$ rpki-client -vvf repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft File: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft (raw, json) Hash identifier: dDgs5bhLHsCVz7ovms+K7Eq6EXZmICMHB8sBnxIAz+s= Subject key identifier: 85:0F:0D:DD:FD:F7:EC:80:9E:CE:09:47:A6:66:7B:38:A7:E8:5E:B2 Authority key identifier: 16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 Certificate issuer: /CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Certificate serial: 09D0FEDC78848658CE8DF3628D2150DC101429C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft Manifest number: 04B5 Signing time: Sun 29 Jun 2025 12:22:14 +0000 Manifest this update: Sun 29 Jun 2025 12:17:14 +0000 Manifest next update: Wed 02 Jul 2025 17:19:14 +0000 Files and hashes: 1: 1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl (hash: l7pA75yGLnqDI6AxsOmx/lRkg+irWXFVdCSa1r1T+hY=) 2: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: qb/Mp/evl7jg0oYt9bdhD9XiouNQbvER0H1nFXzf/fA=) 3: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: iyuYI15kkpPbO7NUigKqskqQQ4plk9btKYZQ0Pd1YJg=) 4: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: e40kdwd9RGaDzut85pUqofV0tIg/vdE6e4M9mcDTUZU=) 5: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ect2ZTg7f92BY0SZ7MDChpSHiOXgr96F/7kTPjRYg7g=) 6: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: yvEJWkP0xFq1u9XfkAxvcy195JE5QOchL8JpvPiL8B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d0:fe:dc:78:84:86:58:ce:8d:f3:62:8d:21:50:dc:10:14:29:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1661A1BC89CCADD4C7BE723052AE5900DE181E06 Validity Not Before: Jun 29 12:17:14 2025 GMT Not After : Jul 2 17:19:14 2025 GMT Subject: CN=850F0DDDFDF7EC809ECE0947A6667B38A7E85EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:e7:c1:b1:cd:6a:e8:d3:86:eb:d8:47:b7: 2d:39:e1:f6:85:c7:1d:af:25:ae:60:c6:62:f5:57: 6f:f7:5a:c6:57:9f:8c:bd:aa:c4:69:36:4a:53:58: b7:99:2a:f8:58:f0:42:3c:ce:bc:95:9d:4d:59:cf: 63:78:be:b0:d5:2a:de:af:33:63:42:d0:d5:9b:75: 71:8b:5c:47:2d:e0:96:07:fa:71:80:03:7f:34:2c: 5a:12:71:d5:fc:e4:84:7d:d9:09:59:f0:a4:fa:98: 36:96:13:72:b2:4d:87:33:9b:27:99:87:c7:28:cc: a4:82:4d:a4:29:e0:39:e0:28:8d:1f:96:ea:30:43: 38:cb:67:58:29:65:43:6c:c4:f6:db:89:ce:c3:30: b2:fa:d6:bc:26:c9:31:4f:25:73:4b:a3:31:a4:7f: 48:41:27:b8:53:04:78:df:e5:03:17:a3:e7:b1:74: dd:2c:a5:5d:17:7a:f3:8d:aa:98:e3:53:ef:06:4e: 49:52:32:a5:93:4c:b8:35:2c:34:96:13:c5:43:26: 52:f7:0c:38:76:da:ed:37:2b:2b:ba:39:c1:1d:45: 51:f3:e6:35:ee:2f:32:2a:7a:8d:6e:b7:67:c1:9f: f8:5e:16:63:a6:d3:45:63:82:38:3c:de:81:35:80: 73:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:0D:DD:FD:F7:EC:80:9E:CE:09:47:A6:66:7B:38:A7:E8:5E:B2 X509v3 Authority