$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: Kfo3UmNBVYMamahxCA7Mf0LOuv+OcJxz0KHj9Rm07cA= Subject key identifier: 43:4F:0E:D0:C5:7E:98:D7:D8:93:05:7C:AD:A0:91:BC:43:BB:61:A1 Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 65448D1793717E586E12CFEE288743174ED03C18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 0170 Signing time: Tue 17 Jun 2025 10:41:30 +0000 Manifest this update: Tue 17 Jun 2025 10:36:30 +0000 Manifest next update: Fri 20 Jun 2025 12:40:30 +0000 Files and hashes: 1: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: w2swVH9Ufha8xCoMv5F5cm/OeGGGmq9WQRgYCaL6ycY=) 2: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:44:8d:17:93:71:7e:58:6e:12:cf:ee:28:87:43:17:4e:d0:3c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Jun 17 10:36:30 2025 GMT Not After : Jun 20 12:40:30 2025 GMT Subject: CN=434F0ED0C57E98D7D893057CADA091BC43BB61A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:24:2d:c1:0c:8a:61:f1:c9:be:ab:94:d4: e7:38:65:2e:bd:4f:99:02:aa:a1:8b:90:17:5f:c4: 71:90:37:23:08:44:e1:e3:39:7c:3f:11:22:14:19: d8:4a:3d:21:e7:42:cc:fe:46:5e:7e:d6:06:43:a8: c9:78:af:65:1b:d3:dd:06:0a:c2:49:e2:0f:57:a5: b9:9f:31:6f:a0:bb:17:dc:17:a9:0c:fd:1b:6f:3d: 1c:aa:33:fa:16:8b:9e:7a:50:53:6d:f6:b5:7a:db: b9:d1:8a:51:cb:99:9e:d5:27:b4:c9:dc:08:28:b3: 8a:b5:41:a5:fb:5b:8b:3e:a9:d3:19:f0:98:79:30: 23:7f:3e:c7:71:83:1b:83:b8:4a:d4:db:18:b3:f9: 3d:7e:52:8b:ed:11:b0:30:12:bd:5b:fd:0d:b7:3c: 48:82:b0:46:77:8c:14:2e:65:0d:5c:70:25:e1:13: 37:ee:c1:7d:2b:5f:b8:e6:79:18:a7:36:02:f2:04: 02:fc:c2:03:19:fd:b1:47:ae:44:3f:70:f8:d5:03: 6e:0e:e9:fa:50:73:3f:fa:13:73:b9:fd:d4:3f:4f: 1c:93:e3:5e:b5:31:26:3a:77:3d:06:ee:dd:af:f3: 95:b6:93:73:a6:0a:eb:62:fd:86:6a:aa:c8:31:9b: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:0E:D0:C5:7E:98:D7:D8:93:05:7C:AD:A0:91:BC:43:BB:61:A1 X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ad:e0:21:34:27:f7:d2:11:f9:ba:3c:d2:01:19:72:1f:f3: 94:3e:20:f7:96:6b:42:d3:15:99:cf:55:69:9b:a0:4a:6f:a6: ff:0b:c3:23:88:30:26:7b:a3:81:eb:51:85:33:91:9a:76:39: a9:b8:69:3e:32:2c:d6:05:65:7f:e7:1a:82:2a:0a:9f:fd:51: 00:01:e8:51:9d:8d:85:16:83:6c:0c:fa:77:f8:7d:c2:55:97: 94:b7:82:a2:fe:93:81:38:07:00:97:d9:f9:7a:5d:4d:fc:f3: 93:dd:ec:99:b8:db:ff:fc:f2:04:97:4e:84:f5:8e:29:3b:b8: 9a:48:5b:e8:8c:5c:f6:20:8e:59:eb:bc:13:92:8b:e8:ed:d8: a0:b5:68:a4:36:37:5b:cd:8a:77:cc:6c:70:5f:e4:b9:ea:05: 07:1a:f4:b5:23:2a:29:ff:5a:4c:3a:42:c4:31:00:31:17:e6: 35:59:62:f8:15:0c:95:4b:c1:d9:06:c2:0e:be:3d:90:7e:8a: 36:d5:66:de:e0:09:f1:d7:f3:03:05:eb:47:fb:8a:6f:83:08: ae:ec:e5:c0:30:62:d0:44:46:8f:f6:c2:b9:2c:79:45:38:38: 31:24:7f:48:06:3b:ba:80:7e:4f:ea:c0:1e:71:4b:1b:d2:ad: 1f:7a:27:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUSNF5NxflhuEs/uKIdDF07QPBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTA2MTcxMDM2MzBaFw0yNTA2MjAxMjQwMzBaMDMxMTAvBgNV BAMTKDQzNEYwRUQwQzU3RTk4RDdEODkzMDU3Q0FEQTA5MUJDNDNCQjYxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGiQtwQyKYfHJvquU1Oc4ZS69 T5kCqqGLkBdfxHGQNyMIROHjOXw/ESIUGdhKPSHnQsz+Rl5+1gZDqMl4r2Ub090G CsJJ4g9XpbmfMW+guxfcF6kM/RtvPRyqM/oWi556UFNt9rV627nRilHLmZ7VJ7TJ 3Agos4q1QaX7W4s+qdMZ8Jh5MCN/PsdxgxuDuErU2xiz+T1+UovtEbAwEr1b/Q23 PEiCsEZ3jBQuZQ1ccCXhEzfuwX0rX7jmeRinNgLyBAL8wgMZ/bFHrkQ/cPjVA24O 6fpQcz/6E3O5/dQ/TxyT4161MSY6dz0G7t2v85W2k3OmCuti/YZqqsgxm2S5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ08O0MV+mNfYkwV8raCRvEO7YaEwHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICt4CE0J/fSEfm6PNIBGXIf85Q+IPeWa0LT FZnPVWmboEpvpv8LwyOIMCZ7o4HrUYUzkZp2Oam4aT4yLNYFZX/nGoIqCp/9UQAB 6FGdjYUWg2wM+nf4fcJVl5S3gqL+k4E4BwCX2fl6XU3885Pd7Jm42//88gSXToT1 jik7uJpIW+iMXPYgjlnrvBOSi+jt2KC1aKQ2N1vNinfMbHBf5LnqBQca9LUjKin/ Wkw6QsQxADEX5jVZYvgVDJVLwdkGwg6+PZB+ijbVZt7gCfHX8wMF60f7im+DCK7s 5cAwYtBERo/2wrkseUU4ODEkf0gGO7qAfk/qwB5xSxvSrR96JxE= -----END CERTIFICATE-----Generated at Tue Jun 17 15:39:35 2025 by rpki-client