$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: R81gXaKilaavpndyRsqFugNXQQapqNbpBM/sIDUNUxE= Subject key identifier: 7E:3C:6B:81:33:0D:31:45:BD:AF:4C:EC:10:99:CE:A1:E9:46:33:21 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 3D59D098C620A497FB0DB6635B0253C35DD7948B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 02A1 Signing time: Tue 17 Jun 2025 22:52:23 +0000 Manifest this update: Tue 17 Jun 2025 22:47:23 +0000 Manifest next update: Sat 21 Jun 2025 05:49:23 +0000 Files and hashes: 1: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: yNUnsFXXIv525gFrcvwb0qi4uVccxRBUMVxYgLfKp8k=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: 2Hf0voiLyRB5yquDwOqQGzECahxM0QLqpt8+luqMRjw=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: H8eCB1ajNrVrh3omhOA+7EIUqPrlMk7lfLVZEODKpTs=) 4: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 6kHHWGOl1WkB5FFpqU5tEepFu8NpO3D8mqOqYEjynek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:59:d0:98:c6:20:a4:97:fb:0d:b6:63:5b:02:53:c3:5d:d7:94:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Jun 17 22:47:23 2025 GMT Not After : Jun 21 05:49:23 2025 GMT Subject: CN=7E3C6B81330D3145BDAF4CEC1099CEA1E9463321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:0f:d3:e6:49:a7:04:ef:de:c5:48:a8:46: c3:34:73:1a:e2:20:43:99:0a:81:3b:d8:98:44:89: ca:dc:cd:5f:4d:12:83:4d:15:0d:c4:f7:c2:91:2a: e8:89:81:9c:fc:d8:ee:e0:80:f4:fc:07:ca:8e:cd: ca:71:26:dd:27:47:5c:2d:04:16:e8:97:19:17:3f: 26:f2:48:d6:41:19:e8:82:c6:fd:6e:28:13:af:63: 6b:c5:ea:59:9c:a5:21:91:07:d1:a7:50:2a:dd:f8: 79:55:b1:d7:4c:37:86:05:f1:9d:1a:5a:7f:2a:a3: 03:b9:20:8d:78:47:dc:4d:0d:0a:b6:3e:ca:5d:84: 04:35:d3:bf:25:92:64:0c:fb:f9:ff:83:0a:95:5b: a8:ed:da:ba:20:a7:a4:d5:58:d1:77:cc:b8:46:88: a5:f1:6f:4e:54:14:99:88:40:52:04:b0:d5:b2:9d: ee:d5:2a:9b:d6:f2:5f:63:81:90:c2:49:06:90:16: 9e:ff:a6:51:34:fd:c5:f2:16:45:a7:1c:29:c5:be: 04:ce:4d:fc:26:4f:28:f8:ad:94:37:02:21:ca:f1: 4b:27:73:e8:5e:e7:cb:30:c7:bf:72:d6:a1:2d:ab: e0:c3:0e:16:58:96:bc:ce:f8:27:c5:d7:e9:5d:58: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3C:6B:81:33:0D:31:45:BD:AF:4C:EC:10:99:CE:A1:E9:46:33:21 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:49:14:4e:a9:48:bf:18:6e:e6:34:b5:af:91:b6:4d:e6:41: d5:2a:44:56:32:c0:b5:99:98:03:91:58:d0:2e:da:e1:db:d8: 07:f2:ec:f3:a2:ad:a4:54:13:42:1e:f0:f7:6c:47:f1:81:c6: d4:72:ba:a7:73:0d:2a:1d:cd:1c:5a:62:ff:5a:fd:7a:bf:a3: 6f:bc:ae:fd:da:b5:5b:79:ea:fc:ba:af:3c:e9:69:7c:68:fa: 6d:37:6a:9e:1e:05:9d:7c:dc:d8:ea:2f:cd:f1:41:57:44:97: 66:54:97:86:c4:08:62:dc:b3:08:e1:24:de:f3:ef:1c:b8:48: cd:96:1c:4a:ea:ac:05:07:dd:89:1c:5e:39:0e:ff:eb:f8:95: 85:ff:7f:65:ea:4b:26:32:fd:f5:f8:b9:f8:09:0e:d3:b3:db: 4b:3e:ff:1b:7f:00:8f:ce:b6:09:fa:ab:87:3c:2f:b0:a4:57: 3a:89:40:67:81:cd:4f:f2:fd:d5:cf:63:f9:91:02:90:57:1e: 42:ff:9c:45:f0:26:78:83:33:5f:88:9f:ae:0a:ac:20:97:73: ac:fc:a5:d9:bd:91:37:20:75:93:05:6b:01:ba:a2:b6:f5:21: 2f:b8:0b:77:74:1e:16:42:2f:6b:5d:36:02:be:d8:36:0c:86: 89:86:fa:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVnQmMYgpJf7DbZjWwJTw13XlIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA2MTcyMjQ3MjNaFw0yNTA2MjEwNTQ5MjNaMDMxMTAvBgNV BAMTKDdFM0M2QjgxMzMwRDMxNDVCREFGNENFQzEwOTlDRUExRTk0NjMzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQw/T5kmnBO/exUioRsM0cxri IEOZCoE72JhEicrczV9NEoNNFQ3E98KRKuiJgZz82O7ggPT8B8qOzcpxJt0nR1wt BBbolxkXPybySNZBGeiCxv1uKBOvY2vF6lmcpSGRB9GnUCrd+HlVsddMN4YF8Z0a Wn8qowO5II14R9xNDQq2PspdhAQ1078lkmQM+/n/gwqVW6jt2rogp6TVWNF3zLhG iKXxb05UFJmIQFIEsNWyne7VKpvW8l9jgZDCSQaQFp7/plE0/cXyFkWnHCnFvgTO TfwmTyj4rZQ3AiHK8Usnc+he58swx79y1qEtq+DDDhZYlrzO+CfF1+ldWEHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjxrgTMNMUW9r0zsEJnOoelGMyEwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5JFE6pSL8YbuY0ta+Rtk3mQdUqRFYywLWZ mAORWNAu2uHb2Afy7POiraRUE0Ie8PdsR/GBxtRyuqdzDSodzRxaYv9a/Xq/o2+8 rv3atVt56vy6rzzpaXxo+m03ap4eBZ183NjqL83xQVdEl2ZUl4bECGLcswjhJN7z 7xy4SM2WHErqrAUH3YkcXjkO/+v4lYX/f2XqSyYy/fX4ufgJDtOz20s+/xt/AI/O tgn6q4c8L7CkVzqJQGeBzU/y/dXPY/mRApBXHkL/nEXwJniDM1+In64KrCCXc6z8 pdm9kTcgdZMFawG6orb1IS+4C3d0HhZCL2tdNgK+2DYMhomG+rQ= -----END CERTIFICATE-----Generated at Wed Jun 18 07:48:35 2025 by rpki-client