$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: 7ZITJWIGyDfORBVOwj2avsR7dWw/GSVHTlqtDgGuFDE= Subject key identifier: D4:E6:3B:7A:BD:65:B2:A7:F2:B2:0A:33:24:60:E9:5D:B0:EE:CF:56 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 5CD51A18E911D030D242E86CAA55ABCD01F54910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: 69 Signing time: Mon 16 Jun 2025 19:32:06 +0000 Manifest this update: Mon 16 Jun 2025 19:27:06 +0000 Manifest next update: Thu 19 Jun 2025 23:43:06 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: NvcYnOEp6TNwLUBjxvBXiVS/7BTrnJnJ+1wRwh9R1JM=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: 4K7vn50Jy8OXno0W7PlV8J64UPEc9/oar0lR+GfawJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d5:1a:18:e9:11:d0:30:d2:42:e8:6c:aa:55:ab:cd:01:f5:49:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Jun 16 19:27:06 2025 GMT Not After : Jun 19 23:43:06 2025 GMT Subject: CN=D4E63B7ABD65B2A7F2B20A332460E95DB0EECF56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:d8:d3:5b:a7:5b:07:68:25:34:d1:59:14: 46:41:cb:31:c7:4a:e1:04:d5:6f:6b:5f:d9:f8:3a: e4:bd:06:e5:b0:2c:65:f3:36:70:92:d9:bf:70:69: 68:f4:8c:e6:00:c8:90:b2:3a:2c:9c:34:75:0b:9e: f9:3f:9d:8a:9e:44:ff:0e:1f:06:4c:02:c8:ec:5c: f8:b5:c0:b8:cf:6a:ca:27:18:da:3b:94:cd:dc:8e: ea:3e:64:b1:21:a4:07:63:fa:99:73:7e:d8:98:d1: bd:43:86:50:4e:df:00:64:c1:8f:79:da:66:af:ea: c3:de:fd:d5:39:7c:e6:58:97:63:68:56:6f:31:8e: 64:05:9f:b0:d2:83:bd:6e:43:cc:fe:69:b8:ea:f9: af:71:8e:74:b7:7d:75:a7:4c:27:ac:ec:e4:e8:75: 91:7e:4a:5a:50:17:2d:46:2c:7d:82:a3:7c:50:3b: 07:5c:12:4e:b5:a1:9e:e6:92:6b:b4:ba:01:41:ea: ec:57:40:06:47:cd:53:96:a5:0e:09:e0:5c:bc:4b: a5:22:e9:9f:97:e4:2b:1c:86:52:2c:fc:58:6d:6d: 45:05:44:15:e4:58:21:b3:da:4b:f7:01:0a:ac:22: 01:fc:3e:42:1c:8b:64:f8:a3:30:4d:18:9a:d6:16: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E6:3B:7A:BD:65:B2:A7:F2:B2:0A:33:24:60:E9:5D:B0:EE:CF:56 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:57:30:9b:90:7f:bb:47:9b:25:5a:31:b2:32:bc:19:95:54: 7e:c1:81:14:5f:c4:8c:5b:83:60:af:7b:d7:d2:d7:45:f3:6f: fa:0a:26:cb:dc:c6:8c:8a:09:4b:e2:f4:8c:db:23:93:e2:2b: 28:ab:b9:87:74:fa:de:45:a1:04:e6:f5:0c:c8:3e:56:94:ce: c7:a6:dc:1d:e3:18:45:13:ce:8b:2f:f9:7a:4b:30:66:e2:2b: d5:ff:70:6c:7a:f7:7d:f9:d6:8c:68:cd:67:78:48:86:f2:ad: c8:e5:67:a4:71:16:12:8b:9a:08:c5:cf:04:c6:43:53:7f:18: 6f:ed:48:e1:c2:64:aa:39:ba:f4:fa:61:82:db:ce:1b:2e:71: 4a:2c:53:05:16:07:4b:b0:29:0e:36:8e:7f:52:2a:14:b8:cd: 67:48:5b:be:33:82:99:af:8d:8a:1d:1d:b0:f8:7c:1a:8f:1a: 38:46:0c:1a:0d:d3:dc:0f:ce:4b:2b:b4:34:4e:35:38:ce:97: c1:19:3e:24:0e:b5:db:18:e5:19:bc:8d:91:27:e5:91:70:32: cc:ca:c9:14:e0:25:82:9c:1e:4f:56:8a:ec:95:a6:61:96:16: b2:dc:70:0b:4f:aa:84:0b:85:f7:a6:9a:d1:69:cf:a7:22:1f: 75:aa:cd:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNUaGOkR0DDSQuhsqlWrzQH1SRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTA2MTYxOTI3MDZaFw0yNTA2MTkyMzQzMDZaMDMxMTAvBgNV BAMTKEQ0RTYzQjdBQkQ2NUIyQTdGMkIyMEEzMzI0NjBFOTVEQjBFRUNGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdtjTW6dbB2glNNFZFEZByzHH SuEE1W9rX9n4OuS9BuWwLGXzNnCS2b9waWj0jOYAyJCyOiycNHULnvk/nYqeRP8O HwZMAsjsXPi1wLjPasonGNo7lM3cjuo+ZLEhpAdj+plzftiY0b1DhlBO3wBkwY95 2mav6sPe/dU5fOZYl2NoVm8xjmQFn7DSg71uQ8z+abjq+a9xjnS3fXWnTCes7OTo dZF+SlpQFy1GLH2Co3xQOwdcEk61oZ7mkmu0ugFB6uxXQAZHzVOWpQ4J4Fy8S6Ui 6Z+X5CschlIs/FhtbUUFRBXkWCGz2kv3AQqsIgH8PkIci2T4ozBNGJrWFlYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OY7er1lsqfysgozJGDpXbDuz1YwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNXMJuQf7tHmyVaMbIyvBmVVH7BgRRfxIxb g2Cve9fS10Xzb/oKJsvcxoyKCUvi9IzbI5PiKyiruYd0+t5FoQTm9QzIPlaUzsem 3B3jGEUTzosv+XpLMGbiK9X/cGx693351oxozWd4SIbyrcjlZ6RxFhKLmgjFzwTG Q1N/GG/tSOHCZKo5uvT6YYLbzhsucUosUwUWB0uwKQ42jn9SKhS4zWdIW74zgpmv jYodHbD4fBqPGjhGDBoN09wPzksrtDRONTjOl8EZPiQOtdsY5Rm8jZEn5ZFwMszK yRTgJYKcHk9WiuyVpmGWFrLccAtPqoQLhfemmtFpz6ciH3Wqzdw= -----END CERTIFICATE-----Generated at Wed Jun 18 15:05:26 2025 by rpki-client