$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: 3s+XHuHL+OYNzFIHJzPZMDK6ICtTab83QPrygkwx5S0= Subject key identifier: 24:6A:3C:77:7A:A3:2C:E7:BF:E8:05:73:E0:C4:41:48:5D:EE:CC:AE Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 0D96AD2435996F28E6681BF133162D07F8501B88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 01BF Signing time: Wed 06 Aug 2025 06:01:05 +0000 Manifest this update: Wed 06 Aug 2025 05:56:05 +0000 Manifest next update: Sat 09 Aug 2025 13:10:05 +0000 Files and hashes: 1: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: M890dag6EE1qtsFlPkd3PB/fu3TZaGNSDr48ih7+xpg=) 2: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: 0P8RiV2EV8KtV2wVPDkhbbfmwCyYhPd1bfzDVq451ls=) 3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: 9VCyBS9IIeec/M2Dmo8IoJQFogFZ4Fro1YlaePTTG58=) 4: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: WQyQUN+lJ0lbysEwiRK60fG9NvvD48hJ8Z9GGfC8r90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:96:ad:24:35:99:6f:28:e6:68:1b:f1:33:16:2d:07:f8:50:1b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Aug 6 05:56:05 2025 GMT Not After : Aug 9 13:10:05 2025 GMT Subject: CN=246A3C777AA32CE7BFE80573E0C441485DEECCAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:a7:b2:72:4c:4e:ed:39:12:13:96:ae:ea: ba:80:10:17:22:9a:16:82:19:aa:20:ed:0e:c4:40: 33:5b:b1:02:3a:8f:14:e0:bd:da:77:2a:1c:ac:94: 94:3f:df:8a:24:7e:bb:f0:2a:ed:e5:09:05:bd:fd: 6b:97:17:ea:86:cf:54:6f:b2:d8:54:6d:5a:91:14: c1:8c:d0:66:8a:41:23:5d:6a:5c:b6:d9:45:6d:f5: 54:4d:79:9c:3c:89:8a:64:74:83:a7:c6:78:d3:6f: 86:ec:3d:c5:a5:93:5e:5b:ab:86:19:0c:a1:83:81: 9d:1c:2f:e6:8e:09:89:7d:fa:f5:c0:17:6e:1b:fd: ce:33:b5:bd:34:fa:37:4a:60:8d:cf:32:fa:68:22: f9:97:61:5d:81:ba:7b:94:5f:e2:b1:72:a3:47:1c: b1:fe:01:84:35:77:9c:ad:70:6b:54:c7:e9:81:b4: 41:1d:69:24:31:dc:b3:cd:62:2e:19:e3:bb:47:e8: 4c:2f:57:2b:af:2e:f7:23:fb:f5:3e:6f:8a:a8:bf: 1a:e8:77:09:2e:c1:14:4b:3e:cb:45:5e:b6:b9:39: eb:29:a9:6f:5e:76:c4:1a:fa:77:fd:f8:e9:3c:97: 12:c2:8f:67:2d:7b:8e:a7:89:0d:99:ee:1d:96:45: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6A:3C:77:7A:A3:2C:E7:BF:E8:05:73:E0:C4:41:48:5D:EE:CC:AE X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:97:b7:85:df:fe:ad:74:63:ec:8d:92:0d:60:51:cf:09: 0e:1c:c4:3e:a7:0c:fa:9b:58:ac:a4:89:1b:96:fe:98:33:ed: eb:21:2e:ef:e0:00:a3:71:6c:1f:c6:fc:e4:79:63:c2:02:ec: fe:d9:a9:47:f8:56:8d:43:2f:d3:20:3c:90:e1:6e:3e:69:8e: 73:61:0b:fb:df:bd:f0:45:9e:89:91:c2:5a:77:d4:90:b5:83: 5e:50:db:71:83:4e:93:97:33:6a:80:c0:24:15:54:86:b9:87: f4:1f:2e:05:4b:43:6a:e0:74:58:c6:22:91:f3:d1:ad:d1:3c: 98:fb:3f:3b:49:51:22:a4:c7:ba:18:ab:d7:9a:8f:e8:cb:91: 29:12:8b:5a:82:48:e4:2a:fd:5f:80:10:e0:50:fb:21:0b:e0: 6d:2c:aa:e5:1e:36:16:7e:85:98:16:5e:21:d7:36:f3:cb:5e: a7:c4:cc:bb:69:94:b7:44:0c:26:40:d0:fc:41:8b:c6:53:d2: b5:1a:03:b4:01:d7:70:b4:0a:1f:79:00:d7:66:ab:5f:c7:fb: b4:32:16:83:0d:b0:1c:80:13:17:28:04:eb:b7:8f:39:77:8a: 0a:cc:dc:0a:fb:e6:5b:74:05:97:d8:38:ff:04:da:e9:8a:68: 42:ff:59:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZatJDWZbyjmaBvxMxYtB/hQG4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTA4MDYwNTU2MDVaFw0yNTA4MDkxMzEwMDVaMDMxMTAvBgNV BAMTKDI0NkEzQzc3N0FBMzJDRTdCRkU4MDU3M0UwQzQ0MTQ4NURFRUNDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwqeyckxO7TkSE5au6rqAEBci mhaCGaog7Q7EQDNbsQI6jxTgvdp3KhyslJQ/34okfrvwKu3lCQW9/WuXF+qGz1Rv sthUbVqRFMGM0GaKQSNdaly22UVt9VRNeZw8iYpkdIOnxnjTb4bsPcWlk15bq4YZ DKGDgZ0cL+aOCYl9+vXAF24b/c4ztb00+jdKYI3PMvpoIvmXYV2BunuUX+KxcqNH HLH+AYQ1d5ytcGtUx+mBtEEdaSQx3LPNYi4Z47tH6EwvVyuvLvcj+/U+b4qovxro dwkuwRRLPstFXra5OespqW9edsQa+nf9+Ok8lxLCj2cte46niQ2Z7h2WRflBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJGo8d3qjLOe/6AVz4MRBSF3uzK4wHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkRl7eF3/6tdGPsjZINYFHPCQ4cxD6nDPqb WKykiRuW/pgz7eshLu/gAKNxbB/G/OR5Y8IC7P7ZqUf4Vo1DL9MgPJDhbj5pjnNh C/vfvfBFnomRwlp31JC1g15Q23GDTpOXM2qAwCQVVIa5h/QfLgVLQ2rgdFjGIpHz 0a3RPJj7PztJUSKkx7oYq9eaj+jLkSkSi1qCSOQq/V+AEOBQ+yEL4G0squUeNhZ+ hZgWXiHXNvPLXqfEzLtplLdEDCZA0PxBi8ZT0rUaA7QB13C0Ch95ANdmq1/H+7Qy FoMNsByAExcoBOu3jzl3igrM3Ar75lt0BZfYOP8E2umKaEL/WQc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:08 2025 by rpki-client