$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: QBvMisyblJIHrf78q5SA2SAMvByX0KQWD8re3GpTQjY= Subject key identifier: C3:B8:12:54:4F:9B:08:FD:92:8F:1C:96:DB:CC:8B:5A:90:BF:68:38 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 5B11CB7AB59586ADBEC6966FB86590DC4BFD9933 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 0175 Signing time: Sat 14 Jun 2025 00:02:09 +0000 Manifest this update: Fri 13 Jun 2025 23:57:09 +0000 Manifest next update: Tue 17 Jun 2025 03:10:09 +0000 Files and hashes: 1: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: vVvUR+3fJlsXRqQM8/R/ap3/n/X2RrqcYwAgmGNUOpQ=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:11:cb:7a:b5:95:86:ad:be:c6:96:6f:b8:65:90:dc:4b:fd:99:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Jun 13 23:57:09 2025 GMT Not After : Jun 17 03:10:09 2025 GMT Subject: CN=C3B812544F9B08FD928F1C96DBCC8B5A90BF6838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:f9:26:a8:3e:fa:cc:61:52:07:8c:90:83: 61:de:15:05:33:5e:50:b7:72:c0:14:60:55:34:c8: fb:f3:08:a1:03:d3:50:30:64:f4:74:67:6d:9d:fa: b3:58:d5:48:13:38:3c:cf:0e:b7:7a:1c:66:bb:a5: 85:e7:e7:86:22:8c:de:5f:37:fe:f0:45:7e:2c:fb: 92:ab:ff:a8:4e:24:d8:03:29:03:97:51:0b:88:a5: d4:6b:8d:7b:e3:fc:98:a1:0f:f9:2e:8a:9a:dc:0c: 92:ea:5b:30:74:07:99:0c:63:d8:94:21:6d:31:96: 99:9b:89:8b:45:25:9f:59:1a:3e:d2:c9:48:91:94: 2b:cb:8f:1b:e2:c9:d1:4f:61:7e:6f:a4:3a:e3:ae: 68:6d:d5:17:82:c7:54:54:e6:fb:87:51:4e:7e:e5: e1:7b:ee:90:c9:3a:da:9e:55:95:14:05:28:87:c0: f0:f1:77:f7:a0:86:b2:5d:92:b8:43:3d:bc:62:66: 4b:bf:22:9e:b9:6c:b5:93:cd:62:a8:48:87:84:de: 2c:80:a6:b2:50:65:c9:88:6f:f6:26:2b:d8:7c:20: 99:98:d6:87:a8:b1:e7:b9:f9:05:8b:0f:37:04:4b: bc:ff:4a:74:cd:6d:33:3f:9d:4d:2b:99:70:7e:16: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B8:12:54:4F:9B:08:FD:92:8F:1C:96:DB:CC:8B:5A:90:BF:68:38 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:33:be:cb:f5:4d:77:b4:cc:11:07:e4:57:6f:c6:52:d1:02: 90:e9:d1:d0:14:6d:1d:cc:5e:ea:42:2c:cf:a9:bf:66:af:df: 6e:32:b9:be:da:da:20:4b:ce:9f:63:81:02:69:6c:ff:1d:24: 72:70:b2:47:4b:43:e5:de:80:ff:26:c7:eb:57:c5:7e:c8:21: 0b:42:35:d7:b7:8f:bf:89:c8:f8:ac:98:80:85:33:dc:b2:8e: 8e:b8:71:b0:1c:6b:0f:ac:f4:d9:66:05:44:cd:41:d1:fc:fd: b2:bd:fa:14:34:57:eb:48:3c:8f:d4:c8:9e:bf:ba:38:ea:d4: 80:79:96:1b:f6:71:6b:0e:45:6f:81:0f:f5:85:18:06:85:7e: 2c:db:57:10:23:0f:78:5b:3c:30:93:25:47:8b:3e:05:73:38: 87:7a:6e:25:53:30:fc:a6:b1:60:34:8b:fe:b8:86:9f:04:95: 69:08:bb:fb:29:74:4e:91:4a:2d:4c:14:1a:8a:9d:cc:7b:b3: 66:29:f9:1b:66:36:f8:53:26:9b:0b:00:db:d7:ae:54:dc:53: 7b:8b:eb:b6:a8:7b:77:20:7d:09:37:77:62:e5:b9:cd:b9:8b: c4:c7:73:7b:16:18:80:2d:74:02:cd:43:75:ab:2a:b1:99:2e: 8c:01:4d:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxHLerWVhq2+xpZvuGWQ3Ev9mTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTA2MTMyMzU3MDlaFw0yNTA2MTcwMzEwMDlaMDMxMTAvBgNV BAMTKEMzQjgxMjU0NEY5QjA4RkQ5MjhGMUM5NkRCQ0M4QjVBOTBCRjY4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiv/kmqD76zGFSB4yQg2HeFQUz XlC3csAUYFU0yPvzCKED01AwZPR0Z22d+rNY1UgTODzPDrd6HGa7pYXn54YijN5f N/7wRX4s+5Kr/6hOJNgDKQOXUQuIpdRrjXvj/JihD/kuiprcDJLqWzB0B5kMY9iU IW0xlpmbiYtFJZ9ZGj7SyUiRlCvLjxviydFPYX5vpDrjrmht1ReCx1RU5vuHUU5+ 5eF77pDJOtqeVZUUBSiHwPDxd/eghrJdkrhDPbxiZku/Ip65bLWTzWKoSIeE3iyA prJQZcmIb/YmK9h8IJmY1oeosee5+QWLDzcES7z/SnTNbTM/nU0rmXB+FkzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7gSVE+bCP2SjxyW28yLWpC/aDgwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgzvsv1TXe0zBEH5FdvxlLRApDp0dAUbR3M XupCLM+pv2av324yub7a2iBLzp9jgQJpbP8dJHJwskdLQ+XegP8mx+tXxX7IIQtC Nde3j7+JyPismICFM9yyjo64cbAcaw+s9NlmBUTNQdH8/bK9+hQ0V+tIPI/UyJ6/ ujjq1IB5lhv2cWsORW+BD/WFGAaFfizbVxAjD3hbPDCTJUeLPgVzOId6biVTMPym sWA0i/64hp8ElWkIu/spdE6RSi1MFBqKncx7s2Yp+RtmNvhTJpsLANvXrlTcU3uL 67aoe3cgfQk3d2Lluc25i8THc3sWGIAtdALNQ3WrKrGZLowBTcU= -----END CERTIFICATE-----Generated at Mon Jun 16 00:41:45 2025 by rpki-client