$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: x30mglrKPXSD5TPuSfzCHSRglEgBEBBtgG/q41+Z1oE= Subject key identifier: 3E:2D:9F:65:26:5B:A9:FA:4C:49:A8:E0:5F:48:04:83:7D:8C:A8:BC Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 7756255AD2CC298DB7E0A80D7E380AAFBC4A000B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 0365 Signing time: Sat 28 Jun 2025 05:31:31 +0000 Manifest this update: Sat 28 Jun 2025 05:26:31 +0000 Manifest next update: Tue 01 Jul 2025 08:09:31 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: DS0hCq0koHOBoxtvccNH1QeGGPeh5jNq/29MUNxhn+U=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: DJAdvgZQK9YXgYmT5mLJ1UmrRWRh5/+aC5CD9gR1G/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:56:25:5a:d2:cc:29:8d:b7:e0:a8:0d:7e:38:0a:af:bc:4a:00:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Jun 28 05:26:31 2025 GMT Not After : Jul 1 08:09:31 2025 GMT Subject: CN=3E2D9F65265BA9FA4C49A8E05F4804837D8CA8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:a0:18:6f:26:b4:73:c6:b5:68:14:6b:89: 96:f6:f1:ad:1c:04:43:76:17:52:cc:8e:79:8c:44: fc:77:73:9c:54:3f:38:ff:32:1d:d5:1b:a0:a6:c9: 18:f6:d9:a2:95:8b:23:25:64:83:53:3c:55:83:b5: 3a:89:33:27:13:e3:c6:e0:b7:c9:33:1d:a8:22:52: 56:22:bb:4b:d5:27:2c:46:4a:84:38:57:a4:72:d9: cf:bf:65:64:ff:f3:06:a3:4c:67:25:39:ec:3b:81: 6c:af:e4:72:61:bb:ef:6b:65:7a:1e:65:33:33:bf: 70:c8:1f:d1:02:d6:a7:b1:c2:9d:c9:af:d7:5a:59: b2:02:41:8b:52:13:5b:7a:40:49:f4:6f:e3:7a:ae: df:59:67:d0:59:08:f2:b8:ed:02:2b:48:63:89:db: 25:a5:a0:c9:de:ae:b7:43:1f:ec:85:ce:1d:c5:72: 95:4b:1b:23:cb:49:8a:65:61:7d:8e:2c:b7:33:37: e7:8b:b2:05:14:55:9e:ea:4f:bb:c4:1f:29:18:0b: a6:5f:72:9c:5e:18:13:3d:c9:41:62:bc:cb:ec:d5: 56:62:1a:0d:c3:83:8f:fb:a1:05:9c:ed:f7:10:35: b0:2b:db:d7:b5:c1:7d:3e:a8:8d:15:37:51:4e:25: 8d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2D:9F:65:26:5B:A9:FA:4C:49:A8:E0:5F:48:04:83:7D:8C:A8:BC X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:7b:be:c8:17:5d:70:df:94:e2:74:4a:76:61:13:c4:22: 13:af:50:fb:21:e7:bd:94:8a:79:c5:5f:1b:ab:63:1f:4d:e7: bb:86:93:16:15:87:56:f8:94:2e:b4:f2:dc:9e:60:eb:5a:77: 5d:e7:df:2c:c8:57:96:62:e0:1d:b4:59:6d:1b:bb:2a:ec:2c: 53:d3:ac:64:66:9d:98:4f:55:2a:e0:6c:3b:c6:fc:1a:b4:e9: 65:70:84:8b:c8:be:69:d6:e1:46:51:2b:b7:da:1a:46:48:e9: 18:e9:4c:d2:0a:2c:e2:27:58:c2:7a:7f:3c:27:a5:09:34:91: 56:80:03:22:b2:bd:3e:34:a6:f4:cc:88:cf:5c:4f:a4:1c:12: 4a:d9:76:9e:98:3c:48:33:fd:2d:96:9f:49:53:8e:d0:42:b2: 0f:44:6a:8d:5e:94:6d:a1:c8:f8:27:67:a4:95:f0:3e:ae:ff: fc:42:08:11:b6:3f:61:8c:88:51:ae:57:12:77:60:24:09:9b: 01:e9:38:49:09:a7:17:80:8e:6b:56:66:7f:0a:ee:db:5e:52: 60:51:09:f9:af:80:ac:23:35:5c:b5:68:4c:db:7a:d5:a3:e9: a7:ae:5b:c5:be:ce:8f:33:85:70:fc:83:e7:b3:d3:53:65:b3: e1:ab:31:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1YlWtLMKY234KgNfjgKr7xKAAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTA2MjgwNTI2MzFaFw0yNTA3MDEwODA5MzFaMDMxMTAvBgNV BAMTKDNFMkQ5RjY1MjY1QkE5RkE0QzQ5QThFMDVGNDgwNDgzN0Q4Q0E4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLqAYbya0c8a1aBRriZb28a0c BEN2F1LMjnmMRPx3c5xUPzj/Mh3VG6CmyRj22aKViyMlZINTPFWDtTqJMycT48bg t8kzHagiUlYiu0vVJyxGSoQ4V6Ry2c+/ZWT/8wajTGclOew7gWyv5HJhu+9rZXoe ZTMzv3DIH9EC1qexwp3Jr9daWbICQYtSE1t6QEn0b+N6rt9ZZ9BZCPK47QIrSGOJ 2yWloMnerrdDH+yFzh3FcpVLGyPLSYplYX2OLLczN+eLsgUUVZ7qT7vEHykYC6Zf cpxeGBM9yUFivMvs1VZiGg3Dg4/7oQWc7fcQNbAr29e1wX0+qI0VN1FOJY0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPi2fZSZbqfpMSajgX0gEg32MqLwwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5de77IF11w35TidEp2YRPEIhOvUPsh572U innFXxurYx9N57uGkxYVh1b4lC608tyeYOtad13n3yzIV5Zi4B20WW0buyrsLFPT rGRmnZhPVSrgbDvG/Bq06WVwhIvIvmnW4UZRK7faGkZI6RjpTNIKLOInWMJ6fzwn pQk0kVaAAyKyvT40pvTMiM9cT6QcEkrZdp6YPEgz/S2Wn0lTjtBCsg9Eao1elG2h yPgnZ6SV8D6u//xCCBG2P2GMiFGuVxJ3YCQJmwHpOEkJpxeAjmtWZn8K7tteUmBR CfmvgKwjNVy1aEzbetWj6aeuW8W+zo8zhXD8g+ez01Nls+GrMQ4= -----END CERTIFICATE-----Generated at Mon Jun 30 08:38:11 2025 by rpki-client