$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json) Hash identifier: PkhOo1sJBmtYzrIBzJoSaiV97TOIGxMtD8wiP4EhZVM= Subject key identifier: 29:1C:4D:5E:6A:C4:91:AA:3D:68:5A:46:47:C0:28:12:A8:2F:A2:B1 Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Certificate serial: 15B06F822D465804BF34C30ACFF21F7C825DD8D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft Manifest number: 0215 Signing time: Sun 15 Jun 2025 02:22:16 +0000 Manifest this update: Sun 15 Jun 2025 02:17:16 +0000 Manifest next update: Wed 18 Jun 2025 05:41:16 +0000 Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=) 2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: JUUnyIBYDIJ49ot36xnejK2gshYLf1rCN3NNrRQaFn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b0:6f:82:2d:46:58:04:bf:34:c3:0a:cf:f2:1f:7c:82:5d:d8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683 Validity Not Before: Jun 15 02:17:16 2025 GMT Not After : Jun 18 05:41:16 2025 GMT Subject: CN=291C4D5E6AC491AA3D685A4647C02812A82FA2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:34:be:8f:3d:61:5b:26:ab:99:8e:9a:f3:5d: 4f:7a:c1:4e:ca:c6:ed:a1:a7:3a:3b:5a:d2:ef:f4: 24:46:23:ff:b6:da:16:b5:51:f5:98:d1:9f:51:70: f4:ae:d5:d6:d8:ca:06:2e:86:91:bd:7f:27:9e:f6: f9:07:85:15:6d:79:5a:c6:fe:4d:48:50:ec:21:ec: b2:c7:da:98:d9:77:4f:b2:d3:22:73:d3:a9:e1:39: 48:10:2d:ec:82:fa:76:5a:a7:0c:50:fb:7e:a7:ea: 63:b3:7c:8c:ca:6b:49:9e:57:62:b3:24:bd:b8:45: e2:ae:b0:eb:51:c6:c6:b0:1c:a9:e8:3b:83:64:56: 03:69:d1:c5:10:5e:bf:d4:0e:9c:6e:2d:dc:f5:89: e5:51:d2:4a:f4:e9:cc:ed:32:df:7f:e2:2c:10:62: aa:cb:3e:15:d2:05:62:52:6a:3e:53:7e:07:b2:db: 38:ff:51:81:08:1b:6d:a2:09:ad:0e:ec:81:7d:d3: fd:fa:26:06:b2:4d:12:2d:b9:d7:6c:7e:54:5f:e1: 49:0b:b9:b8:ee:d7:2e:e8:6f:d9:5f:04:85:4b:ab: eb:c4:25:19:b2:4a:60:ee:40:cd:63:a8:ff:08:55: e3:1e:fd:fd:15:4f:23:1c:b5:6a:f2:47:9b:60:48: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1C:4D:5E:6A:C4:91:AA:3D:68:5A:46:47:C0:28:12:A8:2F:A2:B1 X509v3 Authority Key Identifier: keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3e:95:70:e0:66:d0:f4:88:e3:c6:9a:1d:63:08:e6:3c:eb: a6:de:8d:24:1a:bf:9a:85:9b:18:86:fd:5a:a5:25:7b:0c:72: c0:e9:39:f8:93:b4:d3:90:62:c1:b8:e0:02:b9:be:da:04:5f: e3:6f:d3:d6:9f:0f:c1:74:b0:88:0e:62:1b:a1:73:c3:a9:b6: 49:1d:65:90:f7:d6:a8:82:0c:f3:df:0c:dd:c3:e1:8d:04:cf: a8:4d:b0:2a:ca:df:3a:cb:c0:61:71:96:c8:33:6b:f6:21:b3: a0:c7:1c:4b:de:96:d8:03:5f:9f:67:e3:2a:fd:f1:c3:5f:b3: 55:6a:49:9a:fc:f9:6e:c5:06:49:e3:00:c8:c3:9e:f8:c0:91: 9d:a9:e1:96:cc:cd:e5:d2:0c:da:f5:5d:75:c1:57:2f:5f:6b: 32:eb:e5:5a:83:df:50:65:0c:85:cc:27:50:2b:57:3a:ad:a9: 5f:d1:56:1d:ef:1e:69:81:fa:a8:2f:2b:44:da:9f:aa:72:01: 11:b4:cc:6b:f3:77:ef:38:bd:7b:c5:48:45:1c:36:2f:00:57: eb:f9:84:e9:fd:4f:56:c8:a0:38:21:91:2f:81:7f:67:0d:1c: 78:71:0f:a6:68:62:a3:fc:a1:8a:91:4a:48:40:9a:2f:dc:0e: f4:26:f3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbBvgi1GWAS/NMMKz/IffIJd2NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVD MkZCQTY4MzAeFw0yNTA2MTUwMjE3MTZaFw0yNTA2MTgwNTQxMTZaMDMxMTAvBgNV BAMTKDI5MUM0RDVFNkFDNDkxQUEzRDY4NUE0NjQ3QzAyODEyQTgyRkEyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNL6PPWFbJquZjprzXU96wU7K xu2hpzo7WtLv9CRGI/+22ha1UfWY0Z9RcPSu1dbYygYuhpG9fyee9vkHhRVteVrG /k1IUOwh7LLH2pjZd0+y0yJz06nhOUgQLeyC+nZapwxQ+36n6mOzfIzKa0meV2Kz JL24ReKusOtRxsawHKnoO4NkVgNp0cUQXr/UDpxuLdz1ieVR0kr06cztMt9/4iwQ YqrLPhXSBWJSaj5Tfgey2zj/UYEIG22iCa0O7IF90/36JgayTRItuddsflRf4UkL ubju1y7ob9lfBIVLq+vEJRmySmDuQM1jqP8IVeMe/f0VTyMctWryR5tgSHL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRxNXmrEkao9aFpGR8AoEqgvorEwHwYDVR0j BBgwFoAUZWpypvOCMNag2wl0gNc2tcL7poMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjczNzVmOS1lOGI1LTRkOTQtODBhOC0zNWUwMmRkMGY2ZjIvMC82NTZBNzJBNkYz ODIzMEQ2QTBEQjA5NzQ4MEQ3MzZCNUMyRkJBNjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2QjVDMkZC QTY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY3Mzc1ZjktZThiNS00ZDk0LTgw YTgtMzVlMDJkZDBmNmYyLzAvNjU2QTcyQTZGMzgyMzBENkEwREIwOTc0ODBENzM2 QjVDMkZCQTY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY+lXDgZtD0iOPGmh1jCOY866bejSQav5qF mxiG/VqlJXsMcsDpOfiTtNOQYsG44AK5vtoEX+Nv09afD8F0sIgOYhuhc8Optkkd ZZD31qiCDPPfDN3D4Y0Ez6hNsCrK3zrLwGFxlsgza/Yhs6DHHEveltgDX59n4yr9 8cNfs1VqSZr8+W7FBknjAMjDnvjAkZ2p4ZbMzeXSDNr1XXXBVy9fazLr5VqD31Bl DIXMJ1ArVzqtqV/RVh3vHmmB+qgvK0Tan6pyARG0zGvzd+84vXvFSEUcNi8AV+v5 hOn9T1bIoDghkS+Bf2cNHHhxD6ZoYqP8oYqRSkhAmi/cDvQm81I= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:41 2025 by rpki-client