$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: j+WNAWZqakLP3+BQgkaSvlbD3EcBhyvi1C3d+mAUJmM= Subject key identifier: A0:13:4E:A2:51:B5:11:30:22:87:4D:36:DC:58:EB:FB:65:B9:7C:03 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 687B289BDDE088FE71FF87767D6462B7874E58DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 0164 Signing time: Sun 15 Jun 2025 07:30:34 +0000 Manifest this update: Sun 15 Jun 2025 07:25:34 +0000 Manifest next update: Wed 18 Jun 2025 19:04:34 +0000 Files and hashes: 1: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: r0YKK9fJjNepEZHupn12gvi2QMbQNCEjEoaPW0ZMVZo=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: BdihZDS/tzCmUBevlIu9UDvRioqzeTxPODGMUovQZWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7b:28:9b:dd:e0:88:fe:71:ff:87:76:7d:64:62:b7:87:4e:58:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Jun 15 07:25:34 2025 GMT Not After : Jun 18 19:04:34 2025 GMT Subject: CN=A0134EA251B5113022874D36DC58EBFB65B97C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:b1:98:c5:07:03:07:ef:39:66:90:53:ae: 52:7d:db:ef:6a:fd:29:d8:b6:6e:07:62:6d:de:b7: f7:34:fd:df:15:1a:62:d1:94:2b:08:ac:b7:a6:31: 37:20:17:ea:81:cb:b6:6d:44:8b:ec:36:46:6b:2d: d2:27:18:8e:18:bb:ff:d0:49:05:8d:f8:e8:75:f7: 80:d2:de:05:86:44:b4:37:0c:a8:ae:77:a7:0d:a5: a9:e7:e7:b0:1c:51:75:ac:9d:6f:04:eb:a2:ea:ef: ba:ae:69:df:c0:43:9e:0b:e2:16:19:f2:26:e7:f3: 32:a8:fe:10:63:b1:63:1d:29:31:85:06:d6:33:42: 5e:50:ba:ec:76:d3:00:56:73:8a:4a:52:1f:a2:20: 9e:44:9a:db:7c:39:00:78:6a:67:6e:1d:40:18:65: 29:bc:18:34:25:39:11:68:30:1f:63:90:88:d4:96: 43:a4:a2:b0:23:d2:77:65:ea:fb:8b:39:b5:c2:0f: a0:76:11:35:01:52:04:f0:0d:31:29:44:80:98:2e: a6:da:6a:7e:74:6d:79:b2:58:60:cd:38:ce:a9:01: 5b:e2:42:0e:e3:a2:f9:bf:d3:e7:93:bd:99:a2:3a: ac:e4:c0:70:77:dc:22:b8:0c:ab:55:3b:68:d5:67: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:13:4E:A2:51:B5:11:30:22:87:4D:36:DC:58:EB:FB:65:B9:7C:03 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:32:cc:02:53:db:8d:7f:39:0e:fc:3b:85:4d:87:8f:33:1b: 67:2a:46:f9:c3:ec:e1:46:9f:38:23:dc:51:4d:56:f9:cf:fa: f3:61:03:61:f8:71:08:d7:b9:68:1b:cb:ec:f2:96:ce:c7:5e: b6:3d:e7:55:8a:a8:4c:dd:7d:65:20:72:e8:86:fa:d3:41:5c: ac:8f:9a:1b:93:3d:7b:2a:2c:21:69:7d:8a:99:6f:4f:7e:2f: 39:4a:ee:52:21:bb:aa:91:44:9f:e7:ad:2d:7e:56:12:55:3c: 5a:87:d2:20:0d:a7:3b:be:a2:07:b4:0b:2e:36:e0:15:e7:08: 31:2a:5a:ec:55:5d:9b:4f:36:2f:f3:e3:75:2c:58:f5:77:6c: 4b:ac:93:9e:00:f1:fd:a6:ec:7a:23:2a:25:1e:21:7e:b3:b2: a1:92:d0:d4:32:fb:ab:ea:ed:8a:29:6e:4c:98:05:36:92:3b: e8:20:a9:37:80:22:92:92:18:c0:24:78:ae:35:97:dc:fb:8c: eb:95:ee:c1:1d:5b:f2:63:3b:b6:e9:38:28:3f:26:b9:97:64: d0:36:fd:b6:a0:20:90:19:db:4d:02:f6:6f:f0:10:56:14:af: a7:7d:74:96:66:ad:92:68:be:19:ba:e6:36:80:6c:0d:64:11: d9:45:89:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHsom93giP5x/4d2fWRit4dOWNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTA2MTUwNzI1MzRaFw0yNTA2MTgxOTA0MzRaMDMxMTAvBgNV BAMTKEEwMTM0RUEyNTFCNTExMzAyMjg3NEQzNkRDNThFQkZCNjVCOTdDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QLGYxQcDB+85ZpBTrlJ92+9q /SnYtm4HYm3et/c0/d8VGmLRlCsIrLemMTcgF+qBy7ZtRIvsNkZrLdInGI4Yu//Q SQWN+Oh194DS3gWGRLQ3DKiud6cNpann57AcUXWsnW8E66Lq77quad/AQ54L4hYZ 8ibn8zKo/hBjsWMdKTGFBtYzQl5Quux20wBWc4pKUh+iIJ5Emtt8OQB4amduHUAY ZSm8GDQlORFoMB9jkIjUlkOkorAj0ndl6vuLObXCD6B2ETUBUgTwDTEpRICYLqba an50bXmyWGDNOM6pAVviQg7jovm/0+eTvZmiOqzkwHB33CK4DKtVO2jVZzhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBNOolG1ETAih0023Fjr+2W5fAMwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0yzAJT241/OQ78O4VNh48zG2cqRvnD7OFG nzgj3FFNVvnP+vNhA2H4cQjXuWgby+zyls7HXrY951WKqEzdfWUgcuiG+tNBXKyP mhuTPXsqLCFpfYqZb09+LzlK7lIhu6qRRJ/nrS1+VhJVPFqH0iANpzu+oge0Cy42 4BXnCDEqWuxVXZtPNi/z43UsWPV3bEusk54A8f2m7HojKiUeIX6zsqGS0NQy+6vq 7YopbkyYBTaSO+ggqTeAIpKSGMAkeK41l9z7jOuV7sEdW/JjO7bpOCg/JrmXZNA2 /bagIJAZ200C9m/wEFYUr6d9dJZmrZJovhm65jaAbA1kEdlFiZ4= -----END CERTIFICATE-----Generated at Mon Jun 16 00:43:47 2025 by rpki-client