$ rpki-client -vvf repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft File: A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft (raw, json) Hash identifier: u6fhn+MBBuAvCG0C1+MINtWdt/tkxUqbpmE+4SddT6A= Subject key identifier: 2F:36:6D:C2:9F:6B:2C:D2:5A:EC:45:89:FC:82:AE:30:01:ED:35:B7 Authority key identifier: A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E Certificate issuer: /CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Certificate serial: 4D5F2C1B513A90054DB7E05CB2C150B11703F779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft Manifest number: 01DD Signing time: Sun 15 Jun 2025 10:31:21 +0000 Manifest this update: Sun 15 Jun 2025 10:26:21 +0000 Manifest next update: Wed 18 Jun 2025 21:16:21 +0000 Files and hashes: 1: A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl (hash: WAUVanlnDGAyecZlkL7uQXyJUntKIYRQHmwp4Lf7kE0=) 2: 3130332e3138332e39342e302f32342d3234203d3e20313439343132.roa (hash: /432ui2qmqLAqTG2YzJyGFJbPM4fOVIctbLjFQr3ZFs=) 3: 3130332e3139312e39342e302f32342d3234203d3e20313439343132.roa (hash: 5BGjTlG6kn0xa+zG7WIOf2FPOI4RcyC7jSjDUVIBLp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5f:2c:1b:51:3a:90:05:4d:b7:e0:5c:b2:c1:50:b1:17:03:f7:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A74966240B64274B90EBE06CE0EE222C3EE9C60E Validity Not Before: Jun 15 10:26:21 2025 GMT Not After : Jun 18 21:16:21 2025 GMT Subject: CN=2F366DC29F6B2CD25AEC4589FC82AE3001ED35B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f2:12:fd:a6:b3:08:5d:c9:29:6c:1f:fc:c8: 7c:ec:79:c7:f1:82:97:ee:b9:23:52:07:49:bb:70: 9d:55:1e:22:b3:b0:f4:f8:b7:7e:fd:7f:1d:08:ff: b0:0c:2d:56:b6:60:b1:f5:8a:3b:fc:84:b4:23:bb: 41:af:58:bd:33:ef:89:50:30:72:82:94:9a:79:21: 61:02:c8:ec:cf:ac:34:0b:f9:5b:d4:a1:7c:1c:af: 8b:8b:c0:89:bc:9f:d3:de:cc:39:84:1e:ff:54:52: 15:6a:79:2c:67:39:4d:ec:7c:32:50:17:06:65:78: 03:d4:d3:b4:64:52:78:6b:88:d5:43:94:e3:33:da: 05:df:13:48:ef:52:d3:6d:b7:82:37:21:04:bd:50: 6c:a5:54:18:49:f3:21:fb:0d:bb:02:30:1a:c7:59: 50:a1:26:5c:7b:7f:ac:ce:04:0f:58:ee:5a:3f:4a: b8:0b:d1:af:61:fd:d1:08:e0:00:43:76:c0:f7:d0: 06:a0:ac:37:9a:94:16:64:e6:c1:62:a8:ef:29:0f: 8b:c7:61:7d:3b:df:fd:d7:78:dd:45:44:f6:a5:4f: 28:ca:c4:86:93:52:89:13:e4:24:7a:13:dc:df:1f: 77:6d:b9:b5:58:80:a0:d7:dc:57:a8:d8:33:9f:36: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:6D:C2:9F:6B:2C:D2:5A:EC:45:89:FC:82:AE:30:01:ED:35:B7 X509v3 Authority Key Identifier: