$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: RW4pPWnOsOI6phNKK1zOpbifEjz85kzfu/3TvLtpBRc= Subject key identifier: AB:33:AD:08:9D:43:5C:02:76:DB:32:81:10:C9:E3:B1:E1:F6:2E:63 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 2E96A326B670172EA501F07F6E97C1BABD65C490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04E8 Signing time: Sat 14 Jun 2025 13:02:23 +0000 Manifest this update: Sat 14 Jun 2025 12:57:23 +0000 Manifest next update: Tue 17 Jun 2025 23:59:23 +0000 Files and hashes: 1: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 2: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) 3: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 4: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: eqJeZi0n9UX8dkVwA9/nSAumOvMSXyPn0kGiOt3vMfA=) 5: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 6: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 7: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 23:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:96:a3:26:b6:70:17:2e:a5:01:f0:7f:6e:97:c1:ba:bd:65:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Jun 14 12:57:23 2025 GMT Not After : Jun 17 23:59:23 2025 GMT Subject: CN=AB33AD089D435C0276DB328110C9E3B1E1F62E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:f0:ff:ef:24:ac:ec:cd:f5:c6:15:33:58: 2d:97:58:6e:13:69:9b:ef:86:55:60:da:60:8d:0b: ce:44:24:22:7b:32:4e:c6:a0:09:04:82:0a:44:84: c2:80:74:b4:df:e8:d6:f0:60:7f:b3:7b:35:ef:ec: 28:02:d3:64:27:95:e1:ec:89:3b:5b:4f:0a:0e:19: 31:73:9b:84:53:35:09:56:10:16:07:19:15:f2:35: 1a:bc:4a:29:0b:c7:57:77:93:23:6f:ee:fe:3d:95: fa:c1:90:ce:ac:b4:29:cd:fc:e3:3f:b4:fb:f7:fa: 4a:6a:3f:1d:57:0a:ed:2f:50:a6:a4:c2:2d:0c:f9: 0c:58:00:98:84:d2:fa:da:15:f2:32:de:9b:6a:58: ac:f2:91:aa:6c:78:83:7a:aa:1e:0c:fb:33:81:a4: 75:7a:bf:52:70:55:b7:e6:e0:06:e2:91:ec:91:cc: 5a:e2:44:0c:7c:ce:90:60:cf:30:6e:f6:1d:7f:64: c9:2e:cb:34:87:8d:c8:c6:b4:66:db:5b:d8:d9:7d: b0:74:64:68:22:70:bf:1b:d4:d3:3f:e1:2c:cc:a4: 5c:af:d2:64:98:c7:90:77:16:5a:3e:f6:45:68:17: b5:21:d0:27:ea:5f:27:bc:90:83:62:5d:13:52:4b: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:AD:08:9D:43:5C:02:76:DB:32:81:10:C9:E3:B1:E1:F6:2E:63 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:24:bb:d0:18:58:75:ef:45:b0:cb:19:fa:ec:98:a9:de:00: f4:05:6b:a0:7d:a6:3a:97:2b:57:f2:07:df:4a:f9:f0:98:13: c9:dc:d0:db:41:60:71:b1:cb:2f:df:0d:fb:f3:ab:5e:1a:27: b8:1f:23:2f:b2:e8:c2:04:f1:64:50:98:11:bc:77:70:f4:c8: 47:83:1e:3d:5f:5c:31:21:de:f4:39:16:f8:c7:e1:fd:90:a9: e8:c0:dc:b6:2f:44:e6:42:88:e3:8b:ff:ff:c7:e8:76:67:bb: 4c:7e:c2:42:a4:0b:6f:7b:e4:4b:e0:8a:2b:70:d5:36:e9:eb: ab:12:4f:49:0f:7a:bd:7b:8d:01:49:f9:b5:9f:88:83:48:79: 68:b5:5b:5b:a8:4a:f1:5f:ed:bf:25:d0:38:ec:10:b1:80:5e: a7:d5:e5:88:1e:54:24:5e:d5:b4:ab:9b:ab:29:42:13:cd:4c: ab:e5:4c:fc:0e:a7:80:c5:0d:d2:58:5e:82:8e:6b:b8:68:51: 87:37:98:7a:8f:a3:ae:52:af:43:aa:c8:66:cb:bc:9c:10:83: 08:a6:35:b7:45:2b:b4:34:52:02:ab:37:c4:4b:d2:1d:46:71: a0:36:6c:98:e4:7b:d3:ab:ed:44:c4:01:60:b1:1d:d7:6a:dd: b6:0b:e9:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpajJrZwFy6lAfB/bpfBur1lxJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA2MTQxMjU3MjNaFw0yNTA2MTcyMzU5MjNaMDMxMTAvBgNV BAMTKEFCMzNBRDA4OUQ0MzVDMDI3NkRCMzI4MTEwQzlFM0IxRTFGNjJFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfvD/7ySs7M31xhUzWC2XWG4T aZvvhlVg2mCNC85EJCJ7Mk7GoAkEggpEhMKAdLTf6NbwYH+zezXv7CgC02QnleHs iTtbTwoOGTFzm4RTNQlWEBYHGRXyNRq8SikLx1d3kyNv7v49lfrBkM6stCnN/OM/ tPv3+kpqPx1XCu0vUKakwi0M+QxYAJiE0vraFfIy3ptqWKzykapseIN6qh4M+zOB pHV6v1JwVbfm4AbikeyRzFriRAx8zpBgzzBu9h1/ZMkuyzSHjcjGtGbbW9jZfbB0 ZGgicL8b1NM/4SzMpFyv0mSYx5B3Flo+9kVoF7Uh0CfqXye8kINiXRNSSxtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqzOtCJ1DXAJ22zKBEMnjseH2LmMwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcku9AYWHXvRbDLGfrsmKneAPQFa6B9pjqX K1fyB99K+fCYE8nc0NtBYHGxyy/fDfvzq14aJ7gfIy+y6MIE8WRQmBG8d3D0yEeD Hj1fXDEh3vQ5FvjH4f2QqejA3LYvROZCiOOL///H6HZnu0x+wkKkC2975Evgiitw 1Tbp66sST0kPer17jQFJ+bWfiINIeWi1W1uoSvFf7b8l0DjsELGAXqfV5YgeVCRe 1bSrm6spQhPNTKvlTPwOp4DFDdJYXoKOa7hoUYc3mHqPo65Sr0OqyGbLvJwQgwim NbdFK7Q0UgKrN8RL0h1GcaA2bJjke9Or7UTEAWCxHddq3bYL6Rw= -----END CERTIFICATE-----Generated at Tue Jun 17 00:08:18 2025 by rpki-client