$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: EnnXV2mRtcPiWkyciOTRT9ag9VQrNvLpghOm5FI3zu8= Subject key identifier: BC:BA:94:B4:B4:A7:B2:84:76:39:2C:C6:85:64:A1:3C:9C:E7:7E:E9 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 7A159D4B166C23F52B9966A1F39B9F44E21F6B8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 04E0 Signing time: Wed 18 Jun 2025 00:40:34 +0000 Manifest this update: Wed 18 Jun 2025 00:35:34 +0000 Manifest next update: Sat 21 Jun 2025 00:49:34 +0000 Files and hashes: 1: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 3: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: yMS0n/+v/D6H1Fmrg4ikcP8BQvnsfM/kVRBBROCFfts=) 4: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:15:9d:4b:16:6c:23:f5:2b:99:66:a1:f3:9b:9f:44:e2:1f:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Jun 18 00:35:34 2025 GMT Not After : Jun 21 00:49:34 2025 GMT Subject: CN=BCBA94B4B4A7B28476392CC68564A13C9CE77EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4e:44:67:c4:68:ad:23:84:24:ed:2c:b8:42: 5e:f1:97:37:20:ff:88:ac:e5:fb:e0:32:e0:ec:d3: 44:f9:48:2f:ca:93:3a:bb:9c:24:33:df:29:2a:88: dd:41:be:12:a9:e7:7f:b8:c9:9e:3b:24:7b:d6:a5: 00:49:6f:98:54:f0:71:3c:21:85:a9:70:7c:fc:f3: 6e:79:9d:79:22:f1:aa:cb:d6:3f:35:9c:66:30:63: 0e:c4:4a:50:fd:7d:c8:9a:70:f5:3e:71:7c:f1:25: 98:f5:d4:01:10:fc:76:09:97:04:11:6c:51:9b:36: 5e:d2:46:f6:c4:0c:b0:b3:c3:e9:f3:d3:f3:3b:30: 77:4c:91:28:2e:17:e1:7c:fb:4e:de:c8:e5:44:47: dd:e4:6e:d5:85:27:a7:f0:56:37:29:42:ec:48:9a: e6:9d:26:7b:ba:a7:01:a4:02:b0:dc:46:c1:79:5a: 8d:67:91:0f:a7:06:00:a3:43:a5:05:80:f6:80:33: d3:90:58:35:14:07:9e:60:fc:86:4c:32:70:de:76: 38:dc:99:49:1c:7c:d7:3c:2c:f0:37:a5:90:86:ff: 9c:a6:9b:5d:ac:e1:45:e5:ca:e2:c5:7b:1c:f2:6f: c7:4f:74:f2:97:d7:c7:3b:eb:cb:73:f1:9d:55:e0: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BA:94:B4:B4:A7:B2:84:76:39:2C:C6:85:64:A1:3C:9C:E7:7E:E9 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:0f:44:db:dc:48:69:59:39:bb:98:76:00:de:e3:b0:0a: 0b:d8:4f:38:d4:31:57:eb:bc:7d:99:2f:5d:2a:fe:34:93:43: c4:1c:55:89:6d:cc:2e:a4:bb:c9:37:35:16:cf:d6:c0:4d:b4: 44:a2:fa:0c:cc:db:4a:ed:3c:4d:56:70:c6:4d:75:14:2a:7f: 2d:2f:e3:c0:3f:c0:58:7a:dc:39:40:26:a8:80:33:8a:ac:6c: 40:f7:86:1e:7b:d0:08:07:ed:09:63:49:16:f2:a3:28:43:ad: 7b:b6:ba:15:ea:bf:a4:de:3b:b2:06:28:10:28:b5:fd:c2:8e: 70:96:e7:56:cb:7c:cf:f8:21:a9:24:b0:39:45:fb:5c:c4:d8: 4d:12:8e:f6:53:67:ec:a3:d0:36:93:92:db:38:4d:00:1f:6a: f9:50:bd:03:cd:62:c5:7a:94:da:5a:01:bf:7e:c4:01:f7:ed: 18:a3:5d:05:38:11:1b:eb:b1:5d:04:c4:fe:f9:90:ab:68:b3: 17:17:8a:b9:65:1c:de:3e:ec:dc:83:0e:0a:25:06:33:97:cd: 13:3d:5e:cd:6f:99:54:df:ba:4c:8e:d0:9a:b2:57:b5:ca:14: c6:f8:9d:85:2f:68:5a:6d:ce:f5:d3:fa:fe:70:e6:d3:87:22: 38:37:02:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehWdSxZsI/UrmWah85ufROIfa4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTA2MTgwMDM1MzRaFw0yNTA2MjEwMDQ5MzRaMDMxMTAvBgNV BAMTKEJDQkE5NEI0QjRBN0IyODQ3NjM5MkNDNjg1NjRBMTNDOUNFNzdFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTkRnxGitI4Qk7Sy4Ql7xlzcg /4is5fvgMuDs00T5SC/Kkzq7nCQz3ykqiN1BvhKp53+4yZ47JHvWpQBJb5hU8HE8 IYWpcHz88255nXki8arL1j81nGYwYw7ESlD9fciacPU+cXzxJZj11AEQ/HYJlwQR bFGbNl7SRvbEDLCzw+nz0/M7MHdMkSguF+F8+07eyOVER93kbtWFJ6fwVjcpQuxI muadJnu6pwGkArDcRsF5Wo1nkQ+nBgCjQ6UFgPaAM9OQWDUUB55g/IZMMnDedjjc mUkcfNc8LPA3pZCG/5ymm12s4UXlyuLFexzyb8dPdPKX18c768tz8Z1V4MihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLqUtLSnsoR2OSzGhWShPJznfukwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwKD0Tb3EhpWTm7mHYA3uOwCgvYTzjUMVfr vH2ZL10q/jSTQ8QcVYltzC6ku8k3NRbP1sBNtESi+gzM20rtPE1WcMZNdRQqfy0v 48A/wFh63DlAJqiAM4qsbED3hh570AgH7QljSRbyoyhDrXu2uhXqv6TeO7IGKBAo tf3CjnCW51bLfM/4IakksDlF+1zE2E0SjvZTZ+yj0DaTkts4TQAfavlQvQPNYsV6 lNpaAb9+xAH37RijXQU4ERvrsV0ExP75kKtosxcXirllHN4+7NyDDgolBjOXzRM9 Xs1vmVTfukyO0JqyV7XKFMb4nYUvaFptzvXT+v5w5tOHIjg3AtY= -----END CERTIFICATE-----Generated at Thu Jun 19 11:08:55 2025 by rpki-client