$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: tE+Wwpo892nkHQnT6+mlEXQ5PZ54tGSlTQV7wUEkPXs= Subject key identifier: A0:C2:88:5A:64:A7:AC:FC:47:36:EB:09:10:75:B5:C2:45:7C:05:F1 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 07D3585D65F73898972A397247B17E26ECCAF1BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 02CA Signing time: Sun 15 Jun 2025 12:51:10 +0000 Manifest this update: Sun 15 Jun 2025 12:46:10 +0000 Manifest next update: Wed 18 Jun 2025 23:24:10 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ik3JwPueGh0lC4/wMe1++inmZhlbllGr5PVZbJzidbY=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: rJrSCgJYnO2vOPVMkvUOZW8ODioESsjE7nbDCdEDX00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d3:58:5d:65:f7:38:98:97:2a:39:72:47:b1:7e:26:ec:ca:f1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Jun 15 12:46:10 2025 GMT Not After : Jun 18 23:24:10 2025 GMT Subject: CN=A0C2885A64A7ACFC4736EB091075B5C2457C05F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7b:99:86:e4:26:5d:e2:eb:94:cf:b2:6e:f8: 5f:e7:2c:38:bf:ac:41:bd:83:a0:1d:cd:88:46:95: ae:1d:d2:75:bb:98:07:68:59:03:94:3d:ca:ef:cf: 8f:7d:88:5a:21:1e:bf:af:04:61:dc:6d:39:61:4f: 78:36:e3:9f:9d:1b:c6:7f:66:15:6a:4c:bd:04:8f: c6:88:df:1c:c9:4b:86:ad:d6:9e:91:6d:22:bc:34: ef:d6:bd:45:4d:54:b4:1e:bc:28:63:d3:14:38:16: 6a:61:ff:cf:cc:1c:c0:1f:ba:72:57:24:82:7f:34: a0:a8:c9:4d:33:00:c2:7c:6f:75:ec:68:39:31:ba: 51:fa:1e:5a:0e:b0:66:90:43:88:91:4a:21:d8:c8: f5:da:2d:e8:19:79:83:94:8e:4a:71:9c:da:28:dc: 37:78:59:a7:8a:48:23:95:38:b8:51:97:71:08:73: 30:62:b1:bb:ff:99:9c:bc:ab:bb:2c:83:65:e2:eb: 14:01:c5:12:49:f9:a3:0c:c2:5a:8e:da:6d:a2:ac: da:d8:e2:12:d3:fe:39:e9:37:c1:84:1d:0f:82:40: 44:82:f8:f6:83:65:29:87:03:cc:cf:e4:f7:3c:60: 3a:0d:90:3d:1a:1b:56:cb:a1:47:90:23:d6:5e:89: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C2:88:5A:64:A7:AC:FC:47:36:EB:09:10:75:B5:C2:45:7C:05:F1 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:75:f6:6f:ea:6d:2a:1a:86:4b:c3:ac:da:24:bc:dd:aa:7f: 57:6d:18:63:22:33:91:d0:dc:13:55:17:c3:5a:4f:fa:67:27: 2d:31:35:2a:d0:2e:5e:4f:15:f6:39:21:1a:8a:04:f5:2b:44: b0:52:65:a6:81:32:a6:cc:98:32:03:af:03:ae:33:87:61:80: e9:7b:56:39:ef:55:4a:e4:01:e7:eb:ec:7a:11:e0:7a:8b:73: 53:b3:d6:69:1a:81:d6:12:9f:2d:da:a3:6a:e4:37:cf:92:85: 79:af:c2:22:e2:84:19:82:7d:2e:ec:a8:66:e2:26:2e:d9:7d: 0a:67:0a:66:6b:83:bd:e4:57:64:69:1b:2f:15:d8:04:1f:4e: cd:66:37:b2:46:d4:d7:4b:03:fe:50:b7:0b:23:47:7f:6d:8f: 0f:3f:b1:8d:81:96:28:ba:b0:9a:9e:a1:a6:26:37:28:fa:11: 95:93:24:49:fe:18:37:64:9c:2d:07:54:cd:b7:11:9f:b7:a4: 37:5b:bf:5d:3a:b2:7e:03:b0:38:31:e8:30:89:7e:ac:64:99: b2:73:04:93:b6:93:ba:21:7b:0f:38:fe:0f:45:e1:db:d8:cd: c3:71:8b:23:b8:b4:22:cd:bb:27:2e:f3:5a:9e:00:43:d0:6a: 41:1d:5e:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9NYXWX3OJiXKjlyR7F+JuzK8bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTA2MTUxMjQ2MTBaFw0yNTA2MTgyMzI0MTBaMDMxMTAvBgNV BAMTKEEwQzI4ODVBNjRBN0FDRkM0NzM2RUIwOTEwNzVCNUMyNDU3QzA1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDme5mG5CZd4uuUz7Ju+F/nLDi/ rEG9g6AdzYhGla4d0nW7mAdoWQOUPcrvz499iFohHr+vBGHcbTlhT3g245+dG8Z/ ZhVqTL0Ej8aI3xzJS4at1p6RbSK8NO/WvUVNVLQevChj0xQ4Fmph/8/MHMAfunJX JIJ/NKCoyU0zAMJ8b3XsaDkxulH6HloOsGaQQ4iRSiHYyPXaLegZeYOUjkpxnNoo 3Dd4WaeKSCOVOLhRl3EIczBisbv/mZy8q7ssg2Xi6xQBxRJJ+aMMwlqO2m2irNrY 4hLT/jnpN8GEHQ+CQESC+PaDZSmHA8zP5Pc8YDoNkD0aG1bLoUeQI9ZeibMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMKIWmSnrPxHNusJEHW1wkV8BfEwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKh19m/qbSoahkvDrNokvN2qf1dtGGMiM5HQ 3BNVF8NaT/pnJy0xNSrQLl5PFfY5IRqKBPUrRLBSZaaBMqbMmDIDrwOuM4dhgOl7 VjnvVUrkAefr7HoR4HqLc1Oz1mkagdYSny3ao2rkN8+ShXmvwiLihBmCfS7sqGbi Ji7ZfQpnCmZrg73kV2RpGy8V2AQfTs1mN7JG1NdLA/5QtwsjR39tjw8/sY2Blii6 sJqeoaYmNyj6EZWTJEn+GDdknC0HVM23EZ+3pDdbv106sn4DsDgx6DCJfqxkmbJz BJO2k7ohew84/g9F4dvYzcNxiyO4tCLNuycu81qeAEPQakEdXus= -----END CERTIFICATE-----Generated at Tue Jun 17 21:57:26 2025 by rpki-client