$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft File: C619643EEB518333DAE2A79933BEB1320C89CA87.mft (raw, json) Hash identifier: kgBioZSKRp7Ilv4ZGu61i0SIvESHTQYrMz2kAYBNVA4= Subject key identifier: 15:C5:DE:19:94:01:6D:A9:88:BD:6B:3E:EF:87:0A:11:8A:B2:05:E0 Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 Certificate issuer: /CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Certificate serial: 1923CFD93DE367B48DEE47564FC92569F51B99B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft Manifest number: 73 Signing time: Sun 29 Jun 2025 14:21:14 +0000 Manifest this update: Sun 29 Jun 2025 14:16:14 +0000 Manifest next update: Wed 02 Jul 2025 22:20:14 +0000 Files and hashes: 1: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: hIlg+Qt1QESY9Y8aeztegkZN8iCL71JNX4sa7hGChZk=) 2: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: gsHh3wTMSE0Um3OSJBZIKaO5EpyUMdma+U85cb050E4=) 3: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: 7jJX4tA0NHHCSnCkhJQuXs74UXPq++JdHUV1H/oU7A0=) 4: C619643EEB518333DAE2A79933BEB1320C89CA87.crl (hash: OVuDzo3m+V+5+2pXpkTfoxpIlAaR96u73Sx8DFLJMTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 22:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:23:cf:d9:3d:e3:67:b4:8d:ee:47:56:4f:c9:25:69:f5:1b:99:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87 Validity Not Before: Jun 29 14:16:14 2025 GMT Not After : Jul 2 22:20:14 2025 GMT Subject: CN=15C5DE1994016DA988BD6B3EEF870A118AB205E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:04:ff:ca:2b:de:56:e8:5d:71:e2:66:20: 7d:c2:a1:b3:42:90:1a:c2:72:1a:bf:01:bd:d5:96: d5:be:d8:ea:73:f4:7c:17:80:99:d7:29:c7:16:b0: 5b:39:45:14:f9:19:58:ca:26:56:f4:4a:02:e3:b8: 5d:0a:3e:19:2c:80:f0:38:bb:a8:42:a5:c7:9e:65: d5:39:67:a9:a0:14:01:e6:2f:44:5a:d4:0a:c9:d2: 88:3f:25:3e:48:67:4a:bf:c6:de:63:67:7d:fe:97: c5:0d:ba:c7:25:7c:54:31:aa:7a:4a:06:27:80:51: 04:d3:a9:ce:01:24:6e:de:c8:ff:71:94:63:9a:ff: 77:ad:07:c7:92:5a:1c:99:6f:e4:b0:30:87:c7:bc: 67:40:cf:20:d7:f4:a0:be:fc:f0:ea:f4:04:c8:a2: 52:32:ab:7b:7f:fb:9b:8b:6a:1a:21:7e:58:37:4f: e4:02:bf:7e:0c:ce:d7:b9:fd:ea:dd:1c:3f:49:e7: a4:22:f9:fb:11:ec:37:3a:3a:7d:48:72:7c:38:b7: c5:05:a9:fb:23:b4:e7:ad:43:47:be:92:9f:e1:99: 4b:cc:7d:cf:b6:c6:dc:8a:d9:94:93:d8:49:ec:38: 78:d4:1a:02:fe:68:fc:1b:f4:d7:f3:2d:89:b2:18: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C5:DE:19:94:01:6D:A9:88:BD:6B:3E:EF:87:0A:11:8A:B2:05:E0 X509v3 Authority Key Identifier: keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6e:a3:2c:d7:c1:a7:79:74:a8:e9:bf:40:ec:04:d4:55:a5: 28:3e:ff:48:66:74:c8:0e:15:23:9d:83:72:da:b2:7a:df:83: 9f:0e:6c:92:10:89:7a:12:9b:94:e6:29:6d:a8:ae:0e:82:4c: 21:58:94:dc:3b:fc:68:c7:b0:95:a2:9c:1a:e2:92:8d:f2:10: 51:e7:98:ec:d1:1f:30:ba:de:7f:27:6b:b6:4f:06:7f:84:d1: 04:a3:60:1c:8f:cd:35:db:31:3a:e0:a4:41:4e:f7:d6:dd:30: f8:08:04:72:6a:ef:b2:10:ef:01:ae:f5:63:1a:77:d0:20:a1: 34:bb:23:36:f7:c0:79:a1:65:e1:9f:a2:34:79:ea:9a:84:ea: 63:8b:99:6d:bd:eb:ed:fb:46:91:b9:ac:88:ae:ec:8f:a7:f7: 00:ed:56:98:1d:ae:0a:2e:61:f2:19:fe:d1:01:88:a6:53:a9: 7f:25:87:ae:64:eb:fb:b9:8d:b7:11:91:b6:4c:b8:6e:2f:00: 81:6a:4b:49:32:44:0a:a5:cb:f9:bb:d6:04:4d:dd:e5:70:bd: 39:d6:39:be:37:79:b3:3a:ee:33:25:f3:35:37:24:7a:68:a9: 46:9a:7b:b9:3d:58:05:d7:82:86:de:54:0c:8d:95:e9:c7:10: f6:ab:81:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSPP2T3jZ7SN7kdWT8klafUbmbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIw Qzg5Q0E4NzAeFw0yNTA2MjkxNDE2MTRaFw0yNTA3MDIyMjIwMTRaMDMxMTAvBgNV BAMTKDE1QzVERTE5OTQwMTZEQTk4OEJENkIzRUVGODcwQTExOEFCMjA1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IwT/yiveVuhdceJmIH3CobNC kBrCchq/Ab3VltW+2Opz9HwXgJnXKccWsFs5RRT5GVjKJlb0SgLjuF0KPhksgPA4 u6hCpceeZdU5Z6mgFAHmL0Ra1ArJ0og/JT5IZ0q/xt5jZ33+l8UNusclfFQxqnpK BieAUQTTqc4BJG7eyP9xlGOa/3etB8eSWhyZb+SwMIfHvGdAzyDX9KC+/PDq9ATI olIyq3t/+5uLahohflg3T+QCv34Mzte5/erdHD9J56Qi+fsR7Dc6On1Icnw4t8UF qfsjtOetQ0e+kp/hmUvMfc+2xtyK2ZST2EnsOHjUGgL+aPwb9NfzLYmyGAbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFcXeGZQBbamIvWs+74cKEYqyBeAwHwYDVR0j BBgwFoAUxhlkPutRgzPa4qeZM76xMgyJyocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmMzMGM3MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9DNjE5NjQzRUVC NTE4MzMzREFFMkE3OTkzM0JFQjEzMjBDODlDQTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIwQzg5 Q0E4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZjMzBjNzEtZGYyZC00ZmM3LWI0 MzUtNzUxMWRmMjg3YTZiLzAvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIx MzIwQzg5Q0E4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBuoyzXwad5dKjpv0DsBNRVpSg+/0hmdMgO FSOdg3Lasnrfg58ObJIQiXoSm5TmKW2org6CTCFYlNw7/GjHsJWinBriko3yEFHn mOzRHzC63n8na7ZPBn+E0QSjYByPzTXbMTrgpEFO99bdMPgIBHJq77IQ7wGu9WMa d9AgoTS7Izb3wHmhZeGfojR56pqE6mOLmW296+37RpG5rIiu7I+n9wDtVpgdrgou YfIZ/tEBiKZTqX8lh65k6/u5jbcRkbZMuG4vAIFqS0kyRAqly/m71gRN3eVwvTnW Ob43ebM67jMl8zU3JHpoqUaae7k9WAXXgobeVAyNlenHEParges= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:41 2025 by rpki-client