$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: ft27HlkIA8SxRXttC4fX4doMDojP5kVGbJ/aT9vYbsM= Subject key identifier: 5A:A4:FB:41:2A:76:70:D2:63:D3:2C:F6:E3:69:5A:E2:42:54:89:48 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 7A3AB81532DECF9A4F6467A6FE6FEC73D16807B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: 69 Signing time: Sat 28 Jun 2025 11:41:03 +0000 Manifest this update: Sat 28 Jun 2025 11:36:03 +0000 Manifest next update: Tue 01 Jul 2025 15:58:03 +0000 Files and hashes: 1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 2: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) 3: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: j34zcoVmWVppj86gR4PGVw7jeEJ0jrwzhvZ1e7oITAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3a:b8:15:32:de:cf:9a:4f:64:67:a6:fe:6f:ec:73:d1:68:07:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jun 28 11:36:03 2025 GMT Not After : Jul 1 15:58:03 2025 GMT Subject: CN=5AA4FB412A7670D263D32CF6E3695AE242548948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:ba:ae:87:bd:3e:17:70:df:b3:a3:32:46: 52:20:fc:10:59:59:22:53:8e:31:e7:a1:2d:9e:27: 35:75:67:db:50:86:7f:a0:d6:9b:d0:b4:d1:fd:28: 6e:87:80:f3:37:64:ae:98:42:94:5b:2b:7c:66:30: 4c:70:5e:6d:ff:71:42:89:6c:3a:95:9e:d9:33:7c: 1b:c9:78:4b:e5:cb:0c:20:51:57:25:a7:ed:74:b1: b6:19:f2:ef:c9:ec:68:d0:c8:10:ef:4f:0c:24:82: 65:b1:f5:df:18:00:c7:a9:02:cc:14:54:2c:30:67: b6:11:61:85:81:7d:a0:4c:26:b7:c1:d5:05:99:56: c5:62:02:4b:43:f2:69:a3:57:41:51:c0:c0:00:00: 36:d0:43:75:05:93:2a:e8:59:a5:57:43:55:c6:41: 94:29:ba:cb:30:d1:ae:c5:a7:77:f7:0b:6b:9f:02: d8:ce:a4:1f:72:87:59:b3:0b:57:f9:33:40:da:34: 24:ec:80:88:72:d1:a0:5b:7e:70:45:6d:8b:46:b3: c8:64:36:83:43:1e:08:a3:52:c4:13:a1:6c:4d:54: 80:6d:ab:a9:a1:71:ee:6d:ba:60:bc:9b:31:78:44: 2b:15:44:0b:fd:a3:69:b3:d3:92:fd:c1:66:73:83: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A4:FB:41:2A:76:70:D2:63:D3:2C:F6:E3:69:5A:E2:42:54:89:48 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a4:cc:ae:0f:99:35:cd:e3:26:cd:9d:05:93:8c:6c:90:8b: 69:a2:f4:d0:c8:f3:ea:14:36:48:be:17:8c:5b:a3:9b:30:fd: 23:c3:1e:ab:1d:8f:7e:a2:fb:1d:ee:4e:c7:c4:fb:00:c2:89: cf:fb:91:bc:48:60:1e:1c:87:47:ea:94:fb:e1:a8:ff:17:41: 58:c9:e4:e1:2b:4a:01:04:1b:d7:70:04:35:a9:a1:af:5d:ee: 95:64:9d:ca:c4:60:8d:4a:17:4b:b8:3c:19:88:ec:89:96:bb: 8c:6b:9c:2a:da:c3:a5:db:9d:b1:c4:3d:8e:09:37:23:93:24: bd:aa:da:20:f6:d6:48:a5:21:fc:50:d0:a7:0f:fe:9e:33:b8: bf:2e:ba:56:d8:a4:10:8f:35:82:85:d2:8b:c7:5a:65:d5:a2: fe:cd:f9:bc:8f:b0:d0:e4:4d:08:1c:d7:ff:a2:88:b4:c1:15: 1e:0c:29:c2:6c:6a:5a:7f:ed:f6:5c:90:7d:63:c4:9b:42:f6: f9:20:aa:38:31:ea:07:e4:a6:72:74:93:47:92:f2:06:07:6d: 39:0b:3c:98:c3:94:b2:20:3b:c5:a2:2c:ae:c2:2c:03:27:a1: f5:e4:4e:ba:bf:da:f3:ff:1f:bf:7d:6f:73:05:9b:c4:a8:4c: c1:c7:34:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejq4FTLez5pPZGem/m/sc9FoB7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA2MjgxMTM2MDNaFw0yNTA3MDExNTU4MDNaMDMxMTAvBgNV BAMTKDVBQTRGQjQxMkE3NjcwRDI2M0QzMkNGNkUzNjk1QUUyNDI1NDg5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Wrquh70+F3Dfs6MyRlIg/BBZ WSJTjjHnoS2eJzV1Z9tQhn+g1pvQtNH9KG6HgPM3ZK6YQpRbK3xmMExwXm3/cUKJ bDqVntkzfBvJeEvlywwgUVclp+10sbYZ8u/J7GjQyBDvTwwkgmWx9d8YAMepAswU VCwwZ7YRYYWBfaBMJrfB1QWZVsViAktD8mmjV0FRwMAAADbQQ3UFkyroWaVXQ1XG QZQpussw0a7Fp3f3C2ufAtjOpB9yh1mzC1f5M0DaNCTsgIhy0aBbfnBFbYtGs8hk NoNDHgijUsQToWxNVIBtq6mhce5tumC8mzF4RCsVRAv9o2mz05L9wWZzg77vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqT7QSp2cNJj0yz242la4kJUiUgwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAukzK4PmTXN4ybNnQWTjGyQi2mi9NDI8+oU Nki+F4xbo5sw/SPDHqsdj36i+x3uTsfE+wDCic/7kbxIYB4ch0fqlPvhqP8XQVjJ 5OErSgEEG9dwBDWpoa9d7pVkncrEYI1KF0u4PBmI7ImWu4xrnCraw6XbnbHEPY4J NyOTJL2q2iD21kilIfxQ0KcP/p4zuL8uulbYpBCPNYKF0ovHWmXVov7N+byPsNDk TQgc1/+iiLTBFR4MKcJsalp/7fZckH1jxJtC9vkgqjgx6gfkpnJ0k0eS8gYHbTkL PJjDlLIgO8WiLK7CLAMnofXkTrq/2vP/H799b3MFm8SoTMHHNMo= -----END CERTIFICATE-----Generated at Mon Jun 30 03:49:34 2025 by rpki-client