$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: KydJNT2x9d9ifCBtYLZrEO6cvOguEmX8/Q0rd0RLT8Y= Subject key identifier: 20:07:D4:D9:B5:C8:2D:A8:E9:0A:28:AF:30:F2:09:78:12:3D:6D:53 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 638134952AE9F5B9CC401ECC3F00A81E3157B104 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 01EF Signing time: Sat 14 Jun 2025 06:10:02 +0000 Manifest this update: Sat 14 Jun 2025 06:05:02 +0000 Manifest next update: Tue 17 Jun 2025 16:03:02 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 2: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: D87DtBtZ2SDc7S/9k8hRBgm/Lx+rgzFHxzRxp9RYDAg=) 3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:81:34:95:2a:e9:f5:b9:cc:40:1e:cc:3f:00:a8:1e:31:57:b1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Jun 14 06:05:02 2025 GMT Not After : Jun 17 16:03:02 2025 GMT Subject: CN=2007D4D9B5C82DA8E90A28AF30F20978123D6D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:21:6f:db:5e:19:ff:f1:4b:0a:29:46:b6: 51:14:62:03:24:44:6d:a6:8d:32:39:23:2c:0f:b4: eb:da:fa:c4:c5:5e:13:23:f5:a1:75:e9:7e:44:10: 9f:83:c7:b2:c6:98:8b:3c:30:50:5c:35:2e:5a:c5: 76:70:3a:10:8c:b0:2e:3d:a4:4a:07:3b:f2:ea:4e: 7d:09:88:ec:41:a6:d0:ac:ac:b7:47:48:c6:95:3b: d3:82:ca:34:b6:f2:04:02:55:2e:fe:3a:d9:d8:8c: 10:dd:9f:89:b6:18:57:44:cf:3a:97:f7:2c:0b:11: 15:f2:b1:07:10:00:8f:15:f7:0c:f3:6c:07:f4:9a: bb:82:ad:da:e0:82:6b:8b:6d:83:cc:28:9f:be:6d: 21:21:21:e7:f7:40:b0:4b:0b:aa:1c:ce:39:56:47: 5e:5f:1b:9e:03:a3:2c:f2:57:cf:5c:fe:7c:b4:27: 62:02:6e:a4:7e:55:88:8f:93:15:1a:01:f0:8b:18: b9:62:7f:a3:43:75:cb:60:1b:fc:47:10:48:99:d1: a4:a5:51:01:68:86:81:ba:b5:64:6f:2e:2b:a6:c5: 2f:82:61:5b:18:2f:d9:59:af:af:c3:93:b2:51:95: f0:e4:18:77:85:a2:c0:5b:0a:35:32:85:4e:0b:ce: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:D4:D9:B5:C8:2D:A8:E9:0A:28:AF:30:F2:09:78:12:3D:6D:53 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f1:cf:7b:66:b2:6c:f3:41:d4:9a:15:58:c0:04:46:f6:c1: a1:e2:77:d4:fc:91:3a:98:b0:f5:1d:fd:66:96:df:3f:86:42: ac:0b:cd:3b:ef:43:db:d3:ff:80:3d:a4:36:43:e3:7a:a2:74: 2c:70:eb:4e:e8:fb:a2:49:88:96:1a:8b:60:40:ff:61:0a:05: bd:fa:b3:d3:28:57:9d:b3:c1:5b:34:42:75:ff:e8:2b:3b:9e: 60:be:c0:63:e6:9b:ba:07:ca:ba:a5:54:56:ca:af:b8:be:57: 2b:ed:bc:88:e3:c1:a9:25:9d:74:f2:bf:80:78:42:35:39:c0: 00:dd:1e:c8:e6:5d:9b:3c:fe:ca:c5:90:ec:47:bc:d5:ef:16: 91:92:8f:1d:e8:82:74:a7:ca:d9:cc:db:05:08:c1:8a:ad:76: 16:2c:80:78:18:62:d9:e0:fb:98:48:87:1c:2c:f2:aa:33:18: 53:3c:4c:54:4c:38:6a:3a:1e:f1:38:4e:6a:a7:1c:cf:33:77: e5:90:25:65:52:90:5b:f1:6f:3c:0a:5a:60:8f:e1:88:d4:58: ae:37:1b:bc:90:1f:ef:7f:04:f3:65:b8:fd:20:0c:3f:cb:07: c9:a3:18:ec:6e:85:ca:6e:04:f2:ba:c4:2e:5e:c1:28:2e:72: d5:40:6d:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4E0lSrp9bnMQB7MPwCoHjFXsQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA2MTQwNjA1MDJaFw0yNTA2MTcxNjAzMDJaMDMxMTAvBgNV BAMTKDIwMDdENEQ5QjVDODJEQThFOTBBMjhBRjMwRjIwOTc4MTIzRDZENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdSFv214Z//FLCilGtlEUYgMk RG2mjTI5IywPtOva+sTFXhMj9aF16X5EEJ+Dx7LGmIs8MFBcNS5axXZwOhCMsC49 pEoHO/LqTn0JiOxBptCsrLdHSMaVO9OCyjS28gQCVS7+OtnYjBDdn4m2GFdEzzqX 9ywLERXysQcQAI8V9wzzbAf0mruCrdrggmuLbYPMKJ++bSEhIef3QLBLC6oczjlW R15fG54DoyzyV89c/ny0J2ICbqR+VYiPkxUaAfCLGLlif6NDdctgG/xHEEiZ0aSl UQFohoG6tWRvLiumxS+CYVsYL9lZr6/Dk7JRlfDkGHeFosBbCjUyhU4LzumpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIAfU2bXILajpCiivMPIJeBI9bVMwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDxz3tmsmzzQdSaFVjABEb2waHid9T8kTqY sPUd/WaW3z+GQqwLzTvvQ9vT/4A9pDZD43qidCxw607o+6JJiJYai2BA/2EKBb36 s9MoV52zwVs0QnX/6Cs7nmC+wGPmm7oHyrqlVFbKr7i+VyvtvIjjwaklnXTyv4B4 QjU5wADdHsjmXZs8/srFkOxHvNXvFpGSjx3ognSnytnM2wUIwYqtdhYsgHgYYtng +5hIhxws8qozGFM8TFRMOGo6HvE4TmqnHM8zd+WQJWVSkFvxbzwKWmCP4YjUWK43 G7yQH+9/BPNluP0gDD/LB8mjGOxuhcpuBPK6xC5ewSguctVAbT8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:58 2025 by rpki-client