$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json) Hash identifier: TiINPHlXpYORIsp4CCg1jKYTxIUPVGGI/Pl1+rgVY90= Subject key identifier: D0:A0:50:0D:7F:C3:B6:BC:2C:14:20:A8:F9:03:A3:4A:65:3C:FD:05 Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 42D20BB24F6BDF67BD9ABC3387DDEAE38500952E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 11:51:28 +0000 Manifest this update: Sun 15 Jun 2025 11:46:28 +0000 Manifest next update: Wed 18 Jun 2025 21:45:28 +0000 Files and hashes: 1: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: 2eexBXEpw35Z29S6V1THV8p1Wjn4fp3STo79OJOckPA=) 2: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=) 3: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d2:0b:b2:4f:6b:df:67:bd:9a:bc:33:87:dd:ea:e3:85:00:95:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Jun 15 11:46:28 2025 GMT Not After : Jun 18 21:45:28 2025 GMT Subject: CN=D0A0500D7FC3B6BC2C1420A8F903A34A653CFD05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:03:1f:79:29:5f:6d:3b:36:1c:ef:3e:27: f9:a5:87:03:56:92:84:22:08:8a:d4:57:6c:53:24: ac:43:03:b8:60:db:66:49:99:68:27:21:3c:70:6b: cc:99:c7:2c:2f:6c:9c:da:9f:98:60:fd:19:57:aa: 1c:0a:5f:99:d1:62:61:b5:b9:cf:ac:11:86:e4:3f: fb:15:b0:9e:ac:b7:37:62:59:61:ab:d1:3d:79:fe: 10:39:24:7d:19:e1:e8:6a:b5:18:23:b5:1e:30:c9: b9:7f:05:9d:68:64:69:82:eb:51:7b:5e:65:d6:e0: 0a:20:d5:4b:be:aa:40:69:00:3e:ea:33:65:06:10: e8:4c:4d:71:5b:e4:9f:95:7c:b7:e0:d0:c8:7a:4a: 8c:2b:16:d7:6b:3b:5a:ae:b0:83:dd:1f:5f:1a:c2: 70:8e:36:c3:7a:81:65:55:63:5e:b5:d1:16:83:4f: 54:fd:b8:b9:9f:ec:ad:8e:24:cc:32:2b:ff:1f:9f: f7:ec:1c:40:2e:a9:b9:1b:85:72:e3:a1:01:93:d6: 1e:3c:15:e1:9f:9a:ce:cc:12:7e:9f:7c:e4:69:8a: 27:d7:cf:49:64:81:92:0f:8e:5c:a6:62:e1:db:3c: 92:aa:15:36:84:03:f5:67:e7:d9:30:38:44:89:66: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A0:50:0D:7F:C3:B6:BC:2C:14:20:A8:F9:03:A3:4A:65:3C:FD:05 X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:94:e0:24:02:76:e3:9b:5e:b1:5a:1c:22:55:7b:34:f8: d3:13:9c:d7:fa:03:a0:4c:75:d5:de:87:8f:3f:4a:eb:19:81: 55:cf:df:94:fb:4a:99:6f:54:26:bb:4a:bf:b7:08:27:2a:e5: be:4d:0a:41:d8:1f:48:ef:bc:9b:d6:f9:3e:43:3a:83:dc:8e: a1:47:48:ba:00:ef:44:fc:d1:c4:6f:07:52:16:a5:dc:d1:2f: 5b:06:1f:7d:d3:78:10:39:d3:54:b4:95:1b:ec:58:a9:5c:14: aa:05:e8:f7:80:60:d5:b5:53:15:41:4b:0f:cd:b8:c9:8d:b3: 8b:f2:ed:ee:a4:85:aa:2e:c9:71:40:e9:96:24:27:4b:ad:c0: 0b:9f:76:4d:bc:ce:00:b1:24:36:be:7c:6b:49:02:42:60:30: 63:7f:ac:eb:63:e0:74:2b:32:c5:87:10:60:11:a0:f4:d6:97: d8:a8:f5:af:b2:8f:24:17:db:0a:c3:31:fe:f8:77:3a:4a:b7: 63:8a:f4:dd:a8:dc:d8:c6:a2:e2:6c:69:5d:5b:58:c9:61:cc: 6e:52:5e:dd:45:f1:27:95:cf:18:cd:cb:7a:ec:3f:a5:6e:47: a6:c0:ee:92:0e:e6:f5:79:19:bc:fa:77:25:ef:46:02:b6:73: 59:d5:1f:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtILsk9r32e9mrwzh93q44UAlS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNTA2MTUxMTQ2MjhaFw0yNTA2MTgyMTQ1MjhaMDMxMTAvBgNV BAMTKEQwQTA1MDBEN0ZDM0I2QkMyQzE0MjBBOEY5MDNBMzRBNjUzQ0ZEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkIwMfeSlfbTs2HO8+J/mlhwNW koQiCIrUV2xTJKxDA7hg22ZJmWgnITxwa8yZxywvbJzan5hg/RlXqhwKX5nRYmG1 uc+sEYbkP/sVsJ6stzdiWWGr0T15/hA5JH0Z4ehqtRgjtR4wybl/BZ1oZGmC61F7 XmXW4Aog1Uu+qkBpAD7qM2UGEOhMTXFb5J+VfLfg0Mh6SowrFtdrO1qusIPdH18a wnCONsN6gWVVY1610RaDT1T9uLmf7K2OJMwyK/8fn/fsHEAuqbkbhXLjoQGT1h48 FeGfms7MEn6ffORpiifXz0lkgZIPjlymYuHbPJKqFTaEA/Vn59kwOESJZprhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0KBQDX/DtrwsFCCo+QOjSmU8/QUwHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1 QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk6lOAkAnbjm16xWhwiVXs0+NMTnNf6A6BM ddXeh48/SusZgVXP35T7SplvVCa7Sr+3CCcq5b5NCkHYH0jvvJvW+T5DOoPcjqFH SLoA70T80cRvB1IWpdzRL1sGH33TeBA501S0lRvsWKlcFKoF6PeAYNW1UxVBSw/N uMmNs4vy7e6khaouyXFA6ZYkJ0utwAufdk28zgCxJDa+fGtJAkJgMGN/rOtj4HQr MsWHEGARoPTWl9io9a+yjyQX2wrDMf74dzpKt2OK9N2o3NjGouJsaV1bWMlhzG5S Xt1F8SeVzxjNy3rsP6VuR6bA7pIO5vV5Gbz6dyXvRgK2c1nVHwo= -----END CERTIFICATE-----Generated at Tue Jun 17 18:57:12 2025 by rpki-client