$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: TfOeNV4CeL/RhVoeJN/7bRenLHBu8yNzoh+hB6mH5Lk= Subject key identifier: 99:F4:45:CD:D8:7B:40:E0:82:BA:F3:3C:9D:FD:3B:A7:97:10:93:65 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 658D2D5D0AD6BF6312D3A70BE8F51AA04E5E74FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 024B Signing time: Sun 15 Jun 2025 01:41:24 +0000 Manifest this update: Sun 15 Jun 2025 01:36:24 +0000 Manifest next update: Wed 18 Jun 2025 09:54:24 +0000 Files and hashes: 1: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: 3PgRcSl8xim9UNpyaQ0Xrg82Q39aAZtbiTxIG64oGGw=) 2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:2d:5d:0a:d6:bf:63:12:d3:a7:0b:e8:f5:1a:a0:4e:5e:74:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Jun 15 01:36:24 2025 GMT Not After : Jun 18 09:54:24 2025 GMT Subject: CN=99F445CDD87B40E082BAF33C9DFD3BA797109365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:2d:a1:fc:f0:d5:a0:a5:01:49:0f:56:cd: f9:a6:6a:4b:d4:d1:63:32:f2:a4:41:e7:36:2c:da: 61:ea:f0:70:b3:c2:2b:d8:74:08:cb:f3:ef:20:60: c9:9d:77:ab:1a:2f:b4:73:4f:bc:18:5d:3a:88:ab: 40:82:65:de:d4:fd:2b:82:6a:fb:f4:55:5d:5e:5e: 5a:44:76:c5:b5:8f:5d:19:03:a4:d2:4b:92:78:da: 37:30:a5:42:59:9e:a6:bb:d7:17:ea:7b:0a:58:23: 01:94:40:71:1b:90:10:53:26:f8:54:ec:dc:ae:79: 41:c7:3b:75:58:d7:5b:fb:82:5d:f2:d9:0c:2e:ea: 42:4b:e7:43:a3:d1:8d:2e:99:69:76:6d:4d:55:75: b3:0a:98:cd:43:fa:60:f7:68:8e:26:f2:f9:4b:9b: 54:30:8b:0b:0a:76:7c:22:59:06:de:f1:d9:a8:15: 0a:99:19:ba:05:ac:24:a6:be:6b:9b:6c:b3:36:d6: 64:4b:62:96:92:c2:1b:17:15:17:ee:aa:b4:53:7c: dc:a5:dc:8f:f1:56:93:10:d7:bb:5e:24:87:85:97: ce:fb:f0:5f:57:a0:32:c3:25:99:8c:47:20:9f:6f: bf:d0:ff:19:7c:4f:48:12:74:80:15:64:d4:a7:f9: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F4:45:CD:D8:7B:40:E0:82:BA:F3:3C:9D:FD:3B:A7:97:10:93:65 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:41:65:85:94:3d:d9:13:87:a1:92:50:0a:7e:cd:77:3a:43: 16:26:b1:3e:cd:6a:a1:3f:4a:eb:4d:e2:e7:53:83:07:a1:7e: e6:52:6e:f2:b8:5f:f3:ec:6d:8f:30:34:b5:82:01:57:37:99: 9a:f5:69:b5:75:2d:4d:ce:50:6b:00:f1:1a:6d:f3:72:f6:55: 88:1a:52:cf:73:ce:32:fd:e7:50:04:ca:dc:c0:71:40:81:df: 85:e9:a0:60:f1:f0:ef:95:18:f0:b5:79:9c:2b:c1:30:45:88: 9a:f6:09:fc:85:84:25:5c:14:b1:28:7e:18:1d:06:02:84:cf: b3:73:3e:0c:a5:b1:8c:56:48:d4:d2:02:31:62:5f:8f:5b:be: b9:b8:cf:f7:b7:cc:53:3d:d9:32:b8:fa:95:17:b1:46:a8:87: 60:9f:67:66:d2:8a:a2:57:30:49:ae:65:ec:d0:5a:c3:2a:0d: 5b:b3:7a:89:c9:0e:c8:31:43:0b:0a:de:86:80:07:24:a9:78: 6d:14:c2:73:98:37:b3:22:d7:b0:83:86:e3:dc:23:ed:84:61: 1a:eb:a3:26:3b:b4:f5:b5:eb:96:4e:f3:4f:0b:db:b3:95:d5: 31:c7:c0:55:c3:12:37:6d:9d:67:cf:7c:df:8b:52:01:b7:90: 62:fd:7a:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY0tXQrWv2MS06cL6PUaoE5edPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA2MTUwMTM2MjRaFw0yNTA2MTgwOTU0MjRaMDMxMTAvBgNV BAMTKDk5RjQ0NUNERDg3QjQwRTA4MkJBRjMzQzlERkQzQkE3OTcxMDkzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Si2h/PDVoKUBSQ9WzfmmakvU 0WMy8qRB5zYs2mHq8HCzwivYdAjL8+8gYMmdd6saL7RzT7wYXTqIq0CCZd7U/SuC avv0VV1eXlpEdsW1j10ZA6TSS5J42jcwpUJZnqa71xfqewpYIwGUQHEbkBBTJvhU 7NyueUHHO3VY11v7gl3y2Qwu6kJL50Oj0Y0umWl2bU1VdbMKmM1D+mD3aI4m8vlL m1QwiwsKdnwiWQbe8dmoFQqZGboFrCSmvmubbLM21mRLYpaSwhsXFRfuqrRTfNyl 3I/xVpMQ17teJIeFl8778F9XoDLDJZmMRyCfb7/Q/xl8T0gSdIAVZNSn+UL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfRFzdh7QOCCuvM8nf07p5cQk2UwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABBZYWUPdkTh6GSUAp+zXc6QxYmsT7NaqE/ SutN4udTgwehfuZSbvK4X/PsbY8wNLWCAVc3mZr1abV1LU3OUGsA8Rpt83L2VYga Us9zzjL951AEytzAcUCB34XpoGDx8O+VGPC1eZwrwTBFiJr2CfyFhCVcFLEofhgd BgKEz7NzPgylsYxWSNTSAjFiX49bvrm4z/e3zFM92TK4+pUXsUaoh2CfZ2bSiqJX MEmuZezQWsMqDVuzeonJDsgxQwsK3oaABySpeG0UwnOYN7Mi17CDhuPcI+2EYRrr oyY7tPW165ZO808L27OV1THHwFXDEjdtnWfPfN+LUgG3kGL9etI= -----END CERTIFICATE-----Generated at Tue Jun 17 04:11:35 2025 by rpki-client