$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: DCAzyvIF54pDCWyKy8AZeZ2lprYVlPtBdtaJUDAmm/s= Subject key identifier: 7D:44:2B:AC:9D:03:61:89:D9:F5:B9:AA:2C:48:86:4F:42:5C:0C:AD Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 33A63CBA9FCD7B1DA0504425F6BC83A907FEABED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01C8 Signing time: Fri 22 Aug 2025 04:21:37 +0000 Manifest this update: Fri 22 Aug 2025 04:16:37 +0000 Manifest next update: Mon 25 Aug 2025 06:31:37 +0000 Files and hashes: 1: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: vY8WV98Jcmzb4ODBeT1hqvxozKSfqOYtlfGMabwL6vk=) 2: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: dyOdjiPQvBG9MUQsFIkXEWoxKQNt83H4LWkG0g0ylYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a6:3c:ba:9f:cd:7b:1d:a0:50:44:25:f6:bc:83:a9:07:fe:ab:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Aug 22 04:16:37 2025 GMT Not After : Aug 25 06:31:37 2025 GMT Subject: CN=7D442BAC9D036189D9F5B9AA2C48864F425C0CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:1b:a3:3f:2b:d8:50:37:ee:00:df:b5:1c: af:32:13:c4:61:b8:4c:74:e0:3c:a6:57:6f:4e:af: 48:bb:07:f4:d9:c6:f1:8e:a2:ec:a4:86:0d:9d:91: dd:c8:06:61:e6:22:c0:3a:31:39:4b:15:85:88:28: 77:2e:37:a8:b5:7f:a9:d3:f7:00:2a:55:46:5c:d6: 6d:78:b3:64:3f:57:07:5c:7b:36:a9:21:6c:87:c7: f7:7c:58:0e:a1:71:17:19:64:c7:02:fb:1c:6c:b3: 99:56:03:c2:3a:3c:a1:5a:b2:17:f6:be:a2:08:81: 59:10:93:f0:27:78:82:c3:9f:ee:cf:e1:a9:b7:0f: 0c:38:75:1c:24:24:d7:bd:1c:9e:d3:2e:1a:9d:3a: b0:5f:6a:c0:7e:ed:47:31:1a:49:85:4a:df:8f:49: b8:76:4f:c8:6e:ee:d4:bc:ea:ad:22:71:db:75:07: 97:f0:16:2e:20:7c:25:67:ca:09:e8:4b:8e:c2:74: 00:60:49:7e:08:4e:8d:0e:68:ec:21:5c:46:45:44: 3e:96:53:0d:da:73:12:38:6a:3e:15:29:f9:c7:65: 5d:71:cf:32:23:1d:9a:15:30:be:c0:64:7f:ca:09: 2a:46:5b:64:eb:bc:fa:a2:c4:a7:cc:19:06:77:93: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:44:2B:AC:9D:03:61:89:D9:F5:B9:AA:2C:48:86:4F:42:5C:0C:AD X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:d2:a5:71:26:c0:a5:4d:22:9f:bf:06:bc:9c:68:2d:a9: bd:ca:55:23:eb:8b:26:7a:c8:7c:89:34:56:9f:5f:60:30:aa: be:09:cd:ea:f2:9c:f8:a7:31:b5:7d:08:4b:8d:bf:6c:09:bf: f2:f8:95:73:d9:72:55:9b:f8:63:fb:41:29:3f:c8:c0:fd:7d: 30:52:99:b2:c7:89:e0:ce:cf:d5:c9:d3:ab:d5:77:c9:2c:5f: 5a:2a:14:ec:44:98:8a:78:7c:07:da:ae:87:f4:d4:90:88:9b: ef:b7:c2:df:00:0d:46:dd:92:7f:e5:28:91:4c:65:ad:53:6a: c6:de:80:4f:32:d7:e7:3f:65:3f:45:7e:ba:4e:7a:74:f1:1b: 95:bc:17:da:22:4a:f2:30:71:f0:0b:50:ed:ef:6c:e8:a6:2a: c5:86:8d:33:f1:79:13:23:65:33:f9:13:a7:29:65:26:8e:2a: 5d:ed:7f:c5:0d:f2:43:d3:31:e9:39:dc:f4:de:7a:ca:78:33: 27:34:36:3f:79:0a:36:18:ca:1a:b5:f8:d1:d9:66:b0:3f:e5: 23:91:1d:a2:f7:da:21:2a:21:a4:21:f2:bd:79:33:bd:dc:43: 2a:97:80:54:8d:cf:ac:c4:69:89:33:59:32:c4:16:3a:2d:e0: 4f:a4:46:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6Y8up/Nex2gUEQl9ryDqQf+q+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTA4MjIwNDE2MzdaFw0yNTA4MjUwNjMxMzdaMDMxMTAvBgNV BAMTKDdENDQyQkFDOUQwMzYxODlEOUY1QjlBQTJDNDg4NjRGNDI1QzBDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQxujPyvYUDfuAN+1HK8yE8Rh uEx04DymV29Or0i7B/TZxvGOouykhg2dkd3IBmHmIsA6MTlLFYWIKHcuN6i1f6nT 9wAqVUZc1m14s2Q/VwdcezapIWyHx/d8WA6hcRcZZMcC+xxss5lWA8I6PKFashf2 vqIIgVkQk/AneILDn+7P4am3Dww4dRwkJNe9HJ7TLhqdOrBfasB+7UcxGkmFSt+P Sbh2T8hu7tS86q0icdt1B5fwFi4gfCVnygnoS47CdABgSX4ITo0OaOwhXEZFRD6W Uw3acxI4aj4VKfnHZV1xzzIjHZoVML7AZH/KCSpGW2TrvPqixKfMGQZ3kwQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUQrrJ0DYYnZ9bmqLEiGT0JcDK0wHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn10qVxJsClTSKfvwa8nGgtqb3KVSPriyZ6 yHyJNFafX2Awqr4JzerynPinMbV9CEuNv2wJv/L4lXPZclWb+GP7QSk/yMD9fTBS mbLHieDOz9XJ06vVd8ksX1oqFOxEmIp4fAfarof01JCIm++3wt8ADUbdkn/lKJFM Za1TasbegE8y1+c/ZT9FfrpOenTxG5W8F9oiSvIwcfALUO3vbOimKsWGjTPxeRMj ZTP5E6cpZSaOKl3tf8UN8kPTMek53PTeesp4Myc0Nj95CjYYyhq1+NHZZrA/5SOR HaL32iEqIaQh8r15M73cQyqXgFSNz6zEaYkzWTLEFjot4E+kRqg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:08 2025 by rpki-client