$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft File: 667078BDA093F84040F3016D179CABA67F68A647.mft (raw, json) Hash identifier: TSK8q+x3JN6HKKz4B83SV/MP3vDk3sVpTAA7tFyG8K4= Subject key identifier: 61:23:67:CA:8B:30:D9:AB:87:23:9A:12:FB:C7:39:E0:C2:DA:1C:29 Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647 Certificate serial: 6BA03F88C4BE2572F517CFE3DF81E12D72BC6834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft Manifest number: 0288 Signing time: Sat 14 Jun 2025 14:01:23 +0000 Manifest this update: Sat 14 Jun 2025 13:56:23 +0000 Manifest next update: Tue 17 Jun 2025 19:12:23 +0000 Files and hashes: 1: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: WznhULhoAr96hBAHamaaGBFJbGkn7dyLR/yoxDJeWgk=) 2: 667078BDA093F84040F3016D179CABA67F68A647.crl (hash: UUfTH3K9DqugP1EK75QI8vLmENmWY2sCLCx48U11AEU=) 3: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: bikfKb1C7cQAEY1CyyouPcQSs6oSuCD6TbZ1wF/jE50=) 4: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: STQ8FWii/hKTuO2HgGm9t5vTCO9x73WQ7dbNQLgSBY8=) 5: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: gzAKun938h8MEEYn2Es4sjxOwM+BBzImFI8E5s6Tryg=) 6: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: bxs7h997RIiZF6c39aYCG2w95CeY51sHbMaUnM9gLUg=) 7: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: v5G7kmND4W3J/K5+mTTiIU5a1MXpKeI9ErNdzwXM+xc=) 8: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: KjBI4hI0AlEFbo2xU6Bm4rvZiTCH+24WsSGbJ4G6HvE=) 9: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: f1PpRxL3xmZAFFxFfzO5NNMp7lmH15xQgW21SceJnv4=) 10: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: x4DDjlfJXD8JPTM+yjgeUkBoc/VsMYv5J2mqGIAVt3k=) 11: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: K7wbvP8VipTjZ61KDQJhbbGGoXz8zSKyn6wY7TPFZF8=) 12: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: oIugf7SkpkLh2rA1SUGcdVhDVwaoCqTNTgMKOIhVMMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:3f:88:c4:be:25:72:f5:17:cf:e3:df:81:e1:2d:72:bc:68:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647 Validity Not Before: Jun 14 13:56:23 2025 GMT Not After : Jun 17 19:12:23 2025 GMT Subject: CN=612367CA8B30D9AB87239A12FBC739E0C2DA1C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b5:14:f0:5f:4e:9c:2b:bc:db:d6:bb:03:bc: da:db:f2:2a:7a:46:80:70:c2:48:e4:f4:6a:8d:03: 32:77:ad:1b:37:f4:7a:f0:4b:10:7d:e3:b5:d4:31: e2:bb:78:4f:ed:38:13:a5:35:65:52:f9:fc:6b:36: 4d:28:5e:53:d7:ab:6f:f7:0c:fa:a3:b9:69:c8:0c: 68:ca:b5:5c:47:24:69:a9:4b:73:26:81:e9:81:93: 76:2f:37:44:5a:ef:d5:ae:87:32:81:77:b8:4e:22: b4:f6:15:cb:82:c2:ad:dc:88:0f:93:bb:32:9e:23: f7:e8:7b:9e:b0:2a:95:f5:e2:1f:b0:08:84:e7:94: 11:fd:b5:b5:c5:66:99:b4:85:8a:01:e2:e6:88:a9: bb:b4:e9:54:d2:5a:00:4c:42:a5:f9:86:98:ed:69: 