$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: 5UUYXg3gu+A6uDOUjV2rinxcwjbOh6QjY6te4klXYDM= Subject key identifier: 19:9A:9C:D7:0B:92:3C:D3:EE:46:B8:45:D3:7F:86:93:89:D7:36:F4 Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 7CBA9697E3D6E516263428A55BE3A70FCF69C8AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 0216 Signing time: Mon 16 Jun 2025 21:21:45 +0000 Manifest this update: Mon 16 Jun 2025 21:16:45 +0000 Manifest next update: Fri 20 Jun 2025 04:46:45 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: 132Kizc+R6ps/hT6AogJkCilm9HX7+ORPphZ8hVhLQ8=) 2: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: omQCe9i6UAQabn658NY546AFhSlSDQxwejMwWzEAolo=) 3: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: 0g9mnK7g3cVoRcfB4tzq8+VsZOGYr2oF3CRvcqhe+tc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ba:96:97:e3:d6:e5:16:26:34:28:a5:5b:e3:a7:0f:cf:69:c8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Jun 16 21:16:45 2025 GMT Not After : Jun 20 04:46:45 2025 GMT Subject: CN=199A9CD70B923CD3EE46B845D37F869389D736F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:48:87:f0:29:74:84:42:9c:c4:c2:6c:43: 66:59:52:8a:ee:57:27:1a:e5:0d:95:77:f8:0b:21: 02:c8:88:0b:32:53:b6:e6:c8:3f:fa:7f:7a:c4:a5: 61:0c:14:3f:ad:aa:ed:49:6a:58:bd:73:6f:93:98: a7:c8:b9:c3:84:a6:12:1b:10:87:d5:95:25:fc:f4: d9:eb:e8:a5:03:39:7a:87:0a:98:8c:f6:bd:a0:69: 9b:2d:00:5f:9d:57:26:42:bd:9a:c6:6d:26:2f:05: 59:c4:10:5a:b8:47:1a:2a:90:cf:6e:6f:1d:d0:23: ff:3f:b5:0f:a6:80:43:c4:36:53:7a:fb:ce:63:e4: 6c:3d:4e:26:a6:b8:5d:ee:e0:5b:24:4f:ff:da:ba: f6:c3:d8:94:ca:7d:cb:ed:4e:37:08:03:6c:cb:1f: 4a:55:bf:53:51:15:8c:01:75:a7:c5:54:e9:76:18: 51:66:3a:23:3b:ea:9b:b1:1b:47:92:ad:be:b9:df: 25:f1:02:09:d2:1c:c4:24:d4:8d:9c:30:16:8b:fb: 6c:34:4f:db:1d:3d:f9:7f:0a:e5:6d:44:8c:8c:59: e8:af:b6:6e:64:27:61:f7:00:73:05:68:d2:a6:e4: 06:94:e7:92:b6:64:b5:e7:d3:2f:9b:c4:02:68:c3: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9A:9C:D7:0B:92:3C:D3:EE:46:B8:45:D3:7F:86:93:89:D7:36:F4 X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:b3:62:ed:cf:4a:a2:e4:16:51:65:19:c4:04:d6:dd:03: fe:0f:16:62:ad:87:ef:77:25:df:2b:5d:e4:61:32:d5:0e:4a: 7e:f6:73:f9:75:ae:ab:d4:90:4b:86:63:cc:75:57:9b:c0:b9: 09:02:15:c4:01:0f:0b:08:68:a8:b0:aa:87:75:e4:88:a1:c8: 92:da:2f:5f:4a:ca:bd:e1:28:9f:d2:0f:99:43:78:d0:1b:d5: fd:aa:90:3f:c8:5a:79:2b:01:b8:4d:de:b8:32:b9:d5:94:54: 86:02:63:c5:42:95:3b:8b:aa:17:0e:31:c1:bb:6d:6a:cb:69: a3:e4:f8:4c:d6:2a:30:a7:63:ee:5c:78:cc:67:65:d4:c1:10: ab:a5:b1:09:13:f9:96:9e:61:14:b3:58:d6:bf:3e:a8:c8:9d: ed:38:dd:bf:39:14:43:4e:21:65:ed:9b:fe:af:29:f3:5b:a7: db:cd:fd:f6:4f:c1:7b:e6:2a:cb:60:eb:16:66:ea:5f:c4:cd: 89:c3:bb:57:52:44:36:b3:af:dc:c1:72:22:82:0b:a7:7e:35: ce:67:03:2b:1d:bc:22:b4:87:1b:05:92:90:00:a7:48:85:12: b2:57:6d:13:20:04:00:c6:0d:31:70:74:08:ac:a7:bd:cf:ba: b0:0c:19:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLqWl+PW5RYmNCilW+OnD89pyKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNTA2MTYyMTE2NDVaFw0yNTA2MjAwNDQ2NDVaMDMxMTAvBgNV BAMTKDE5OUE5Q0Q3MEI5MjNDRDNFRTQ2Qjg0NUQzN0Y4NjkzODlENzM2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrb0iH8Cl0hEKcxMJsQ2ZZUoru Vyca5Q2Vd/gLIQLIiAsyU7bmyD/6f3rEpWEMFD+tqu1Jali9c2+TmKfIucOEphIb EIfVlSX89Nnr6KUDOXqHCpiM9r2gaZstAF+dVyZCvZrGbSYvBVnEEFq4RxoqkM9u bx3QI/8/tQ+mgEPENlN6+85j5Gw9TiamuF3u4FskT//auvbD2JTKfcvtTjcIA2zL H0pVv1NRFYwBdafFVOl2GFFmOiM76puxG0eSrb653yXxAgnSHMQk1I2cMBaL+2w0 T9sdPfl/CuVtRIyMWeivtm5kJ2H3AHMFaNKm5AaU55K2ZLXn0y+bxAJowztlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGZqc1wuSPNPuRrhF03+Gk4nXNvQwHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgbs2Ltz0qi5BZRZRnEBNbdA/4PFmKth+93 Jd8rXeRhMtUOSn72c/l1rqvUkEuGY8x1V5vAuQkCFcQBDwsIaKiwqod15IihyJLa L19Kyr3hKJ/SD5lDeNAb1f2qkD/IWnkrAbhN3rgyudWUVIYCY8VClTuLqhcOMcG7 bWrLaaPk+EzWKjCnY+5ceMxnZdTBEKulsQkT+ZaeYRSzWNa/PqjIne043b85FENO IWXtm/6vKfNbp9vN/fZPwXvmKstg6xZm6l/EzYnDu1dSRDazr9zBciKCC6d+Nc5n AysdvCK0hxsFkpAAp0iFErJXbRMgBADGDTFwdAisp73PurAMGf4= -----END CERTIFICATE-----Generated at Tue Jun 17 19:42:14 2025 by rpki-client