$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: CEjOrUM+I83+rvabsAFjBT7BcFJaURyPXQpluWwcvcY= Subject key identifier: 32:AB:97:83:6D:89:A5:30:B9:6C:E8:B4:F3:CD:DB:B7:7E:24:C8:84 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 7034B61A4234A12450636ACE313746939ADF53DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 01AE Signing time: Mon 16 Jun 2025 13:51:41 +0000 Manifest this update: Mon 16 Jun 2025 13:46:41 +0000 Manifest next update: Fri 20 Jun 2025 01:18:41 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: yttYdHg/TfpYZlj9ynVljAnQiXBLtc70VHSDBXgC8KQ=) 2: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: tetL42ZXaEcv2K/DJkZkLKgmwJc+tTy3ktvjF+k7kAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:34:b6:1a:42:34:a1:24:50:63:6a:ce:31:37:46:93:9a:df:53:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Jun 16 13:46:41 2025 GMT Not After : Jun 20 01:18:41 2025 GMT Subject: CN=32AB97836D89A530B96CE8B4F3CDDBB77E24C884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:63:77:4a:cc:6c:89:c5:13:a0:89:c0:70: b2:c4:59:3e:dd:9e:79:b9:0a:f5:de:51:a1:a4:be: 58:5d:cf:34:79:03:b1:5d:9d:1a:20:3e:7d:d5:d6: c4:a1:31:b9:5d:9f:dc:e9:0f:a3:8d:c2:f5:22:1a: 92:4e:32:a6:a9:31:c2:c7:2e:03:c5:61:c0:3c:dd: 57:58:45:a8:48:58:41:46:cc:ce:a1:8a:b8:ab:96: 18:a7:03:95:c8:1e:97:0d:51:13:7f:2e:2f:a2:fd: 42:cd:7a:7e:88:54:70:36:ad:b3:2f:a3:36:0c:1f: f2:a3:99:4d:5f:6f:f3:f0:6b:4d:b5:fe:ad:80:c4: 36:51:1c:12:8b:ce:f3:d3:c0:85:91:5c:5a:db:27: b4:97:62:2b:4c:5c:ad:ea:8f:34:56:ea:80:ec:54: 4a:a5:e2:53:3f:59:a3:af:57:5d:0c:26:94:c1:2b: 3d:80:ff:0e:8e:6d:79:d0:ac:0a:65:36:da:b9:da: d3:15:9b:8e:4e:da:81:8e:53:7e:4d:1b:75:48:96: fc:e1:f9:17:7c:14:b9:32:cf:6a:42:ca:50:00:11: d7:f5:4f:79:16:e7:1d:14:0f:1d:3c:ec:4a:af:82: 6f:62:ab:97:c2:0f:75:e9:f0:a1:a8:80:a4:fa:2e: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:97:83:6D:89:A5:30:B9:6C:E8:B4:F3:CD:DB:B7:7E:24:C8:84 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4e:e9:52:b7:50:35:57:05:36:dc:60:84:36:43:11:74:ba: ee:02:c8:29:f6:8e:9d:45:75:1e:d0:90:33:12:4f:97:41:c0: 42:15:67:81:b1:df:d3:60:28:61:f4:a8:75:32:c2:1d:a3:6c: 26:ed:4f:41:3c:10:83:91:b6:64:e2:52:0c:05:71:54:30:55: cc:65:cf:3b:bd:2d:98:ec:e8:74:a8:c0:8f:69:c6:4e:71:3b: d8:88:d9:34:54:b6:72:10:fb:7b:54:fb:10:35:da:4d:3d:2c: 0c:6b:52:ff:08:99:3c:f3:36:1c:2c:bd:50:b8:6e:1a:41:32: b5:e3:05:f2:c2:2d:ce:b3:7d:c5:bc:22:c9:fd:59:5c:98:d9: 0c:5b:bc:47:8c:9c:3a:ba:3d:9f:f3:3e:c4:e6:5c:0a:76:b1: 28:55:52:e0:f6:34:fe:59:6c:21:e7:e3:11:bb:7b:5c:e7:b1: 55:cc:3f:30:ee:88:6c:e0:b5:6d:22:3c:03:36:46:00:5f:25: d7:c9:5d:5c:c2:36:98:af:20:86:e9:c2:46:98:f1:69:7f:10: 34:d5:cd:f6:1a:26:76:87:5e:47:46:03:52:06:0d:0d:6a:18: 4b:58:41:a8:f4:9c:f5:8d:95:5b:55:79:40:43:e4:32:f0:6e: 0f:d8:20:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDS2GkI0oSRQY2rOMTdGk5rfU98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTA2MTYxMzQ2NDFaFw0yNTA2MjAwMTE4NDFaMDMxMTAvBgNV BAMTKDMyQUI5NzgzNkQ4OUE1MzBCOTZDRThCNEYzQ0REQkI3N0UyNEM4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkP2N3SsxsicUToInAcLLEWT7d nnm5CvXeUaGkvlhdzzR5A7FdnRogPn3V1sShMbldn9zpD6ONwvUiGpJOMqapMcLH LgPFYcA83VdYRahIWEFGzM6hirirlhinA5XIHpcNURN/Li+i/ULNen6IVHA2rbMv ozYMH/KjmU1fb/Pwa021/q2AxDZRHBKLzvPTwIWRXFrbJ7SXYitMXK3qjzRW6oDs VEql4lM/WaOvV10MJpTBKz2A/w6ObXnQrAplNtq52tMVm45O2oGOU35NG3VIlvzh +Rd8FLkyz2pCylAAEdf1T3kW5x0UDx087Eqvgm9iq5fCD3Xp8KGogKT6LqpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMquXg22JpTC5bOi0883bt34kyIQwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJO6VK3UDVXBTbcYIQ2QxF0uu4CyCn2jp1F dR7QkDMST5dBwEIVZ4Gx39NgKGH0qHUywh2jbCbtT0E8EIORtmTiUgwFcVQwVcxl zzu9LZjs6HSowI9pxk5xO9iI2TRUtnIQ+3tU+xA12k09LAxrUv8ImTzzNhwsvVC4 bhpBMrXjBfLCLc6zfcW8Isn9WVyY2QxbvEeMnDq6PZ/zPsTmXAp2sShVUuD2NP5Z bCHn4xG7e1znsVXMPzDuiGzgtW0iPAM2RgBfJdfJXVzCNpivIIbpwkaY8Wl/EDTV zfYaJnaHXkdGA1IGDQ1qGEtYQaj0nPWNlVtVeUBD5DLwbg/YIAM= -----END CERTIFICATE-----Generated at Tue Jun 17 03:25:40 2025 by rpki-client