Key Identifier: keyid:16:61:A1:BC:89:CC:AD:D4:C7:BE:72:30:52:AE:59:00:DE:18:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1661A1BC89CCADD4C7BE723052AE5900DE181E06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/1661A1BC89CCADD4C7BE723052AE5900DE181E06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ff:c2:e7:25:2f:6e:1d:4f:a8:45:cc:6c:7a:d0:b2:35:c5: b8:04:40:37:ce:33:bc:c7:f4:23:72:7c:b5:b2:49:fc:5f:a7: 5e:3a:ad:89:1a:c8:34:f8:41:0e:84:86:da:8b:9d:38:c0:cd: ca:28:e8:33:d4:60:de:5f:ed:c4:ae:39:2b:f9:06:2e:3a:d9: f6:52:da:14:47:8b:21:a9:ed:7d:af:fc:af:4b:c4:1f:03:a8: 7b:72:16:d0:5e:c5:21:b2:47:00:2c:38:ce:10:7e:da:7d:22: bd:75:23:1e:b0:10:28:08:81:b8:66:98:6e:11:1a:16:86:2f: e6:6c:67:c8:ec:43:5f:fc:4c:0b:f0:9a:0d:9b:bf:65:1f:54: 57:34:d4:90:51:b9:16:01:c3:61:7d:4d:eb:a2:3f:69:ec:7e: 28:fc:c5:25:08:41:73:be:26:3e:6f:b2:ac:95:bb:51:3a:2d: 49:a2:c7:0c:4a:3d:ee:42:b8:e2:fd:0f:a0:fa:d0:ef:aa:d5: b1:66:bc:79:0f:45:d7:93:41:8c:56:4e:6a:c9:f3:c7:39:92: f5:ee:ad:6b:52:d1:41:38:63:3f:e3:1e:70:43:93:7e:01:ec: 75:7c:3e:25:e3:06:9e:db:a2:a8:69:2e:72:c4:c8:8d:57:c3: e2:ce:0e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdD+3HiEhljOjfNijSFQ3BAUKcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBE RTE4MUUwNjAeFw0yNTA2MjkxMjE3MTRaFw0yNTA3MDIxNzE5MTRaMDMxMTAvBgNV BAMTKDg1MEYwRERERkRGN0VDODA5RUNFMDk0N0E2NjY3QjM4QTdFODVFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJufBsc1q6NOG69hHty054faF xx2vJa5gxmL1V2/3WsZXn4y9qsRpNkpTWLeZKvhY8EI8zryVnU1Zz2N4vrDVKt6v M2NC0NWbdXGLXEct4JYH+nGAA380LFoScdX85IR92QlZ8KT6mDaWE3KyTYczmyeZ h8cozKSCTaQp4DngKI0fluowQzjLZ1gpZUNsxPbbic7DMLL61rwmyTFPJXNLozGk f0hBJ7hTBHjf5QMXo+exdN0spV0XevONqpjjU+8GTklSMqWTTLg1LDSWE8VDJlL3 DDh22u03Kyu6OcEdRVHz5jXuLzIqeo1ut2fBn/heFmOm00Vjgjg83oE1gHN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQ8N3f337ICezglHpmZ7OKfoXrIwHwYDVR0j BBgwFoAUFmGhvInMrdTHvnIwUq5ZAN4YHgYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGQyZDNlMy00YzIwLTRhOTAtODMzZS1lYWQ0M2MzMzk5MWUvMC8xNjYxQTFCQzg5 Q0NBREQ0QzdCRTcyMzA1MkFFNTkwMERFMTgxRTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5MDBERTE4 MUUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvMTY2MUExQkM4OUNDQURENEM3QkU3MjMwNTJBRTU5 MDBERTE4MUUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKr/wuclL24dT6hFzGx60LI1xbgEQDfOM7zH 9CNyfLWySfxfp146rYkayDT4QQ6EhtqLnTjAzcoo6DPUYN5f7cSuOSv5Bi462fZS 2hRHiyGp7X2v/K9LxB8DqHtyFtBexSGyRwAsOM4Qftp9Ir11Ix6wECgIgbhmmG4R GhaGL+ZsZ8jsQ1/8TAvwmg2bv2UfVFc01JBRuRYBw2F9TeuiP2nsfij8xSUIQXO+ Jj5vsqyVu1E6LUmixwxKPe5CuOL9D6D60O+q1bFmvHkPRdeTQYxWTmrJ88c5kvXu rWtS0UE4Yz/jHnBDk34B7HV8PiXjBp7boqhpLnLEyI1Xw+LODhc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:38:27 2025 by rpki-client