$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json) Hash identifier: Xl5e2wonPSg5rXCeVzTEMpbQAyi6mtMCLhMRJ13c7Eo= Subject key identifier: 71:32:E1:0A:42:7A:49:C7:31:B0:24:A7:62:96:06:C8:AA:22:73:BD Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Certificate serial: 45B568425806632DA6664EAF5ACB43D5338BA617 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft Manifest number: 016D Signing time: Tue 12 Aug 2025 03:22:14 +0000 Manifest this update: Tue 12 Aug 2025 03:17:14 +0000 Manifest next update: Fri 15 Aug 2025 14:45:14 +0000 Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=) 2: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: 5gP922NxYkchSz71otjR+OK4nfda+EVUtKUFXSPR11E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 14:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b5:68:42:58:06:63:2d:a6:66:4e:af:5a:cb:43:d5:33:8b:a6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862 Validity Not Before: Aug 12 03:17:14 2025 GMT Not After : Aug 15 14:45:14 2025 GMT Subject: CN=7132E10A427A49C731B024A7629606C8AA2273BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:f7:77:9e:72:fc:25:c0:56:35:8a:c5:dc: af:f2:4b:be:c2:24:32:42:1f:07:e1:94:70:9b:24: cc:71:f0:f4:b0:f6:00:2c:4d:49:6e:00:1a:03:39: 86:8e:42:4e:fa:14:5d:73:d8:ef:92:e2:8f:5d:36: 87:0c:a9:e3:15:7d:bc:95:63:18:88:ac:f2:32:63: 6c:21:76:d3:61:a2:18:57:30:44:69:57:d6:47:3d: e2:c1:ed:45:3d:b9:cf:cb:c5:19:54:f3:5b:78:6a: 61:6e:34:60:64:87:04:47:37:da:b0:71:3e:6f:7e: be:12:1e:9f:e9:8b:2d:d2:50:de:02:93:a8:34:fb: f0:ae:9c:8f:72:bd:01:5c:28:df:cb:cc:7b:b5:a8: cc:b3:2d:33:fb:51:a8:c6:f0:92:53:4e:d9:e1:68: 36:6b:f2:53:31:f0:71:36:0f:26:5b:7d:93:20:9b: 81:54:c4:f6:b1:d8:c4:88:e1:96:2a:64:e8:04:25: fb:ff:ce:c6:90:d9:c5:ba:ac:49:19:eb:79:44:ba: d7:ac:30:53:e8:0c:12:aa:79:ad:eb:f4:a4:4d:22: 09:71:71:d1:21:06:9c:f2:b4:42:64:45:88:e2:ed: 5a:14:09:4e:1e:21:22:2c:39:cc:98:85:f9:4b:db: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:32:E1:0A:42:7A:49:C7:31:B0:24:A7:62:96:06:C8:AA:22:73:BD X509v3 Authority Key Identifier: keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:65:9c:8f:58:23:0a:35:a6:d1:31:48:76:0f:fd:16:0b:4d: ff:b1:d8:0b:82:de:77:1c:4c:46:f8:f6:85:58:b2:6e:16:05: 62:37:ff:0d:da:67:fb:97:73:61:d1:e2:aa:23:9e:fe:a9:14: 30:0e:35:9b:97:d2:37:94:00:fb:ed:da:37:13:9c:7d:74:06: 58:85:b3:20:02:2f:f6:e5:43:a2:76:a5:ae:ad:66:6b:27:ab: c8:2a:83:be:3e:32:bd:4d:fc:4d:2c:2f:39:38:f2:5c:07:68: 3a:34:24:f2:91:4d:aa:48:34:87:c4:28:0f:e2:27:e9:44:77: be:7e:2d:c6:d5:1c:a9:d6:20:6a:ff:3a:86:1d:65:db:9e:ee: e3:06:63:8a:bf:d5:42:73:db:91:0f:e1:53:4e:9f:cc:88:0a: a5:c3:c7:17:d4:9a:9f:1b:e1:ba:80:86:1a:dd:0b:f5:62:e6: 10:33:07:58:68:86:5a:a7:7d:7d:2d:15:ef:78:46:2d:d2:92: c5:48:b8:c3:09:bb:fa:4a:f8:fb:b8:45:2f:d3:4a:45:b0:80: f7:7e:6c:98:e1:a0:e1:d0:11:5f:dc:cc:e3:41:eb:72:33:4e: cb:85:5e:e8:d1:48:79:2e:82:17:47:81:35:34:4e:7d:c1:ec: 03:2c:82:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbVoQlgGYy2mZk6vWstD1TOLphcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUND QTc4NDg2MjAeFw0yNTA4MTIwMzE3MTRaFw0yNTA4MTUxNDQ1MTRaMDMxMTAvBgNV BAMTKDcxMzJFMTBBNDI3QTQ5QzczMUIwMjRBNzYyOTYwNkM4QUEyMjczQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiB/d3nnL8JcBWNYrF3K/yS77C JDJCHwfhlHCbJMxx8PSw9gAsTUluABoDOYaOQk76FF1z2O+S4o9dNocMqeMVfbyV YxiIrPIyY2whdtNhohhXMERpV9ZHPeLB7UU9uc/LxRlU81t4amFuNGBkhwRHN9qw cT5vfr4SHp/piy3SUN4Ck6g0+/CunI9yvQFcKN/LzHu1qMyzLTP7UajG8JJTTtnh aDZr8lMx8HE2DyZbfZMgm4FUxPax2MSI4ZYqZOgEJfv/zsaQ2cW6rEkZ63lEutes MFPoDBKqea3r9KRNIglxcdEhBpzytEJkRYji7VoUCU4eISIsOcyYhflL2x81AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcTLhCkJ6SccxsCSnYpYGyKoic70wHwYDVR0j BBgwFoAUYYnk9nvlPfZSgvjhu2MWXMp4SGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTg5ZjY0My0zN2JjLTRmZmItOTUyOS00MDFlNGI2ZWY2NzUvMC82MTg5RTRGNjdC RTUzREY2NTI4MkY4RTFCQjYzMTY1Q0NBNzg0ODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2NUNDQTc4 NDg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4OWY2NDMtMzdiYy00ZmZiLTk1 MjktNDAxZTRiNmVmNjc1LzAvNjE4OUU0RjY3QkU1M0RGNjUyODJGOEUxQkI2MzE2 NUNDQTc4NDg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdlnI9YIwo1ptExSHYP/RYLTf+x2AuC3ncc TEb49oVYsm4WBWI3/w3aZ/uXc2HR4qojnv6pFDAONZuX0jeUAPvt2jcTnH10BliF syACL/blQ6J2pa6tZmsnq8gqg74+Mr1N/E0sLzk48lwHaDo0JPKRTapINIfEKA/i J+lEd75+LcbVHKnWIGr/OoYdZdue7uMGY4q/1UJz25EP4VNOn8yICqXDxxfUmp8b 4bqAhhrdC/Vi5hAzB1hohlqnfX0tFe94Ri3SksVIuMMJu/pK+Pu4RS/TSkWwgPd+ bJjhoOHQEV/czONB63IzTsuFXujRSHkughdHgTU0Tn3B7AMsglo= -----END CERTIFICATE-----Generated at Wed Aug 13 04:29:14 2025 by rpki-client