$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: N/5ncuS/rauEgHBLA+EsvrYvUebtdrU65+I2QQnwYsI= Subject key identifier: E3:46:AE:78:71:BF:4C:9E:CF:34:28:DE:9F:39:A4:8B:B1:44:56:0B Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 2EDAF8C7775F1853784FEA4C703BAAEFEA978F11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 02EF Signing time: Sun 15 Jun 2025 16:51:37 +0000 Manifest this update: Sun 15 Jun 2025 16:46:37 +0000 Manifest next update: Wed 18 Jun 2025 20:45:37 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: +bCsVqy0SArgIUQuX+YpDtwEL7uQUKNCIHPjc6bDHdo=) 2: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /Dek1ZvJ66ybadSnlttAvqvfZA2oyv+wEm6/ptqd2XA=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: KtOcU5Wtu0RgMFwLLe8+HQpb9qmgCEJU0addBJecuIc=) 4: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: 0Dk5AnJbUybs/c34MBvDxZX9XVraHCi87TPtzSOpzwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 20:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:da:f8:c7:77:5f:18:53:78:4f:ea:4c:70:3b:aa:ef:ea:97:8f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jun 15 16:46:37 2025 GMT Not After : Jun 18 20:45:37 2025 GMT Subject: CN=E346AE7871BF4C9ECF3428DE9F39A48BB144560B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:df:3f:51:5e:43:d5:4f:98:88:a3:86:99: ae:f1:ba:1f:c5:cd:90:57:ad:2d:26:79:77:2f:76: 58:e3:83:a4:e1:2e:7b:a2:e7:b7:0f:2a:f2:82:f7: ec:96:85:6e:cf:6e:4e:ea:53:2e:0a:dc:0f:ff:8c: 90:f0:b9:88:09:7a:f3:12:ea:8b:ea:ed:1b:7d:62: 80:53:05:e6:b4:37:53:c6:cc:64:30:18:d2:b3:15: d8:d1:61:f9:67:82:56:5a:38:d1:c0:af:a4:37:21: 72:21:39:aa:7e:23:51:da:43:2d:1c:89:78:fe:43: e8:d6:c0:40:a4:ed:ba:dd:ae:07:4e:87:83:74:7d: 00:53:21:47:4a:c4:0f:03:c9:e1:b5:c2:92:52:fc: ff:1b:1e:29:bd:5f:8c:a3:40:b6:0c:2e:06:d4:5a: 7e:7f:a7:7e:ad:2d:f6:a5:51:45:00:36:49:48:46: b5:26:41:85:46:37:10:e7:c0:a2:25:bb:ce:58:f6: fc:89:26:0b:bd:98:d8:f8:05:e0:10:40:50:02:e7: 50:30:f1:fa:68:31:d4:af:9c:d2:55:bd:b9:cc:34: 13:48:a2:71:0f:58:d3:ba:d8:20:8c:41:5b:5e:e0: 16:95:77:2b:f5:42:07:d1:99:4c:0a:21:73:59:05: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:46:AE:78:71:BF:4C:9E:CF:34:28:DE:9F:39:A4:8B:B1:44:56:0B X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:00:16:9f:14:de:f8:08:60:8b:bb:62:ee:c3:e7:b8:15:c1: 99:57:1a:0b:87:11:33:22:2d:4a:fc:d0:c1:40:ef:24:57:25: 85:80:98:04:0a:83:14:79:17:71:4f:93:70:28:18:7f:9d:8f: 5d:93:85:32:dc:68:c9:7e:04:df:de:a3:89:fd:9f:db:80:39: 79:a2:e3:f5:9f:c1:4a:05:86:a9:c0:83:0c:76:18:5c:80:34: 52:c6:29:36:87:7c:17:59:70:7f:ab:7b:1e:22:21:2f:6b:22: 23:e3:e8:66:2b:d0:10:80:5e:d9:9a:af:c2:d0:76:d8:25:24: c1:59:2c:bf:92:f7:af:09:8b:5e:5e:9b:6f:9e:ba:3e:2e:07: 51:de:93:f4:ba:86:6a:9c:d0:5a:11:83:9b:72:12:8b:a9:14: e7:c5:93:6d:ba:74:72:73:ca:24:64:06:f4:e6:c2:72:a5:2b: c0:6a:48:d8:16:8a:ca:82:d4:e0:ba:50:a7:70:ee:d9:75:be: 45:82:14:56:dd:b7:f7:e5:47:83:94:47:43:b9:28:8d:72:a9: 2b:b8:d4:46:b0:52:78:3e:a2:c3:69:f8:bb:82:b0:52:b0:8d: 8b:07:0b:68:3d:c1:67:f7:82:51:21:7c:95:72:78:1b:03:cd: 26:68:88:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtr4x3dfGFN4T+pMcDuq7+qXjxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA2MTUxNjQ2MzdaFw0yNTA2MTgyMDQ1MzdaMDMxMTAvBgNV BAMTKEUzNDZBRTc4NzFCRjRDOUVDRjM0MjhERTlGMzlBNDhCQjE0NDU2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOd8/UV5D1U+YiKOGma7xuh/F zZBXrS0meXcvdljjg6ThLnui57cPKvKC9+yWhW7Pbk7qUy4K3A//jJDwuYgJevMS 6ovq7Rt9YoBTBea0N1PGzGQwGNKzFdjRYflnglZaONHAr6Q3IXIhOap+I1HaQy0c iXj+Q+jWwECk7brdrgdOh4N0fQBTIUdKxA8DyeG1wpJS/P8bHim9X4yjQLYMLgbU Wn5/p36tLfalUUUANklIRrUmQYVGNxDnwKIlu85Y9vyJJgu9mNj4BeAQQFAC51Aw 8fpoMdSvnNJVvbnMNBNIonEPWNO62CCMQVte4BaVdyv1QgfRmUwKIXNZBTK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU40aueHG/TJ7PNCjenzmki7FEVgswHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsAFp8U3vgIYIu7Yu7D57gVwZlXGguHETMi LUr80MFA7yRXJYWAmAQKgxR5F3FPk3AoGH+dj12ThTLcaMl+BN/eo4n9n9uAOXmi 4/WfwUoFhqnAgwx2GFyANFLGKTaHfBdZcH+rex4iIS9rIiPj6GYr0BCAXtmar8LQ dtglJMFZLL+S968Ji15em2+euj4uB1Hek/S6hmqc0FoRg5tyEoupFOfFk226dHJz yiRkBvTmwnKlK8BqSNgWisqC1OC6UKdw7tl1vkWCFFbdt/flR4OUR0O5KI1yqSu4 1EawUng+osNp+LuCsFKwjYsHC2g9wWf3glEhfJVyeBsDzSZoiJQ= -----END CERTIFICATE-----Generated at Mon Jun 16 21:21:55 2025 by rpki-client