$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft File: F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json) Hash identifier: Ao7wYlgkjxaIfVlxLICp0QWWUgSWo3IvVAjNQQqmI8w= Subject key identifier: 32:91:B0:85:5C:BF:61:12:F6:28:17:F4:58:B1:4E:9C:CB:87:83:0E Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 Certificate issuer: /CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Certificate serial: 6876C41E4A28AFBC5D4521A7D198E26BFC84B9C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft Manifest number: 0207 Signing time: Sat 28 Jun 2025 17:02:13 +0000 Manifest this update: Sat 28 Jun 2025 16:57:13 +0000 Manifest next update: Wed 02 Jul 2025 02:49:13 +0000 Files and hashes: 1: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: XPciT66Xx06GRwXZ0ZEhgnmHRmTDySk8mHEntenab4o=) 2: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: eoTBfzq8y4bEDLADbH3GXH2pd0CIGqJzNCdlfnqwOuA=) 3: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: eHwzq7YLjcb5gahiSGSCGuF++XFLWKQroJ/naCuvyBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:76:c4:1e:4a:28:af:bc:5d:45:21:a7:d1:98:e2:6b:fc:84:b9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324 Validity Not Before: Jun 28 16:57:13 2025 GMT Not After : Jul 2 02:49:13 2025 GMT Subject: CN=3291B0855CBF6112F62817F458B14E9CCB87830E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:c0:f2:41:ac:62:ec:11:b8:da:3e:dd:9b: dc:a5:72:61:c5:76:8e:58:a9:28:88:9b:93:7e:33: f6:1c:5a:b3:c4:55:79:96:5c:74:20:d3:73:35:17: f8:13:0f:c5:50:e5:2d:32:86:d6:2e:9a:23:0a:46: fe:95:6f:f9:02:7c:36:1b:7a:d9:44:a5:81:ab:ed: bc:a3:b2:40:7b:1d:48:7e:53:23:40:2a:a2:cf:70: 30:77:5c:b1:9a:dc:14:ba:39:67:86:f1:55:a9:99: 2c:c8:7b:fb:96:94:10:d9:81:c4:e5:57:bf:a1:96: d3:c7:a9:a2:d4:9d:3b:fd:17:bd:8d:9e:da:9c:b6: 92:47:8e:a6:2f:7e:bb:c2:5c:d7:d0:a9:72:ee:08: 32:51:54:ec:33:69:c0:f3:87:ac:e7:1c:f8:0c:d5: 60:ce:82:dc:62:f9:86:2f:f5:be:d2:66:81:b5:f6: e9:70:f9:ee:86:b1:0f:dd:ee:f8:f1:1d:fe:86:ad: 69:77:b5:0c:b9:bc:e4:d6:fb:dd:ab:61:ad:85:34: e9:36:a9:35:54:0c:a4:18:33:e6:63:e3:e0:09:da: a5:54:58:b5:b2:2a:77:5e:13:7f:8c:c9:8c:50:57: f4:32:58:93:3c:01:b6:57:7b:71:5c:af:d1:2d:ec: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:91:B0:85:5C:BF:61:12:F6:28:17:F4:58:B1:4E:9C:CB:87:83:0E X509v3 Authority Key Identifier: keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:f0:36:99:08:df:87:d1:49:76:73:33:ad:bc:55:75:0b: