$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: ZwB3V9v7L/O/usmd4RFnEQS81Z55WPxYcZW1gD9iB6c= Subject key identifier: 2F:7A:C4:B2:6F:15:91:0F:BE:AF:95:DB:B5:46:52:45:C3:98:50:4C Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 4B12918B4E49500FC7AC87F3FF86788F4409F835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 04DF Signing time: Wed 18 Jun 2025 08:40:39 +0000 Manifest this update: Wed 18 Jun 2025 08:35:39 +0000 Manifest next update: Sat 21 Jun 2025 20:12:39 +0000 Files and hashes: 1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=) 2: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: Ouzu+SYCefT0nGHC+OxsSplHVPh2CT3wQKT30HolMx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:12:91:8b:4e:49:50:0f:c7:ac:87:f3:ff:86:78:8f:44:09:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Jun 18 08:35:39 2025 GMT Not After : Jun 21 20:12:39 2025 GMT Subject: CN=2F7AC4B26F15910FBEAF95DBB5465245C398504C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:f6:ee:cb:b0:d9:55:58:ea:58:22:b6:d5: f1:83:2e:b0:21:b1:9c:6c:a7:64:35:02:f3:d9:0d: 62:f0:2b:e8:73:97:7e:5f:f6:db:0b:02:b9:90:85: df:f4:bb:58:b6:76:6b:c9:e0:40:75:71:8e:40:08: 91:8a:e7:35:12:c8:17:03:1e:f8:ca:5e:ea:ab:37: 5c:9e:f2:e5:32:4b:b1:b0:e2:0d:46:f4:c7:79:27: a1:e6:25:38:f2:a3:90:48:55:f3:7b:2b:65:6e:0f: 1c:e0:5a:41:27:86:27:3c:9b:17:49:d0:91:63:bc: 0d:ee:1a:c2:d2:1a:c9:e4:df:fd:51:61:ae:24:be: 1e:99:9f:33:bb:0a:6e:b4:d8:26:2b:3e:24:7a:90: 96:40:fe:77:e2:bc:d0:e2:96:e4:38:94:50:f9:f0: f1:cb:78:c5:0b:ea:d2:4d:13:1c:c0:06:fd:40:0e: ca:01:25:5f:e5:8d:de:55:5d:10:76:9f:af:95:d4: 6f:ba:a9:5d:36:39:f6:ea:2c:52:90:1a:c7:4a:1a: 83:c4:40:ab:29:7c:2e:ed:65:96:67:8d:3d:0b:44: 72:a4:f5:f5:16:71:9a:a1:7f:da:5c:b4:6a:01:cc: eb:eb:30:ae:cd:04:55:09:58:38:61:d4:36:d8:2f: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7A:C4:B2:6F:15:91:0F:BE:AF:95:DB:B5:46:52:45:C3:98:50:4C X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:1f:30:70:46:ab:de:b2:c8:58:aa:c9:d5:e1:dd:b6:1f: 4a:58:f3:50:a0:3f:7e:d9:83:84:fe:eb:c0:8f:28:e7:7e:cb: 86:cc:ac:0f:e4:4a:88:70:e8:cb:87:7a:50:30:c0:6a:30:8b: 03:35:98:1f:08:4a:f8:4d:d1:61:18:7f:55:c1:50:9a:a0:75: a3:2d:d9:f3:73:74:1f:0e:10:3f:65:d8:7a:32:d9:b6:c7:16: 74:27:2b:b1:15:3c:f4:ea:bf:e7:d5:38:31:46:5b:fa:13:91: 94:56:a5:5d:60:34:d4:62:55:6d:e1:da:18:0c:00:99:2e:7a: 9f:59:3a:3a:ec:bb:4a:21:a8:3e:6d:19:3b:d1:43:4f:6c:00: 9a:2a:a4:c8:eb:58:ab:7c:cb:a4:e1:39:2d:75:03:51:91:ef: 66:b2:ce:a2:1c:a3:83:dd:9d:a2:dc:43:e6:d4:3e:72:5d:43: 7e:7b:2e:97:44:43:3d:c9:76:a9:b4:ae:d3:6f:00:ce:10:7d: 53:03:a5:14:f1:4b:58:17:00:a9:80:bd:5e:cc:15:c1:42:dc: 23:69:28:3e:9f:c1:de:10:01:ce:28:63:c8:60:a7:0e:12:c9: 29:02:8a:bf:36:0b:44:43:59:80:58:e0:2e:3c:94:85:38:2c: 0d:ef:c7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxKRi05JUA/HrIfz/4Z4j0QJ+DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNTA2MTgwODM1MzlaFw0yNTA2MjEyMDEyMzlaMDMxMTAvBgNV BAMTKDJGN0FDNEIyNkYxNTkxMEZCRUFGOTVEQkI1NDY1MjQ1QzM5ODUwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuw/buy7DZVVjqWCK21fGDLrAh sZxsp2Q1AvPZDWLwK+hzl35f9tsLArmQhd/0u1i2dmvJ4EB1cY5ACJGK5zUSyBcD HvjKXuqrN1ye8uUyS7Gw4g1G9Md5J6HmJTjyo5BIVfN7K2VuDxzgWkEnhic8mxdJ 0JFjvA3uGsLSGsnk3/1RYa4kvh6ZnzO7Cm602CYrPiR6kJZA/nfivNDiluQ4lFD5 8PHLeMUL6tJNExzABv1ADsoBJV/ljd5VXRB2n6+V1G+6qV02OfbqLFKQGsdKGoPE QKspfC7tZZZnjT0LRHKk9fUWcZqhf9pctGoBzOvrMK7NBFUJWDhh1DbYL+krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3rEsm8VkQ++r5XbtUZSRcOYUEwwHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsHHzBwRqvesshYqsnV4d22H0pY81CgP37Z g4T+68CPKOd+y4bMrA/kSohw6MuHelAwwGowiwM1mB8ISvhN0WEYf1XBUJqgdaMt 2fNzdB8OED9l2Hoy2bbHFnQnK7EVPPTqv+fVODFGW/oTkZRWpV1gNNRiVW3h2hgM AJkuep9ZOjrsu0ohqD5tGTvRQ09sAJoqpMjrWKt8y6ThOS11A1GR72ayzqIco4Pd naLcQ+bUPnJdQ357LpdEQz3Jdqm0rtNvAM4QfVMDpRTxS1gXAKmAvV7MFcFC3CNp KD6fwd4QAc4oY8hgpw4SySkCir82C0RDWYBY4C48lIU4LA3vx0s= -----END CERTIFICATE-----Generated at Wed Jun 18 19:30:22 2025 by rpki-client