$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: VR+z+ZCxw4gt9aB44a+5ZyGottK+WEeDR9zyEnH3sW4= Subject key identifier: 63:34:D0:25:BE:1D:56:58:56:3F:62:85:9F:3D:32:8F:D7:6E:45:2F Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 4389955A36C5CEB704DBFD917003035A2CDE52BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 70 Signing time: Wed 02 Jul 2025 07:51:55 +0000 Manifest this update: Wed 02 Jul 2025 07:46:55 +0000 Manifest next update: Sat 05 Jul 2025 19:29:55 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: qx2a52Rp2dHRFPkzxGGds17O2XHA1vjBvtwENWjECag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:89:95:5a:36:c5:ce:b7:04:db:fd:91:70:03:03:5a:2c:de:52:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Jul 2 07:46:55 2025 GMT Not After : Jul 5 19:29:55 2025 GMT Subject: CN=6334D025BE1D5658563F62859F3D328FD76E452F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:dc:14:b9:9b:ff:34:04:01:4d:e7:3e:57: 1b:c8:d3:50:4e:47:c9:1f:37:f3:55:6e:ab:62:4c: d6:eb:4d:88:61:97:cc:7e:41:1d:d1:45:97:78:bb: db:4a:86:02:0d:4c:2b:38:94:94:ff:19:3c:cd:2a: 4a:53:43:ce:a5:23:11:53:5f:10:d0:4a:17:f6:ac: b8:ed:47:98:9f:3f:79:76:aa:50:e3:8e:78:af:2b: 16:75:57:75:16:d4:ac:85:7e:fa:f6:02:48:7b:fa: e1:76:99:a0:38:92:ef:f2:97:78:6e:a8:f6:3c:1d: 9c:e7:fb:ba:d2:0b:7d:5d:58:43:48:ac:22:07:ab: 54:81:9a:92:09:0a:7c:6a:21:92:1c:a8:c6:48:67: 5e:09:7f:e4:48:ba:97:ac:d6:c5:f8:0e:2c:8d:cd: c7:a1:da:37:45:97:c3:14:b7:1c:45:56:6a:0c:a9: 20:52:45:0e:7f:4a:e9:17:b9:2e:9c:77:dd:78:41: 7c:fd:79:69:d3:05:9e:95:e8:eb:fd:14:7e:5c:03: de:ae:48:63:51:c7:cf:e1:d7:fe:94:36:d3:07:da: e8:3a:36:f9:ef:83:f7:22:a1:d9:86:7f:7b:11:7a: f4:39:a2:82:4b:b6:cc:74:5e:31:cf:18:4e:1c:55: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:34:D0:25:BE:1D:56:58:56:3F:62:85:9F:3D:32:8F:D7:6E:45:2F X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a0:c7:b3:d1:f6:05:03:83:53:2c:d9:93:0e:14:d4:d8:6d: b9:b9:07:97:84:2e:e9:0b:f9:af:b4:d4:a0:66:e7:15:46:e9: ba:37:cc:9b:f6:74:45:3d:85:7d:ed:1a:5a:57:e9:25:8d:f2: 5f:9a:2a:85:86:f6:0a:dd:64:3c:96:93:9b:6b:b4:70:89:29: ad:95:be:2d:88:a9:dd:94:34:71:8f:5e:4f:8d:e4:ea:8e:d4: 3a:78:ef:ae:87:dc:eb:9d:7d:47:9f:7a:ea:be:2a:93:db:31: 1a:28:4d:91:29:bf:7c:5d:e9:f5:32:3b:b5:c6:51:cf:de:25: 63:df:89:c6:88:76:f4:6d:a6:f1:9f:76:87:03:d1:c8:c6:25: 14:92:c6:b1:86:37:b7:a8:5c:42:46:5f:20:97:20:3f:04:4c: d0:66:54:2a:69:27:44:b2:5f:89:c3:d6:d6:bc:af:39:79:33: 20:45:ae:53:27:33:89:73:35:07:cb:3f:f7:71:25:3b:cb:f9: a9:4d:f5:1d:09:19:ec:b0:47:53:bd:2e:b3:76:72:fb:bc:59: c5:fa:61:56:02:b3:a6:47:5a:22:3d:bb:49:b2:67:be:4f:5f: 25:97:37:c9:f0:ad:ec:c9:1e:23:2a:55:08:4b:12:0f:ba:38: 11:26:5b:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4mVWjbFzrcE2/2RcAMDWizeUr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA3MDIwNzQ2NTVaFw0yNTA3MDUxOTI5NTVaMDMxMTAvBgNV BAMTKDYzMzREMDI1QkUxRDU2NTg1NjNGNjI4NTlGM0QzMjhGRDc2RTQ1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdtwUuZv/NAQBTec+VxvI01BO R8kfN/NVbqtiTNbrTYhhl8x+QR3RRZd4u9tKhgINTCs4lJT/GTzNKkpTQ86lIxFT XxDQShf2rLjtR5ifP3l2qlDjjnivKxZ1V3UW1KyFfvr2Akh7+uF2maA4ku/yl3hu qPY8HZzn+7rSC31dWENIrCIHq1SBmpIJCnxqIZIcqMZIZ14Jf+RIupes1sX4DiyN zceh2jdFl8MUtxxFVmoMqSBSRQ5/SukXuS6cd914QXz9eWnTBZ6V6Ov9FH5cA96u SGNRx8/h1/6UNtMH2ug6Nvnvg/ciodmGf3sRevQ5ooJLtsx0XjHPGE4cVe2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzTQJb4dVlhWP2KFnz0yj9duRS8wHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGgx7PR9gUDg1Ms2ZMOFNTYbbm5B5eELukL +a+01KBm5xVG6bo3zJv2dEU9hX3tGlpX6SWN8l+aKoWG9grdZDyWk5trtHCJKa2V vi2Iqd2UNHGPXk+N5OqO1Dp4766H3OudfUefeuq+KpPbMRooTZEpv3xd6fUyO7XG Uc/eJWPficaIdvRtpvGfdocD0cjGJRSSxrGGN7eoXEJGXyCXID8ETNBmVCppJ0Sy X4nD1ta8rzl5MyBFrlMnM4lzNQfLP/dxJTvL+alN9R0JGeywR1O9LrN2cvu8WcX6 YVYCs6ZHWiI9u0myZ75PXyWXN8nwrezJHiMqVQhLEg+6OBEmW7A= -----END CERTIFICATE-----Generated at Wed Jul 2 16:34:17 2025 by rpki-client