$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: SudaKQAbSxKy3b3YxGsagHrnwkow8dRkG3Lv4m3ySDE= Subject key identifier: 69:23:DF:15:D3:FF:92:72:0A:CB:94:FC:1E:9D:06:9E:41:E3:0F:30 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 6CFB3667E001E81E095047E0F206FC2D46F7BFB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 01A9 Signing time: Mon 16 Jun 2025 07:11:08 +0000 Manifest this update: Mon 16 Jun 2025 07:06:08 +0000 Manifest next update: Thu 19 Jun 2025 13:26:08 +0000 Files and hashes: 1: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: yO9dnKFN9zlpHOZzkZ8VS+2FhIP3vvVtlP91AUvmN9o=) 2: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: hLB0u4Pvac766uVNNHRQldQ+SI0MJNlYhxvuGaXeDIA=) 3: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: IYrgvyCjCXmDttoq8fGjccS1fVVmTtZWCeE52GEwc2U=) 4: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: 52rz8OVXlsR9PhF7qpvjq+LgVmTdcv6Xc2HRbxBYnZs=) 5: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: F6GRhs4Ym7cQbHiZ1S3rtjfG9sguZ904TOjc50vTNgY=) 6: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: K7v4mVMrOGRH9uwLIAKHJnQcmHP3SMpJcQP3rkEuNE0=) 7: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: urQF+d1uZLCb/Xxspk6boWaqVo9lHrklUsdPM9s+cao=) 8: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: RVpkaAumNJPuzJNbt1dVl5i5nuSn45Z2Z60SwnZUOKg=) 9: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: dbIV4xMO/kmp5beqpQZbhg9DwG+mNr8YalPBQGlisqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fb:36:67:e0:01:e8:1e:09:50:47:e0:f2:06:fc:2d:46:f7:bf:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Jun 16 07:06:08 2025 GMT Not After : Jun 19 13:26:08 2025 GMT Subject: CN=6923DF15D3FF92720ACB94FC1E9D069E41E30F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:6c:92:aa:31:6e:eb:ec:38:5c:91:fa:34: 7d:61:9a:40:10:26:9c:9d:2e:b6:74:15:14:61:4c: 2f:fa:14:95:76:82:b8:48:05:5b:22:14:dd:d4:8b: e3:42:eb:3e:78:2c:de:a6:d2:d2:95:08:e8:48:3e: 61:ae:d9:b4:69:79:a8:7b:0c:c5:5e:ce:65:30:63: 61:2d:0e:92:56:19:73:0a:90:bc:af:bd:25:14:71: f6:fc:b7:b4:24:d7:ed:ba:2e:b4:6b:4c:93:96:80: f5:2a:50:4c:f2:03:51:23:09:ed:28:c0:be:f8:dc: 7e:0b:db:c2:c0:f7:a5:fe:bf:51:07:6d:14:16:98: 97:5c:db:16:fe:81:71:d2:38:d5:e7:03:aa:1f:5c: c7:dd:4c:8b:77:5c:e8:45:0a:e7:a6:46:bf:3c:da: ee:2b:83:85:32:0a:b4:ff:71:30:3c:f4:bd:5d:70: 8a:fb:9c:e3:81:46:54:7b:51:0c:33:17:df:03:14: 8c:ee:bf:57:8c:c9:d8:ac:c8:f8:2c:7f:7f:98:6b: 75:82:67:8e:a7:74:27:bb:54:4b:e0:d7:97:e3:a5: 40:f2:4c:a4:0e:5b:72:b0:2b:f6:32:51:e7:21:1e: a9:ff:db:a7:98:c4:1b:ef:bc:2d:04:ec:4b:3b:45: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:23:DF:15:D3:FF:92:72:0A:CB:94:FC:1E:9D:06:9E:41:E3:0F:30 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ea:9e:d9:c4:30:ea:42:6e:2e:f3:ea:48:fb:96:ec:0a:7c: ac:c6:65:fa:f4:de:74:22:35:c9:27:83:1c:75:4c:66:89:fc: 55:70:48:2d:35:56:1d:dc:16:ec:16:2f:0f:e9:cf:3b:89:ca: 28:a8:92:26:48:bd:f9:99:1d:5e:40:14:bd:1c:9d:d7:17:1c: 5a:92:f0:88:38:cf:56:15:6b:51:3f:a5:59:45:76:55:bc:7a: 46:01:c3:25:95:36:c5:41:d2:ac:a4:a7:d9:13:f3:56:f5:81: b0:74:bf:d0:a1:21:7a:b2:20:bc:db:05:97:76:86:6f:f6:cd: 73:0d:12:7c:b8:c7:c7:4e:1d:fe:dd:28:87:cc:1c:e7:cc:a2: 45:f6:e6:cc:01:f3:02:97:b4:2b:55:38:06:28:de:a6:0c:a2: 35:ee:76:f5:3e:1c:f8:8a:03:46:31:c5:37:2c:e2:5f:e8:9a: 60:eb:a4:5a:d6:47:ba:fa:70:0d:1d:d9:c9:2d:0d:26:c0:b1: be:2e:37:7c:4f:d1:b2:a8:f4:dd:5a:bc:5e:9a:2b:ae:e4:e2: 4c:c5:ac:36:4a:ad:a7:63:87:8c:e8:78:36:54:70:95:22:c0: 7f:51:22:de:7a:82:06:98:d6:b5:ff:48:52:a2:6c:01:52:50: fe:1a:fd:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPs2Z+AB6B4JUEfg8gb8LUb3v7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNTA2MTYwNzA2MDhaFw0yNTA2MTkxMzI2MDhaMDMxMTAvBgNV BAMTKDY5MjNERjE1RDNGRjkyNzIwQUNCOTRGQzFFOUQwNjlFNDFFMzBGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWBGySqjFu6+w4XJH6NH1hmkAQ JpydLrZ0FRRhTC/6FJV2grhIBVsiFN3Ui+NC6z54LN6m0tKVCOhIPmGu2bRpeah7 DMVezmUwY2EtDpJWGXMKkLyvvSUUcfb8t7Qk1+26LrRrTJOWgPUqUEzyA1EjCe0o wL743H4L28LA96X+v1EHbRQWmJdc2xb+gXHSONXnA6ofXMfdTIt3XOhFCuemRr88 2u4rg4UyCrT/cTA89L1dcIr7nOOBRlR7UQwzF98DFIzuv1eMydisyPgsf3+Ya3WC Z46ndCe7VEvg15fjpUDyTKQOW3KwK/YyUechHqn/26eYxBvvvC0E7Es7RaPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaSPfFdP/knIKy5T8Hp0GnkHjDzAwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTqntnEMOpCbi7z6kj7luwKfKzGZfr03nQi Nckngxx1TGaJ/FVwSC01Vh3cFuwWLw/pzzuJyiiokiZIvfmZHV5AFL0cndcXHFqS 8Ig4z1YVa1E/pVlFdlW8ekYBwyWVNsVB0qykp9kT81b1gbB0v9ChIXqyILzbBZd2 hm/2zXMNEny4x8dOHf7dKIfMHOfMokX25swB8wKXtCtVOAYo3qYMojXudvU+HPiK A0YxxTcs4l/ommDrpFrWR7r6cA0d2cktDSbAsb4uN3xP0bKo9N1avF6aK67k4kzF rDZKradjh4zoeDZUcJUiwH9RIt56ggaY1rX/SFKibAFSUP4a/eE= -----END CERTIFICATE-----Generated at Tue Jun 17 02:13:30 2025 by rpki-client