$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: tlSo4t7rDRu+b7UjybsKuRpfw3rzxoTebl61q1Yxoqw= Subject key identifier: 84:86:8D:18:0E:51:2E:8F:25:82:8C:AA:08:CA:5E:F2:EF:09:F2:7C Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 0A320C03B2E9832530F9CC3300C033CCAFD96971 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 091F Signing time: Sun 15 Jun 2025 09:51:46 +0000 Manifest this update: Sun 15 Jun 2025 09:46:46 +0000 Manifest next update: Wed 18 Jun 2025 17:46:46 +0000 Files and hashes: 1: AS48.roa (hash: tnIHiyydMBODQZAGAIWJ55BdRFMyohaiaQfvZCTRwvM=) 2: AS142395.roa (hash: vW3zaDs4B/0B4dgk4xj07ZGjVrPmOv0iMJHfXVSfu34=) 3: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: DGpr/mbAnTg7iEUcVKlLmpbi9UtxoAVh19BZDDY2Kpg=) 4: AS59282.roa (hash: rn/foQIRZPZaJbefF4yS1h7Rqlzl8RA4UhyiMvZtbyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:32:0c:03:b2:e9:83:25:30:f9:cc:33:00:c0:33:cc:af:d9:69:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Jun 15 09:46:46 2025 GMT Not After : Jun 18 17:46:46 2025 GMT Subject: CN=84868D180E512E8F25828CAA08CA5EF2EF09F27C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d4:3d:df:cd:da:2b:b5:66:09:88:0c:6a:e3: ae:16:27:ab:7b:ec:b3:9f:8f:68:45:0c:5f:ae:1e: d5:d7:f6:e5:b7:53:a5:a2:8c:fa:4c:9f:39:93:a1: 79:cb:f2:4c:c7:38:8e:88:57:39:63:35:97:a6:8f: dc:02:a5:2a:f5:17:30:77:9a:85:fa:cc:e9:82:c8: f7:31:54:35:5a:4e:8c:1a:a7:7c:2b:40:96:01:2b: ca:4e:58:d6:1d:35:f4:1b:5d:dd:8e:e1:d2:5a:b7: f2:55:e0:64:e7:f8:47:57:f6:88:b7:e9:71:a6:72: 80:9d:64:0f:97:9f:ba:af:a6:b6:9a:59:aa:66:b4: 28:2a:ad:f7:59:55:71:27:25:2d:a1:35:ba:2b:a9: e4:43:0e:7f:99:08:00:ef:d7:44:a7:f0:df:1a:ab: 6c:38:fa:e4:7d:29:12:3f:01:7f:90:fd:32:99:b6: af:e3:96:5b:bc:5c:92:48:b1:ab:00:61:73:e6:70: a8:0b:d4:0e:6e:6a:0c:0e:a3:5a:10:19:a5:04:16: 3c:18:67:d2:68:6e:ad:11:8d:9c:06:af:a8:35:94: 2a:5c:0d:9d:8f:3c:24:8f:72:dc:3f:59:21:f7:86: d0:86:d8:17:a3:24:b0:f1:30:5d:0e:92:ab:22:34: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:8D:18:0E:51:2E:8F:25:82:8C:AA:08:CA:5E:F2:EF:09:F2:7C X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a6:30:82:3f:63:86:26:f3:56:66:3b:71:7d:60:c5:48:35: 66:da:96:d2:e8:dc:02:c8:76:24:ee:52:ca:21:bb:a6:20:20: 6b:c7:e4:b9:50:2a:37:3a:ab:e8:80:a2:ae:d0:d8:67:38:53: c7:d4:11:1c:dc:53:ac:36:81:0a:e8:0e:70:47:3d:69:fc:02: 5b:72:75:95:66:cc:0a:23:07:e5:e1:cf:37:89:7b:e6:d5:a4: 7f:99:e2:14:7f:35:99:b0:c3:35:db:2d:3a:d8:cb:d7:b6:75: f0:82:82:f6:0e:11:e3:61:b3:0c:ce:90:3e:bc:76:8d:e5:cf: 07:e9:40:60:33:e4:cb:c1:25:ba:fd:bc:20:01:c7:4c:f5:29: dd:7d:f5:b7:f2:3b:6a:4f:dc:05:e7:95:a7:f0:b5:b8:60:db: 0b:a7:9b:f3:09:f5:74:7b:28:0a:4e:07:be:b8:39:6e:4f:01: d1:15:11:92:47:e5:06:4c:74:ef:34:90:57:3d:77:d9:f6:40: e3:bb:7a:40:0b:b7:8c:8d:cc:31:8d:c6:84:19:d5:c2:82:d6: b6:1e:18:21:3f:b4:19:30:5d:a1:3e:5e:49:07:67:fe:b1:36: 18:6e:bb:c8:66:41:39:e8:79:dc:66:4f:cf:87:ed:ad:41:49: c7:76:b7:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjIMA7LpgyUw+cwzAMAzzK/ZaXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA2MTUwOTQ2NDZaFw0yNTA2MTgxNzQ2NDZaMDMxMTAvBgNV BAMTKDg0ODY4RDE4MEU1MTJFOEYyNTgyOENBQTA4Q0E1RUYyRUYwOUYyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb1D3fzdortWYJiAxq464WJ6t7 7LOfj2hFDF+uHtXX9uW3U6WijPpMnzmToXnL8kzHOI6IVzljNZemj9wCpSr1FzB3 moX6zOmCyPcxVDVaTowap3wrQJYBK8pOWNYdNfQbXd2O4dJat/JV4GTn+EdX9oi3 6XGmcoCdZA+Xn7qvpraaWapmtCgqrfdZVXEnJS2hNborqeRDDn+ZCADv10Sn8N8a q2w4+uR9KRI/AX+Q/TKZtq/jllu8XJJIsasAYXPmcKgL1A5uagwOo1oQGaUEFjwY Z9Jobq0RjZwGr6g1lCpcDZ2PPCSPctw/WSH3htCG2BejJLDxMF0OkqsiNDTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIaNGA5RLo8lgoyqCMpe8u8J8nwwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACymMII/Y4Ym81ZmO3F9YMVINWbaltLo3ALI diTuUsohu6YgIGvH5LlQKjc6q+iAoq7Q2Gc4U8fUERzcU6w2gQroDnBHPWn8Alty dZVmzAojB+XhzzeJe+bVpH+Z4hR/NZmwwzXbLTrYy9e2dfCCgvYOEeNhswzOkD68 do3lzwfpQGAz5MvBJbr9vCABx0z1Kd199bfyO2pP3AXnlafwtbhg2wunm/MJ9XR7 KApOB764OW5PAdEVEZJH5QZMdO80kFc9d9n2QOO7ekALt4yNzDGNxoQZ1cKC1rYe GCE/tBkwXaE+XkkHZ/6xNhhuu8hmQTnoedxmT8+H7a1BScd2txQ= -----END CERTIFICATE-----Generated at Mon Jun 16 13:42:50 2025 by rpki-client