$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: XQv7aQSJzducFA8ETm4OvJwY14oz4/WUVnn9UauYFLg= Subject key identifier: D0:23:88:06:8D:8C:82:6F:5F:01:48:87:BA:9B:F5:EC:FB:59:4C:0A Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 3A90520315670BE84ED74DC5F3F285F8F369B82D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 016A Signing time: Tue 17 Jun 2025 10:32:08 +0000 Manifest this update: Tue 17 Jun 2025 10:27:08 +0000 Manifest next update: Fri 20 Jun 2025 17:13:08 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: WbLbyvTE+x5BUhrz3W5hh94UndCJTl+naHzhd/gSMeY=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 17:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:90:52:03:15:67:0b:e8:4e:d7:4d:c5:f3:f2:85:f8:f3:69:b8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Jun 17 10:27:08 2025 GMT Not After : Jun 20 17:13:08 2025 GMT Subject: CN=D02388068D8C826F5F014887BA9BF5ECFB594C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:56:34:86:73:65:31:1d:69:30:73:6a:38: 53:5a:00:f5:78:43:40:ed:a6:81:5a:7c:11:98:0c: 41:d8:00:ee:b2:ae:2b:69:21:96:8a:4a:8f:24:15: 07:e0:0b:6a:34:ad:6b:53:58:32:89:de:86:86:a6: 3b:3c:7c:37:a1:01:f4:35:57:0e:1f:67:3d:3a:88: 63:05:44:9e:5e:f7:95:cd:d1:e7:22:a3:52:7b:fc: 99:8b:f3:50:0c:55:da:d6:88:fb:2d:47:83:6f:57: 46:9c:a9:6a:12:09:fa:50:37:fa:93:ed:ac:42:5e: 44:f2:d8:af:c8:95:c2:03:b2:1a:2c:71:45:f5:8c: c7:41:30:0c:86:6b:56:27:81:46:f4:eb:c9:68:1a: d5:a5:d0:b9:a0:16:c9:3a:05:e7:b0:97:be:26:eb: 1b:13:75:0c:b6:34:93:8f:8d:77:60:24:02:f1:18: fb:3f:d2:44:d8:b0:22:fc:17:a4:29:b2:8f:ab:fe: 1f:9c:77:c1:54:6b:f4:80:84:00:ac:e0:6f:5e:ab: 39:4e:68:6c:89:db:86:6e:12:2d:e9:ef:21:c3:1e: 97:36:57:b1:39:1b:ef:db:6c:4b:b4:c4:c2:7c:45: 4f:7d:2f:23:6f:b0:61:af:0d:1e:4d:a5:63:20:6b: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:88:06:8D:8C:82:6F:5F:01:48:87:BA:9B:F5:EC:FB:59:4C:0A X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:00:67:f9:22:b9:28:bf:f8:4d:f8:66:54:42:be:4e:2d: 35:a0:6f:3e:09:f8:6d:b2:21:8c:44:36:26:a1:84:a8:e4:54: 5c:f7:fb:5d:09:29:03:be:de:33:eb:2e:3c:cf:47:e4:1e:65: 6d:5b:ee:07:4c:ec:cd:b3:54:66:bc:ea:2e:e7:eb:09:31:4b: fc:91:ce:b6:23:44:66:52:97:b0:5d:78:17:2b:0c:82:8f:e4: 19:d2:7d:2a:21:76:e2:74:4d:65:29:37:a8:6e:93:01:b5:45: f3:0e:66:d4:98:31:bd:cc:ce:07:76:14:07:7e:f5:d2:d2:2e: 3e:dd:fc:a2:d7:09:3e:1d:02:c2:c7:82:27:a4:2b:4a:9e:95: 43:fa:f1:a1:c9:e4:92:4c:4b:fa:b5:de:3c:ab:83:2d:30:77: 14:12:90:d7:38:2c:ba:ca:8d:19:e5:27:3c:d5:ea:6e:ca:a6: 64:4f:1b:51:64:02:c6:02:fb:a3:bb:5d:46:67:b5:0b:05:4d: 11:47:54:f1:38:41:d9:11:ca:3c:ed:60:90:ea:5c:42:b3:50: f4:23:1d:de:a3:cd:c8:9b:5c:a8:9e:06:39:d1:2c:17:b5:18: 80:61:0d:a7:0e:b1:e3:4a:20:1e:bf:59:a9:cd:be:4b:93:d4: 1e:c7:50:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpBSAxVnC+hO103F8/KF+PNpuC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTA2MTcxMDI3MDhaFw0yNTA2MjAxNzEzMDhaMDMxMTAvBgNV BAMTKEQwMjM4ODA2OEQ4QzgyNkY1RjAxNDg4N0JBOUJGNUVDRkI1OTRDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPylY0hnNlMR1pMHNqOFNaAPV4 Q0DtpoFafBGYDEHYAO6yritpIZaKSo8kFQfgC2o0rWtTWDKJ3oaGpjs8fDehAfQ1 Vw4fZz06iGMFRJ5e95XN0ecio1J7/JmL81AMVdrWiPstR4NvV0acqWoSCfpQN/qT 7axCXkTy2K/IlcIDshoscUX1jMdBMAyGa1YngUb068loGtWl0LmgFsk6Beewl74m 6xsTdQy2NJOPjXdgJALxGPs/0kTYsCL8F6Qpso+r/h+cd8FUa/SAhACs4G9eqzlO aGyJ24ZuEi3p7yHDHpc2V7E5G+/bbEu0xMJ8RU99LyNvsGGvDR5NpWMga2KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0COIBo2Mgm9fAUiHupv17PtZTAowHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMVAGf5Irkov/hN+GZUQr5OLTWgbz4J+G2y IYxENiahhKjkVFz3+10JKQO+3jPrLjzPR+QeZW1b7gdM7M2zVGa86i7n6wkxS/yR zrYjRGZSl7BdeBcrDIKP5BnSfSohduJ0TWUpN6hukwG1RfMOZtSYMb3Mzgd2FAd+ 9dLSLj7d/KLXCT4dAsLHgiekK0qelUP68aHJ5JJMS/q13jyrgy0wdxQSkNc4LLrK jRnlJzzV6m7KpmRPG1FkAsYC+6O7XUZntQsFTRFHVPE4QdkRyjztYJDqXEKzUPQj Hd6jzcibXKieBjnRLBe1GIBhDacOseNKIB6/WanNvkuT1B7HUFI= -----END CERTIFICATE-----Generated at Wed Jun 18 03:34:19 2025 by rpki-client