$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: ZTj/nJaiT7WFFic5l5XxZBbWJfMY+lzjV59oc4owx8M= Subject key identifier: 4C:52:12:61:B4:DC:DB:54:7D:26:7A:27:F8:CD:B6:B7:FD:1D:60:9E Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 6D1C00F6D27E315C855A72D251397C09A38CE542 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01AF Signing time: Sun 15 Jun 2025 14:50:37 +0000 Manifest this update: Sun 15 Jun 2025 14:45:37 +0000 Manifest next update: Wed 18 Jun 2025 23:57:37 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: +aTbg4Bqow3tKrEemUQDnquYnyKdUDg1fr/FMfpUH2g=) 2: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: WZ1f+H8gsMYf7vY6oldLJ72VvvfygYkFPRrbkeeLvBI=) 3: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: X3zDZ+bw+SN8AwEcwQwE7tnNoywCr7ZTEODw3PaWKHo=) 4: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: 5+zXGETugAPi3HrPmviCFDgLbg2lDQPrtwA1t0d5+aI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1c:00:f6:d2:7e:31:5c:85:5a:72:d2:51:39:7c:09:a3:8c:e5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Jun 15 14:45:37 2025 GMT Not After : Jun 18 23:57:37 2025 GMT Subject: CN=4C521261B4DCDB547D267A27F8CDB6B7FD1D609E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:60:34:c8:c4:6a:8a:46:de:8b:23:97:73: 31:b5:bf:b8:e7:a7:7d:83:ca:7d:e4:f8:87:1e:4d: 1c:c7:84:f6:5d:20:8f:57:25:18:a9:de:0e:af:75: 3b:8c:28:03:92:41:62:80:87:52:13:26:9b:e3:6d: b3:60:71:5a:b5:f1:ad:f6:99:54:14:9e:c2:8f:c0: 8b:d1:08:cf:4a:19:5a:c3:3d:fc:ca:23:7a:56:6b: 4f:e5:b5:58:fa:02:16:7b:e1:a6:f6:5c:7c:d3:0e: 0f:97:df:ae:a8:01:74:fd:c8:70:4d:dd:9f:d2:13: 68:df:ce:0d:b6:e4:07:d2:14:53:3a:81:38:d2:18: b3:65:c2:ad:63:a3:19:46:50:18:df:67:92:68:83: ce:a5:e3:59:2f:e3:e0:f3:0f:54:9f:4b:41:b1:5d: 5a:e3:68:09:84:58:8a:fa:5c:41:3e:a6:61:5a:60: 72:5c:28:c6:7d:59:ab:49:83:2a:cb:71:31:da:f0: 42:b8:13:c3:65:bb:38:93:66:f8:a3:9e:74:b2:69: 09:17:c7:52:0a:d2:5d:23:57:4c:be:54:47:7d:24: 3a:8b:76:25:f4:ae:5d:86:d5:d3:24:ba:94:13:f1: 1a:61:df:f8:83:11:28:53:0c:77:c5:74:f4:96:80: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:52:12:61:B4:DC:DB:54:7D:26:7A:27:F8:CD:B6:B7:FD:1D:60:9E X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5d:66:8e:c1:57:e6:a3:ad:93:f8:b8:a6:ed:88:f5:a9:dc: 99:48:ca:2f:85:54:51:9b:c7:52:b1:0d:e5:d2:ff:2f:7d:9c: 61:ef:3b:c2:ad:72:1f:69:4c:80:2d:51:98:0c:9c:7c:9f:d6: 0c:98:3f:49:07:21:78:01:f7:4b:20:a5:ce:ba:cf:2b:b3:2c: e5:d9:91:38:f8:48:a3:55:a8:59:64:26:36:f9:b4:db:76:e8: 2e:5a:61:18:8c:95:b9:38:49:90:3b:f2:00:c3:68:e7:77:e0: 1b:7e:3d:8b:00:26:2f:44:ee:56:8b:21:b2:70:01:01:74:2c: 39:d9:01:b9:44:1b:ac:c9:4b:7f:04:b1:8f:31:54:47:f1:43: f1:11:5e:fb:29:67:c6:31:93:74:7e:5e:ab:89:95:d0:8d:47: 8e:09:3d:2e:24:32:90:0f:a9:06:56:cb:5b:e1:ee:cf:a0:de: d4:6c:dc:08:d0:94:f8:d2:67:9b:15:ef:71:7d:25:c0:08:ab: 8c:88:ea:11:c5:23:28:5b:9e:00:db:d0:c2:8c:17:21:78:14: ff:88:52:2a:28:d2:0e:cb:9e:40:e1:16:ff:75:2b:79:63:34: 89:e3:81:bc:cc:59:59:ab:3e:b0:5f:28:56:7f:b8:af:b4:21: 5c:1e:cf:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRwA9tJ+MVyFWnLSUTl8CaOM5UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTA2MTUxNDQ1MzdaFw0yNTA2MTgyMzU3MzdaMDMxMTAvBgNV BAMTKDRDNTIxMjYxQjREQ0RCNTQ3RDI2N0EyN0Y4Q0RCNkI3RkQxRDYwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HWA0yMRqikbeiyOXczG1v7jn p32Dyn3k+IceTRzHhPZdII9XJRip3g6vdTuMKAOSQWKAh1ITJpvjbbNgcVq18a32 mVQUnsKPwIvRCM9KGVrDPfzKI3pWa0/ltVj6AhZ74ab2XHzTDg+X366oAXT9yHBN 3Z/SE2jfzg225AfSFFM6gTjSGLNlwq1joxlGUBjfZ5Jog86l41kv4+DzD1SfS0Gx XVrjaAmEWIr6XEE+pmFaYHJcKMZ9WatJgyrLcTHa8EK4E8NluziTZvijnnSyaQkX x1IK0l0jV0y+VEd9JDqLdiX0rl2G1dMkupQT8Rph3/iDEShTDHfFdPSWgPgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFISYbTc21R9Jnon+M22t/0dYJ4wHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALddZo7BV+ajrZP4uKbtiPWp3JlIyi+FVFGb x1KxDeXS/y99nGHvO8Ktch9pTIAtUZgMnHyf1gyYP0kHIXgB90sgpc66zyuzLOXZ kTj4SKNVqFlkJjb5tNt26C5aYRiMlbk4SZA78gDDaOd34Bt+PYsAJi9E7laLIbJw AQF0LDnZAblEG6zJS38EsY8xVEfxQ/ERXvspZ8Yxk3R+XquJldCNR44JPS4kMpAP qQZWy1vh7s+g3tRs3AjQlPjSZ5sV73F9JcAIq4yI6hHFIyhbngDb0MKMFyF4FP+I Uioo0g7LnkDhFv91K3ljNInjgbzMWVmrPrBfKFZ/uK+0IVwez9Q= -----END CERTIFICATE-----Generated at Mon Jun 16 04:32:28 2025 by rpki-client