keyid:A7:49:66:24:0B:64:27:4B:90:EB:E0:6C:E0:EE:22:2C:3E:E9:C6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A74966240B64274B90EBE06CE0EE222C3EE9C60E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0dc1283-1ce2-41a5-afe6-f0be31e9b10d/0/A74966240B64274B90EBE06CE0EE222C3EE9C60E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1c:55:00:c9:62:cb:91:cd:9e:d0:5a:6d:37:3d:99:7d:f2: de:34:82:e9:7a:34:54:71:21:2b:fe:d7:a8:42:83:1e:39:6a: 6c:3e:86:9c:51:ce:b2:c3:6f:93:37:0d:53:11:94:25:44:68: fd:15:d1:d1:48:2c:ce:19:5b:02:2b:bf:74:1c:ab:68:0a:56: 04:19:d3:db:0d:5e:7b:1c:5b:62:6d:91:4b:67:20:32:ce:68: b0:85:94:a7:29:38:8c:6a:f4:36:87:cd:0d:de:f0:a8:d5:a0: ae:47:c7:29:34:d4:26:da:7e:00:18:71:b8:f9:cf:df:78:c1: ab:57:cb:20:4f:c2:7a:3f:fd:ac:57:74:6b:d3:2f:1f:06:c5: 32:f8:65:b1:16:4b:f0:14:f7:aa:8f:c8:bf:b7:cc:fc:97:33: 1d:ed:6f:8c:e7:6f:ca:c9:48:e1:69:69:a9:65:bc:91:a0:d8: 4e:4c:d2:d1:74:54:e3:e6:e3:1a:f7:d0:23:9f:38:69:1a:28: 53:1c:63:73:2a:1b:9b:84:7b:5a:30:3e:84:df:5e:8a:70:44: be:b7:8a:8a:58:46:3f:d1:80:98:91:5d:77:43:8e:1f:e6:5f: d0:f3:61:e5:12:6b:df:0f:3d:b0:0f:1f:f6:6c:55:a3:f6:8f: 5b:8c:28:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTV8sG1E6kAVNt+BcssFQsRcD93kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMz RUU5QzYwRTAeFw0yNTA2MTUxMDI2MjFaFw0yNTA2MTgyMTE2MjFaMDMxMTAvBgNV BAMTKDJGMzY2REMyOUY2QjJDRDI1QUVDNDU4OUZDODJBRTMwMDFFRDM1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD28hL9prMIXckpbB/8yHzsecfx gpfuuSNSB0m7cJ1VHiKzsPT4t379fx0I/7AMLVa2YLH1ijv8hLQju0GvWL0z74lQ MHKClJp5IWECyOzPrDQL+VvUoXwcr4uLwIm8n9PezDmEHv9UUhVqeSxnOU3sfDJQ FwZleAPU07RkUnhriNVDlOMz2gXfE0jvUtNtt4I3IQS9UGylVBhJ8yH7DbsCMBrH WVChJlx7f6zOBA9Y7lo/SrgL0a9h/dEI4ABDdsD30AagrDealBZk5sFiqO8pD4vH YX073/3XeN1FRPalTyjKxIaTUokT5CR6E9zfH3dtubVYgKDX3Feo2DOfNgBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULzZtwp9rLNJa7EWJ/IKuMAHtNbcwHwYDVR0j BBgwFoAUp0lmJAtkJ0uQ6+Bs4O4iLD7pxg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGRjMTI4My0xY2UyLTQxYTUtYWZlNi1mMGJlMzFlOWIxMGQvMC9BNzQ5NjYyNDBC NjQyNzRCOTBFQkUwNkNFMEVFMjIyQzNFRTlDNjBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIyMkMzRUU5 QzYwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkYzEyODMtMWNlMi00MWE1LWFm ZTYtZjBiZTMxZTliMTBkLzAvQTc0OTY2MjQwQjY0Mjc0QjkwRUJFMDZDRTBFRTIy MkMzRUU5QzYwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8cVQDJYsuRzZ7QWm03PZl98t40gul6NFRx ISv+16hCgx45amw+hpxRzrLDb5M3DVMRlCVEaP0V0dFILM4ZWwIrv3Qcq2gKVgQZ 09sNXnscW2JtkUtnIDLOaLCFlKcpOIxq9DaHzQ3e8KjVoK5Hxyk01CbafgAYcbj5 z994watXyyBPwno//axXdGvTLx8GxTL4ZbEWS/AU96qPyL+3zPyXMx3tb4znb8rJ SOFpaallvJGg2E5M0tF0VOPm4xr30COfOGkaKFMcY3MqG5uEe1owPoTfXopwRL63 iopYRj/RgJiRXXdDjh/mX9DzYeUSa98PPbAPH/ZsVaP2j1uMKO8= -----END CERTIFICATE-----Generated at Mon Jun 16 20:47:01 2025 by rpki-client