$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: Hvmht84v+qprG/BKVBUTF2npN7lLHLwyQDQi2jRnpD8= Subject key identifier: B3:A7:5D:30:A2:C1:35:75:63:A7:8B:82:8C:D3:6E:C6:8F:6A:EF:94 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 69FBBD410800D13A538F3B98468A0E81728866B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: 0108 Signing time: Wed 02 Jul 2025 03:21:22 +0000 Manifest this update: Wed 02 Jul 2025 03:16:22 +0000 Manifest next update: Sat 05 Jul 2025 13:29:22 +0000 Files and hashes: 1: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: P7QsgIeBI6Jlmylg4E9bqTZzbWkEwew+La7Hoh4W7Lw=) 2: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: OhqARu9tgEMvrHazgo5/sMdo0dGn+6llLdghlL4RQXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fb:bd:41:08:00:d1:3a:53:8f:3b:98:46:8a:0e:81:72:88:66:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Jul 2 03:16:22 2025 GMT Not After : Jul 5 13:29:22 2025 GMT Subject: CN=B3A75D30A2C1357563A78B828CD36EC68F6AEF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:b9:85:5e:c7:2e:bb:c0:48:0c:eb:b4:31: 76:81:9c:82:36:92:e8:9a:db:fb:81:b1:6b:ac:c3: 69:83:e2:90:44:0e:66:be:0e:b5:f0:c3:77:26:ff: 3c:ca:04:be:d5:d2:8d:12:ec:47:bf:67:b1:67:6d: 8e:45:3d:2a:c6:d1:a2:d7:bd:a1:b8:c3:68:51:44: c7:60:6d:e4:8c:b8:20:a6:cd:1e:b1:ba:7b:8a:e3: 60:a3:8e:db:b6:18:bb:b0:4f:16:b4:8f:4f:23:42: 8b:82:33:aa:c3:1f:0a:ab:07:3d:07:0e:de:cd:5b: d3:2c:ac:d7:19:a8:87:fc:f3:f7:ed:0c:62:92:bc: b4:c5:72:bb:9c:9e:4e:df:64:9a:dd:8a:57:db:ff: f2:b6:ab:7d:fd:cc:2f:55:1a:7d:1e:f8:b9:67:70: 2b:30:ad:4e:43:a6:35:04:96:2a:5c:12:14:32:5b: d3:ae:59:08:4f:0f:56:c0:cf:54:99:cd:bd:9e:25: df:40:fd:f0:de:37:36:fe:6f:15:55:47:1d:3d:a3: 6d:46:79:04:3c:cf:de:d4:1d:42:93:ec:3f:0a:e5: 8c:31:45:56:4c:aa:28:5d:d0:31:ca:4f:63:47:73: 8d:3b:a8:51:cb:80:fa:5d:25:d0:c7:af:af:51:96: 1e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A7:5D:30:A2:C1:35:75:63:A7:8B:82:8C:D3:6E:C6:8F:6A:EF:94 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:05:35:a9:6f:d6:f8:38:73:ec:c1:84:29:44:88:e6:d2:11: 59:2e:75:a6:db:45:76:71:9f:29:5a:51:d5:39:34:72:0d:ad: 17:a0:fd:bb:de:44:d4:c0:ce:47:58:9b:be:92:aa:d2:40:aa: 33:9f:83:62:28:0e:fe:3c:fe:35:29:3d:0c:84:c2:3c:ec:da: d4:30:df:3b:48:14:72:60:4b:76:6c:70:91:97:8f:fc:23:bd: 40:be:74:21:d8:26:02:6f:d4:1c:32:0f:0c:91:4c:57:13:e0: 48:71:ad:73:1c:c0:fc:e3:a8:57:40:0f:d4:7c:08:b3:ea:2d: f3:70:d7:1c:0d:01:28:d7:dd:c5:00:69:cf:30:16:3b:3a:0c: 39:71:57:34:63:35:2d:a1:8d:c4:e1:bc:ec:06:cf:35:4a:23: ac:73:22:98:01:3e:27:49:02:47:fa:40:47:b0:b4:19:c9:83: ab:44:6e:f7:23:aa:79:ac:f2:c3:d2:23:67:62:bf:ae:12:19: 14:f7:6e:f5:23:d6:df:eb:84:2e:fb:8e:44:b5:6c:43:fc:24: f8:ac:9c:fb:22:0f:6b:b9:39:37:54:b8:ad:1e:c8:e8:4d:8f: 52:88:86:91:7f:93:72:3c:c7:8a:8c:17:ec:1b:37:e9:89:2c: 48:ce:15:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafu9QQgA0TpTjzuYRooOgXKIZrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTA3MDIwMzE2MjJaFw0yNTA3MDUxMzI5MjJaMDMxMTAvBgNV BAMTKEIzQTc1RDMwQTJDMTM1NzU2M0E3OEI4MjhDRDM2RUM2OEY2QUVGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX87mFXscuu8BIDOu0MXaBnII2 kuia2/uBsWusw2mD4pBEDma+DrXww3cm/zzKBL7V0o0S7Ee/Z7FnbY5FPSrG0aLX vaG4w2hRRMdgbeSMuCCmzR6xunuK42Cjjtu2GLuwTxa0j08jQouCM6rDHwqrBz0H Dt7NW9MsrNcZqIf88/ftDGKSvLTFcrucnk7fZJrdilfb//K2q339zC9VGn0e+Lln cCswrU5DpjUElipcEhQyW9OuWQhPD1bAz1SZzb2eJd9A/fDeNzb+bxVVRx09o21G eQQ8z97UHUKT7D8K5YwxRVZMqihd0DHKT2NHc407qFHLgPpdJdDHr69Rlh4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs6ddMKLBNXVjp4uCjNNuxo9q75QwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8FNalv1vg4c+zBhClEiObSEVkudabbRXZx nylaUdU5NHINrReg/bveRNTAzkdYm76SqtJAqjOfg2IoDv48/jUpPQyEwjzs2tQw 3ztIFHJgS3ZscJGXj/wjvUC+dCHYJgJv1BwyDwyRTFcT4EhxrXMcwPzjqFdAD9R8 CLPqLfNw1xwNASjX3cUAac8wFjs6DDlxVzRjNS2hjcThvOwGzzVKI6xzIpgBPidJ Akf6QEewtBnJg6tEbvcjqnms8sPSI2div64SGRT3bvUj1t/rhC77jkS1bEP8JPis nPsiD2u5OTdUuK0eyOhNj1KIhpF/k3I8x4qMF+wbN+mJLEjOFcU= -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:19 2025 by rpki-client