$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: wEHUVn0DddNYKDBjiuKXy5iay37uaLZ69uQbJMHSoKo= Subject key identifier: 0C:7B:69:0D:30:A9:A2:C7:8A:BC:24:54:21:55:B6:31:7C:02:56:3B Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 19FF74D97415A4E85B6B30D192F6553479B95450 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 01CF Signing time: Sun 15 Jun 2025 10:21:36 +0000 Manifest this update: Sun 15 Jun 2025 10:16:36 +0000 Manifest next update: Wed 18 Jun 2025 14:11:36 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: RYY38hah//HE9HkEZi1bKrxnG3QqhIkirD+hRjUMHjE=) 3: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) 4: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ff:74:d9:74:15:a4:e8:5b:6b:30:d1:92:f6:55:34:79:b9:54:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Jun 15 10:16:36 2025 GMT Not After : Jun 18 14:11:36 2025 GMT Subject: CN=0C7B690D30A9A2C78ABC24542155B6317C02563B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:31:de:e0:2e:b8:36:69:cc:48:d7:4c:01: 71:a4:fd:3b:2f:12:2e:84:de:00:ef:bb:60:b0:8b: ed:c7:61:01:34:a9:d3:ec:65:b5:5c:ae:53:77:9d: ea:57:11:36:6e:4a:65:05:0b:3c:50:34:50:a3:54: b0:6b:1a:b7:4c:cc:13:53:1e:d8:ef:e4:94:c5:c8: 15:7e:5f:3d:ef:b5:37:9b:af:0e:e3:7f:62:ef:87: f1:f7:7d:d6:9a:cb:3a:bd:49:f1:07:98:f3:e4:80: a4:a4:b8:98:b0:58:25:66:af:2c:cc:ca:9c:d6:d0: 22:cd:16:10:a5:f6:99:4e:5b:69:a8:ff:6a:06:d7: cd:53:59:55:b7:12:f0:54:ad:35:09:d8:18:c4:99: fc:4c:9e:9d:66:e2:0a:03:0e:f8:44:7a:e9:6e:ec: a2:5f:4a:e7:ec:da:eb:78:89:22:f0:5c:0a:44:0f: b1:54:3e:f3:f2:31:c0:3e:3b:8c:97:c3:9b:d9:2c: ae:e5:ac:5a:dc:bd:7b:d0:eb:39:d5:a5:26:eb:9a: 67:ba:62:be:fb:79:02:20:c4:50:5e:c5:55:e9:1f: da:64:61:b1:bc:40:6d:12:15:2f:0b:5a:6d:e0:38: 63:a6:c7:65:57:4f:e9:5b:2f:67:51:d0:f9:42:ce: a8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7B:69:0D:30:A9:A2:C7:8A:BC:24:54:21:55:B6:31:7C:02:56:3B X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:81:aa:03:42:6c:9e:24:14:d6:c9:32:61:c5:2b:1d:7b:d9: fd:35:46:4b:9d:56:d1:e3:04:ef:0d:3d:75:4a:dd:70:18:ba: 9e:73:9d:20:57:cd:5a:eb:d3:b0:76:a0:9b:1c:75:ef:7d:0f: cb:54:a7:9a:e8:3b:7f:52:5a:81:b4:b0:a2:9f:81:23:d6:43: c9:25:7d:22:20:1e:53:a3:e2:14:ec:f5:dd:ec:24:a2:ce:c6: bf:96:a9:77:7b:ab:d0:4f:9a:76:b2:dc:56:d3:57:96:cb:46: cb:5f:fe:fb:6f:53:88:0e:97:c2:a2:9d:d4:ac:cf:2b:6b:13: 16:ff:a1:e8:9c:dc:de:95:4b:d2:4f:e7:82:b4:7f:24:c6:5f: bb:cf:57:96:ca:d1:45:24:5e:ca:ca:b1:34:af:65:ec:6f:34: 92:e2:61:fe:89:e0:3d:69:fd:98:cf:b2:14:a9:a6:91:93:7a: 5e:26:75:cb:9f:d3:2b:3a:88:c4:02:14:92:15:cb:f3:52:c8: a3:25:cf:ee:97:37:9d:cd:f6:f9:43:f4:e5:7a:58:d2:d1:19: d6:fc:fe:1b:1d:e8:dd:db:f3:79:d0:38:e8:c9:7b:86:33:f3: 85:41:b7:d1:bb:34:92:67:83:46:bc:3b:f7:07:5b:69:4e:5f: 3c:05:d4:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGf902XQVpOhbazDRkvZVNHm5VFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA2MTUxMDE2MzZaFw0yNTA2MTgxNDExMzZaMDMxMTAvBgNV BAMTKDBDN0I2OTBEMzBBOUEyQzc4QUJDMjQ1NDIxNTVCNjMxN0MwMjU2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTzHe4C64NmnMSNdMAXGk/Tsv Ei6E3gDvu2Cwi+3HYQE0qdPsZbVcrlN3nepXETZuSmUFCzxQNFCjVLBrGrdMzBNT Htjv5JTFyBV+Xz3vtTebrw7jf2Lvh/H3fdaayzq9SfEHmPPkgKSkuJiwWCVmryzM ypzW0CLNFhCl9plOW2mo/2oG181TWVW3EvBUrTUJ2BjEmfxMnp1m4goDDvhEeulu 7KJfSufs2ut4iSLwXApED7FUPvPyMcA+O4yXw5vZLK7lrFrcvXvQ6znVpSbrmme6 Yr77eQIgxFBexVXpH9pkYbG8QG0SFS8LWm3gOGOmx2VXT+lbL2dR0PlCzqi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHtpDTCposeKvCRUIVW2MXwCVjswHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuBqgNCbJ4kFNbJMmHFKx172f01RkudVtHj BO8NPXVK3XAYup5znSBXzVrr07B2oJscde99D8tUp5roO39SWoG0sKKfgSPWQ8kl fSIgHlOj4hTs9d3sJKLOxr+WqXd7q9BPmnay3FbTV5bLRstf/vtvU4gOl8KindSs zytrExb/oeic3N6VS9JP54K0fyTGX7vPV5bK0UUkXsrKsTSvZexvNJLiYf6J4D1p /ZjPshSpppGTel4mdcuf0ys6iMQCFJIVy/NSyKMlz+6XN53N9vlD9OV6WNLRGdb8 /hsd6N3b83nQOOjJe4Yz84VBt9G7NJJng0a8O/cHW2lOXzwF1Ko= -----END CERTIFICATE-----Generated at Mon Jun 16 04:25:46 2025 by rpki-client