$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: Poiu+O5xXNC2mfFUR3KKXTpFZJK6umRdbh1f5m6QIgw= Subject key identifier: 25:B9:EF:26:7F:20:F2:EB:03:51:AF:FB:8E:7E:01:EE:DD:16:1F:26 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 776561C595E65D046804DC86270424312E1EF48E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 0188 Signing time: Mon 28 Apr 2025 12:41:05 +0000 Manifest this update: Mon 28 Apr 2025 12:36:05 +0000 Manifest next update: Thu 01 May 2025 16:09:05 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: CzVfu75u4sk42h4gJom9zcgqut/3AUVRHI9MLAXfeVk=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: J8hK76n9jAxJfoZwmgnUWZPJmdbHYnBHcHNL1o/2t5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:65:61:c5:95:e6:5d:04:68:04:dc:86:27:04:24:31:2e:1e:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Apr 28 12:36:05 2025 GMT Not After : May 1 16:09:05 2025 GMT Subject: CN=25B9EF267F20F2EB0351AFFB8E7E01EEDD161F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d6:b6:f8:83:07:68:e8:bf:df:2a:02:62:e2: 80:6f:70:65:cc:c5:35:59:d5:b2:89:5b:32:5b:4e: 95:c3:73:67:00:6e:39:ab:b9:d3:a0:06:18:74:14: a1:8b:d8:55:7d:50:23:7d:d2:eb:34:38:5c:cc:08: 59:a7:2a:20:20:7b:8b:74:4c:80:e4:ab:a1:c2:11: f7:61:0c:0d:1f:72:6e:b9:07:b1:46:5e:2d:16:16: 70:10:1b:bc:41:f1:9b:fd:7d:7a:81:23:87:27:af: 4f:00:fb:d0:40:44:03:15:27:34:f0:7f:ae:28:9b: a2:de:f3:47:21:d2:e0:4e:8b:c0:99:bd:9e:a1:be: 85:44:01:09:ec:50:63:19:06:f2:f2:4d:9d:07:8f: fa:a1:83:dd:66:fe:b8:52:44:e3:ef:93:73:ae:ea: 07:66:f9:91:0d:9e:d3:47:9c:ad:5c:ab:34:79:de: 13:ec:1d:ab:a7:ef:1a:f0:05:22:17:40:73:c1:0b: 4d:b3:8c:5d:69:9b:36:f0:e1:c2:d4:52:df:74:b0: 5a:e1:56:c6:99:cf:35:4d:3c:b9:df:4c:cc:21:41: a5:76:ce:a6:d7:c6:2c:21:9a:9c:4e:de:7a:97:61: a1:a3:36:ac:d2:50:b1:bf:69:ed:e2:af:eb:04:13: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:EF:26:7F:20:F2:EB:03:51:AF:FB:8E:7E:01:EE:DD:16:1F:26 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:08:0a:48:94:c2:b6:c3:1a:cf:e4:5e:02:d7:1f:b5:69:1c: f6:d3:f8:98:59:91:8d:4e:4c:bf:0a:29:8d:49:15:21:88:d1: c8:c3:fa:8f:df:1b:3c:a0:dd:0d:b3:45:18:c0:32:58:67:d9: 47:83:2a:c0:0e:7f:b8:df:4c:18:97:be:60:fe:1c:04:c1:17: 03:c9:4f:7b:dd:b7:e8:42:cb:a7:da:c8:0a:2b:c9:55:37:a6: bc:89:c2:68:9f:53:a1:88:8d:65:57:db:39:b8:9b:47:89:b8: d2:57:2e:a9:e1:f0:9e:32:1a:f1:91:6d:f5:0f:d0:2c:b4:21: c9:2e:84:b6:47:33:ab:97:dd:28:ee:38:d6:7b:2c:63:86:3d: d6:a1:6a:5a:33:b6:8b:12:18:b7:99:80:8c:c2:aa:33:e4:49: e2:d9:e0:1f:fc:e7:e5:e6:92:29:84:50:20:7b:89:77:2f:ff: 03:7a:02:4e:4b:3c:86:11:84:69:fe:ee:00:6c:77:33:b6:bc: a7:96:eb:15:9a:4c:80:23:ff:1b:8a:43:cc:64:0c:1e:bd:89: 92:3f:c9:31:67:95:db:4d:41:72:00:df:a9:83:5b:67:21:07: e3:5a:8c:78:f4:ee:dd:bd:e9:ab:36:6d:4b:2e:d6:92:58:80: c3:c8:f2:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2VhxZXmXQRoBNyGJwQkMS4e9I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTA0MjgxMjM2MDVaFw0yNTA1MDExNjA5MDVaMDMxMTAvBgNV BAMTKDI1QjlFRjI2N0YyMEYyRUIwMzUxQUZGQjhFN0UwMUVFREQxNjFGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD31rb4gwdo6L/fKgJi4oBvcGXM xTVZ1bKJWzJbTpXDc2cAbjmrudOgBhh0FKGL2FV9UCN90us0OFzMCFmnKiAge4t0 TIDkq6HCEfdhDA0fcm65B7FGXi0WFnAQG7xB8Zv9fXqBI4cnr08A+9BARAMVJzTw f64om6Le80ch0uBOi8CZvZ6hvoVEAQnsUGMZBvLyTZ0Hj/qhg91m/rhSROPvk3Ou 6gdm+ZENntNHnK1cqzR53hPsHaun7xrwBSIXQHPBC02zjF1pmzbw4cLUUt90sFrh VsaZzzVNPLnfTMwhQaV2zqbXxiwhmpxO3nqXYaGjNqzSULG/ae3ir+sEE/lfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJbnvJn8g8usDUa/7jn4B7t0WHyYwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYICkiUwrbDGs/kXgLXH7VpHPbT+JhZkY1O TL8KKY1JFSGI0cjD+o/fGzyg3Q2zRRjAMlhn2UeDKsAOf7jfTBiXvmD+HATBFwPJ T3vdt+hCy6fayAoryVU3pryJwmifU6GIjWVX2zm4m0eJuNJXLqnh8J4yGvGRbfUP 0Cy0IckuhLZHM6uX3SjuONZ7LGOGPdahaloztosSGLeZgIzCqjPkSeLZ4B/85+Xm kimEUCB7iXcv/wN6Ak5LPIYRhGn+7gBsdzO2vKeW6xWaTIAj/xuKQ8xkDB69iZI/ yTFnldtNQXIA36mDW2chB+NajHj07t296as2bUsu1pJYgMPI8p8= -----END CERTIFICATE-----Generated at Wed Apr 30 03:39:55 2025 by rpki-client