$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: yWeggCKwIaESXS73L0fVfUbwkMI4xbjeZqvl/94Jm9g= Subject key identifier: 44:D4:29:FF:53:D1:18:B8:1C:18:03:D8:7B:CB:54:30:5F:43:07:A6 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 037391BAB17F215D7FE3C07BDAC77D71235CE064 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 01DE Signing time: Tue 29 Apr 2025 04:52:12 +0000 Manifest this update: Tue 29 Apr 2025 04:47:12 +0000 Manifest next update: Fri 02 May 2025 07:50:12 +0000 Files and hashes: 1: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: slXnpLzAVmDUcnwKF4wOkRH6vCGLAlq8EPuI6mdYjZU=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 3: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 4: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 5: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:73:91:ba:b1:7f:21:5d:7f:e3:c0:7b:da:c7:7d:71:23:5c:e0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Apr 29 04:47:12 2025 GMT Not After : May 2 07:50:12 2025 GMT Subject: CN=44D429FF53D118B81C1803D87BCB54305F4307A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:68:eb:6a:1c:44:79:b6:bc:4c:c7:11:40: 2e:f3:8d:3d:4e:43:58:ac:33:0c:74:bd:a9:eb:e1: fc:ae:f1:73:5f:78:ff:f9:79:48:81:26:5f:56:ce: a0:ab:d8:1b:de:23:aa:58:f6:b9:51:76:8c:80:2c: 3b:ed:ff:2c:85:4a:db:88:91:51:15:9a:5e:28:b1: 1b:a6:7f:96:c7:80:69:86:69:38:dd:60:35:55:26: 1b:78:55:89:82:d6:c1:83:12:ae:60:79:5c:bc:6d: 84:a3:d5:68:da:6f:ef:ff:af:d6:e9:7a:a0:4b:f7: 89:26:ab:c6:65:fe:b5:ff:4d:7e:6a:73:d1:97:ec: 68:7e:d8:a9:6e:4f:e7:cb:5b:8e:09:70:da:aa:46: 50:be:9d:29:3b:df:a5:fb:03:84:f9:20:49:a0:2d: bc:a1:e5:4c:f3:71:da:03:31:45:02:2b:85:a0:1f: 6e:20:9a:41:21:92:c1:13:75:ad:32:66:d0:f0:a3: 4e:39:03:77:cc:dd:ee:a2:fe:be:50:af:a3:e2:73: 69:e3:5e:dd:57:04:c3:03:e3:96:2c:da:90:82:15: fc:3f:5c:73:80:d6:78:c4:45:b9:b3:1b:31:81:0f: 8d:44:98:02:03:16:bb:e1:aa:d7:3f:6c:68:2e:76: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D4:29:FF:53:D1:18:B8:1C:18:03:D8:7B:CB:54:30:5F:43:07:A6 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:19:69:05:72:5f:8c:0f:70:ed:89:c5:84:cc:53:9f:8c: 21:1c:e8:16:3b:f9:cc:f9:fe:28:46:7a:32:0f:35:81:01:84: 91:b9:8b:6f:e9:8c:f5:95:de:76:70:5b:b4:8e:2e:d2:fc:4e: 23:7e:d2:3c:c3:a7:1b:cb:64:43:3c:81:84:d1:6e:7e:d3:28: 53:04:93:99:a0:32:a6:c2:13:1d:b3:bb:f2:30:e7:13:2d:47: 30:bd:b6:c8:c0:4b:98:09:11:4b:c7:8c:67:88:b2:f8:5f:cc: 84:0d:f2:82:ba:b2:87:6c:86:3c:59:93:7c:f7:13:c2:29:c0: 81:4f:20:02:2c:db:e2:9b:ab:81:92:6a:46:08:06:69:a3:b0: 32:99:39:b0:50:fa:11:d5:1a:cf:47:31:2b:21:36:54:b7:ca: 67:78:60:5a:2e:d0:fd:18:62:e1:30:57:0a:73:48:ab:57:6c: a6:5a:e7:97:46:a8:af:5a:1e:3a:61:07:8b:31:9f:7b:90:94: 0b:3e:57:18:6f:77:71:3b:7b:da:ec:bd:40:8d:ca:76:33:c2: a6:e6:3d:1f:b1:69:e6:19:c1:b4:5f:5f:36:d7:6b:1d:29:35: 64:2a:c5:07:73:af:2e:e7:2c:9c:a7:09:6f:76:18:50:20:45: 7c:6b:05:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3ORurF/IV1/48B72sd9cSNc4GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA0MjkwNDQ3MTJaFw0yNTA1MDIwNzUwMTJaMDMxMTAvBgNV BAMTKDQ0RDQyOUZGNTNEMTE4QjgxQzE4MDNEODdCQ0I1NDMwNUY0MzA3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PGjrahxEeba8TMcRQC7zjT1O Q1isMwx0vanr4fyu8XNfeP/5eUiBJl9WzqCr2BveI6pY9rlRdoyALDvt/yyFStuI kVEVml4osRumf5bHgGmGaTjdYDVVJht4VYmC1sGDEq5geVy8bYSj1Wjab+//r9bp eqBL94kmq8Zl/rX/TX5qc9GX7Gh+2KluT+fLW44JcNqqRlC+nSk736X7A4T5IEmg Lbyh5UzzcdoDMUUCK4WgH24gmkEhksETda0yZtDwo045A3fM3e6i/r5Qr6Pic2nj Xt1XBMMD45Ys2pCCFfw/XHOA1njERbmzGzGBD41EmAIDFrvhqtc/bGgudtHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNQp/1PRGLgcGAPYe8tUMF9DB6YwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI7GWkFcl+MD3DticWEzFOfjCEc6BY7+cz5 /ihGejIPNYEBhJG5i2/pjPWV3nZwW7SOLtL8TiN+0jzDpxvLZEM8gYTRbn7TKFME k5mgMqbCEx2zu/Iw5xMtRzC9tsjAS5gJEUvHjGeIsvhfzIQN8oK6sodshjxZk3z3 E8IpwIFPIAIs2+Kbq4GSakYIBmmjsDKZObBQ+hHVGs9HMSshNlS3ymd4YFou0P0Y YuEwVwpzSKtXbKZa55dGqK9aHjphB4sxn3uQlAs+Vxhvd3E7e9rsvUCNynYzwqbm PR+xaeYZwbRfXzbXax0pNWQqxQdzry7nLJynCW92GFAgRXxrBUM= -----END CERTIFICATE-----Generated at Wed Apr 30 03:40:05 2025 by rpki-client