$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: qzjPuiwh9n9oIPfesRJAmF5Y6FdjPWL76qUCHbrzofk= Subject key identifier: 5C:07:A9:1E:C0:99:9D:63:7C:C4:C2:C8:A2:C6:7E:7A:EA:0A:9C:3D Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 79C827397CBA878411BA0271C43E425A5508DC55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 014D Signing time: Sun 29 Jun 2025 11:31:33 +0000 Manifest this update: Sun 29 Jun 2025 11:26:33 +0000 Manifest next update: Wed 02 Jul 2025 21:01:33 +0000 Files and hashes: 1: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: IrvdcRxAAMOyiKN0SHveydgwRSa5Rrl3FGCVAO/lOHI=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c8:27:39:7c:ba:87:84:11:ba:02:71:c4:3e:42:5a:55:08:dc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Jun 29 11:26:33 2025 GMT Not After : Jul 2 21:01:33 2025 GMT Subject: CN=5C07A91EC0999D637CC4C2C8A2C67E7AEA0A9C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:2a:e3:f1:2b:9c:e2:58:ba:71:eb:93:bd: 78:11:a5:23:cb:57:0e:43:a3:4c:d8:51:39:ca:92: ba:97:b4:fb:37:d0:58:ff:e7:fb:40:a6:f8:b1:f5: 18:97:c1:e0:68:60:b8:cc:50:b9:1a:dc:5d:4a:06: c4:f2:06:1e:87:60:8f:96:a7:d0:3d:b2:8a:86:bc: 53:bc:f4:78:10:13:54:da:39:85:e3:d8:8f:52:42: dc:ab:b8:a9:4a:57:73:db:bd:a1:c8:6e:7b:60:e5: 90:7c:a4:6b:e3:85:6e:b2:f1:a4:a7:1e:b3:45:b3: a1:45:be:b2:1f:e9:ef:3e:a6:07:45:e3:4f:cd:f3: 1c:87:49:e1:52:c1:61:8c:79:cd:35:da:87:65:bf: b0:02:01:72:de:d1:4e:6f:00:ce:98:8a:0f:b3:91: b2:30:ca:b5:f2:7e:c6:10:97:a0:28:f8:ea:06:6d: 75:e6:f7:1a:eb:78:44:5c:57:6c:99:63:d7:ff:68: a3:57:ed:41:bb:2f:7f:14:e4:82:6c:ab:ee:fd:55: e0:87:f9:fe:51:1c:f6:31:cd:43:37:0e:82:3e:6a: 17:6c:56:ef:e0:87:19:e3:3e:04:f4:9e:5e:ef:0f: 97:62:c7:23:7d:a7:4e:d8:59:3b:ee:8e:9d:26:26: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:07:A9:1E:C0:99:9D:63:7C:C4:C2:C8:A2:C6:7E:7A:EA:0A:9C:3D X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d7:52:83:49:93:d9:48:bb:83:4c:8e:e0:ed:91:c5:b5:83: 5b:10:41:30:aa:f8:c8:fa:d2:80:e7:87:5a:af:0b:12:f0:3a: 57:b7:67:d5:8c:cc:d0:13:67:fa:3c:98:f0:ec:73:3f:dc:25: c5:7c:8d:e9:85:62:e2:03:ec:f4:6d:dd:e5:50:f3:53:e1:1b: 0a:14:8b:fd:0b:1d:30:84:03:4e:75:5b:99:cb:0f:43:2e:09: 0a:8f:60:f5:51:70:f5:66:3a:e6:8a:36:ee:b6:41:68:d8:a2: 5e:fe:02:e3:a3:69:88:fa:ef:51:87:83:b0:40:49:36:dc:5a: 5b:d5:76:25:47:01:46:11:1c:6e:4c:10:b7:dd:ff:1d:64:54: 23:33:5b:eb:4e:de:ef:cb:cb:c0:a6:6c:26:ca:13:66:f9:fe: 97:f2:a0:b7:fe:e8:f5:14:39:6f:7b:1d:df:94:dd:7d:e6:f8: c4:42:9d:89:09:27:dc:c9:2b:dd:0e:99:7b:32:a1:5d:b3:06: 87:50:8d:22:db:95:21:bf:00:c1:1e:ab:fa:99:9a:cb:89:4e: c2:c0:0a:49:12:4e:c4:70:8e:88:65:74:67:cd:74:2a:9c:6b: 53:b5:22:9b:b9:0d:5b:5f:31:c7:32:be:b3:69:38:fc:70:b0: cd:76:05:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecgnOXy6h4QRugJxxD5CWlUI3FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTA2MjkxMTI2MzNaFw0yNTA3MDIyMTAxMzNaMDMxMTAvBgNV BAMTKDVDMDdBOTFFQzA5OTlENjM3Q0M0QzJDOEEyQzY3RTdBRUEwQTlDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwyrj8Suc4li6ceuTvXgRpSPL Vw5Do0zYUTnKkrqXtPs30Fj/5/tApvix9RiXweBoYLjMULka3F1KBsTyBh6HYI+W p9A9soqGvFO89HgQE1TaOYXj2I9SQtyruKlKV3PbvaHIbntg5ZB8pGvjhW6y8aSn HrNFs6FFvrIf6e8+pgdF40/N8xyHSeFSwWGMec012odlv7ACAXLe0U5vAM6Yig+z kbIwyrXyfsYQl6Ao+OoGbXXm9xrreERcV2yZY9f/aKNX7UG7L38U5IJsq+79VeCH +f5RHPYxzUM3DoI+ahdsVu/ghxnjPgT0nl7vD5dixyN9p07YWTvujp0mJsvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXAepHsCZnWN8xMLIosZ+euoKnD0wHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADXUoNJk9lIu4NMjuDtkcW1g1sQQTCq+Mj6 0oDnh1qvCxLwOle3Z9WMzNATZ/o8mPDscz/cJcV8jemFYuID7PRt3eVQ81PhGwoU i/0LHTCEA051W5nLD0MuCQqPYPVRcPVmOuaKNu62QWjYol7+AuOjaYj671GHg7BA STbcWlvVdiVHAUYRHG5MELfd/x1kVCMzW+tO3u/Ly8CmbCbKE2b5/pfyoLf+6PUU OW97Hd+U3X3m+MRCnYkJJ9zJK90OmXsyoV2zBodQjSLblSG/AMEeq/qZmsuJTsLA CkkSTsRwjohldGfNdCqca1O1Ipu5DVtfMccyvrNpOPxwsM12BT0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:34:39 2025 by rpki-client