$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: 0K/NUd95xl5Bhk4OAayBl6sZE0mAg+Fbby9Ax+yyQGI= Subject key identifier: AC:6C:C8:B5:13:19:1C:E9:79:33:35:32:64:43:4D:FA:53:0A:C3:77 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 7BEF0885A97E4139D0A3D6D9902876C1C9DF7908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 016F Signing time: Sat 14 Jun 2025 11:00:44 +0000 Manifest this update: Sat 14 Jun 2025 10:55:44 +0000 Manifest next update: Tue 17 Jun 2025 19:24:44 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: VHutGP/xznuODGb25hba3rkKSyw21FaA1wCUYJuGU4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ef:08:85:a9:7e:41:39:d0:a3:d6:d9:90:28:76:c1:c9:df:79:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Jun 14 10:55:44 2025 GMT Not After : Jun 17 19:24:44 2025 GMT Subject: CN=AC6CC8B513191CE97933353264434DFA530AC377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:cc:23:4c:c4:9e:5e:d9:62:48:2b:1b:9e: c6:b7:18:9f:63:d3:cf:2b:e2:c8:e7:4a:48:78:b3: 64:1b:3f:c3:c7:6a:b9:5b:e9:4c:2a:f9:ec:37:9c: 18:91:af:cb:00:56:97:d0:6e:87:ac:01:df:3f:49: aa:64:f8:7c:66:3a:23:a7:38:7b:2b:53:29:a0:01: e6:86:e4:35:36:6c:2c:43:c0:54:e3:34:ed:74:55: a9:46:0d:f7:04:41:d2:e9:47:ca:9b:6f:10:70:8f: 7a:c6:77:92:04:89:4f:b3:73:61:b5:47:c6:09:40: 61:99:3c:f4:2a:8a:35:c2:10:d5:59:87:60:61:52: 90:d0:3b:c4:45:35:ee:3a:df:90:5e:2c:9e:e2:b4: cf:6d:ad:a8:d1:ad:0f:b2:4a:9c:bf:f6:16:3f:a3: 1b:ae:81:66:9d:fe:e4:12:ea:6c:bc:18:83:b0:40: 52:fb:3c:af:3c:7e:da:7d:13:b3:39:b0:10:39:e0: 65:9e:cc:f0:67:a3:5b:6b:7f:f0:3e:c5:18:e2:cf: df:9c:8f:1b:8a:e3:e3:01:2f:6c:6a:87:67:73:85: b6:4f:a8:08:45:d1:b4:d2:eb:06:80:55:df:8a:7f: ec:3d:50:2e:aa:50:86:53:f9:4d:6a:a7:52:f4:0f: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6C:C8:B5:13:19:1C:E9:79:33:35:32:64:43:4D:FA:53:0A:C3:77 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a7:68:5b:1c:6d:ef:4d:b6:fa:af:dd:e3:d7:77:8e:d5:34: 2c:59:73:d4:68:55:d9:1f:19:ce:a5:e8:49:75:da:36:3f:86: c9:d4:0c:e9:af:b8:a4:9c:d6:5b:96:45:05:35:c5:42:04:81: 80:50:42:6f:54:60:c8:f6:4c:0f:00:f2:d5:35:9b:92:53:69: 6d:cb:ab:c8:e0:e5:2a:f7:39:ef:1a:88:d9:6f:84:fc:38:d6: 3b:5c:26:4f:42:a5:e4:a0:73:0f:a9:54:4f:40:bb:7d:d7:ac: 89:59:bb:53:09:c7:9b:02:9f:5c:57:b0:51:09:8e:34:3b:68: 8b:cd:28:96:83:3a:5a:a9:db:21:02:8a:28:89:f4:e7:81:20: f0:19:a7:60:10:9b:af:aa:c7:8c:7d:72:c7:bb:85:53:c0:d4: ea:5c:74:5f:92:7b:0c:f0:59:4d:17:7a:3a:d0:72:9d:e3:99: fe:e2:1b:47:05:e0:69:a8:78:31:04:33:49:6f:d3:89:e7:03: 33:29:7b:c8:1a:04:4c:e8:09:4a:26:78:ee:5e:22:03:f0:6b: 9a:d0:ef:0b:14:01:0a:98:39:16:09:5f:58:07:fb:ac:0f:8e: 73:e4:5b:a8:1f:40:81:87:44:db:2e:16:f5:69:dc:df:49:5c: aa:13:35:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+8Ihal+QTnQo9bZkCh2wcnfeQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTA2MTQxMDU1NDRaFw0yNTA2MTcxOTI0NDRaMDMxMTAvBgNV BAMTKEFDNkNDOEI1MTMxOTFDRTk3OTMzMzUzMjY0NDM0REZBNTMwQUMzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsMwjTMSeXtliSCsbnsa3GJ9j 088r4sjnSkh4s2QbP8PHarlb6Uwq+ew3nBiRr8sAVpfQboesAd8/Sapk+HxmOiOn OHsrUymgAeaG5DU2bCxDwFTjNO10ValGDfcEQdLpR8qbbxBwj3rGd5IEiU+zc2G1 R8YJQGGZPPQqijXCENVZh2BhUpDQO8RFNe4635BeLJ7itM9trajRrQ+ySpy/9hY/ oxuugWad/uQS6my8GIOwQFL7PK88ftp9E7M5sBA54GWezPBno1trf/A+xRjiz9+c jxuK4+MBL2xqh2dzhbZPqAhF0bTS6waAVd+Kf+w9UC6qUIZT+U1qp1L0D4XLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGzItRMZHOl5MzUyZENN+lMKw3cwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKnaFscbe9Ntvqv3ePXd47VNCxZc9RoVdkf Gc6l6El12jY/hsnUDOmvuKSc1luWRQU1xUIEgYBQQm9UYMj2TA8A8tU1m5JTaW3L q8jg5Sr3Oe8aiNlvhPw41jtcJk9CpeSgcw+pVE9Au33XrIlZu1MJx5sCn1xXsFEJ jjQ7aIvNKJaDOlqp2yECiiiJ9OeBIPAZp2AQm6+qx4x9cse7hVPA1OpcdF+Sewzw WU0XejrQcp3jmf7iG0cF4GmoeDEEM0lv04nnAzMpe8gaBEzoCUomeO5eIgPwa5rQ 7wsUAQqYORYJX1gH+6wPjnPkW6gfQIGHRNsuFvVp3N9JXKoTNd8= -----END CERTIFICATE-----Generated at Mon Jun 16 04:50:43 2025 by rpki-client