$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft File: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json) Hash identifier: Qyllwm7NickTZFdfGzPZyZ67OZwr8a3d8GX4GUAuA2U= Subject key identifier: BB:8B:3D:8B:EA:3E:55:E2:10:C4:A6:81:34:0E:7B:EA:24:5E:57:80 Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Certificate serial: 56A4786742E85E16029A15794C8A9833F4E8D0AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft Manifest number: 01C2 Signing time: Tue 17 Jun 2025 11:30:04 +0000 Manifest this update: Tue 17 Jun 2025 11:25:04 +0000 Manifest next update: Fri 20 Jun 2025 18:38:04 +0000 Files and hashes: 1: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: PKW7bTxZfm5wWqKCYH6gq8Itcy5p+3KMiR6lT1aJfDE=) 2: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: 06QZdyklcUmWupIhsOVNL9NiOUjK+/J3FEFr90f9R1c=) 3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: uoMaFn6K0kXeGqCIYO963bxjg6ulr+R66p0nlkWHE2E=) 4: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: J6dvLBn3b6E8t0V/cQzAtBanBd1iD925tlwZ4sUP2yA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 18:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a4:78:67:42:e8:5e:16:02:9a:15:79:4c:8a:98:33:f4:e8:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Validity Not Before: Jun 17 11:25:04 2025 GMT Not After : Jun 20 18:38:04 2025 GMT Subject: CN=BB8B3D8BEA3E55E210C4A681340E7BEA245E5780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:b7:e0:cf:27:d8:c9:9b:5d:9d:74:27:5b: 61:ff:9a:97:3d:c4:ee:2f:75:63:e6:f8:bb:c4:5d: fa:2d:d4:a8:3a:b1:d2:7f:6d:bd:9f:64:e3:cb:6c: 22:15:01:be:53:08:ac:0b:b7:96:ef:91:74:3a:e6: d1:c0:ee:64:56:a6:13:a9:f0:72:28:61:2c:ab:a0: 8f:c7:3a:fa:86:22:ce:6f:c9:7f:09:48:15:8b:46: ab:2a:7a:ee:c2:a1:e5:7c:d2:2e:71:bf:d6:26:f8: 01:04:60:3a:79:96:36:f5:6e:36:8e:1f:aa:9f:67: 45:c4:66:b5:08:2f:10:ab:8e:03:7f:04:cf:29:fe: 65:23:64:c9:16:57:d5:65:17:32:15:15:b8:49:2f: 51:96:f4:6a:e9:1e:80:4c:80:68:e2:1e:35:a8:d8: 85:c8:f3:54:bc:d7:7b:9e:79:8d:6d:82:f8:be:39: a5:ba:02:29:23:58:0a:86:81:ab:3d:11:de:a1:69: ee:57:6f:31:22:ea:2f:c9:75:b2:1a:f9:93:d4:39: 52:11:6f:9d:03:f3:44:1e:cd:3e:95:fc:32:58:58: 5d:4e:ae:d7:c6:d2:d2:12:18:33:7e:af:c0:27:72: 45:2c:d4:85:60:36:cb:37:4b:b0:58:cc:fd:c7:3e: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:3D:8B:EA:3E:55:E2:10:C4:A6:81:34:0E:7B:EA:24:5E:57:80 X509v3 Authority Key Identifier: keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:36:a2:25:08:46:d7:e0:d3:01:97:1d:e9:38:38:d6:c2:a4: a4:d8:0e:7b:09:75:87:40:91:49:57:0a:21:e2:f6:a8:f0:3f: 3c:16:1c:a0:b5:c8:cb:e1:36:97:a3:40:ca:e1:59:57:cb:eb: 20:f0:30:7a:69:d8:95:6f:7d:de:39:37:76:8d:ee:ed:4a:26: f2:00:a2:e6:ad:d8:ba:bb:46:9d:63:1a:eb:53:f9:13:76:60: 77:94:aa:de:26:66:93:94:c7:b0:49:48:51:8e:37:c3:9a:2b: 97:bf:15:ff:0d:49:fe:49:c0:22:2a:fb:b9:30:97:2a:20:b9: fa:f6:44:d4:23:df:df:ce:a3:38:fe:9a:2f:37:7a:21:43:72: 5d:96:a5:f6:ea:bd:ca:65:9f:88:de:c5:07:eb:b7:ec:bd:9b: 9d:9f:34:ff:f1:f7:35:fd:13:05:93:23:c6:88:65:04:d9:78: 94:ef:15:68:fe:e7:fa:61:2d:7f:3d:fd:2a:d1:fe:88:ce:98: 4a:22:3a:28:a8:94:bf:97:ee:ab:cf:9a:ba:4e:3d:fa:b0:14: 93:e6:84:90:d8:66:32:ab:cf:25:2c:12:ba:c9:25:3a:87:6d: 37:2d:7e:c2:9c:48:0d:bf:c3:56:22:cf:7a:24:69:55:70:11: 63:1d:0a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqR4Z0LoXhYCmhV5TIqYM/To0KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF MDY2RUZGMzAeFw0yNTA2MTcxMTI1MDRaFw0yNTA2MjAxODM4MDRaMDMxMTAvBgNV BAMTKEJCOEIzRDhCRUEzRTU1RTIxMEM0QTY4MTM0MEU3QkVBMjQ1RTU3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJN7fgzyfYyZtdnXQnW2H/mpc9 xO4vdWPm+LvEXfot1Kg6sdJ/bb2fZOPLbCIVAb5TCKwLt5bvkXQ65tHA7mRWphOp 8HIoYSyroI/HOvqGIs5vyX8JSBWLRqsqeu7CoeV80i5xv9Ym+AEEYDp5ljb1bjaO H6qfZ0XEZrUILxCrjgN/BM8p/mUjZMkWV9VlFzIVFbhJL1GW9GrpHoBMgGjiHjWo 2IXI81S813ueeY1tgvi+OaW6AikjWAqGgas9Ed6hae5XbzEi6i/JdbIa+ZPUOVIR b50D80QezT6V/DJYWF1OrtfG0tISGDN+r8AnckUs1IVgNss3S7BYzP3HPoKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu4s9i+o+VeIQxKaBNA576iReV4AwHwYDVR0j BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4 NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2 RUZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0 RUVFMDY2RUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA2oiUIRtfg0wGXHek4ONbCpKTYDnsJdYdA kUlXCiHi9qjwPzwWHKC1yMvhNpejQMrhWVfL6yDwMHpp2JVvfd45N3aN7u1KJvIA ouat2Lq7Rp1jGutT+RN2YHeUqt4mZpOUx7BJSFGON8OaK5e/Ff8NSf5JwCIq+7kw lyogufr2RNQj39/Oozj+mi83eiFDcl2Wpfbqvcpln4jexQfrt+y9m52fNP/x9zX9 EwWTI8aIZQTZeJTvFWj+5/phLX89/SrR/ojOmEoiOiiolL+X7qvPmrpOPfqwFJPm hJDYZjKrzyUsErrJJTqHbTctfsKcSA2/w1Yiz3okaVVwEWMdCtQ= -----END CERTIFICATE-----Generated at Tue Jun 17 19:14:30 2025 by rpki-client