$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: MDnHgJBniNs7TTljgjYf2REDvdz2xcZHmm4TUvpHcFM= Subject key identifier: 7F:B1:97:CF:95:68:B6:85:A8:3A:4C:6F:54:23:7E:8E:1F:9C:4F:DE Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 765AF211F85F204E61E60BFF134AEA8660441D5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 01F3 Signing time: Sun 15 Jun 2025 07:52:13 +0000 Manifest this update: Sun 15 Jun 2025 07:47:13 +0000 Manifest next update: Wed 18 Jun 2025 08:57:13 +0000 Files and hashes: 1: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 3: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 5: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: 3BX4PXZGnna+CKb5JjW0NsFJAoaLZze/ulCMTY+mxEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5a:f2:11:f8:5f:20:4e:61:e6:0b:ff:13:4a:ea:86:60:44:1d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Jun 15 07:47:13 2025 GMT Not After : Jun 18 08:57:13 2025 GMT Subject: CN=7FB197CF9568B685A83A4C6F54237E8E1F9C4FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:9b:e2:24:8e:34:cf:d0:60:1a:a2:a0:b7: 48:61:4c:ea:c4:ec:05:f8:83:2e:1f:06:4a:ef:61: 13:70:37:34:b8:cb:3c:4a:ce:8a:cc:e7:47:65:73: 33:45:9d:25:2e:2d:cc:d9:45:75:27:7b:74:7f:ae: 27:09:93:53:1d:16:4f:78:3d:45:20:f1:5b:79:ad: b0:e0:b5:76:92:8c:37:b2:40:1f:f6:08:dc:5d:92: 08:d4:94:9a:30:dc:80:38:a4:56:58:e6:17:ee:dc: e2:3e:cf:88:e2:c1:aa:7c:a6:07:cd:7c:11:cd:0d: db:46:b1:3e:53:52:ec:17:3f:22:f6:6f:e3:35:42: 9a:6e:a3:b7:30:c2:9d:07:43:b4:bc:b1:59:d7:f8: 9b:49:1e:05:f2:54:7c:4d:12:dd:02:59:f7:bd:33: 40:5a:ea:c9:42:c4:60:1f:a8:e6:0f:7b:a2:14:87: 5b:31:e2:1e:2a:79:ce:9e:7f:3f:77:43:0e:a4:88: b6:77:79:e7:a2:6b:3f:0d:51:3c:57:70:7a:d8:b4: 79:f8:1a:b1:ba:e1:83:24:6b:d4:d4:65:04:03:8a: 5b:18:9c:40:3e:48:45:01:9c:77:9b:dc:6a:00:0a: 24:f4:27:14:ae:88:ed:ef:fe:fe:a8:f1:d2:76:23: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B1:97:CF:95:68:B6:85:A8:3A:4C:6F:54:23:7E:8E:1F:9C:4F:DE X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:23:35:32:27:84:f1:75:3a:8b:70:45:4c:35:40:e6:a5:2e: 61:72:e7:e5:31:89:3b:8a:65:8b:1c:7a:4f:b6:3e:e2:b5:e3: 89:02:f6:b2:06:ff:74:b7:09:3e:54:5e:dc:49:5f:9e:aa:7f: 19:c4:33:24:ac:08:3c:67:cc:03:40:d8:22:31:c4:fe:ed:01: e9:be:23:93:ca:cf:32:a6:aa:f0:c0:e2:a8:ce:2f:e3:ab:9c: ae:65:2a:10:71:49:90:2b:ff:da:c9:82:82:3d:f4:37:28:4a: f7:3d:9c:df:6d:1e:8a:1e:6b:6d:5c:c6:5d:70:18:12:75:f6: 27:68:3d:41:22:ee:d8:03:1a:12:39:4e:17:74:4c:38:a2:fd: 3d:7c:3c:9c:c4:d1:4b:d9:0e:4d:ee:58:cf:36:1a:61:f0:58: a6:a4:54:44:63:80:6a:b7:e2:5f:dd:e5:50:b8:98:19:63:24: af:39:32:0c:d7:1b:4e:2f:0f:e4:d5:bd:4e:c0:34:f0:68:9e: 1b:45:32:ca:2f:04:e7:17:b7:d4:78:5d:b0:9b:08:7c:53:40: cf:78:06:72:77:37:b9:74:e6:0a:19:6c:8f:e0:e5:25:47:17: 5a:a2:cd:68:c5:07:0e:de:e8:0c:3a:45:58:4d:7b:89:0c:8e: 3d:0f:26:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdlryEfhfIE5h5gv/E0rqhmBEHVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA2MTUwNzQ3MTNaFw0yNTA2MTgwODU3MTNaMDMxMTAvBgNV BAMTKDdGQjE5N0NGOTU2OEI2ODVBODNBNEM2RjU0MjM3RThFMUY5QzRGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuZviJI40z9BgGqKgt0hhTOrE 7AX4gy4fBkrvYRNwNzS4yzxKzorM50dlczNFnSUuLczZRXUne3R/ricJk1MdFk94 PUUg8Vt5rbDgtXaSjDeyQB/2CNxdkgjUlJow3IA4pFZY5hfu3OI+z4jiwap8pgfN fBHNDdtGsT5TUuwXPyL2b+M1Qppuo7cwwp0HQ7S8sVnX+JtJHgXyVHxNEt0CWfe9 M0Ba6slCxGAfqOYPe6IUh1sx4h4qec6efz93Qw6kiLZ3eeeiaz8NUTxXcHrYtHn4 GrG64YMka9TUZQQDilsYnEA+SEUBnHeb3GoACiT0JxSuiO3v/v6o8dJ2I4PtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7GXz5VotoWoOkxvVCN+jh+cT94wHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOAjNTInhPF1OotwRUw1QOalLmFy5+UxiTuK ZYscek+2PuK144kC9rIG/3S3CT5UXtxJX56qfxnEMySsCDxnzANA2CIxxP7tAem+ I5PKzzKmqvDA4qjOL+OrnK5lKhBxSZAr/9rJgoI99DcoSvc9nN9tHooea21cxl1w GBJ19idoPUEi7tgDGhI5Thd0TDii/T18PJzE0UvZDk3uWM82GmHwWKakVERjgGq3 4l/d5VC4mBljJK85MgzXG04vD+TVvU7ANPBonhtFMsovBOcXt9R4XbCbCHxTQM94 BnJ3N7l05goZbI/g5SVHF1qizWjFBw7e6Aw6RVhNe4kMjj0PJrc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:28:07 2025 by rpki-client