$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json) Hash identifier: Bw/Ntcjm8VU8TGMuSsBCWLoKBlITXXGGcjXHkFsxDUA= Subject key identifier: 73:4E:C2:F8:26:08:BF:4A:E8:AA:DC:1E:4E:1B:26:E6:62:9C:0B:6C Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 0FFE18CF0CC0B1092345FD97C1C3FF901ABBB3FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft Manifest number: 02BE Signing time: Sat 14 Jun 2025 22:30:51 +0000 Manifest this update: Sat 14 Jun 2025 22:25:51 +0000 Manifest next update: Wed 18 Jun 2025 04:01:51 +0000 Files and hashes: 1: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: Sr5rxwxyX//B5EAQxEl5R5AYvEEW7vDFWvwM/NlIUq4=) 2: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: ejo3/L+3kmLyjnvdSLMOsbUtjtQhrjGsr2lCCkclPu4=) 3: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: kai/NPEvZzKzD0ir61f0Yn/2iupXAD0mgbph2TYQPTs=) 4: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: YAl9IH945cB6nzFZ+Qtu95xtcvqOant2/UNUilOSLzk=) 5: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: +t40M702VFWJpOgJRkFuplSndiJmUCoSc6okBYwiNSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 04:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fe:18:cf:0c:c0:b1:09:23:45:fd:97:c1:c3:ff:90:1a:bb:b3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Jun 14 22:25:51 2025 GMT Not After : Jun 18 04:01:51 2025 GMT Subject: CN=734EC2F82608BF4AE8AADC1E4E1B26E6629C0B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:a8:87:cc:8e:b5:28:65:c5:b1:fc:0a:b0: 8e:8c:b5:6f:99:8d:63:70:a9:2e:d4:10:08:5a:d2: 42:0a:ea:38:37:eb:9f:b7:5f:45:4a:14:df:05:9a: cb:aa:00:4f:92:75:e0:65:b9:73:5d:c4:49:4b:37: f1:b4:44:2b:f7:67:09:ce:2b:24:7a:fc:e9:8a:d5: d9:5e:7d:7a:a0:a9:ce:af:9a:05:93:ce:2c:f8:91: a1:39:5d:b2:68:fa:d4:6b:03:4a:cf:56:8a:39:ef: db:e3:e5:f8:d0:fb:37:fd:15:05:72:4d:bc:fb:ea: 85:3e:ab:17:b0:4c:65:9f:81:51:bb:6b:06:fd:15: 2e:78:97:04:fe:b1:50:a3:4a:3f:2b:3f:b9:4c:06: 56:74:38:91:5c:5c:38:2b:b8:28:a0:c2:b5:f4:dd: 22:93:dd:2d:ac:2d:5a:05:ca:3a:e7:f4:f0:ad:27: 6f:b2:34:0c:26:87:67:97:78:ef:b9:92:1d:17:08: e1:85:6a:99:f8:3d:f6:9b:dc:be:b6:f1:fa:e5:5b: 98:d9:b9:0f:4d:64:07:aa:0f:30:1a:38:75:c0:35: a3:8b:cb:f0:49:67:57:41:de:40:72:66:5e:b7:ba: ec:bd:d5:19:9c:08:e7:87:6f:82:2a:ca:e0:f2:57: 24:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:C2:F8:26:08:BF:4A:E8:AA:DC:1E:4E:1B:26:E6:62:9C:0B:6C X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:63:3b:17:f4:45:1c:69:d5:da:2d:c3:b0:e2:96:bf:7b:89: 21:7d:74:0c:3c:c1:4e:23:10:94:24:96:78:53:d3:68:3b:47: 61:d0:8c:8a:51:61:73:f2:7a:fe:04:be:4d:1c:67:e4:4b:75: 7c:e2:8e:c1:34:e1:44:23:78:18:7f:5d:23:4e:16:39:f8:0d: 1d:c3:f9:8a:36:89:d7:65:f1:ad:4f:0f:ac:81:80:ed:3e:fc: f0:0d:c0:24:2e:55:a3:55:d4:80:86:63:6f:d0:c3:52:8f:22: 39:ee:53:8a:a4:74:0b:27:1c:45:70:ed:bd:5a:14:ac:c7:57: 4a:b8:97:24:b1:5a:6a:f8:16:12:ab:99:3b:14:c3:22:2f:b7: 9f:23:e9:a1:e7:9b:0b:34:b2:3b:13:f7:58:40:83:56:4a:ff: 8c:af:a9:12:2f:07:a4:25:4b:4d:3e:24:ae:a0:36:0e:4e:23: 97:7b:59:d2:0f:39:81:54:9e:55:bc:69:41:b5:15:41:f5:06: 0b:05:57:25:37:e8:02:e5:01:97:dc:e0:c6:47:8f:04:c2:9e: 46:53:5b:1d:7b:a3:a6:d2:27:c1:d6:a8:e1:98:cb:18:e9:51: 7a:09:30:d3:ea:ce:17:bf:3a:a9:a0:c9:5e:6a:16:a3:b3:90: d4:ca:87:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/4YzwzAsQkjRf2XwcP/kBq7s/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNTA2MTQyMjI1NTFaFw0yNTA2MTgwNDAxNTFaMDMxMTAvBgNV BAMTKDczNEVDMkY4MjYwOEJGNEFFOEFBREMxRTRFMUIyNkU2NjI5QzBCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColaiHzI61KGXFsfwKsI6MtW+Z jWNwqS7UEAha0kIK6jg365+3X0VKFN8FmsuqAE+SdeBluXNdxElLN/G0RCv3ZwnO KyR6/OmK1dlefXqgqc6vmgWTziz4kaE5XbJo+tRrA0rPVoo579vj5fjQ+zf9FQVy Tbz76oU+qxewTGWfgVG7awb9FS54lwT+sVCjSj8rP7lMBlZ0OJFcXDgruCigwrX0 3SKT3S2sLVoFyjrn9PCtJ2+yNAwmh2eXeO+5kh0XCOGFapn4Pfab3L628frlW5jZ uQ9NZAeqDzAaOHXANaOLy/BJZ1dB3kByZl63uuy91RmcCOeHb4IqyuDyVyStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc07C+CYIv0roqtweThsm5mKcC2wwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMz Mzc2RjNGRTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExjOxf0RRxp1dotw7Dilr97iSF9dAw8wU4j EJQklnhT02g7R2HQjIpRYXPyev4Evk0cZ+RLdXzijsE04UQjeBh/XSNOFjn4DR3D +Yo2iddl8a1PD6yBgO0+/PANwCQuVaNV1ICGY2/Qw1KPIjnuU4qkdAsnHEVw7b1a FKzHV0q4lySxWmr4FhKrmTsUwyIvt58j6aHnmws0sjsT91hAg1ZK/4yvqRIvB6Ql S00+JK6gNg5OI5d7WdIPOYFUnlW8aUG1FUH1BgsFVyU36ALlAZfc4MZHjwTCnkZT Wx17o6bSJ8HWqOGYyxjpUXoJMNPqzhe/OqmgyV5qFqOzkNTKh0Y= -----END CERTIFICATE-----Generated at Mon Jun 16 07:53:02 2025 by rpki-client