$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: xDn7GP1un0dV/PludDL3IyYqudCn1FJ8Qjtsvq/SvG4= Subject key identifier: AA:DA:82:0A:47:84:18:6F:47:72:4B:3F:EF:DC:29:A8:48:4D:38:39 Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 6672D326513D3725AFE23D8E7EE9B89095685665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 0152 Signing time: Mon 16 Jun 2025 08:30:44 +0000 Manifest this update: Mon 16 Jun 2025 08:25:44 +0000 Manifest next update: Thu 19 Jun 2025 12:46:44 +0000 Files and hashes: 1: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) 2: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: g2oYU4JalQf4RSb/cj0paveO47qyQEmp8RnEuhnGKVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 12:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:d3:26:51:3d:37:25:af:e2:3d:8e:7e:e9:b8:90:95:68:56:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Jun 16 08:25:44 2025 GMT Not After : Jun 19 12:46:44 2025 GMT Subject: CN=AADA820A4784186F47724B3FEFDC29A8484D3839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:50:c7:83:92:c6:2a:f0:11:37:53:8a:a1: 99:2c:95:19:d5:ea:b4:64:6a:7f:64:5c:45:d3:53: 07:ce:8a:28:98:96:79:26:04:e8:c8:dc:03:1d:d1: 65:bd:4c:0f:00:8a:03:0b:54:94:6f:47:80:f0:1b: 92:8e:ab:b7:a8:44:30:d1:5f:80:18:2f:8e:38:0e: a6:98:42:7d:64:07:26:a1:5b:10:a7:e4:61:e9:19: dd:38:93:9c:7e:14:a0:28:6a:c6:42:c9:83:d3:a6: 70:87:7a:97:56:33:00:25:a0:24:2d:e3:c9:34:8a: 37:1d:f2:2d:81:65:e2:76:82:ae:17:17:62:2d:4b: d5:e3:e9:2d:24:48:f8:5f:cf:45:09:3a:3b:34:7c: f9:12:da:5c:3f:b9:21:af:63:0c:0a:cd:fa:c2:c5: b3:de:3d:fe:35:0c:a5:b2:13:56:49:f9:86:5b:e7: f9:c3:1d:99:49:ef:db:97:13:4f:35:55:a6:c8:18: 56:b8:e0:6d:bc:00:90:1e:d2:26:75:88:ad:6a:7b: e2:8b:ca:48:b3:20:f6:a8:f0:eb:92:99:ad:34:28: d0:0c:fe:16:5f:5f:70:69:cc:0c:8d:f1:63:98:06: be:6b:39:38:4b:c1:eb:1e:35:06:52:e5:8c:ad:c0: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:82:0A:47:84:18:6F:47:72:4B:3F:EF:DC:29:A8:48:4D:38:39 X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f5:ba:14:af:ed:5b:39:49:90:a1:74:68:28:d2:17:7a:ff: e2:f3:54:37:88:d5:b8:5f:c4:83:cf:d3:41:26:51:6d:62:06: 3f:c0:de:50:45:0a:b7:2f:5b:e8:50:8b:03:6f:16:fe:9b:f5: 61:fe:f4:dc:6c:bb:8a:7e:55:8b:b1:df:78:5a:8f:0a:13:81: 50:b8:37:42:65:35:b3:60:83:56:d9:69:5f:94:9d:d2:a8:ab: a4:24:0a:c5:03:57:ea:a3:78:72:16:d9:3c:b2:00:dd:ef:37: 0e:33:d7:32:3a:34:2d:1b:7a:f7:98:55:a7:8a:67:6f:2e:70: d9:68:16:04:23:19:ec:c0:97:9f:c5:ad:78:9f:b7:45:ad:4e: 69:65:e0:78:0f:83:22:85:1e:98:c5:5a:0c:30:70:f7:62:b1: e8:b1:60:11:12:48:3b:53:7b:71:80:60:67:da:fb:20:a1:51: 2b:7e:61:48:0c:32:f0:59:c9:01:b2:ed:c2:27:3f:85:b8:be: d7:3a:ec:ec:50:08:1e:e1:61:45:92:48:c2:62:48:d5:25:ba: 98:32:17:0c:91:25:7d:25:0d:52:04:36:be:65:a9:26:b6:5c: 2c:e6:29:b2:c1:bc:12:4a:28:73:30:a1:b6:4a:1c:a8:b8:ed: 9a:c3:79:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnLTJlE9NyWv4j2Ofum4kJVoVmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTA2MTYwODI1NDRaFw0yNTA2MTkxMjQ2NDRaMDMxMTAvBgNV BAMTKEFBREE4MjBBNDc4NDE4NkY0NzcyNEIzRkVGREMyOUE4NDg0RDM4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAVDHg5LGKvARN1OKoZkslRnV 6rRkan9kXEXTUwfOiiiYlnkmBOjI3AMd0WW9TA8AigMLVJRvR4DwG5KOq7eoRDDR X4AYL444DqaYQn1kByahWxCn5GHpGd04k5x+FKAoasZCyYPTpnCHepdWMwAloCQt 48k0ijcd8i2BZeJ2gq4XF2ItS9Xj6S0kSPhfz0UJOjs0fPkS2lw/uSGvYwwKzfrC xbPePf41DKWyE1ZJ+YZb5/nDHZlJ79uXE081VabIGFa44G28AJAe0iZ1iK1qe+KL ykizIPao8OuSma00KNAM/hZfX3BpzAyN8WOYBr5rOThLweseNQZS5YytwD9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqtqCCkeEGG9Hcks/79wpqEhNODkwHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn1uhSv7Vs5SZChdGgo0hd6/+LzVDeI1bhf xIPP00EmUW1iBj/A3lBFCrcvW+hQiwNvFv6b9WH+9Nxsu4p+VYux33hajwoTgVC4 N0JlNbNgg1bZaV+UndKoq6QkCsUDV+qjeHIW2TyyAN3vNw4z1zI6NC0beveYVaeK Z28ucNloFgQjGezAl5/FrXift0WtTmll4HgPgyKFHpjFWgwwcPdiseixYBESSDtT e3GAYGfa+yChUSt+YUgMMvBZyQGy7cInP4W4vtc67OxQCB7hYUWSSMJiSNUlupgy FwyRJX0lDVIENr5lqSa2XCzmKbLBvBJKKHMwobZKHKi47ZrDecA= -----END CERTIFICATE-----Generated at Tue Jun 17 17:58:20 2025 by rpki-client