$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: jHjSvPkNAr+98icA8LCxKv1duEn3jYy9L8z6AzU9Mhk= Subject key identifier: 73:48:C6:6F:4C:D3:4B:BA:38:0B:FC:E3:4C:DC:32:9B:35:33:F7:5C Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 14E3C845252B1E0926FCF46B7AFE8C9C8200DA3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02BC Signing time: Sat 14 Jun 2025 14:01:05 +0000 Manifest this update: Sat 14 Jun 2025 13:56:05 +0000 Manifest next update: Wed 18 Jun 2025 00:35:05 +0000 Files and hashes: 1: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: 9BR2geyJyUwHfyfzuoOq8lM8lM3qNHdROQYFx44IQnk=) 2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e3:c8:45:25:2b:1e:09:26:fc:f4:6b:7a:fe:8c:9c:82:00:da:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Jun 14 13:56:05 2025 GMT Not After : Jun 18 00:35:05 2025 GMT Subject: CN=7348C66F4CD34BBA380BFCE34CDC329B3533F75C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:00:5f:52:90:84:f2:1a:33:89:a3:40:2a: 85:c0:a1:00:e0:ce:01:f5:55:62:d0:0a:69:7c:f8: 67:3d:58:ca:e1:75:e4:32:d7:5e:73:d1:47:46:d7: b8:10:3d:12:66:a1:75:6e:cc:39:09:21:e4:f3:1b: ed:48:2c:9b:02:90:c4:20:e4:10:ae:cc:f1:f1:21: 01:2e:cc:24:51:6c:ca:a1:24:ce:a5:8a:24:79:76: f1:1d:8c:13:cf:19:ae:97:1b:ea:5b:c4:6f:1e:72: 68:1c:b9:56:54:3d:58:4a:5c:62:c0:14:31:2e:0e: e0:fa:c6:d1:ec:f0:e3:d1:52:ee:b1:dd:20:1b:b8: 66:49:75:b9:a9:af:1f:f8:ac:37:9d:ab:ef:7d:a7: d0:b8:38:eb:33:d5:27:5f:7d:a8:65:ff:b8:70:cf: 90:cf:91:bb:86:60:1d:15:32:95:8e:41:b4:da:83: 7d:1e:04:8c:49:c9:49:d3:76:0d:ec:7a:d6:9a:ce: 0f:60:fe:be:6c:9b:cf:7d:51:9d:09:40:c6:82:38: a2:7d:93:0e:fb:58:c7:51:3a:2f:8c:75:26:73:a3: 5d:3c:5a:72:d5:32:4e:b5:86:1f:79:75:f4:3e:38: 3e:5d:3d:7c:ca:24:da:09:57:d7:6d:b8:cc:69:a5: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:48:C6:6F:4C:D3:4B:BA:38:0B:FC:E3:4C:DC:32:9B:35:33:F7:5C X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f5:52:55:78:7c:4d:48:d4:09:67:b4:ec:47:52:fc:f2:5a: b1:0c:86:18:92:e5:2e:1c:56:85:e7:5c:82:df:a3:b9:91:e5: 90:9d:d1:94:7c:82:bf:99:97:25:72:7a:ac:7a:80:30:bb:b9: 32:25:80:dd:bc:30:7c:d0:42:8e:1e:48:0b:1a:8f:c0:63:bf: 63:c6:e8:9d:04:45:e2:ed:da:73:ab:70:08:20:68:0c:b7:e3: 72:d5:91:49:9a:c2:44:63:3d:0a:87:99:a7:de:d8:b8:30:da: 06:05:8a:46:c3:96:d4:8f:28:50:8e:9c:e2:f0:be:8a:59:9a: b3:e2:5b:76:7f:10:8f:c4:a3:aa:a7:67:cd:47:43:85:f4:d9: c6:1e:6e:8f:d1:1c:90:ed:70:9d:6a:43:b9:e4:97:d2:d6:a9: 6e:59:8c:dd:79:7b:e7:cd:a2:34:2c:a0:0a:95:0e:2f:24:d6: 33:83:9b:78:c6:6e:22:c0:2f:ed:f8:f9:4f:4f:a4:de:39:bf: c3:1b:1a:16:7f:76:60:00:92:a7:17:b7:bb:8e:df:52:7b:de: b8:15:62:aa:36:f7:e9:2b:28:6d:dd:f7:1f:9c:cc:d7:5b:ea: c7:fd:65:15:b2:34:b9:ba:b8:3c:23:f0:f1:35:20:d0:dc:b3: 7b:1d:40:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOPIRSUrHgkm/PRrev6MnIIA2jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTA2MTQxMzU2MDVaFw0yNTA2MTgwMDM1MDVaMDMxMTAvBgNV BAMTKDczNDhDNjZGNENEMzRCQkEzODBCRkNFMzRDREMzMjlCMzUzM0Y3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNwBfUpCE8hoziaNAKoXAoQDg zgH1VWLQCml8+Gc9WMrhdeQy115z0UdG17gQPRJmoXVuzDkJIeTzG+1ILJsCkMQg 5BCuzPHxIQEuzCRRbMqhJM6liiR5dvEdjBPPGa6XG+pbxG8ecmgcuVZUPVhKXGLA FDEuDuD6xtHs8OPRUu6x3SAbuGZJdbmprx/4rDedq+99p9C4OOsz1Sdffahl/7hw z5DPkbuGYB0VMpWOQbTag30eBIxJyUnTdg3setaazg9g/r5sm899UZ0JQMaCOKJ9 kw77WMdROi+MdSZzo108WnLVMk61hh95dfQ+OD5dPXzKJNoJV9dtuMxppc5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0jGb0zTS7o4C/zjTNwymzUz91wwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD1UlV4fE1I1AlntOxHUvzyWrEMhhiS5S4c VoXnXILfo7mR5ZCd0ZR8gr+ZlyVyeqx6gDC7uTIlgN28MHzQQo4eSAsaj8Bjv2PG 6J0EReLt2nOrcAggaAy343LVkUmawkRjPQqHmafe2Lgw2gYFikbDltSPKFCOnOLw vopZmrPiW3Z/EI/Eo6qnZ81HQ4X02cYebo/RHJDtcJ1qQ7nkl9LWqW5ZjN15e+fN ojQsoAqVDi8k1jODm3jGbiLAL+34+U9PpN45v8MbGhZ/dmAAkqcXt7uO31J73rgV Yqo29+krKG3d9x+czNdb6sf9ZRWyNLm6uDwj8PE1INDcs3sdQKY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:02 2025 by rpki-client