$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: 3/VUY/bqQ65npo5+GcufZx4aTtr1FJidRuE4IWcbu8s= Subject key identifier: E4:AD:15:B7:F8:04:F3:33:88:89:2B:1E:A7:40:17:73:4A:19:18:B2 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 0C3D2CC3B882E80F4E344F6AF39C02AB94DBA742 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 016D Signing time: Fri 13 Jun 2025 11:01:11 +0000 Manifest this update: Fri 13 Jun 2025 10:56:11 +0000 Manifest next update: Mon 16 Jun 2025 20:04:11 +0000 Files and hashes: 1: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) 2: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: Z5NZzaEqC2LEtREg2wZ+V3Qum/AHZrATB47hjJCJpMQ=) 3: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 20:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3d:2c:c3:b8:82:e8:0f:4e:34:4f:6a:f3:9c:02:ab:94:db:a7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Jun 13 10:56:11 2025 GMT Not After : Jun 16 20:04:11 2025 GMT Subject: CN=E4AD15B7F804F33388892B1EA74017734A1918B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:23:76:5c:9f:f3:2b:77:22:d2:97:f6:3d: c1:2e:44:fa:a0:66:11:78:45:0c:fd:c5:10:e0:bf: d7:0d:98:75:9b:98:7c:b0:f0:73:d4:82:4d:24:f9: de:91:7d:d3:71:e4:de:1e:5d:fc:40:91:33:07:97: 83:a8:9c:9a:8d:c1:58:4d:13:73:c7:c1:12:40:e1: f1:31:ff:89:10:d3:e5:dd:7f:3f:13:40:14:37:cf: a8:2e:65:8a:6e:47:c4:e4:fd:6a:c8:b7:bf:30:d4: c6:5d:10:8d:8c:ef:b5:92:11:19:28:2c:69:f2:1a: 98:41:ba:bf:8e:5d:9b:12:94:6e:82:77:dd:79:1f: 6f:2c:07:6c:51:1c:70:d7:3b:a4:d9:7e:50:fe:39: c3:74:3e:af:5f:db:8b:0b:bf:c2:28:d3:65:49:51: 45:15:9c:ed:2a:5f:af:7c:a0:00:c7:d2:0d:87:44: 7d:05:cb:7d:81:71:2b:a9:c7:3f:a7:5b:8d:96:84: ea:8d:8d:66:c9:79:12:9f:6c:56:ec:ab:de:19:55: bd:e8:db:46:c4:d2:21:b7:58:8a:bd:d7:2d:a0:de: 16:40:4e:e4:31:b3:a7:07:56:44:5b:82:14:63:e7: 43:46:a2:bb:bd:f9:26:91:48:d9:70:c1:5e:29:e2: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AD:15:B7:F8:04:F3:33:88:89:2B:1E:A7:40:17:73:4A:19:18:B2 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:73:f7:39:90:e7:bd:64:25:41:e6:21:d3:78:21:ca:34:2b: 34:82:89:20:81:44:c5:e7:d3:7a:9b:a7:98:8c:49:20:09:05: 36:b8:d4:f4:4d:10:c6:55:09:01:9c:e9:da:22:20:13:66:c4: e1:30:7b:c6:24:46:44:46:41:51:15:76:bd:43:b1:43:e7:0c: 2a:16:c3:56:e8:8c:06:d3:d9:f8:27:8e:1a:11:05:9f:44:3d: 98:59:c8:bf:73:10:5c:88:e0:22:16:a2:2a:c1:11:d5:ee:82: eb:aa:7a:3e:3b:76:0a:c2:e4:13:8b:6a:92:71:43:86:84:d4: c4:27:c1:66:36:71:56:b0:f7:3d:82:11:20:2a:cb:c7:fe:a7: 8d:51:bf:2d:17:50:fd:d2:fc:f2:fd:19:04:46:3c:0c:ae:35: af:9c:32:a3:f1:41:9f:a0:7f:08:04:32:37:50:d0:18:cd:a2: 18:40:ea:ef:ea:2a:32:ed:72:07:0b:de:b1:67:5e:d8:b9:67: e5:88:7e:79:58:01:9d:8a:41:9e:54:6a:67:a8:78:81:16:0c: f4:c8:31:2b:f8:e2:2b:94:41:54:7a:3f:52:ae:ac:a2:80:ac: b9:9b:dd:61:bd:fc:ee:a0:d0:c3:67:06:b1:24:4a:6a:5e:6b: 13:e9:f9:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDD0sw7iC6A9ONE9q85wCq5Tbp0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTA2MTMxMDU2MTFaFw0yNTA2MTYyMDA0MTFaMDMxMTAvBgNV BAMTKEU0QUQxNUI3RjgwNEYzMzM4ODg5MkIxRUE3NDAxNzczNEExOTE4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwiN2XJ/zK3ci0pf2PcEuRPqg ZhF4RQz9xRDgv9cNmHWbmHyw8HPUgk0k+d6RfdNx5N4eXfxAkTMHl4OonJqNwVhN E3PHwRJA4fEx/4kQ0+Xdfz8TQBQ3z6guZYpuR8Tk/WrIt78w1MZdEI2M77WSERko LGnyGphBur+OXZsSlG6Cd915H28sB2xRHHDXO6TZflD+OcN0Pq9f24sLv8Io02VJ UUUVnO0qX698oADH0g2HRH0Fy32BcSupxz+nW42WhOqNjWbJeRKfbFbsq94ZVb3o 20bE0iG3WIq91y2g3hZATuQxs6cHVkRbghRj50NGoru9+SaRSNlwwV4p4i0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5K0Vt/gE8zOIiSsep0AXc0oZGLIwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpz9zmQ571kJUHmIdN4Ico0KzSCiSCBRMXn 03qbp5iMSSAJBTa41PRNEMZVCQGc6doiIBNmxOEwe8YkRkRGQVEVdr1DsUPnDCoW w1bojAbT2fgnjhoRBZ9EPZhZyL9zEFyI4CIWoirBEdXuguuqej47dgrC5BOLapJx Q4aE1MQnwWY2cVaw9z2CESAqy8f+p41Rvy0XUP3S/PL9GQRGPAyuNa+cMqPxQZ+g fwgEMjdQ0BjNohhA6u/qKjLtcgcL3rFnXti5Z+WIfnlYAZ2KQZ5UameoeIEWDPTI MSv44iuUQVR6P1KurKKArLmb3WG9/O6g0MNnBrEkSmpeaxPp+fs= -----END CERTIFICATE-----Generated at Sun Jun 15 17:04:10 2025 by rpki-client