$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft File: 629890514AA221B57B4953527F103DA692ECA8E7.mft (raw, json) Hash identifier: 61jBeWXHV2PuwFcAv7ePPeKw0eF+0Dk0QAj7ipDXGWM= Subject key identifier: 6E:6A:94:B8:F6:30:D1:E0:27:88:12:72:C9:3C:89:5B:B4:D4:89:85 Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 Certificate issuer: /CN=629890514AA221B57B4953527F103DA692ECA8E7 Certificate serial: 3DFBB6113422F048BDBB241CD3032F0D0DE29A94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft Manifest number: 0118 Signing time: Fri 08 Aug 2025 22:51:22 +0000 Manifest this update: Fri 08 Aug 2025 22:46:22 +0000 Manifest next update: Tue 12 Aug 2025 01:34:22 +0000 Files and hashes: 1: 629890514AA221B57B4953527F103DA692ECA8E7.crl (hash: cqTl6Z3+m36bJNA3BMWtKbCXPk4umJjVgAblZcqOgsA=) 2: 3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (hash: P7QsgIeBI6Jlmylg4E9bqTZzbWkEwew+La7Hoh4W7Lw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fb:b6:11:34:22:f0:48:bd:bb:24:1c:d3:03:2f:0d:0d:e2:9a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7 Validity Not Before: Aug 8 22:46:22 2025 GMT Not After : Aug 12 01:34:22 2025 GMT Subject: CN=6E6A94B8F630D1E027881272C93C895BB4D48985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:7e:a0:48:d8:78:fe:0c:39:4c:5b:02:e3: 03:f4:d3:c7:0d:b8:14:8e:60:d5:91:20:46:d3:22: d5:74:2e:86:af:b3:4e:bd:fb:0e:47:97:c3:8b:c9: c5:60:db:00:14:e3:ba:15:9b:2a:40:f9:f4:a1:e2: 59:ce:15:ea:bb:4b:ea:d2:ea:f3:91:e7:74:ae:ea: a0:77:b1:11:b0:cc:bd:7e:02:04:ee:40:67:bb:cc: 15:5f:eb:91:ec:a7:e0:15:03:3e:ea:2f:77:f9:51: ef:78:3b:bb:e3:51:ba:06:09:69:35:d9:3b:d7:66: cf:fe:a0:47:40:b8:42:0e:45:23:4a:8f:15:e4:c2: 0f:a4:bb:76:b1:4e:ba:9f:cd:c4:a5:6c:5e:75:5e: d5:f4:5c:db:b5:a5:f7:5a:8e:c9:ad:e0:75:0b:15: 30:46:7e:b3:92:ff:60:df:c4:7d:e0:0c:8c:43:d5: 69:01:b9:be:a0:d9:ca:df:ae:44:68:2b:71:bc:8b: 8f:85:71:10:1a:5e:d5:df:e3:e5:e7:b4:73:50:fe: 4a:39:07:e0:ef:91:c3:34:cd:33:92:2d:0c:51:f6: 2e:2f:7d:45:90:b6:58:d9:ef:b2:3f:21:73:1b:bb: ff:bf:91:a4:b7:ba:d3:a1:06:58:c1:37:a0:98:23: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6A:94:B8:F6:30:D1:E0:27:88:12:72:C9:3C:89:5B:B4:D4:89:85 X509v3 Authority Key Identifier: keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8f:02:13:43:b4:4e:83:ed:ef:f7:5c:01:d8:e5:02:91:bb: 52:9f:e5:9a:fe:22:27:ec:29:65:ab:42:77:cf:43:34:c6:62: b1:9a:5e:18:05:6e:e6:20:5c:14:e2:78:5d:9d:6a:3c:0a:0f: ae:46:e9:ee:d5:c0:5a:94:87:28:1a:b4:a2:4a:a2:2f:37:db: 75:72:e6:7a:22:cb:e3:1e:94:50:c8:76:eb:61:2b:e1:e4:ef: 93:8c:35:30:40:84:44:94:02:85:a3:93:b9:f6:6a:f2:55:e7: 9c:dd:ad:9b:ce:31:d0:8f:9c:a0:82:f3:e8:e8:0f:38:12:3c: 70:a8:fe:bf:7b:0b:1e:eb:55:fc:e6:5e:07:50:4c:1e:da:8f: 13:4e:b5:f3:35:18:0f:43:51:e7:94:91:ab:68:0a:6b:ec:e3: a4:9b:d6:c3:25:ff:9e:6c:22:07:a1:c0:a6:76:0e:ba:4a:0d: c4:95:9b:90:5f:f2:94:d6:a6:5b:14:72:c8:40:44:ff:02:a1: 7a:ad:c4:6d:de:5c:74:1f:02:cd:6b:01:67:26:ef:a4:eb:1b: 7e:ae:e2:2c:0f:46:52:df:6d:a3:17:b5:04:cb:ea:f8:a9:83: d9:26:37:ca:2f:06:2e:c6:8e:58:f6:a3:65:e3:c2:6a:8e:7f: 49:59:0a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfu2ETQi8Ei9uyQc0wMvDQ3impQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5 MkVDQThFNzAeFw0yNTA4MDgyMjQ2MjJaFw0yNTA4MTIwMTM0MjJaMDMxMTAvBgNV BAMTKDZFNkE5NEI4RjYzMEQxRTAyNzg4MTI3MkM5M0M4OTVCQjRENDg5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD136gSNh4/gw5TFsC4wP008cN uBSOYNWRIEbTItV0Loavs069+w5Hl8OLycVg2wAU47oVmypA+fSh4lnOFeq7S+rS 6vOR53Su6qB3sRGwzL1+AgTuQGe7zBVf65Hsp+AVAz7qL3f5Ue94O7vjUboGCWk1 2TvXZs/+oEdAuEIORSNKjxXkwg+ku3axTrqfzcSlbF51XtX0XNu1pfdajsmt4HUL FTBGfrOS/2DfxH3gDIxD1WkBub6g2crfrkRoK3G8i4+FcRAaXtXf4+XntHNQ/ko5 B+DvkcM0zTOSLQxR9i4vfUWQtljZ77I/IXMbu/+/kaS3utOhBljBN6CYIx1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmqUuPYw0eAniBJyyTyJW7TUiYUwHwYDVR0j BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD QThFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQ2ZTE0N2YtMTMwNC00ZTY5LTk1 MWMtODkzMTBkZmU4NTllLzAvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNE QTY5MkVDQThFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSPAhNDtE6D7e/3XAHY5QKRu1Kf5Zr+Iifs KWWrQnfPQzTGYrGaXhgFbuYgXBTieF2dajwKD65G6e7VwFqUhygatKJKoi8323Vy 5noiy+MelFDIduthK+Hk75OMNTBAhESUAoWjk7n2avJV55zdrZvOMdCPnKCC8+jo DzgSPHCo/r97Cx7rVfzmXgdQTB7ajxNOtfM1GA9DUeeUkatoCmvs46Sb1sMl/55s IgehwKZ2DrpKDcSVm5Bf8pTWplsUcshARP8CoXqtxG3eXHQfAs1rAWcm76TrG36u 4iwPRlLfbaMXtQTL6vipg9kmN8ovBi7Gjlj2o2XjwmqOf0lZCug= -----END CERTIFICATE-----Generated at Mon Aug 11 01:46:05 2025 by rpki-client