$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: nG8F88Ymc20vePWxhaacWeN+uUFCLfsK2M2ZjmuR6DI= Subject key identifier: F2:A1:3D:F8:17:1F:01:39:67:04:8D:9A:C4:31:84:53:16:FD:79:C8 Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 724962B22B243E4ACCEE21604D40F0236F2E25D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 01D1 Signing time: Sat 14 Jun 2025 20:12:36 +0000 Manifest this update: Sat 14 Jun 2025 20:07:36 +0000 Manifest next update: Wed 18 Jun 2025 03:24:36 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 2: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: IEJVjN08LazRomrXun5gWz1u5IXO5MBpV29rqXJ74b0=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:49:62:b2:2b:24:3e:4a:cc:ee:21:60:4d:40:f0:23:6f:2e:25:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Jun 14 20:07:36 2025 GMT Not After : Jun 18 03:24:36 2025 GMT Subject: CN=F2A13DF8171F013967048D9AC431845316FD79C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:9b:51:a0:77:6f:02:ef:46:57:40:27:6e: cc:da:6c:f2:a1:62:b6:7b:0a:07:fa:43:9f:32:bc: 26:ec:c5:92:35:41:55:d0:09:b0:f8:4d:07:1c:ba: 33:de:c6:fd:9d:db:db:cf:99:de:6b:60:6f:3f:9d: c9:fd:b9:d9:94:3e:7f:14:16:00:64:7e:bc:2e:b2: f3:cc:aa:97:94:7d:fe:06:69:d9:93:ba:7d:2b:b8: d3:a5:9d:b4:85:88:c2:d5:29:9c:c0:5f:48:8a:4b: 78:ba:05:94:cf:02:72:5f:9e:c3:91:64:95:26:7d: 44:cf:1e:49:53:4a:41:36:43:14:9a:47:e3:72:e6: 28:b0:00:ca:5f:25:18:7f:ad:59:24:8a:43:49:aa: 15:3d:70:cc:9e:3c:ec:d7:1c:a0:5f:33:93:f7:ef: 16:74:0c:6d:4a:76:64:44:2d:40:ee:60:0a:d3:ad: 24:00:87:db:dd:6b:4c:e4:0b:b0:34:39:e9:d8:81: ce:b0:a4:b3:60:f2:0f:6e:18:59:99:c6:e1:75:d6: 5b:ef:82:53:f4:7d:69:42:dd:9f:69:40:b5:df:b9: 80:e9:ea:72:24:2c:f4:6b:b4:74:c1:d6:24:3c:9d: da:77:04:d3:01:33:30:38:1b:83:04:bb:80:6c:dd: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A1:3D:F8:17:1F:01:39:67:04:8D:9A:C4:31:84:53:16:FD:79:C8 X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d2:73:08:bd:83:88:0d:6d:b8:ec:36:c5:1a:31:b3:86:93: 3b:53:4c:c2:a1:32:06:50:58:e1:a6:b0:6d:19:78:1e:d1:0d: 58:12:07:02:26:a5:b4:e0:db:7e:a6:61:95:a3:64:f6:eb:c8: e7:5c:19:c3:33:f7:39:67:30:f0:c8:70:b4:cb:b4:52:33:15: 26:94:76:e4:4f:e1:c3:c9:d8:39:00:37:d4:c2:5a:0d:93:99: 9e:16:aa:f1:e9:ae:11:f3:11:58:4d:25:c3:59:05:ac:eb:28: 66:23:e9:d5:8f:49:dc:67:cf:73:fd:c2:e3:e8:c4:5b:f6:db: ad:54:d5:47:f9:8b:f9:2c:67:05:e1:94:db:f0:fc:1f:af:ba: 6b:5a:74:3f:88:62:04:28:40:bb:c3:45:12:51:62:78:72:81: c1:39:a3:85:1f:06:50:2c:0e:f8:6d:66:4d:75:86:72:b3:c5: 7b:40:60:c9:46:dc:7a:bb:bb:1e:3d:53:2e:13:25:cd:e0:1c: de:28:15:a6:70:86:88:f9:c5:9a:af:20:db:89:42:e0:b8:f3: 7d:a3:4a:4f:ed:6e:dc:52:7f:b7:86:f3:31:75:f2:c9:07:c3: ec:1c:32:2e:a1:e9:33:4d:2a:b0:fc:b2:03:91:6c:9e:5d:02: b4:f2:e9:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcklisiskPkrM7iFgTUDwI28uJdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTA2MTQyMDA3MzZaFw0yNTA2MTgwMzI0MzZaMDMxMTAvBgNV BAMTKEYyQTEzREY4MTcxRjAxMzk2NzA0OEQ5QUM0MzE4NDUzMTZGRDc5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEptRoHdvAu9GV0AnbszabPKh YrZ7Cgf6Q58yvCbsxZI1QVXQCbD4TQccujPexv2d29vPmd5rYG8/ncn9udmUPn8U FgBkfrwusvPMqpeUff4GadmTun0ruNOlnbSFiMLVKZzAX0iKS3i6BZTPAnJfnsOR ZJUmfUTPHklTSkE2QxSaR+Ny5iiwAMpfJRh/rVkkikNJqhU9cMyePOzXHKBfM5P3 7xZ0DG1KdmRELUDuYArTrSQAh9vda0zkC7A0OenYgc6wpLNg8g9uGFmZxuF11lvv glP0fWlC3Z9pQLXfuYDp6nIkLPRrtHTB1iQ8ndp3BNMBMzA4G4MEu4Bs3Z/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qE9+BcfATlnBI2axDGEUxb9ecgwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHScwi9g4gNbbjsNsUaMbOGkztTTMKhMgZQ WOGmsG0ZeB7RDVgSBwImpbTg236mYZWjZPbryOdcGcMz9zlnMPDIcLTLtFIzFSaU duRP4cPJ2DkAN9TCWg2TmZ4WqvHprhHzEVhNJcNZBazrKGYj6dWPSdxnz3P9wuPo xFv2261U1Uf5i/ksZwXhlNvw/B+vumtadD+IYgQoQLvDRRJRYnhygcE5o4UfBlAs DvhtZk11hnKzxXtAYMlG3Hq7ux49Uy4TJc3gHN4oFaZwhoj5xZqvINuJQuC4832j Sk/tbtxSf7eG8zF18skHw+wcMi6h6TNNKrD8sgORbJ5dArTy6UE= -----END CERTIFICATE-----Generated at Sun Jun 15 20:52:24 2025 by rpki-client