:d3:c1:04:75:3c:61:34:d9: 04:6a:fc:1b:2f:6b:f7:55:19:77:72:3c:16:73:11: ff:09:73:99:7d:c1:68:0c:7a:d6:0f:61:62:82:5b: 5b:1f:77:b2:e6:38:ae:6c:43:11:1d:60:1e:51:7e: a2:d2:cf:60:ee:5d:43:18:62:22:4f:77:bd:5c:3e: 8d:56:67:bc:f2:a6:9b:0e:ea:4d:e9:5c:f5:8b:6b: 0a:56:3a:a0:8d:ed:db:6b:1a:95:5e:9b:50:eb:3d: e2:e7:c4:4c:d7:3a:d4:1b:49:20:80:4c:93:10:44: 2d:2b:ab:8c:95:f3:33:7a:dd:6b:47:95:f1:15:46: 46:31:fb:43:15:9f:7f:f6:cd:60:c7:cd:33:ca:2a: e1:94:b4:32:21:4d:00:d5:b1:19:b3:38:ec:6e:8c: 9f:e9:d1:c9:be:8a:15:a3:41:84:46:50:5d:c4:aa: 14:ab:aa:a8:20:bc:ac:2c:fc:ab:7d:1f:69:dd:2b: 53:5e:e7:06:04:e4:f1:3d:8a:a8:b7:3e:36:86:6c: b3:9e:b5:87:2c:e8:57:92:c8:cb:5f:0f:bb:fc:47: e8:14:d1:52:14:4e:3a:de:0c:64:37:3e:48:7c:12: 24:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:96:CF:EB:B1:28:56:17:CC:0C:97:FE:0B:E2:4D:F6:89:1C:CB:8A X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:03:85:ab:3b:55:27:c4:72:ba:ac:1e:51:76:1b:af:3c: ca:d3:91:73:8e:a5:35:59:71:b2:00:11:59:ee:fb:25:68:59: 0d:19:90:71:e4:90:1d:e6:5e:0a:21:2f:f0:21:2e:e0:16:8f: 93:a3:c6:a5:43:6d:b5:dc:22:14:da:55:d6:60:ad:81:b3:61: c8:52:33:18:63:9c:46:15:6b:b4:4f:34:24:75:9e:48:10:af: 82:cf:c9:90:d7:e8:dd:82:59:d3:7f:0e:05:3a:3f:65:27:6b: 7c:68:8d:ab:5b:70:30:71:3b:89:25:af:e2:a7:df:25:4b:75: b5:1f:56:73:14:5b:12:5f:96:72:c6:15:d2:02:5f:cc:f8:04: 28:1b:96:56:8f:17:76:a9:22:4a:9b:5d:d2:6c:35:27:60:40: e0:ed:ed:47:49:62:61:72:0f:f9:af:08:5a:6d:be:4c:58:ab: aa:d9:01:80:5a:ff:c4:99:cb:91:07:e2:54:01:63:4e:fa:83: c1:98:c6:60:4e:c3:21:5c:f2:ef:55:d9:0d:42:58:01:cf:41: fc:be:02:ab:0f:86:c5:c6:17:1a:c7:06:ba:d9:ac:04:b3:35: ac:7b:14:a8:7c:93:f0:20:fe:e7:23:0a:4a:05:34:f7:33:5a: 17:0a:97:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUBJICexp110GFokzzsm72giCBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTA2MjgwMDU1MzhaFw0yNTA3MDEwNzI1MzhaMDMxMTAvBgNV BAMTKDhCOTZDRkVCQjEyODU2MTdDQzBDOTdGRTBCRTI0REY2ODkxQ0NCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKZTrRxaWJZ7x2LPygbjQU7IR rg7TwQR1PGE02QRq/Bsva/dVGXdyPBZzEf8Jc5l9wWgMetYPYWKCW1sfd7LmOK5s QxEdYB5RfqLSz2DuXUMYYiJPd71cPo1WZ7zyppsO6k3pXPWLawpWOqCN7dtrGpVe m1DrPeLnxEzXOtQbSSCATJMQRC0rq4yV8zN63WtHlfEVRkYx+0MVn3/2zWDHzTPK KuGUtDIhTQDVsRmzOOxujJ/p0cm+ihWjQYRGUF3EqhSrqqggvKws/Kt9H2ndK1Ne 5wYE5PE9iqi3PjaGbLOetYcs6FeSyMtfD7v8R+gU0VIUTjreDGQ3Pkh8EiTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5bP67EoVhfMDJf+C+JN9okcy4owHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLHA4WrO1UnxHK6rB5RdhuvPMrTkXOOpTVZ cbIAEVnu+yVoWQ0ZkHHkkB3mXgohL/AhLuAWj5OjxqVDbbXcIhTaVdZgrYGzYchS MxhjnEYVa7RPNCR1nkgQr4LPyZDX6N2CWdN/DgU6P2Una3xojatbcDBxO4klr+Kn 3yVLdbUfVnMUWxJflnLGFdICX8z4BCgbllaPF3apIkqbXdJsNSdgQODt7UdJYmFy D/mvCFptvkxYq6rZAYBa/8SZy5EH4lQBY076g8GYxmBOwyFc8u9V2Q1CWAHPQfy+ AqsPhsXGFxrHBrrZrASzNax7FKh8k/Ag/ucjCkoFNPczWhcKl48= -----END CERTIFICATE-----Generated at Mon Jun 30 07:24:31 2025 by rpki-client