$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: Wxm+sN4CoSfGnRDhUjmYvajWWJYhXHcXMVCe23W66A0= Subject key identifier: 42:72:24:F1:3D:BA:1D:07:7C:02:D1:8C:EE:B9:73:3F:7D:8A:78:93 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 4255AF370174C38326FF77884CCC9874CFBAF4D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: AE Signing time: Fri 13 Jun 2025 16:51:47 +0000 Manifest this update: Fri 13 Jun 2025 16:46:47 +0000 Manifest next update: Mon 16 Jun 2025 22:34:47 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: miNVMDAmBhf1/TyzcfmzzB4aTDc7ExnI6AUxSsdE9TE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 22:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:55:af:37:01:74:c3:83:26:ff:77:88:4c:cc:98:74:cf:ba:f4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Jun 13 16:46:47 2025 GMT Not After : Jun 16 22:34:47 2025 GMT Subject: CN=427224F13DBA1D077C02D18CEEB9733F7D8A7893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:85:a2:a4:66:a0:81:0c:a0:28:56:a0:d9: 07:c5:88:04:ce:c7:56:14:b0:53:9b:4b:23:33:66: 4a:26:ac:a4:79:ae:2d:73:ac:78:5f:54:c6:c4:44: ca:d6:75:6c:ae:a7:ae:d3:16:08:c5:09:be:77:51: 99:32:a2:f7:47:5c:8e:7f:ca:23:67:60:4a:b9:da: 5a:c6:50:0e:a1:0c:b9:06:8b:3a:bf:61:d6:46:aa: ec:cd:3b:6e:e5:68:c2:cf:a0:09:28:00:58:0d:6c: 75:98:70:23:97:a3:14:68:8d:81:a8:24:d0:04:15: ec:4e:21:b1:a4:57:4e:e7:c6:b1:bb:d4:a7:ba:ff: 20:7d:62:73:c4:68:a0:fa:75:69:aa:ae:d1:bc:13: 91:21:54:b1:b8:b3:3d:a5:c3:09:ed:7e:0f:6a:c2: fe:1b:fe:f9:c8:c3:e1:12:4e:c9:b3:19:29:fb:8d: 6a:b7:90:0a:77:eb:85:f5:cf:03:e3:7f:51:0b:f4: 9a:5a:bc:8c:7b:90:e2:80:5e:0e:1f:e9:3a:78:eb: cc:1f:bf:97:1a:9c:34:33:75:03:c0:43:b8:24:26: 04:8d:41:0f:3d:d8:62:5e:7d:c7:40:ba:97:94:f6: 0a:7d:d0:43:a4:2e:3b:79:bf:50:de:d2:8a:0b:d3: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:72:24:F1:3D:BA:1D:07:7C:02:D1:8C:EE:B9:73:3F:7D:8A:78:93 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d9:3b:fa:9a:3f:b7:b9:45:11:4a:c8:76:24:8b:4b:79:eb: fb:81:9d:7e:96:e0:79:26:5f:ee:07:16:3e:cb:04:e4:36:7e: fa:30:c3:15:15:9a:32:3b:e9:4c:8f:34:f9:96:bf:bb:1a:01: 3d:72:7d:33:22:8b:f5:b5:15:10:c1:0d:7d:a4:f3:44:8d:55: 9a:47:34:54:f9:3b:c0:85:92:69:dc:13:d9:a1:b5:2f:38:60: c2:c9:f7:ca:0b:e7:c0:f8:4a:d7:20:3d:e5:4f:f2:d8:bd:9d: 55:20:6d:52:3a:b7:31:6d:c8:f8:21:17:7f:17:46:07:d6:a3: bc:b3:0f:0f:2a:eb:41:21:d6:3f:61:a7:ae:db:22:84:e5:d7: 80:82:ab:29:df:3a:27:72:f0:4c:8e:0e:09:10:9b:3f:5c:7d: 5c:80:1b:ba:72:9d:88:5a:00:55:8d:2b:7e:fc:a1:85:71:75: 5b:74:b4:aa:ae:70:52:de:99:63:96:85:ad:92:56:9c:ee:7b: f4:07:a9:3e:9a:fb:04:fe:db:b1:a1:46:b2:b9:a3:94:9f:54: 31:94:e1:47:8e:0f:80:ed:d1:68:e1:f6:4e:c7:e5:bb:ec:b6: 00:82:e1:80:a7:9f:a0:42:9c:e9:f9:da:e3:33:5b:d4:6e:df: 32:b2:b8:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlWvNwF0w4Mm/3eITMyYdM+69NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTA2MTMxNjQ2NDdaFw0yNTA2MTYyMjM0NDdaMDMxMTAvBgNV BAMTKDQyNzIyNEYxM0RCQTFEMDc3QzAyRDE4Q0VFQjk3MzNGN0Q4QTc4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmIWipGaggQygKFag2QfFiATO x1YUsFObSyMzZkomrKR5ri1zrHhfVMbERMrWdWyup67TFgjFCb53UZkyovdHXI5/ yiNnYEq52lrGUA6hDLkGizq/YdZGquzNO27laMLPoAkoAFgNbHWYcCOXoxRojYGo JNAEFexOIbGkV07nxrG71Ke6/yB9YnPEaKD6dWmqrtG8E5EhVLG4sz2lwwntfg9q wv4b/vnIw+ESTsmzGSn7jWq3kAp364X1zwPjf1EL9JpavIx7kOKAXg4f6Tp468wf v5canDQzdQPAQ7gkJgSNQQ892GJefcdAupeU9gp90EOkLjt5v1De0ooL0z/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnIk8T26HQd8AtGM7rlzP32KeJMwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXZO/qaP7e5RRFKyHYki0t56/uBnX6W4Hkm X+4HFj7LBOQ2fvowwxUVmjI76UyPNPmWv7saAT1yfTMii/W1FRDBDX2k80SNVZpH NFT5O8CFkmncE9mhtS84YMLJ98oL58D4StcgPeVP8ti9nVUgbVI6tzFtyPghF38X RgfWo7yzDw8q60Eh1j9hp67bIoTl14CCqynfOidy8EyODgkQmz9cfVyAG7pynYha AFWNK378oYVxdVt0tKqucFLemWOWha2SVpzue/QHqT6a+wT+27GhRrK5o5SfVDGU 4UeOD4Dt0Wjh9k7H5bvstgCC4YCnn6BCnOn52uMzW9Ru3zKyuA0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:26:14 2025 by rpki-client