$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: O2IHjzd/5t/cs6X0Tj0ra33UlCuG1EdavKH7VWtEyoY= Subject key identifier: 65:85:0B:9F:B7:18:DF:D2:C2:A8:5D:A9:C8:F6:3F:91:1A:E8:9E:86 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 040C60C7608B37EA0D2A8097252481414601F07B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 0268 Signing time: Sat 14 Jun 2025 05:51:07 +0000 Manifest this update: Sat 14 Jun 2025 05:46:07 +0000 Manifest next update: Tue 17 Jun 2025 11:21:07 +0000 Files and hashes: 1: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: 3z0rwDfbI5ahSbWwgebilrJHynVzxreeZb1bMRS+lrs=) 2: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: 62scFARqasRlnKzxSKfFrSosY9MvQMyErok3KwJRLjQ=) 3: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +tQvpx2/UfhCVwqRbAlnsxq9kgLuc7k03ayXgiNTges=) 4: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: u+eUbIQ8sdQXAOD7qFaFsHZ6r9ejSPfvugLSORN5KCE=) 5: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: JIXCqhI3ZeNq52cE72y39km9NGPq8BYcV/fexY/0yXI=) 6: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: abskvcadq5piZqirdCanqWvvGdxMK5R2JlpLkkiAzWo=) 7: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: AvWWLXaSLRfHAYW8/XLzdTVorRYOUce/I22PI6+ShLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 11:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0c:60:c7:60:8b:37:ea:0d:2a:80:97:25:24:81:41:46:01:f0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Jun 14 05:46:07 2025 GMT Not After : Jun 17 11:21:07 2025 GMT Subject: CN=65850B9FB718DFD2C2A85DA9C8F63F911AE89E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:d9:e4:88:ed:be:64:97:0c:2a:c7:be:6a: df:74:33:4d:ac:4f:af:ef:aa:59:fc:5b:a0:1d:6c: b9:79:02:b2:e4:97:5c:29:3d:0c:a8:1f:10:85:f6: 91:2e:a5:2f:8c:e9:f3:4b:e7:39:dd:42:aa:5e:8a: 73:a1:c2:cb:c9:4c:11:d5:e0:29:26:08:5b:ac:fb: 8c:dc:31:0d:a7:b9:fa:a0:97:1e:f4:c9:71:32:11: b2:75:30:d4:15:2d:15:67:a1:83:df:d5:6e:96:34: 5a:f1:a3:2d:71:ab:14:0b:16:a8:26:5c:60:d6:2c: ea:b5:b5:d0:b4:bc:49:b4:a3:44:36:c7:07:09:57: 52:33:e9:ed:99:ff:c4:9d:cf:19:08:16:14:45:ef: 94:5c:ec:dc:6b:fd:30:ea:69:c7:5b:3b:d5:b4:1f: e1:f0:6d:e8:e2:28:37:c4:9e:0f:54:6b:f5:1b:e8: 95:50:5e:1a:0c:c1:7c:7f:41:07:c8:83:03:e1:fb: 4f:05:cd:cd:9d:52:18:2d:03:cb:dc:ed:8c:ea:a3: a7:54:8a:3b:6d:9a:8a:bf:34:4a:54:d1:7f:de:b1: a5:cb:55:2b:11:53:96:59:34:8c:b4:88:37:e4:cb: f2:4b:65:88:a1:9e:44:a1:6a:28:2c:27:bf:02:7c: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:0B:9F:B7:18:DF:D2:C2:A8:5D:A9:C8:F6:3F:91:1A:E8:9E:86 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4e:ca:64:9f:a5:4d:5c:49:87:34:ab:c3:8a:36:51:92:8c: db:c3:a8:21:9e:46:2c:08:d0:e5:90:5f:e9:a6:18:b9:b4:93: 04:8c:78:ef:84:fb:22:93:11:39:c9:1e:96:b0:70:20:27:2c: a6:8a:6f:9a:95:5c:4c:19:3c:0b:22:c8:9d:73:bd:50:82:a3: 26:87:77:af:b4:a2:e3:e6:32:98:d8:34:84:3f:76:29:68:a5: 29:10:2b:8e:56:bf:7e:d7:05:a9:91:be:17:97:85:59:4f:0e: 3e:88:62:35:59:c0:c7:80:a4:d2:3c:13:ed:1d:11:cb:7e:9e: f2:27:d2:15:d9:0a:e2:3e:dc:74:70:e6:fd:a6:f0:d7:59:c7: 72:b4:78:15:dc:35:a5:8a:eb:09:de:e2:40:14:5b:94:4e:73: 6d:b1:5a:08:5e:f1:a8:79:ce:e0:d7:d1:04:ac:48:52:88:f7: 86:a7:97:6c:f8:29:40:05:bd:0a:69:b9:d4:d0:a4:20:6e:57: 3b:3d:d7:dd:49:5f:9c:b3:ba:a8:65:0e:ae:7d:e5:86:1d:11: 1e:d4:d5:ad:0f:cd:ba:88:39:b9:f6:34:3c:96:54:0f:56:7b: 8c:90:df:4f:f7:aa:a7:49:b5:3f:f1:2b:4c:ab:fb:f4:fd:e4: 35:ac:4b:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAxgx2CLN+oNKoCXJSSBQUYB8HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA2MTQwNTQ2MDdaFw0yNTA2MTcxMTIxMDdaMDMxMTAvBgNV BAMTKDY1ODUwQjlGQjcxOERGRDJDMkE4NURBOUM4RjYzRjkxMUFFODlFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmwtnkiO2+ZJcMKse+at90M02s T6/vqln8W6AdbLl5ArLkl1wpPQyoHxCF9pEupS+M6fNL5zndQqpeinOhwsvJTBHV 4CkmCFus+4zcMQ2nufqglx70yXEyEbJ1MNQVLRVnoYPf1W6WNFrxoy1xqxQLFqgm XGDWLOq1tdC0vEm0o0Q2xwcJV1Iz6e2Z/8SdzxkIFhRF75Rc7Nxr/TDqacdbO9W0 H+HwbejiKDfEng9Ua/Ub6JVQXhoMwXx/QQfIgwPh+08Fzc2dUhgtA8vc7Yzqo6dU ijttmoq/NEpU0X/esaXLVSsRU5ZZNIy0iDfky/JLZYihnkShaigsJ78CfPCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYULn7cY39LCqF2pyPY/kRronoYwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxOymSfpU1cSYc0q8OKNlGSjNvDqCGeRiwI 0OWQX+mmGLm0kwSMeO+E+yKTETnJHpawcCAnLKaKb5qVXEwZPAsiyJ1zvVCCoyaH d6+0ouPmMpjYNIQ/dilopSkQK45Wv37XBamRvheXhVlPDj6IYjVZwMeApNI8E+0d Ect+nvIn0hXZCuI+3HRw5v2m8NdZx3K0eBXcNaWK6wne4kAUW5ROc22xWghe8ah5 zuDX0QSsSFKI94anl2z4KUAFvQppudTQpCBuVzs9191JX5yzuqhlDq595YYdER7U 1a0PzbqIObn2NDyWVA9We4yQ30/3qqdJtT/xK0yr+/T95DWsS1E= -----END CERTIFICATE-----Generated at Sun Jun 15 17:31:30 2025 by rpki-client