$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: Re8vHq3U9qqneXZmZDXeQqOvJZXBFBAntIQMFR6BFNs= Subject key identifier: 96:1F:57:54:81:D2:47:9F:19:D6:0D:EE:26:33:B6:92:7E:95:9F:68 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 74AFF6FB30FF040D8B458AF946FA02E1DDFBE9D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 04E4 Signing time: Sun 29 Jun 2025 06:32:11 +0000 Manifest this update: Sun 29 Jun 2025 06:27:11 +0000 Manifest next update: Wed 02 Jul 2025 17:36:11 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: dttoTx4BQRFnMAvnuJnvYcnCQ5YOgtytig0qE7CIy64=) 2: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: fNAPECkXkFw4LQKiQxT55SQYEl50OIQZ+TU9Yj44ek8=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: +2/fO8INW6MBjsIr2MpsMr5pDS/07SU3AZAKJ801ins=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:af:f6:fb:30:ff:04:0d:8b:45:8a:f9:46:fa:02:e1:dd:fb:e9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: Jun 29 06:27:11 2025 GMT Not After : Jul 2 17:36:11 2025 GMT Subject: CN=961F575481D2479F19D60DEE2633B6927E959F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:56:c3:12:d6:6d:c1:bd:25:da:23:b8:91: f2:f7:3b:42:16:a2:2c:1b:cc:87:52:fe:64:30:c8: a7:26:63:ed:a1:6c:bd:ab:30:01:5b:6f:25:f3:58: bd:41:f4:ff:7f:00:04:66:1c:8b:d5:0f:b5:10:1b: e7:98:95:59:dd:5a:5b:31:2b:88:e0:b2:41:b3:9b: 83:d7:de:57:d9:33:92:91:14:5a:01:2b:02:e6:8c: 5a:38:8f:8d:3a:69:02:22:b1:77:9f:e9:d0:e2:79: 93:3f:67:33:f4:04:29:c2:70:f0:31:47:fc:ea:f1: 93:5c:3f:59:f3:fe:f4:23:69:55:6b:a1:82:ee:2f: ce:9a:f6:1b:f0:ce:63:37:aa:3f:71:8c:f3:4a:c7: 44:a4:05:ec:c4:7f:c0:6c:08:ad:0e:e3:df:aa:5d: 03:ec:31:af:00:fe:10:02:7f:5f:d7:60:19:bc:2f: 2f:89:de:ed:42:d6:88:c5:51:77:a3:8e:22:4b:66: 7c:d2:b5:1f:f3:29:6a:ca:75:0f:40:c5:44:eb:78: bc:42:77:d6:a8:c0:8d:24:c8:f9:34:35:d1:5f:87: 3d:18:99:4b:b0:4c:41:7f:0d:f7:f2:53:e0:d7:95: b8:11:b7:c4:02:87:c3:cb:82:7a:b9:6a:81:3b:03: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:57:54:81:D2:47:9F:19:D6:0D:EE:26:33:B6:92:7E:95:9F:68 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:93:ad:04:56:80:43:68:06:28:5a:a3:90:ae:fe:0d:64:fa: 6c:44:5b:20:14:35:fb:0d:bb:14:8d:f9:5f:00:9a:6d:c3:d0: 0f:08:eb:fe:8b:ad:59:62:8c:11:62:c2:c6:e3:dc:ae:fb:27: 40:4d:a7:f5:62:5e:43:6b:5e:9b:5f:44:32:93:96:c2:44:61: b1:67:5b:f7:61:c4:0f:0d:ad:0f:c1:89:55:82:a0:28:59:3a: 52:1c:7b:f8:c0:f2:28:d0:69:31:af:99:91:d7:f9:75:dd:7f: 4a:0a:ef:28:e8:7f:60:d3:a7:d9:7b:2d:1d:c4:ff:e9:7d:84: 40:a0:c3:cb:56:b1:d3:93:74:ce:45:17:6b:a7:19:5c:59:66: 2f:e9:39:a7:ea:95:04:d3:20:68:ff:59:0d:2e:07:91:e4:c8: c2:40:4f:91:1c:d7:12:1e:0e:8a:0e:e4:df:8c:d3:b4:44:9f: 78:d4:46:30:b4:c5:65:d2:9f:3e:ca:4c:a9:a4:a5:75:f4:a9: 2c:4e:9d:4e:ae:8b:12:eb:0c:a0:c3:55:94:c4:51:3b:21:bc: e8:0e:f5:10:a8:9e:2b:ed:5f:49:8d:0b:77:37:b9:29:08:72: d3:c2:08:c3:34:03:72:6c:e9:01:10:00:a2:af:a1:61:ca:e3: 33:db:0e:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdK/2+zD/BA2LRYr5RvoC4d376dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNTA2MjkwNjI3MTFaFw0yNTA3MDIxNzM2MTFaMDMxMTAvBgNV BAMTKDk2MUY1NzU0ODFEMjQ3OUYxOUQ2MERFRTI2MzNCNjkyN0U5NTlGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OlbDEtZtwb0l2iO4kfL3O0IW oiwbzIdS/mQwyKcmY+2hbL2rMAFbbyXzWL1B9P9/AARmHIvVD7UQG+eYlVndWlsx K4jgskGzm4PX3lfZM5KRFFoBKwLmjFo4j406aQIisXef6dDieZM/ZzP0BCnCcPAx R/zq8ZNcP1nz/vQjaVVroYLuL86a9hvwzmM3qj9xjPNKx0SkBezEf8BsCK0O49+q XQPsMa8A/hACf1/XYBm8Ly+J3u1C1ojFUXejjiJLZnzStR/zKWrKdQ9AxUTreLxC d9aowI0kyPk0NdFfhz0YmUuwTEF/DffyU+DXlbgRt8QCh8PLgnq5aoE7A+VjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlh9XVIHSR58Z1g3uJjO2kn6Vn2gwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKTrQRWgENoBihao5Cu/g1k+mxEWyAUNfsN uxSN+V8Amm3D0A8I6/6LrVlijBFiwsbj3K77J0BNp/ViXkNrXptfRDKTlsJEYbFn W/dhxA8NrQ/BiVWCoChZOlIce/jA8ijQaTGvmZHX+XXdf0oK7yjof2DTp9l7LR3E /+l9hECgw8tWsdOTdM5FF2unGVxZZi/pOafqlQTTIGj/WQ0uB5HkyMJAT5Ec1xIe DooO5N+M07REn3jURjC0xWXSnz7KTKmkpXX0qSxOnU6uixLrDKDDVZTEUTshvOgO 9RConivtX0mNC3c3uSkIctPCCMM0A3Js6QEQAKKvoWHK4zPbDmo= -----END CERTIFICATE-----Generated at Mon Jun 30 05:16:08 2025 by rpki-client