$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: K2dB7yZNMZxakI/nP4buyySChXb4DuOuuQSqUU5fm+4= Subject key identifier: 9A:A1:09:DF:A3:42:9E:CB:24:91:16:D6:8C:1E:82:C0:39:11:05:B3 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 3F8CC235D582C04D792C0EDD4F400C786C0E9DF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 04B8 Signing time: Tue 17 Jun 2025 05:21:36 +0000 Manifest this update: Tue 17 Jun 2025 05:16:36 +0000 Manifest next update: Fri 20 Jun 2025 08:07:36 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: sc3l8XWA46yVcKy7i7VW+dId2t2AmaozSEsADMIdfW4=) 2: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: DuhUCUcMzzwQbszqp73muIGEj5vTZLYTrE1Orwq5PDA=) 3: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: T3m8FCWNJK+RVPg/hxCti3q4f+FxE3xDrofjxIUWm4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 08:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8c:c2:35:d5:82:c0:4d:79:2c:0e:dd:4f:40:0c:78:6c:0e:9d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Jun 17 05:16:36 2025 GMT Not After : Jun 20 08:07:36 2025 GMT Subject: CN=9AA109DFA3429ECB249116D68C1E82C0391105B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:e7:47:45:14:b6:87:56:08:d8:ad:c9:4c: 07:41:fc:2d:c2:be:da:2a:2f:02:70:6b:6d:d2:bb: c7:a4:7e:1c:01:09:cf:e7:9e:e1:c8:3b:e8:e1:aa: 7a:ce:91:c6:3c:a1:28:f0:0c:d1:1e:4b:a1:f3:95: a2:b4:fc:c3:26:5b:25:73:4e:bf:62:74:5c:1a:cd: 19:e6:30:e3:6e:1d:59:df:41:6d:88:48:9d:4d:8f: 83:99:80:b7:20:b8:aa:d9:f1:8a:fc:50:d3:db:02: 75:4d:e1:7b:e5:1e:03:16:4c:02:a4:ee:a2:b7:26: b3:7f:99:ed:be:f3:e9:b9:1d:25:27:eb:1c:5b:4b: f9:7f:84:8f:52:2e:17:7f:af:fa:c8:0a:c6:d9:ad: f8:94:e3:5b:96:f6:14:ec:f2:26:07:82:0e:f1:57: 67:5d:fd:49:57:be:e4:b0:90:3d:eb:18:bf:9c:d6: 10:b8:93:87:ec:31:b0:5a:ea:9c:d2:d0:f1:40:83: 2a:79:4a:7e:c3:f2:9a:03:6a:48:d7:9c:43:af:3c: d9:a9:9a:60:e5:8b:15:76:a2:0a:11:51:bb:e6:67: 2c:3b:f5:50:ee:16:d7:fb:0d:bf:33:31:c5:7c:bf: b5:fc:23:43:d0:68:db:9f:9f:85:6c:7d:ce:06:0f: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:09:DF:A3:42:9E:CB:24:91:16:D6:8C:1E:82:C0:39:11:05:B3 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:3d:79:b2:b0:6c:09:2a:e7:0d:96:47:9d:94:92:1d:12:f0: 77:56:d0:13:f8:cc:cf:c1:0d:70:c0:06:8f:bc:36:0e:88:6b: f2:fd:70:95:63:c2:5e:b9:6c:1f:25:9f:61:4a:22:6e:f0:6e: 81:0f:a2:64:b3:be:27:46:26:32:06:b7:08:40:db:d6:23:17: 6a:d6:05:74:43:f6:75:bf:e9:43:66:29:f5:a4:c5:2e:12:7f: ec:86:25:b6:65:e1:89:fd:46:38:ec:4b:69:9e:9c:22:d5:5c: 72:de:06:cd:28:8f:a1:4f:66:02:8f:11:d6:d4:b3:25:7a:25: a3:45:b5:1f:0d:f0:49:44:62:43:2f:11:18:ca:66:ee:fc:4d: 3a:e4:2e:75:d4:c2:70:a4:9e:5f:09:5d:43:96:74:7e:be:2f: ec:17:e8:4a:b7:dd:20:bf:25:5f:24:5a:f1:79:b1:c8:33:76: 55:b0:e7:47:3b:6a:ed:9d:50:3c:f9:99:a9:a7:11:fd:2a:32: 40:ca:bf:16:ca:65:bc:e5:e4:ee:21:e5:ed:88:c1:ef:11:d5: 77:0e:90:63:8c:b7:ff:64:04:e5:c0:41:34:2c:02:b2:8b:2f: 9b:0c:85:bb:e7:79:6f:0d:f6:95:6a:83:71:cb:9f:f4:50:bc: ec:b7:0b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4zCNdWCwE15LA7dT0AMeGwOnfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNTA2MTcwNTE2MzZaFw0yNTA2MjAwODA3MzZaMDMxMTAvBgNV BAMTKDlBQTEwOURGQTM0MjlFQ0IyNDkxMTZENjhDMUU4MkMwMzkxMTA1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KOdHRRS2h1YI2K3JTAdB/C3C vtoqLwJwa23Su8ekfhwBCc/nnuHIO+jhqnrOkcY8oSjwDNEeS6HzlaK0/MMmWyVz Tr9idFwazRnmMONuHVnfQW2ISJ1Nj4OZgLcguKrZ8Yr8UNPbAnVN4XvlHgMWTAKk 7qK3JrN/me2+8+m5HSUn6xxbS/l/hI9SLhd/r/rICsbZrfiU41uW9hTs8iYHgg7x V2dd/UlXvuSwkD3rGL+c1hC4k4fsMbBa6pzS0PFAgyp5Sn7D8poDakjXnEOvPNmp mmDlixV2ogoRUbvmZyw79VDuFtf7Db8zMcV8v7X8I0PQaNufn4Vsfc4GD6fhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqEJ36NCnsskkRbWjB6CwDkRBbMwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN89ebKwbAkq5w2WR52Ukh0S8HdW0BP4zM/B DXDABo+8Ng6Ia/L9cJVjwl65bB8ln2FKIm7wboEPomSzvidGJjIGtwhA29YjF2rW BXRD9nW/6UNmKfWkxS4Sf+yGJbZl4Yn9RjjsS2menCLVXHLeBs0oj6FPZgKPEdbU syV6JaNFtR8N8ElEYkMvERjKZu78TTrkLnXUwnCknl8JXUOWdH6+L+wX6Eq33SC/ JV8kWvF5scgzdlWw50c7au2dUDz5mamnEf0qMkDKvxbKZbzl5O4h5e2Iwe8R1XcO kGOMt/9kBOXAQTQsArKLL5sMhbvneW8N9pVqg3HLn/RQvOy3C6s= -----END CERTIFICATE-----Generated at Wed Jun 18 13:05:01 2025 by rpki-client