$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: yq/TfAmJAFd5V5GeOSoqsPS8PPnroILhnl5+Dy12Hn8= Subject key identifier: 39:AF:92:B6:37:C9:0D:7E:BC:FD:28:AC:3F:9B:65:42:5A:85:74:0E Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 541690798ED0141A7C724A55EFCAFE2E22800643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 9F Signing time: Tue 17 Jun 2025 03:21:49 +0000 Manifest this update: Tue 17 Jun 2025 03:16:49 +0000 Manifest next update: Fri 20 Jun 2025 07:17:49 +0000 Files and hashes: 1: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 2: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: SnL0SOLZpk7zBRZHKlMHdPtcDBo6r3H3UPUKE/vpuew=) 3: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) 4: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 07:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:16:90:79:8e:d0:14:1a:7c:72:4a:55:ef:ca:fe:2e:22:80:06:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Jun 17 03:16:49 2025 GMT Not After : Jun 20 07:17:49 2025 GMT Subject: CN=39AF92B637C90D7EBCFD28AC3F9B65425A85740E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:7c:ad:63:d5:bf:b1:7e:5f:91:f6:86:ab: 1c:e3:70:1f:80:ad:8f:2a:1e:e8:cf:e4:5f:71:e6: d9:48:6d:00:0c:d5:ce:4a:58:54:96:46:f4:32:d3: 2c:a7:de:50:ab:dd:29:9c:4d:f8:3e:9c:60:e2:84: 46:79:36:11:19:26:ae:77:8c:06:41:1f:a3:eb:a8: b7:5e:36:b3:32:31:97:93:e3:70:4b:e2:0f:db:6e: e9:75:51:d9:69:f0:74:ae:f0:71:80:c5:a8:36:bf: 9d:f5:05:94:10:90:d7:ae:62:b0:2e:87:b6:3a:81: 63:73:34:86:e0:35:12:0b:dc:24:f2:66:44:80:01: 1b:61:b0:60:9c:40:24:c9:39:aa:40:69:4a:91:d6: 04:e8:8e:fb:ed:d3:a7:46:38:3c:b2:ec:77:84:f8: 91:69:a0:cd:22:aa:1e:46:6a:53:e1:9a:98:e2:88: 2a:01:cf:7a:34:96:65:9b:85:92:a6:4f:da:56:ea: ac:29:5f:f9:4f:b2:4a:8c:c6:0f:f7:6a:ba:70:a6: ba:b1:b8:98:f6:61:c5:3b:52:80:91:34:d2:78:5f: f8:6e:1c:b1:43:b0:8a:9d:1b:1f:a4:9e:93:33:a0: 1b:b1:91:29:59:42:04:71:40:5e:30:85:03:97:73: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:92:B6:37:C9:0D:7E:BC:FD:28:AC:3F:9B:65:42:5A:85:74:0E X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:5e:59:37:1a:ad:2b:83:cf:74:7a:f2:26:dc:43:9e:84:e7: fa:30:1d:a2:0d:1f:eb:51:85:19:1c:8e:85:ba:cd:49:96:29: 0e:d2:86:06:71:0f:c4:7e:93:bc:b5:7f:02:3a:95:d7:35:5c: 8a:bd:79:2d:9f:ac:c7:c1:9a:d9:76:bc:21:78:a1:30:10:22: 85:06:d7:93:ef:5a:47:86:81:03:2e:23:3e:ab:2f:ff:65:b7: 3a:ae:6d:ec:ad:9b:fa:6b:d2:0f:7a:f6:4e:8a:9c:7f:41:64: 36:d4:b7:a3:5c:0a:44:82:ba:7d:e6:09:0d:fd:61:79:59:39: 43:d5:2e:6f:66:22:2f:97:8b:8b:a3:2c:de:4c:bd:07:5e:9d: 54:17:3b:80:f3:81:c6:be:fd:bd:bc:8b:5d:75:62:88:4c:84: af:23:7c:be:f5:57:ae:23:c3:7c:d0:01:de:9f:36:a6:81:95: 00:83:dd:99:1c:54:f4:5f:96:75:25:f9:74:50:af:07:f2:ae: c5:7e:da:b0:2e:6c:50:6d:a7:5e:85:40:53:ad:74:16:71:6c: 9e:28:c1:21:d2:87:6e:33:90:6d:cc:6a:70:8e:ab:f9:c9:f6: 5f:76:ba:60:35:85:11:71:bf:39:3b:88:8d:21:13:c1:df:97: cc:61:e3:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBaQeY7QFBp8ckpV78r+LiKABkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTA2MTcwMzE2NDlaFw0yNTA2MjAwNzE3NDlaMDMxMTAvBgNV BAMTKDM5QUY5MkI2MzdDOTBEN0VCQ0ZEMjhBQzNGOUI2NTQyNUE4NTc0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpXytY9W/sX5fkfaGqxzjcB+A rY8qHujP5F9x5tlIbQAM1c5KWFSWRvQy0yyn3lCr3SmcTfg+nGDihEZ5NhEZJq53 jAZBH6PrqLdeNrMyMZeT43BL4g/bbul1Udlp8HSu8HGAxag2v531BZQQkNeuYrAu h7Y6gWNzNIbgNRIL3CTyZkSAARthsGCcQCTJOapAaUqR1gTojvvt06dGODyy7HeE +JFpoM0iqh5GalPhmpjiiCoBz3o0lmWbhZKmT9pW6qwpX/lPskqMxg/3arpwprqx uJj2YcU7UoCRNNJ4X/huHLFDsIqdGx+knpMzoBuxkSlZQgRxQF4whQOXcyxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOa+StjfJDX68/SisP5tlQlqFdA4wHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5eWTcarSuDz3R68ibcQ56E5/owHaINH+tR hRkcjoW6zUmWKQ7ShgZxD8R+k7y1fwI6ldc1XIq9eS2frMfBmtl2vCF4oTAQIoUG 15PvWkeGgQMuIz6rL/9ltzqubeytm/pr0g969k6KnH9BZDbUt6NcCkSCun3mCQ39 YXlZOUPVLm9mIi+Xi4ujLN5MvQdenVQXO4Dzgca+/b28i111YohMhK8jfL71V64j w3zQAd6fNqaBlQCD3ZkcVPRflnUl+XRQrwfyrsV+2rAubFBtp16FQFOtdBZxbJ4o wSHSh24zkG3ManCOq/nJ9l92umA1hRFxvzk7iI0hE8Hfl8xh4/A= -----END CERTIFICATE-----Generated at Wed Jun 18 01:56:15 2025 by rpki-client