$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: Xg1Kj7FvkwDjEwiHery8hqN5s3OhxNiNtTN82sTIK0M= Subject key identifier: 36:E7:C1:D0:1E:20:0A:46:AD:DA:AA:D3:E4:2E:36:FD:FE:C1:FB:FB Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 2844B672233AB4CDAB0A1F43D49013C7483B1267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 01E3 Signing time: Mon 04 Aug 2025 22:42:12 +0000 Manifest this update: Mon 04 Aug 2025 22:37:12 +0000 Manifest next update: Thu 07 Aug 2025 23:18:12 +0000 Files and hashes: 1: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=) 2: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=) 3: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: F4/0TkuL/JD72n0Qrnr7ltLp8RUhoRqhHdIKEGWoXaI=) 4: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:44:b6:72:23:3a:b4:cd:ab:0a:1f:43:d4:90:13:c7:48:3b:12:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Aug 4 22:37:12 2025 GMT Not After : Aug 7 23:18:12 2025 GMT Subject: CN=36E7C1D01E200A46ADDAAAD3E42E36FDFEC1FBFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ac:42:3f:68:75:99:81:2c:a5:9d:09:93:fa: a9:bc:2f:b2:40:24:59:f6:58:bc:7c:52:1c:1f:f0: 31:f6:55:29:6b:c5:63:14:c3:0c:9f:71:01:a7:ff: 90:22:27:dc:53:54:4b:6b:8d:81:d7:04:56:c5:29: 4b:a3:00:57:bd:8c:18:d5:04:ae:0c:26:29:19:fa: 7c:aa:53:2c:31:9c:ef:c0:ac:fe:bf:6a:84:61:70: f8:a5:27:ac:94:84:30:54:7c:5e:87:3a:d0:e5:4c: 44:bb:8f:c7:47:f3:cf:a4:74:33:81:3d:e2:e3:77: be:d9:ce:5d:8b:c2:03:82:c6:36:47:47:b5:be:a5: 05:8e:88:9f:66:10:46:61:9a:5d:0d:2c:b1:f6:20: aa:93:91:2f:56:a1:d3:41:6c:d6:04:4e:de:a7:fd: 1e:94:3c:a4:93:52:09:db:0d:39:1b:1e:35:0e:e4: 2c:38:47:0c:98:73:a6:97:6e:4f:4f:ea:35:e4:db: 51:21:24:9b:2e:ea:cc:db:ae:14:23:48:df:dd:3f: 11:c2:f1:6a:4a:07:e0:b6:be:58:12:ac:dd:c5:df: 07:bc:8c:d9:00:66:1f:75:46:e4:54:47:42:f8:08: 98:af:6c:f7:db:db:00:0e:b1:93:1f:37:6f:b0:fb: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E7:C1:D0:1E:20:0A:46:AD:DA:AA:D3:E4:2E:36:FD:FE:C1:FB:FB X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:66:2d:5a:07:e8:23:23:7f:78:e5:70:55:64:86:67:f1:5d: 45:01:03:4c:10:36:3e:0a:d2:68:01:0a:75:1d:7f:b3:44:72: 42:c9:07:cf:12:c5:64:7b:9b:db:df:67:a4:cb:91:fa:40:98: 5f:e1:af:b2:5c:3c:ba:7c:13:05:b2:45:3c:04:73:84:40:07: f6:38:46:45:6f:03:c7:3e:9c:f2:9d:35:9c:64:c6:84:26:7b: 02:b9:06:94:86:a4:e2:3d:f2:ef:3a:ff:bd:10:5d:77:c2:0a: 9f:cb:a3:d9:e9:12:28:88:32:5f:f6:f6:3f:af:e4:87:bf:8a: 5b:52:b4:30:bc:d7:32:e3:d1:89:87:4d:bd:99:09:0c:bc:74: f7:18:b1:b6:6a:bf:5b:98:99:4b:84:e7:c8:42:31:5c:01:6b: f2:7a:4d:01:f1:ae:86:78:05:2a:66:5f:68:e1:a3:b7:f1:35: ef:4e:3c:68:e3:71:bb:7e:cf:86:34:94:34:bd:5b:26:fa:b2: df:b9:e1:5d:1c:d0:67:23:00:5e:40:e4:d1:2f:25:aa:5e:e7: 4c:e4:a8:6e:4d:f7:5c:7b:fc:13:5e:7c:99:23:f4:f3:bd:fa: 6e:fd:d0:a6:a6:97:f6:20:f2:c1:86:ee:0b:9e:48:43:1c:de: ea:17:1b:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKES2ciM6tM2rCh9D1JATx0g7EmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTA4MDQyMjM3MTJaFw0yNTA4MDcyMzE4MTJaMDMxMTAvBgNV BAMTKDM2RTdDMUQwMUUyMDBBNDZBRERBQUFEM0U0MkUzNkZERkVDMUZCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtrEI/aHWZgSylnQmT+qm8L7JA JFn2WLx8Uhwf8DH2VSlrxWMUwwyfcQGn/5AiJ9xTVEtrjYHXBFbFKUujAFe9jBjV BK4MJikZ+nyqUywxnO/ArP6/aoRhcPilJ6yUhDBUfF6HOtDlTES7j8dH88+kdDOB PeLjd77Zzl2LwgOCxjZHR7W+pQWOiJ9mEEZhml0NLLH2IKqTkS9WodNBbNYETt6n /R6UPKSTUgnbDTkbHjUO5Cw4RwyYc6aXbk9P6jXk21EhJJsu6szbrhQjSN/dPxHC 8WpKB+C2vlgSrN3F3we8jNkAZh91RuRUR0L4CJivbPfb2wAOsZMfN2+w+7yNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNufB0B4gCkat2qrT5C42/f7B+/swHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1mLVoH6CMjf3jlcFVkhmfxXUUBA0wQNj4K 0mgBCnUdf7NEckLJB88SxWR7m9vfZ6TLkfpAmF/hr7JcPLp8EwWyRTwEc4RAB/Y4 RkVvA8c+nPKdNZxkxoQmewK5BpSGpOI98u86/70QXXfCCp/Lo9npEiiIMl/29j+v 5Ie/iltStDC81zLj0YmHTb2ZCQy8dPcYsbZqv1uYmUuE58hCMVwBa/J6TQHxroZ4 BSpmX2jho7fxNe9OPGjjcbt+z4Y0lDS9Wyb6st+54V0c0GcjAF5A5NEvJape50zk qG5N91x7/BNefJkj9PO9+m790Kaml/Yg8sGG7gueSEMc3uoXG2A= -----END CERTIFICATE-----Generated at Thu Aug 7 00:37:30 2025 by rpki-client