$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: iz80P3cz7ikc0iVNtTPabxvq6tckIWiC1/F7p0JIpVU= Subject key identifier: A0:65:E8:98:F7:CE:BC:DC:D2:B3:8A:0F:A3:62:07:74:8F:08:A4:41 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 4C5C070C9CD34ADDF962DBA68301E0978DBAAD04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0925 Signing time: Sat 28 Jun 2025 22:11:47 +0000 Manifest this update: Sat 28 Jun 2025 22:06:47 +0000 Manifest next update: Wed 02 Jul 2025 00:26:47 +0000 Files and hashes: 1: AS48.roa (hash: tnIHiyydMBODQZAGAIWJ55BdRFMyohaiaQfvZCTRwvM=) 2: AS59282.roa (hash: rn/foQIRZPZaJbefF4yS1h7Rqlzl8RA4UhyiMvZtbyI=) 3: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: MnxN5JRS1XU55vIf3aDm/7TQDxliQbhVSoNKEc5wnX0=) 4: AS142395.roa (hash: vW3zaDs4B/0B4dgk4xj07ZGjVrPmOv0iMJHfXVSfu34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5c:07:0c:9c:d3:4a:dd:f9:62:db:a6:83:01:e0:97:8d:ba:ad:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Jun 28 22:06:47 2025 GMT Not After : Jul 2 00:26:47 2025 GMT Subject: CN=A065E898F7CEBCDCD2B38A0FA36207748F08A441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:2e:ad:4f:70:ce:0c:3b:f1:a3:6c:68:51: 43:fc:7f:26:8d:d6:aa:8d:37:88:13:5d:b3:70:de: cc:e2:24:31:a0:25:fa:2e:c3:1f:94:70:1f:94:84: 33:0d:ef:d0:8c:1f:ed:19:00:f1:15:5c:e7:67:f6: 45:a8:0a:7f:c9:7f:46:70:cb:e6:47:9e:40:d2:f9: 7a:ea:38:6a:d1:f4:17:81:ad:d3:99:b6:03:ed:d9: ab:58:df:b2:62:65:f2:3d:c3:a7:85:eb:e7:e6:67: b2:3d:77:5b:0f:1c:5a:eb:1e:52:35:09:ba:bc:54: 48:b7:4c:e2:d8:89:b6:cf:a1:95:c0:ce:25:08:0c: 67:3f:c7:35:a7:b7:83:b8:29:9f:71:6b:e8:ad:21: eb:37:0e:ed:fc:c1:2b:1f:c8:30:5c:d4:7a:74:2c: e7:c0:c1:90:d6:45:01:e3:52:95:38:ae:31:8e:01: 3f:17:30:9e:cb:f0:c2:e7:1f:64:40:b1:31:ac:4f: 4b:5f:da:55:39:e5:da:11:e8:78:61:5f:84:9d:58: bf:d5:ac:9b:c7:dd:94:f3:71:41:2f:08:c0:a7:8a: 52:3b:dc:98:bb:27:80:ff:3b:e3:51:f3:65:67:3d: cb:30:f6:96:cc:53:60:d7:a2:a3:74:42:88:82:a5: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:65:E8:98:F7:CE:BC:DC:D2:B3:8A:0F:A3:62:07:74:8F:08:A4:41 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:0c:a8:b2:c8:10:eb:19:26:ae:7f:d2:7f:a9:7d:e7:9c: 0c:4a:20:de:0e:de:a1:fb:3a:39:5d:1a:02:bb:98:d6:67:11: 83:79:e1:76:b6:3d:8c:f5:bb:08:4f:f4:69:40:a8:8f:0a:fd: e4:68:73:74:56:2f:05:35:b3:d9:04:d4:6c:3f:bd:bb:3d:84: 49:db:5e:37:82:73:51:6c:25:2f:ae:aa:31:d4:ab:23:61:44: dc:96:6a:68:05:0d:f0:94:25:04:52:85:9f:d9:8d:4e:71:98: 33:51:e6:d2:65:85:13:c1:23:c1:74:20:12:08:5c:25:03:9d: e0:f6:c5:50:f3:a6:f0:5d:06:61:88:bf:fd:8a:3e:42:f2:19: d4:ae:f5:9c:fb:de:8a:37:fd:45:a1:95:25:64:42:9a:8b:11: 9e:c5:85:8f:b9:da:d0:7f:cc:bb:3b:67:c9:87:49:5d:a8:ab: a7:cd:be:ea:77:3f:57:be:fa:e6:7f:df:7a:e0:92:00:29:61: 6f:17:65:2f:65:85:82:2d:b3:ad:19:da:88:78:4b:a9:ac:84: 54:21:c9:4e:d4:20:c3:d8:c4:80:23:7a:96:86:d9:92:3c:88: fc:21:69:70:26:36:96:a5:87:a8:2f:23:2f:1f:82:c7:94:04: d9:1e:73:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFwHDJzTSt35YtumgwHgl426rQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA2MjgyMjA2NDdaFw0yNTA3MDIwMDI2NDdaMDMxMTAvBgNV BAMTKEEwNjVFODk4RjdDRUJDRENEMkIzOEEwRkEzNjIwNzc0OEYwOEE0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Fy6tT3DODDvxo2xoUUP8fyaN 1qqNN4gTXbNw3sziJDGgJfouwx+UcB+UhDMN79CMH+0ZAPEVXOdn9kWoCn/Jf0Zw y+ZHnkDS+XrqOGrR9BeBrdOZtgPt2atY37JiZfI9w6eF6+fmZ7I9d1sPHFrrHlI1 Cbq8VEi3TOLYibbPoZXAziUIDGc/xzWnt4O4KZ9xa+itIes3Du38wSsfyDBc1Hp0 LOfAwZDWRQHjUpU4rjGOAT8XMJ7L8MLnH2RAsTGsT0tf2lU55doR6HhhX4SdWL/V rJvH3ZTzcUEvCMCnilI73Ji7J4D/O+NR82VnPcsw9pbMU2DXoqN0QoiCpZVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGXomPfOvNzSs4oPo2IHdI8IpEEwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdCDKiyyBDrGSauf9J/qX3nnAxKIN4O3qH7 OjldGgK7mNZnEYN54Xa2PYz1uwhP9GlAqI8K/eRoc3RWLwU1s9kE1Gw/vbs9hEnb XjeCc1FsJS+uqjHUqyNhRNyWamgFDfCUJQRShZ/ZjU5xmDNR5tJlhRPBI8F0IBII XCUDneD2xVDzpvBdBmGIv/2KPkLyGdSu9Zz73oo3/UWhlSVkQpqLEZ7FhY+52tB/ zLs7Z8mHSV2oq6fNvup3P1e++uZ/33rgkgApYW8XZS9lhYIts60Z2oh4S6mshFQh yU7UIMPYxIAjepaG2ZI8iPwhaXAmNpalh6gvIy8fgseUBNkec/I= -----END CERTIFICATE-----Generated at Mon Jun 30 07:24:46 2025 by rpki-client