d9:b4:cb:b0:e3:3a:7f:ee:d0:2b:09:8d:b1:c7:fd:4a:7b:a1: 76:66:e5:ae:50:c5:80:33:47:60:fa:c1:f4:8a:26:bc:9e:80: a6:0c:54:41:ab:39:04:70:e8:c4:7c:72:70:34:03:1b:82:26: 9b:e5:e0:1b:3b:cb:21:c2:47:97:9e:71:e1:1f:e5:ae:6c:52: 11:84:53:28:31:ac:6f:7e:41:59:ca:15:23:22:84:9a:96:c5: e5:08:e8:cf:f9:a3:b1:54:7b:d5:f6:c4:3d:0b:89:5b:ee:f5: 21:0a:27:2c:d8:f7:e0:e6:74:14:44:fb:3c:12:e3:9c:e4:b8: 3a:bd:c9:18:58:82:b9:67:b5:01:46:8e:79:12:aa:39:6c:48: 62:57:36:81:da:cb:c2:09:83:07:62:52:30:0f:65:56:ca:9b: a7:41:ea:c3:0e:92:e9:81:e6:1c:80:db:64:48:56:a6:7b:a7: 19:33:d4:a5:4f:4b:59:fe:ed:15:9e:75:f2:0e:ea:90:8b:0c: 3c:bd:cf:6f:fd:68:41:c5:a9:4e:82:37:c9:ea:45:56:5e:95: c9:3f:92:0d:57:d5:21:97:a3:24:d6:d2:f1:75:39:70:72:d1: c6:f3:c1:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHbEHkoor7xdRSGn0Zjia/yEuckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1 OTY4MDMyNDAeFw0yNTA2MjgxNjU3MTNaFw0yNTA3MDIwMjQ5MTNaMDMxMTAvBgNV BAMTKDMyOTFCMDg1NUNCRjYxMTJGNjI4MTdGNDU4QjE0RTlDQ0I4NzgzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzC8DyQaxi7BG42j7dm9ylcmHF do5YqSiIm5N+M/YcWrPEVXmWXHQg03M1F/gTD8VQ5S0yhtYumiMKRv6Vb/kCfDYb etlEpYGr7byjskB7HUh+UyNAKqLPcDB3XLGa3BS6OWeG8VWpmSzIe/uWlBDZgcTl V7+hltPHqaLUnTv9F72NntqctpJHjqYvfrvCXNfQqXLuCDJRVOwzacDzh6znHPgM 1WDOgtxi+YYv9b7SZoG19ulw+e6GsQ/d7vjxHf6GrWl3tQy5vOTW+92rYa2FNOk2 qTVUDKQYM+Zj4+AJ2qVUWLWyKndeE3+MyYxQV/QyWJM8AbZXe3Fcr9Et7Ev/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpGwhVy/YRL2KBf0WLFOnMuHgw4wHwYDVR0j BBgwFoAU9h0KhbVtj4JGWKgoe+jU9lloAyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjFlOWRlMi1hNGVjLTQ3YTItOWJiOC0xMDgyMWRkYTY3ZjMvMC9GNjFEMEE4NUI1 NkQ4RjgyNDY1OEE4Mjg3QkU4RDRGNjU5NjgwMzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0RjY1OTY4 MDMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzYxZTlkZTItYTRlYy00N2EyLTli YjgtMTA4MjFkZGE2N2YzLzAvRjYxRDBBODVCNTZEOEY4MjQ2NThBODI4N0JFOEQ0 RjY1OTY4MDMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrt8DaZCN+H0Ul2czOtvFV1C9m0y7DjOn/u 0CsJjbHH/Up7oXZm5a5QxYAzR2D6wfSKJryegKYMVEGrOQRw6MR8cnA0AxuCJpvl 4Bs7yyHCR5eeceEf5a5sUhGEUygxrG9+QVnKFSMihJqWxeUI6M/5o7FUe9X2xD0L iVvu9SEKJyzY9+DmdBRE+zwS45zkuDq9yRhYgrlntQFGjnkSqjlsSGJXNoHay8IJ gwdiUjAPZVbKm6dB6sMOkumB5hyA22RIVqZ7pxkz1KVPS1n+7RWedfIO6pCLDDy9 z2/9aEHFqU6CN8nqRVZelck/kg1X1SGXoyTW0vF1OXBy0cbzwQE= -----END CERTIFICATE-----Generated at Sun Jun 29 22:20:26 2025 by rpki-client