$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: Rf11KWTj57LGAGeuNxTg4QQhvsUYBn1fiXToNhgJ8+4= Subject key identifier: 8D:DC:B8:DC:81:21:B5:C0:15:09:B7:5B:2F:DD:C6:99:9E:E0:24:FC Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 1729A0C555CA0A03AB2F54D9AA66CF1CA18371DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 0161 Signing time: Sat 14 Jun 2025 22:11:14 +0000 Manifest this update: Sat 14 Jun 2025 22:06:14 +0000 Manifest next update: Tue 17 Jun 2025 23:33:14 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 2: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 3: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 4: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 5: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 6: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: 8EfxjjzAaPR0VAL1Db3/uRSaUMYdMGf0ygT8hNqipFY=) 7: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 8: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 23:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:29:a0:c5:55:ca:0a:03:ab:2f:54:d9:aa:66:cf:1c:a1:83:71:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Jun 14 22:06:14 2025 GMT Not After : Jun 17 23:33:14 2025 GMT Subject: CN=8DDCB8DC8121B5C01509B75B2FDDC6999EE024FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:05:62:2e:38:a0:f1:d8:26:43:a2:f4:9c: ac:4d:33:68:25:7d:9a:72:1b:ce:a9:a0:92:7b:a7: 40:ec:af:fb:1a:2a:07:f4:30:2b:61:98:37:64:13: cb:c1:f9:96:d3:98:b2:5d:eb:9d:d1:86:28:7b:9b: 61:1e:fd:59:99:99:1a:ac:e3:d7:b6:0a:54:64:d5: 39:98:d5:76:1b:6f:49:58:c3:e0:6b:74:be:94:19: 2d:88:6d:7d:d7:bd:62:73:5b:31:3b:f2:40:06:d5: 6f:27:1d:e0:7a:d0:a1:cb:e6:64:f4:13:d9:a9:b3: 2d:55:0e:67:13:4c:c6:79:db:3a:0c:7b:16:a9:9a: 2e:d6:bf:c5:87:0d:8f:70:41:40:f8:e4:f0:03:33: 82:1c:05:ea:26:28:c4:52:af:9c:65:9a:69:e9:77: be:e5:8b:e6:ee:99:e8:94:80:5c:d8:99:37:53:4c: dc:b8:83:84:5f:22:2a:1c:a1:53:84:e9:28:ba:2e: 01:72:6e:7b:e5:d2:9f:56:90:a5:b4:f0:19:ba:26: 7c:e7:3d:8b:b5:05:b4:b4:69:9d:24:e2:0a:1f:be: 84:59:be:84:9c:47:01:9d:2e:c5:bc:46:87:81:f5: ce:7f:3c:47:38:58:90:c5:74:7f:f5:00:5f:61:21: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DC:B8:DC:81:21:B5:C0:15:09:B7:5B:2F:DD:C6:99:9E:E0:24:FC X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:8d:0a:ae:7b:ca:41:ff:4b:26:32:a3:9a:26:22:fd:5d:1c: cb:84:d2:67:aa:39:0c:25:e4:d3:55:00:fd:11:d5:57:af:01: a4:ff:bc:9f:45:cd:ad:f1:62:33:96:8f:c1:4e:80:50:b5:51: 2f:38:9a:65:d8:4a:80:3e:1b:47:1e:6c:47:f8:98:b4:5d:70: a7:ca:01:96:c2:06:82:52:19:ea:59:12:60:f0:20:59:f6:1c: 70:d8:41:19:eb:af:ed:8d:c6:65:c3:a0:c0:c0:99:45:71:8b: 7b:28:92:b3:0e:51:61:11:f1:a0:c9:44:31:65:ab:05:b4:70: 60:e5:14:2b:82:20:e2:57:6c:c5:41:a5:14:b7:e4:56:27:3d: 1d:c1:05:cf:e1:c0:35:70:dd:bb:3d:b9:48:61:b5:c6:e1:28: c4:d5:b6:1a:28:b6:7f:f3:55:62:15:4c:4d:ef:ec:1a:e7:c7: 28:19:68:7c:a4:5d:c1:41:f9:a8:bf:b8:d9:a2:c2:4c:51:1a: 11:f2:13:a8:8e:0d:7c:f9:6a:9b:32:8b:bc:e3:23:dd:4f:25: 28:87:d3:ce:e4:37:68:1b:72:af:66:cf:9e:e9:c8:b8:6d:da: 66:b2:9a:42:5b:27:0e:9b:83:95:92:55:fb:64:83:13:31:fb: 51:40:03:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFymgxVXKCgOrL1TZqmbPHKGDcd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA2MTQyMjA2MTRaFw0yNTA2MTcyMzMzMTRaMDMxMTAvBgNV BAMTKDhERENCOERDODEyMUI1QzAxNTA5Qjc1QjJGRERDNjk5OUVFMDI0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cQViLjig8dgmQ6L0nKxNM2gl fZpyG86poJJ7p0Dsr/saKgf0MCthmDdkE8vB+ZbTmLJd653Rhih7m2Ee/VmZmRqs 49e2ClRk1TmY1XYbb0lYw+BrdL6UGS2IbX3XvWJzWzE78kAG1W8nHeB60KHL5mT0 E9mpsy1VDmcTTMZ52zoMexapmi7Wv8WHDY9wQUD45PADM4IcBeomKMRSr5xlmmnp d77li+bumeiUgFzYmTdTTNy4g4RfIiocoVOE6Si6LgFybnvl0p9WkKW08Bm6Jnzn PYu1BbS0aZ0k4gofvoRZvoScRwGdLsW8RoeB9c5/PEc4WJDFdH/1AF9hIZdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdy43IEhtcAVCbdbL93GmZ7gJPwwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIONCq57ykH/SyYyo5omIv1dHMuE0meqOQwl 5NNVAP0R1VevAaT/vJ9Fza3xYjOWj8FOgFC1US84mmXYSoA+G0cebEf4mLRdcKfK AZbCBoJSGepZEmDwIFn2HHDYQRnrr+2NxmXDoMDAmUVxi3sokrMOUWER8aDJRDFl qwW0cGDlFCuCIOJXbMVBpRS35FYnPR3BBc/hwDVw3bs9uUhhtcbhKMTVthootn/z VWIVTE3v7BrnxygZaHykXcFB+ai/uNmiwkxRGhHyE6iODXz5apsyi7zjI91PJSiH 087kN2gbcq9mz57pyLht2maymkJbJw6bg5WSVftkgxMx+1FAA+E= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:44 2025 by rpki-client