$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: ofglraFrmCKWmR0mMeIWjlQFTXYwppV2Gyipm1UUoXk= Subject key identifier: FF:79:2E:9F:5B:A1:10:37:90:E8:93:00:2A:F0:56:1A:3B:73:FE:C1 Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 6D74D965A6772DA03A21AB8B4F9BD39C8589DD38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 01BB Signing time: Tue 17 Jun 2025 01:11:30 +0000 Manifest this update: Tue 17 Jun 2025 01:06:30 +0000 Manifest next update: Fri 20 Jun 2025 02:17:30 +0000 Files and hashes: 1: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: z2o3v/OtskQoO4jzRTKqnP4wxxMd3p6DYmDfLwHBLXg=) 2: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: wIcdCD/tVklftRRrB04ovxGfa9tflhB+E3tjCQLZ9Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:74:d9:65:a6:77:2d:a0:3a:21:ab:8b:4f:9b:d3:9c:85:89:dd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Jun 17 01:06:30 2025 GMT Not After : Jun 20 02:17:30 2025 GMT Subject: CN=FF792E9F5BA1103790E893002AF0561A3B73FEC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5d:7c:68:63:6d:4b:f4:14:6c:3b:9e:ee:47: 57:db:ae:34:a8:10:21:c5:62:fd:42:5c:fd:a3:c7: 53:2b:46:79:0a:ae:9b:1c:d1:97:2c:c1:0b:62:58: ca:54:9a:63:17:42:3f:d0:79:b1:67:64:30:79:1e: f3:26:a0:26:ba:24:a0:c5:7b:cc:41:1f:a0:3f:ed: 39:b7:de:a0:5e:a0:36:0f:cc:48:dd:7f:d3:57:fb: cb:06:4e:13:a6:6b:04:b6:57:29:56:58:85:38:30: 4f:19:7b:ae:5b:3d:9d:f4:92:db:da:87:d7:3b:b6: f0:84:95:19:8d:55:74:7b:69:75:c3:46:43:d9:83: 56:1c:94:70:2d:2b:25:19:e9:f5:04:61:ed:0e:f5: be:95:6d:45:e2:8d:14:e6:85:68:cd:de:2c:f3:6e: 88:4a:3c:2c:fb:54:6b:ff:d9:78:b7:57:97:b2:71: ee:7d:88:36:b6:03:68:c4:a4:b6:10:6d:21:5f:02: 06:6e:e7:e9:73:49:92:d0:15:73:dc:72:d9:2e:dd: 14:ae:55:b3:d1:ce:7d:fa:ee:ed:f2:fc:4d:db:d2: 89:3c:fc:05:dd:29:68:dd:27:0c:15:e0:9c:5c:21: 96:45:7a:c1:fe:68:06:dd:80:ae:05:da:82:e6:e5: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:79:2E:9F:5B:A1:10:37:90:E8:93:00:2A:F0:56:1A:3B:73:FE:C1 X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d3:8c:0d:17:2c:ab:ce:9d:48:ee:0a:b8:06:53:4a:3c:9c: 1b:76:41:29:9e:da:ba:42:31:c7:ac:17:08:15:e2:46:9c:2b: 1f:ba:d3:cc:ba:64:7d:b4:f1:fb:31:90:12:2f:ea:55:9d:1c: 8b:f9:b1:57:de:30:d5:fb:f5:33:aa:e3:47:d8:e5:a1:81:35: 10:33:59:c4:85:e1:1c:4b:94:16:7b:39:42:2d:99:ca:aa:12: 5d:c9:72:7a:e8:b4:49:54:95:8f:0c:b1:4b:38:46:6f:8a:9f: c6:91:94:f8:93:e3:fc:ef:93:70:8f:9c:9e:37:98:a4:9d:f2: f0:ea:7e:8d:bb:44:cf:86:b5:af:69:7c:b5:b3:42:8b:f2:1e: 47:d7:0b:80:da:8a:f2:24:08:cf:f7:b4:56:74:9c:ed:27:07: d7:11:f0:21:f8:8a:c0:47:82:8e:fd:a6:5e:d0:82:62:76:03: 16:b9:64:df:9e:28:5b:d6:47:88:61:44:7a:66:b1:0d:1e:f2: ac:b6:da:8e:9c:6e:66:c4:4d:ff:96:b5:53:cf:87:59:45:39: 03:3a:b2:02:b3:2f:a6:20:ff:a0:09:b5:8a:18:02:d7:27:37: 94:0e:9d:c7:57:be:f2:ba:ed:ee:f9:4a:ef:b4:59:55:ee:5c: 8a:7e:b8:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXTZZaZ3LaA6IauLT5vTnIWJ3TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTA2MTcwMTA2MzBaFw0yNTA2MjAwMjE3MzBaMDMxMTAvBgNV BAMTKEZGNzkyRTlGNUJBMTEwMzc5MEU4OTMwMDJBRjA1NjFBM0I3M0ZFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrXXxoY21L9BRsO57uR1fbrjSo ECHFYv1CXP2jx1MrRnkKrpsc0ZcswQtiWMpUmmMXQj/QebFnZDB5HvMmoCa6JKDF e8xBH6A/7Tm33qBeoDYPzEjdf9NX+8sGThOmawS2VylWWIU4ME8Ze65bPZ30ktva h9c7tvCElRmNVXR7aXXDRkPZg1YclHAtKyUZ6fUEYe0O9b6VbUXijRTmhWjN3izz bohKPCz7VGv/2Xi3V5eyce59iDa2A2jEpLYQbSFfAgZu5+lzSZLQFXPcctku3RSu VbPRzn367u3y/E3b0ok8/AXdKWjdJwwV4JxcIZZFesH+aAbdgK4F2oLm5WE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3kun1uhEDeQ6JMAKvBWGjtz/sEwHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTTjA0XLKvOnUjuCrgGU0o8nBt2QSme2rpC McesFwgV4kacKx+608y6ZH208fsxkBIv6lWdHIv5sVfeMNX79TOq40fY5aGBNRAz WcSF4RxLlBZ7OUItmcqqEl3JcnrotElUlY8MsUs4Rm+Kn8aRlPiT4/zvk3CPnJ43 mKSd8vDqfo27RM+Gta9pfLWzQovyHkfXC4DaivIkCM/3tFZ0nO0nB9cR8CH4isBH go79pl7QgmJ2Axa5ZN+eKFvWR4hhRHpmsQ0e8qy22o6cbmbETf+WtVPPh1lFOQM6 sgKzL6Yg/6AJtYoYAtcnN5QOncdXvvK67e75Su+0WVXuXIp+uG4= -----END CERTIFICATE-----Generated at Tue Jun 17 20:49:47 2025 by rpki-client