79:79:6c:1e:86:c3:4a:43:ba:6b:69:43:39:aa:f8: ca:ad:da:86:fa:10:84:2c:f2:63:df:d5:df:b4:37: e1:de:53:30:0f:5b:3b:23:04:91:e4:2b:a6:20:44: ca:63:4b:7a:7a:2e:48:d1:94:fc:1c:15:b2:86:8c: a2:ad:49:f8:0c:5b:9c:5b:f0:d9:b7:8e:bb:b7:18: ba:7f:20:37:4a:6c:48:cf:1a:cc:32:09:c0:34:69: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:23:67:CA:8B:30:D9:AB:87:23:9A:12:FB:C7:39:E0:C2:DA:1C:29 X509v3 Authority Key Identifier: keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bf:9c:d6:9e:27:79:0a:66:85:e0:db:be:05:fe:89:0b:0e: 75:ad:32:b0:a0:49:88:81:3b:cc:be:dd:ac:c9:dd:ac:ae:b7: 6f:82:ad:cf:31:bd:cc:f6:73:fc:2d:8c:b3:c6:6b:90:87:f0: c0:7e:18:25:59:73:e3:99:9e:c0:cf:4a:66:8d:5a:71:ae:d2: 16:56:25:97:ae:a0:ff:5b:ea:d2:95:c4:97:79:d6:45:df:0e: 27:75:fa:a9:52:56:e3:d3:21:18:64:69:b3:8f:49:5b:65:a2: 17:89:23:95:cf:24:79:ed:f7:8f:e8:2c:81:b0:77:87:12:fe: b5:bf:39:9b:a0:3c:7d:0e:9a:10:c0:53:ee:ba:0f:25:4b:80: 81:75:be:84:1d:a9:7b:e2:a3:47:ff:dc:3f:cd:88:e8:47:20: bf:2d:fb:21:2e:c3:b6:d4:5b:e2:48:3f:92:9a:86:58:94:2f: 96:5f:8b:4b:9b:89:28:b4:ef:3d:f8:3d:28:27:80:e0:61:d5: 88:d4:6f:64:6e:2d:ca:b0:f5:e8:87:ea:ab:2c:1b:30:c7:b3: 5a:4f:da:79:c7:e4:48:96:56:28:6f:83:79:c2:c1:23:78:54: 94:05:16:71:aa:8e:d6:5b:65:31:f7:12:48:08:b1:f6:b2:ca: d5:bb:29:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6A/iMS+JXL1F8/j34HhLXK8aDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3 RjY4QTY0NzAeFw0yNTA2MTQxMzU2MjNaFw0yNTA2MTcxOTEyMjNaMDMxMTAvBgNV BAMTKDYxMjM2N0NBOEIzMEQ5QUI4NzIzOUExMkZCQzczOUUwQzJEQTFDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYtRTwX06cK7zb1rsDvNrb8ip6 RoBwwkjk9GqNAzJ3rRs39HrwSxB947XUMeK7eE/tOBOlNWVS+fxrNk0oXlPXq2/3 DPqjuWnIDGjKtVxHJGmpS3MmgemBk3YvN0Ra79WuhzKBd7hOIrT2FcuCwq3ciA+T uzKeI/foe56wKpX14h+wCITnlBH9tbXFZpm0hYoB4uaIqbu06VTSWgBMQqX5hpjt aXl5bB6Gw0pDumtpQzmq+Mqt2ob6EIQs8mPf1d+0N+HeUzAPWzsjBJHkK6YgRMpj S3p6LkjRlPwcFbKGjKKtSfgMW5xb8Nm3jru3GLp/IDdKbEjPGswyCcA0aW/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYSNnyosw2auHI5oS+8c54MLaHCkwHwYDVR0j BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4 QTY0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzMjZmNGUtNjYwNS00OTZhLWI5 ZjgtZDZlNzdiMjliY2M2LzAvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FC QTY3RjY4QTY0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK/nNaeJ3kKZoXg274F/okLDnWtMrCgSYiB O8y+3azJ3ayut2+Crc8xvcz2c/wtjLPGa5CH8MB+GCVZc+OZnsDPSmaNWnGu0hZW JZeuoP9b6tKVxJd51kXfDid1+qlSVuPTIRhkabOPSVtloheJI5XPJHnt94/oLIGw d4cS/rW/OZugPH0OmhDAU+66DyVLgIF1voQdqXvio0f/3D/NiOhHIL8t+yEuw7bU W+JIP5KahliUL5Zfi0ubiSi07z34PSgngOBh1YjUb2RuLcqw9eiH6qssGzDHs1pP 2nnH5EiWVihvg3nCwSN4VJQFFnGqjtZbZTH3EkgIsfayytW7Kew= -----END CERTIFICATE-----Generated at Sun Jun 15 15:19:57 2025 by rpki-client