$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: eZ57OlnL9aPzxghdT0DmWjN41hqQdcdC8eWjKiCi3Lw= Subject key identifier: 24:57:BA:DB:42:AC:73:15:60:CC:E0:A7:D8:D0:DA:BA:DB:C0:23:CC Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 7EDFF0454AD9496F3AFD98784C6D7320123383F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 01CC Signing time: Sun 15 Jun 2025 14:01:53 +0000 Manifest this update: Sun 15 Jun 2025 13:56:53 +0000 Manifest next update: Wed 18 Jun 2025 14:20:53 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: k7X14J+QdS7MEz6uDJt6u3xkxSH91jVPDLJqXdryTNc=) 2: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: Y9/rwTOnU+HNqMvM7BOIJuCgtRF3NSz8me/turhFEJ0=) 3: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: zLfKDuc3jNTwhPewKCkQdrraOM+o8tM8JoTok2PPCpE=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: /BAWrcQPac6z7r0Aw+CQfRooZAASQixIkDdl1c+PelY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:df:f0:45:4a:d9:49:6f:3a:fd:98:78:4c:6d:73:20:12:33:83:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Jun 15 13:56:53 2025 GMT Not After : Jun 18 14:20:53 2025 GMT Subject: CN=2457BADB42AC731560CCE0A7D8D0DABADBC023CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:52:d3:a8:b3:98:eb:26:69:b6:21:8a:27: 45:09:7a:ca:c0:3e:29:29:bf:39:45:c8:14:d5:05: e6:38:60:35:72:39:34:e1:90:bd:39:12:87:fc:1c: fa:b0:a1:94:e6:ef:09:bf:bb:e0:c0:5a:b4:62:13: c5:65:54:29:7e:74:2e:19:95:4d:15:40:78:7f:89: eb:57:bc:e3:ba:71:cc:b2:23:a0:a2:fe:c7:c3:62: 2d:89:66:b5:5e:1d:02:f2:b4:9e:d0:dc:46:ee:a6: 91:0e:2b:cb:d4:d7:40:3d:8e:67:8a:cd:54:7d:3d: 54:54:f4:79:fe:d5:e1:6a:12:46:53:72:05:f5:f4: fe:13:60:3e:76:63:a9:58:f2:cf:12:3e:b6:ad:cc: ef:0a:68:b2:3b:c7:2e:90:31:5d:3b:a7:7b:e7:fa: 26:f0:7e:d1:df:d4:b9:d5:a0:19:26:78:7e:d9:98: 27:f7:53:f8:1a:2b:ec:5a:21:fb:95:00:24:3f:a1: eb:37:e8:7b:90:52:aa:6e:04:2c:f5:29:93:3d:53: 88:71:7c:d5:55:5f:b2:67:e9:ae:b2:dd:d2:be:ab: 07:42:61:56:95:44:44:b7:fd:15:66:ed:bd:1f:2b: ae:1e:82:dc:c6:d8:aa:bb:c1:89:1d:eb:7c:22:42: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:BA:DB:42:AC:73:15:60:CC:E0:A7:D8:D0:DA:BA:DB:C0:23:CC X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:17:a7:9b:3f:c7:ef:0d:9a:2b:5a:c4:42:9a:9a:b9:ac:83: 4f:85:da:e8:ad:b2:89:ee:f1:2c:e4:3c:62:07:5d:63:a2:3a: 7c:7b:4d:97:8d:8c:bc:d0:d9:e0:c7:98:41:17:ea:5e:fd:ca: 5b:49:95:1e:90:b2:b8:d3:c5:88:9e:e1:a1:92:4e:50:db:dc: 6a:bb:c6:96:c6:9f:5b:35:2e:f1:cd:22:87:c9:7b:0d:7f:8d: 81:6b:76:f2:86:3b:af:eb:12:12:cd:73:6b:04:c6:ae:4c:a3: 2d:1c:8c:54:71:6c:6f:07:43:b8:a6:6f:c6:d9:3f:b6:90:d8: 1e:46:ba:71:13:80:fc:f8:d8:77:ff:7e:e4:2a:7e:df:d7:83: 7d:4c:c1:0e:96:3c:a3:e2:59:72:cb:8c:cd:43:63:5f:40:5b: 74:d5:1d:33:0c:de:34:df:0e:6d:e2:d1:47:c1:a2:1f:0f:77: 7b:8a:12:18:af:89:a9:85:d0:0a:5e:e2:89:29:53:07:74:e2: e4:03:a4:a8:92:ce:95:90:0e:5c:7d:d6:b6:89:87:c7:14:41: 2b:0f:58:9b:c9:a2:db:b0:e9:72:8c:6c:15:dd:91:2e:d9:c8: 1b:02:7d:29:ad:f4:d0:fb:10:08:61:ce:f6:b1:52:b3:b2:a2: 8a:d6:c6:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUft/wRUrZSW86/Zh4TG1zIBIzg/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNTA2MTUxMzU2NTNaFw0yNTA2MTgxNDIwNTNaMDMxMTAvBgNV BAMTKDI0NTdCQURCNDJBQzczMTU2MENDRTBBN0Q4RDBEQUJBREJDMDIzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcPFLTqLOY6yZptiGKJ0UJesrA PikpvzlFyBTVBeY4YDVyOTThkL05Eof8HPqwoZTm7wm/u+DAWrRiE8VlVCl+dC4Z lU0VQHh/ietXvOO6ccyyI6Ci/sfDYi2JZrVeHQLytJ7Q3EbuppEOK8vU10A9jmeK zVR9PVRU9Hn+1eFqEkZTcgX19P4TYD52Y6lY8s8SPratzO8KaLI7xy6QMV07p3vn +ibwftHf1LnVoBkmeH7ZmCf3U/gaK+xaIfuVACQ/oes36HuQUqpuBCz1KZM9U4hx fNVVX7Jn6a6y3dK+qwdCYVaVRES3/RVm7b0fK64egtzG2Kq7wYkd63wiQrp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFe620KscxVgzOCn2NDautvAI8wwHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcXp5s/x+8NmitaxEKamrmsg0+F2uitsonu 8SzkPGIHXWOiOnx7TZeNjLzQ2eDHmEEX6l79yltJlR6QsrjTxYie4aGSTlDb3Gq7 xpbGn1s1LvHNIofJew1/jYFrdvKGO6/rEhLNc2sExq5Moy0cjFRxbG8HQ7imb8bZ P7aQ2B5GunETgPz42Hf/fuQqft/Xg31MwQ6WPKPiWXLLjM1DY19AW3TVHTMM3jTf Dm3i0UfBoh8Pd3uKEhiviamF0Ape4okpUwd04uQDpKiSzpWQDlx91raJh8cUQSsP WJvJotuw6XKMbBXdkS7ZyBsCfSmt9ND7EAhhzvaxUrOyoorWxus= -----END CERTIFICATE-----Generated at Tue Jun 17 15:51:43 2025 by rpki-client