$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: OxGQ0N2CTm5eTZjqNoDWuom8Lq7wFoXHIkalP536/U8= Subject key identifier: 5A:B3:07:2D:7C:1F:37:94:47:7C:D6:25:59:AF:7F:41:68:81:34:02 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 021D61A408E4A66FDA47734321AC75DEE51AE454 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: E3 Signing time: Mon 16 Jun 2025 09:21:32 +0000 Manifest this update: Mon 16 Jun 2025 09:16:32 +0000 Manifest next update: Thu 19 Jun 2025 19:55:32 +0000 Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) 3: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) 4: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: TUVSzjI3YXeIjwbCPi8eEjIZsFWdXy0AV/S3DvoBV3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1d:61:a4:08:e4:a6:6f:da:47:73:43:21:ac:75:de:e5:1a:e4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Jun 16 09:16:32 2025 GMT Not After : Jun 19 19:55:32 2025 GMT Subject: CN=5AB3072D7C1F3794477CD62559AF7F4168813402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:75:6c:5e:84:e3:88:b1:19:56:71:4f:af: 4d:e0:75:78:78:4a:85:6a:79:b8:d4:5d:5f:f0:50: cc:bf:bf:d9:2d:d2:e7:fd:b2:9e:fc:77:ea:08:5c: 7c:de:03:46:d5:2d:4a:b7:fb:28:4c:c4:2a:7b:c6: 39:a0:fd:a5:98:a3:6b:fc:d9:53:d3:13:50:de:65: ac:3b:14:bb:a2:4a:f0:d0:7a:ea:d0:be:ba:79:28: 67:52:87:6d:36:ce:96:c0:b3:13:b7:db:67:1f:bd: 14:0a:2a:86:1b:6f:3a:02:61:96:8b:02:60:b4:93: e0:9c:d5:eb:36:77:c0:5c:58:3e:70:a0:5b:17:b9: 88:0d:51:eb:de:f7:08:19:8f:af:a6:37:ae:86:45: 52:7a:6d:93:45:2d:d3:dc:9c:d5:28:d7:18:af:f7: 4a:00:66:2c:f7:94:95:5f:59:cb:f4:78:86:05:76: 58:50:61:9b:49:9d:d0:7f:fc:91:2b:68:ad:a7:ee: 5c:ff:ac:12:e4:1f:b5:3d:0c:e7:e9:88:33:b1:1f: 36:f6:87:0b:ea:13:19:cd:f4:d6:13:2e:a7:d0:14: ec:6f:a4:0f:4a:e6:46:93:82:fe:ff:fa:b3:e5:eb: e3:eb:0e:42:14:4c:ec:72:db:25:00:2a:9b:17:43: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:07:2D:7C:1F:37:94:47:7C:D6:25:59:AF:7F:41:68:81:34:02 X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9b:5f:ad:74:5c:89:e4:4c:26:36:06:70:30:38:fa:19:20: 4c:71:6d:57:22:f3:84:e4:70:38:29:c5:37:18:a8:9d:06:88: 6b:aa:a9:14:77:86:7a:d9:bb:96:3d:25:f5:3f:7d:42:a0:92: 54:10:d9:46:f3:c9:c4:ef:44:ef:b6:f3:9a:f4:3a:5e:7b:59: 5f:20:b5:46:85:c2:96:62:1d:82:f3:27:ac:68:e5:20:04:59: de:ad:57:69:16:d1:71:35:7a:31:e6:e4:d5:0c:31:3f:9b:00: d3:b4:1c:86:1f:49:1e:f2:01:b3:b3:c2:5e:eb:59:b5:13:cc: cd:af:0b:39:ef:b2:41:aa:79:78:7e:7c:b8:35:42:71:5c:66: 84:42:95:3d:50:9e:03:90:fc:4f:2f:dd:af:fc:b9:19:95:21: 32:e5:55:67:1a:7b:1e:2f:55:af:f8:42:90:fb:92:69:b6:57: 63:64:3a:91:4e:7e:2c:e0:db:c0:6c:8b:11:16:26:86:8c:02: 9b:c4:c8:84:60:2a:1f:32:eb:a7:c8:37:20:76:1b:d2:44:d7: 5e:5c:ef:7c:5a:92:24:02:e3:b8:e0:cc:e0:a6:df:98:18:29: 46:49:02:f6:4a:f4:2a:2c:2d:8f:de:8e:89:81:21:a3:8b:6b: 4c:fa:61:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAh1hpAjkpm/aR3NDIax13uUa5FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA2MTYwOTE2MzJaFw0yNTA2MTkxOTU1MzJaMDMxMTAvBgNV BAMTKDVBQjMwNzJEN0MxRjM3OTQ0NzdDRDYyNTU5QUY3RjQxNjg4MTM0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKz3VsXoTjiLEZVnFPr03gdXh4 SoVqebjUXV/wUMy/v9kt0uf9sp78d+oIXHzeA0bVLUq3+yhMxCp7xjmg/aWYo2v8 2VPTE1DeZaw7FLuiSvDQeurQvrp5KGdSh202zpbAsxO322cfvRQKKoYbbzoCYZaL AmC0k+Cc1es2d8BcWD5woFsXuYgNUeve9wgZj6+mN66GRVJ6bZNFLdPcnNUo1xiv 90oAZiz3lJVfWcv0eIYFdlhQYZtJndB//JEraK2n7lz/rBLkH7U9DOfpiDOxHzb2 hwvqExnN9NYTLqfQFOxvpA9K5kaTgv7/+rPl6+PrDkIUTOxy2yUAKpsXQ28BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrMHLXwfN5RHfNYlWa9/QWiBNAIwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+bX610XInkTCY2BnAwOPoZIExxbVci84Tk cDgpxTcYqJ0GiGuqqRR3hnrZu5Y9JfU/fUKgklQQ2UbzycTvRO+285r0Ol57WV8g tUaFwpZiHYLzJ6xo5SAEWd6tV2kW0XE1ejHm5NUMMT+bANO0HIYfSR7yAbOzwl7r WbUTzM2vCznvskGqeXh+fLg1QnFcZoRClT1QngOQ/E8v3a/8uRmVITLlVWcaex4v Va/4QpD7kmm2V2NkOpFOfizg28BsixEWJoaMApvEyIRgKh8y66fINyB2G9JE115c 73xakiQC47jgzOCm35gYKUZJAvZK9CosLY/ejomBIaOLa0z6Yc4= -----END CERTIFICATE-----Generated at Tue Jun 17 00:18:42 2025 by rpki-client