$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: Ea4vBsc49fPjSjti8sPxrye98uKlf1Q6g5GaGZ6/NOs= Subject key identifier: 15:02:62:6A:9A:3D:D8:EA:01:08:29:A2:9D:C2:2E:D4:64:E4:49:AC Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 09170C03225D2A9D81FE1F510C648620B0A2922B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: A3 Signing time: Mon 16 Jun 2025 15:01:09 +0000 Manifest this update: Mon 16 Jun 2025 14:56:09 +0000 Manifest next update: Thu 19 Jun 2025 19:44:09 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: Y6kBrK1wxJQw3TWdSzddhbVF23mv6B28B54bQmgMCh8=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:17:0c:03:22:5d:2a:9d:81:fe:1f:51:0c:64:86:20:b0:a2:92:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Jun 16 14:56:09 2025 GMT Not After : Jun 19 19:44:09 2025 GMT Subject: CN=1502626A9A3DD8EA010829A29DC22ED464E449AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:31:8a:aa:dc:ae:d8:b2:cb:cd:58:0e:f2: a0:d8:6a:c0:6d:04:2a:c5:f4:95:1e:f9:c2:2a:a7: 49:35:9c:33:8f:66:a9:8f:6c:87:9f:ce:4a:eb:d3: 51:01:38:f2:e5:6b:4a:bd:17:7a:f6:4d:14:e2:1a: 71:ad:e4:e0:ee:e4:fe:24:04:63:a3:bf:bd:2f:43: 48:e3:6a:dd:a1:73:7c:81:ed:13:7c:39:95:be:46: 82:d9:f0:ed:fa:c8:c9:00:84:48:56:f6:07:96:d8: 9a:39:79:1a:6b:10:0a:9f:9c:08:c7:0d:f0:97:d7: 29:c6:93:9e:89:aa:3f:07:82:f5:f4:cc:9e:f9:54: 8d:99:55:d5:91:20:32:45:18:4c:bf:99:f6:68:ec: 44:45:79:38:69:de:2f:2c:b5:5c:94:7c:c8:d0:37: d2:fe:33:22:a2:21:90:a8:5e:7c:db:ac:a9:ca:70: 03:61:19:c1:af:1c:ff:23:af:a2:93:9d:66:1c:71: 04:84:7f:15:08:a4:10:8d:25:ef:7e:fe:d2:58:9c: df:04:e1:41:6b:f5:04:ae:55:57:d5:ab:78:9d:f6: 77:ef:1d:7c:0e:e6:f9:17:e6:13:9a:92:7d:40:9c: 29:31:32:e4:76:06:5a:d6:d4:92:35:ee:d8:7b:47: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:02:62:6A:9A:3D:D8:EA:01:08:29:A2:9D:C2:2E:D4:64:E4:49:AC X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4d:1a:13:4a:2b:08:c1:e3:45:0b:36:06:98:69:ad:e6:82: 31:42:9a:af:f1:88:b4:a0:28:c7:77:15:3f:ca:ea:db:93:ee: a4:49:fa:16:e2:fd:10:6f:1f:2c:dc:53:22:69:56:1a:9b:6c: aa:bf:65:0a:d2:68:b5:c6:c5:2a:17:ae:1b:cc:53:6b:7b:36: a0:4b:51:a0:18:fd:09:cc:2d:fd:15:56:bb:88:65:05:00:0f: 06:3e:d2:9b:f1:07:b2:18:23:a5:91:ac:7b:88:4b:30:61:4f: ed:cf:d0:1f:36:ab:09:43:3b:e7:d6:d4:0b:ba:50:62:54:ec: f0:49:79:de:70:dc:6e:6c:02:fa:2c:21:46:64:be:3f:90:23: b8:29:86:b6:dc:f3:ab:7a:2e:51:a2:a8:ad:e0:e9:33:e4:39: 9c:a2:8f:83:8e:35:fc:db:f7:85:01:58:19:a3:43:1c:82:fe: 12:2a:a2:60:9a:d4:e1:c6:12:6c:6d:d0:74:42:b9:19:c3:41: ea:e3:6b:21:34:17:0d:e8:c7:06:2f:4b:31:14:5e:74:01:2b: 98:94:6b:43:f5:11:30:e0:20:43:ca:27:d6:74:98:15:23:c3: 36:67:33:2b:31:02:53:ec:ca:ce:e5:d3:36:1f:e4:73:8c:b3: 12:35:16:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRcMAyJdKp2B/h9RDGSGILCikiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA2MTYxNDU2MDlaFw0yNTA2MTkxOTQ0MDlaMDMxMTAvBgNV BAMTKDE1MDI2MjZBOUEzREQ4RUEwMTA4MjlBMjlEQzIyRUQ0NjRFNDQ5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaDGKqtyu2LLLzVgO8qDYasBt BCrF9JUe+cIqp0k1nDOPZqmPbIefzkrr01EBOPLla0q9F3r2TRTiGnGt5ODu5P4k BGOjv70vQ0jjat2hc3yB7RN8OZW+RoLZ8O36yMkAhEhW9geW2Jo5eRprEAqfnAjH DfCX1ynGk56Jqj8HgvX0zJ75VI2ZVdWRIDJFGEy/mfZo7ERFeThp3i8stVyUfMjQ N9L+MyKiIZCoXnzbrKnKcANhGcGvHP8jr6KTnWYccQSEfxUIpBCNJe9+/tJYnN8E 4UFr9QSuVVfVq3id9nfvHXwO5vkX5hOakn1AnCkxMuR2BlrW1JI17th7R8B9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQJiapo92OoBCCmincIu1GTkSawwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZNGhNKKwjB40ULNgaYaa3mgjFCmq/xiLSg KMd3FT/K6tuT7qRJ+hbi/RBvHyzcUyJpVhqbbKq/ZQrSaLXGxSoXrhvMU2t7NqBL UaAY/QnMLf0VVruIZQUADwY+0pvxB7IYI6WRrHuISzBhT+3P0B82qwlDO+fW1Au6 UGJU7PBJed5w3G5sAvosIUZkvj+QI7gphrbc86t6LlGiqK3g6TPkOZyij4OONfzb 94UBWBmjQxyC/hIqomCa1OHGEmxt0HRCuRnDQerjayE0Fw3oxwYvSzEUXnQBK5iU a0P1ETDgIEPKJ9Z0mBUjwzZnMysxAlPsys7l0zYf5HOMsxI1FnA= -----END CERTIFICATE-----Generated at Tue Jun 17 08:59:48 2025 by rpki-client