$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: GYIR3VPl0aICcBr71TVmhUYSS8IhBq5NFOvkEMh0HoU= Subject key identifier: CE:90:F2:17:8E:2F:A4:7E:0C:BF:86:89:03:73:EE:14:F1:B9:3E:44 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 15500DE2849FDB8F14AA4019E2B37A9A2B2191D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 0174 Signing time: Sat 14 Jun 2025 04:21:09 +0000 Manifest this update: Sat 14 Jun 2025 04:16:09 +0000 Manifest next update: Tue 17 Jun 2025 12:36:09 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) 2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: erIy8rUM1cN01PG3z+6x7DzVK/Y+7L2bExMDRe75QCY=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:50:0d:e2:84:9f:db:8f:14:aa:40:19:e2:b3:7a:9a:2b:21:91:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Jun 14 04:16:09 2025 GMT Not After : Jun 17 12:36:09 2025 GMT Subject: CN=CE90F2178E2FA47E0CBF86890373EE14F1B93E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:d1:51:4e:7e:ce:ce:fd:77:d7:f8:d3:71: a2:c9:ec:ed:f6:63:a6:6e:32:e4:eb:a5:eb:66:92: 8d:29:c8:89:d5:03:78:8f:f7:b1:e6:4c:62:1f:c2: bd:f1:f9:7c:f8:1e:c4:9c:6e:4c:09:a2:16:97:88: 18:0d:0a:09:c3:17:40:08:97:72:d4:f3:d5:13:bd: 2f:e1:fa:20:e7:c4:74:f7:6a:be:6b:9b:6e:c0:69: cb:85:72:e9:1a:2d:99:7d:18:e9:73:3e:fd:b9:e9: 32:44:4c:09:cd:5f:8a:79:ae:49:4b:8c:df:fc:fc: 9b:98:31:2c:5c:29:d7:46:9d:36:8d:2c:02:b8:b1: 71:f0:6b:70:3a:d9:05:a8:38:93:19:49:b7:9c:57: 47:4f:7e:2a:88:4e:0c:da:6a:55:6f:fc:24:b2:53: 27:ed:a1:20:a0:af:ce:35:54:fb:d9:b9:a4:44:9f: 90:04:bc:cf:bb:cb:1c:fe:08:8d:97:fc:f2:71:8c: c6:76:91:c4:70:72:8f:a0:06:39:e5:c4:86:21:ae: 8a:d5:56:b7:3c:0d:1f:52:49:c1:c1:14:cf:0b:7a: 2f:3d:16:48:28:68:00:7d:b2:a5:0c:09:c4:28:c0: 63:db:aa:ef:4b:a5:0f:77:93:38:a6:40:ee:38:d4: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:90:F2:17:8E:2F:A4:7E:0C:BF:86:89:03:73:EE:14:F1:B9:3E:44 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:18:ce:00:38:97:3a:d0:ca:d3:f6:c3:e8:07:f7:88:41:47: b3:44:c1:ea:4f:bc:f7:9d:3f:e0:29:c9:31:ec:1f:8e:6c:c0: 6a:10:e0:fa:20:eb:9a:99:04:15:d7:82:28:c5:be:7c:48:a1: ee:13:96:f2:76:b0:43:77:bf:ed:c4:55:ff:33:c8:0e:e9:6f: e3:8e:42:cc:5b:2c:68:cd:8b:82:55:6e:f0:64:22:5b:ee:27: 93:28:f9:4e:69:44:7e:4f:30:de:9e:22:8d:dc:6b:e0:07:37: 32:70:24:91:19:e5:49:d8:1d:92:2d:b1:17:74:40:34:2f:43: 4f:e9:67:f9:10:30:85:d1:7f:5d:c7:c9:48:33:b0:e8:4e:bd: 26:87:41:48:6d:70:56:98:77:da:17:c7:a0:a8:ff:18:df:6d: bc:66:35:54:d5:c2:4b:f1:19:2c:43:08:6c:c1:0b:09:ea:10: c4:4a:e2:72:21:d2:b3:77:be:fe:22:5b:71:99:a7:76:cf:30: f0:07:bd:3f:9f:d9:1e:1c:f8:f2:dd:75:99:31:1c:b4:55:0d: 47:f4:6f:09:b8:e0:cf:12:f8:bc:de:19:b0:fc:ae:1d:79:86: 15:4b:e2:d7:c1:92:bb:ad:88:81:79:0d:0b:e0:72:8b:26:00: 21:fa:4b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVAN4oSf248UqkAZ4rN6mishkdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTA2MTQwNDE2MDlaFw0yNTA2MTcxMjM2MDlaMDMxMTAvBgNV BAMTKENFOTBGMjE3OEUyRkE0N0UwQ0JGODY4OTAzNzNFRTE0RjFCOTNFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+59FRTn7Ozv131/jTcaLJ7O32 Y6ZuMuTrpetmko0pyInVA3iP97HmTGIfwr3x+Xz4HsScbkwJohaXiBgNCgnDF0AI l3LU89UTvS/h+iDnxHT3ar5rm27AacuFcukaLZl9GOlzPv256TJETAnNX4p5rklL jN/8/JuYMSxcKddGnTaNLAK4sXHwa3A62QWoOJMZSbecV0dPfiqITgzaalVv/CSy UyftoSCgr841VPvZuaREn5AEvM+7yxz+CI2X/PJxjMZ2kcRwco+gBjnlxIYhrorV Vrc8DR9SScHBFM8Lei89FkgoaAB9sqUMCcQowGPbqu9LpQ93kzimQO441E+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpDyF44vpH4Mv4aJA3PuFPG5PkQwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIYzgA4lzrQytP2w+gH94hBR7NEwepPvPed P+ApyTHsH45swGoQ4Pog65qZBBXXgijFvnxIoe4TlvJ2sEN3v+3EVf8zyA7pb+OO QsxbLGjNi4JVbvBkIlvuJ5Mo+U5pRH5PMN6eIo3ca+AHNzJwJJEZ5UnYHZItsRd0 QDQvQ0/pZ/kQMIXRf13HyUgzsOhOvSaHQUhtcFaYd9oXx6Co/xjfbbxmNVTVwkvx GSxDCGzBCwnqEMRK4nIh0rN3vv4iW3GZp3bPMPAHvT+f2R4c+PLddZkxHLRVDUf0 bwm44M8S+LzeGbD8rh15hhVL4tfBkrutiIF5DQvgcosmACH6S68= -----END CERTIFICATE-----Generated at Mon Jun 16 04:20:51 2025 by rpki-client