$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: /CuhU0YB5+VP55NtB6i+gXrMeLg5oH4SYZJIWgFIb+g= Subject key identifier: 96:05:13:38:DE:38:C6:42:F8:11:41:47:A1:47:59:9C:4B:DA:14:CA Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 3DD2468089D206DF16CB3081137B3FADBF08A2D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 0355 Signing time: Sun 15 Jun 2025 08:51:27 +0000 Manifest this update: Sun 15 Jun 2025 08:46:27 +0000 Manifest next update: Wed 18 Jun 2025 11:48:27 +0000 Files and hashes: 1: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: cD1aqJ3JbWW1qQrirrxufRPynTnAkV23zDEEjS4nEcI=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d2:46:80:89:d2:06:df:16:cb:30:81:13:7b:3f:ad:bf:08:a2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Jun 15 08:46:27 2025 GMT Not After : Jun 18 11:48:27 2025 GMT Subject: CN=96051338DE38C642F8114147A147599C4BDA14CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e1:94:b6:9b:cb:4c:95:3a:7e:3a:6c:1e:10: be:79:42:2e:62:bf:06:1c:84:05:dc:54:35:ab:fb: ee:94:19:d6:da:22:42:91:b6:7f:de:55:f1:88:33: 07:87:4b:96:2c:29:53:67:2c:2f:c6:97:87:54:dc: e3:9a:65:0d:3d:ec:9d:dd:7a:ee:41:5a:54:98:03: b6:71:a6:11:20:d2:61:c8:1c:58:eb:4a:1e:48:88: d4:e0:9c:89:41:4c:ed:07:dd:e0:61:f1:23:e7:77: b7:6a:ef:1e:f9:3f:43:2d:4a:4d:66:4e:74:35:de: b6:7f:59:ee:e2:90:a5:fc:90:5d:80:b4:b8:29:91: c8:5f:ab:d2:cd:5e:4d:a8:07:ab:d4:85:e2:b1:71: bf:b5:72:6c:b0:62:17:69:db:18:ba:4d:83:6a:a2: 8e:be:fb:9b:bf:ed:99:21:96:9c:f2:47:9c:56:c8: 39:ef:a6:c9:64:b9:60:77:1e:66:3b:75:10:73:01: 04:93:a1:a2:f1:63:21:3f:7e:17:22:6b:8b:b9:70: b2:57:00:5a:cf:ce:21:12:b3:be:16:cb:54:ac:1c: e2:ea:e8:ce:11:4a:73:d7:05:74:a7:1a:5c:fa:46: 1b:fc:ef:4d:46:d0:b7:e5:c6:68:73:2f:cc:d8:ee: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:13:38:DE:38:C6:42:F8:11:41:47:A1:47:59:9C:4B:DA:14:CA X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:67:0b:da:d9:cd:27:e7:c0:2e:2a:98:10:b9:95:d4:62:f4: 25:27:6b:c9:26:2e:cc:ce:f8:32:a8:dd:7f:11:b9:43:7d:9b: 45:2f:b3:a4:33:0e:91:86:ab:63:7c:6f:9a:1c:da:68:c8:2c: d7:ac:40:51:9e:bc:a1:d5:2b:de:96:6d:62:05:18:e6:4d:cc: 63:2e:76:85:dd:91:00:5e:32:12:6e:67:c6:98:60:88:54:f5: 4b:e0:2f:14:80:11:10:70:c5:02:5a:b8:17:48:72:c5:b2:9c: 49:88:ae:1e:2b:87:18:4c:ce:7c:c4:2e:55:87:a1:d0:88:2b: 80:3f:81:38:92:95:58:e2:76:7c:cb:78:f1:52:38:df:09:81: 93:fc:c7:66:a1:a5:ee:b6:93:70:70:93:54:e1:bb:f8:2f:e7: 8f:fa:57:ef:01:86:a8:82:ca:e2:a5:ae:41:2c:b8:8f:73:76: 2b:d8:18:9a:b1:24:f2:e0:52:d2:4c:10:7c:47:ed:f1:f6:e7: f0:96:1b:2f:78:d4:05:e8:ac:b7:24:d3:30:d1:9b:19:8b:c9: d1:b6:05:9b:c7:21:2e:24:bd:13:23:28:91:f2:9b:81:42:55: dd:86:c9:2b:60:f5:5b:92:4c:cf:5e:01:22:32:fc:35:6e:e0: df:51:be:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdJGgInSBt8WyzCBE3s/rb8IotIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTA2MTUwODQ2MjdaFw0yNTA2MTgxMTQ4MjdaMDMxMTAvBgNV BAMTKDk2MDUxMzM4REUzOEM2NDJGODExNDE0N0ExNDc1OTlDNEJEQTE0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4ZS2m8tMlTp+OmweEL55Qi5i vwYchAXcVDWr++6UGdbaIkKRtn/eVfGIMweHS5YsKVNnLC/Gl4dU3OOaZQ097J3d eu5BWlSYA7ZxphEg0mHIHFjrSh5IiNTgnIlBTO0H3eBh8SPnd7dq7x75P0MtSk1m TnQ13rZ/We7ikKX8kF2AtLgpkchfq9LNXk2oB6vUheKxcb+1cmywYhdp2xi6TYNq oo6++5u/7ZkhlpzyR5xWyDnvpslkuWB3HmY7dRBzAQSToaLxYyE/fhcia4u5cLJX AFrPziESs74Wy1SsHOLq6M4RSnPXBXSnGlz6Rhv8701G0LflxmhzL8zY7hP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgUTON44xkL4EUFHoUdZnEvaFMowHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBnC9rZzSfnwC4qmBC5ldRi9CUna8kmLszO +DKo3X8RuUN9m0Uvs6QzDpGGq2N8b5oc2mjILNesQFGevKHVK96WbWIFGOZNzGMu doXdkQBeMhJuZ8aYYIhU9UvgLxSAERBwxQJauBdIcsWynEmIrh4rhxhMznzELlWH odCIK4A/gTiSlVjidnzLePFSON8JgZP8x2ahpe62k3Bwk1Thu/gv54/6V+8BhqiC yuKlrkEsuI9zdivYGJqxJPLgUtJMEHxH7fH25/CWGy941AXorLck0zDRmxmLydG2 BZvHIS4kvRMjKJHym4FCVd2GyStg9VuSTM9eASIy/DVu4N9Rvu8= -----END CERTIFICATE-----Generated at Mon Jun 16 15:54:16 2025 by rpki-client