$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft File: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json) Hash identifier: mwfZDCj6BEatw5BAWgXOKQPXtkPxaL9iXoDKssy4bA8= Subject key identifier: D6:27:7C:56:13:B0:04:59:D7:A9:02:97:38:ED:A0:15:A1:76:9A:1A Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Certificate serial: 7786FBBA48423470ED0EBCB2782D1ECACDD9B77A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft Manifest number: 01D1 Signing time: Sat 19 Jul 2025 05:30:04 +0000 Manifest this update: Sat 19 Jul 2025 05:25:04 +0000 Manifest next update: Tue 22 Jul 2025 12:59:04 +0000 Files and hashes: 1: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: O/PzKZRE3MmAw/wag2F/9cdChBlgQiXWle152d0BD0M=) 2: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: 874x7Ob+P1gnAjnP1blHxACfVuuuGxnGAVUEWJIVT2g=) 3: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: OjZssXYKrVMWzUnHRz7s+7gvCsjaEtAJXH0INXsIRL8=) 4: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:86:fb:ba:48:42:34:70:ed:0e:bc:b2:78:2d:1e:ca:cd:d9:b7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Validity Not Before: Jul 19 05:25:04 2025 GMT Not After : Jul 22 12:59:04 2025 GMT Subject: CN=D6277C5613B00459D7A9029738EDA015A1769A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:15:5c:4c:40:c0:8d:f0:b4:09:b0:d8:cf: 2c:2a:14:85:06:b0:38:78:25:96:32:ef:05:da:c9: 01:17:fa:d9:d7:bd:ce:82:28:8f:6f:2e:e7:fd:17: 2f:32:de:d5:d7:3e:a1:b3:1a:78:04:65:25:05:c9: 5d:c5:ee:4c:f0:51:1b:b4:8e:77:db:5b:38:dc:45: f0:b5:d9:7c:ac:58:35:b2:38:6d:78:52:96:b2:d9: 83:79:93:67:02:d9:54:0c:49:10:f0:e2:54:28:00: 7d:c0:7a:e5:fb:fc:a8:ed:bf:7f:10:37:31:85:0d: e0:b4:bf:b5:d7:9a:88:f7:e9:93:31:25:1f:44:75: 00:34:1c:7c:9b:d9:f9:12:66:93:a5:2e:20:5c:88: f5:20:79:28:70:ef:f6:6e:ec:8e:6f:e5:e7:91:24: 5d:85:88:79:45:50:fa:65:79:e8:4f:2a:06:5a:1c: e2:31:d7:fb:75:f0:95:51:6e:4d:2b:c5:45:ae:6b: 9f:71:79:00:b3:4d:bd:a8:4f:2b:a4:9a:cc:51:f2: 6f:30:6c:2e:2a:f9:7d:c5:e4:c2:1f:7c:d7:94:13: 9c:dc:99:f2:f2:30:24:b0:cf:05:d2:6b:87:3a:a8: b4:83:3a:b2:43:d7:bd:d7:ff:8f:65:56:6a:7e:3b: 78:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:7C:56:13:B0:04:59:D7:A9:02:97:38:ED:A0:15:A1:76:9A:1A X509v3 Authority Key Identifier: keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bb:67:df:ad:a0:b6:5b:4b:43:d5:6c:6f:7e:9b:f7:39:f7: 92:cd:c0:86:9d:5e:c0:50:6b:5c:6d:e8:74:e2:dc:30:40:4d: 4a:d9:c6:86:48:8e:4e:1d:ef:86:bd:5c:2c:bc:34:77:bc:8d: 1e:7f:89:5b:ec:50:1f:67:78:22:76:80:4c:a5:62:e6:75:e7: 12:cb:3f:76:2b:d2:6c:ff:96:ea:79:ea:e2:0f:83:43:27:c2: 2d:c6:20:5d:a8:90:28:57:25:97:c9:70:3e:f7:f8:43:00:16: c8:68:e0:14:b7:6e:fb:d1:de:5a:5f:ee:c1:4c:c0:1d:f3:b2: 31:b4:9f:c5:9b:cb:f4:c9:06:39:1e:d5:1f:b7:59:cd:81:0e: 64:0d:ec:e5:62:62:60:19:6d:07:36:41:a5:cc:25:ea:cc:cd: f6:6d:46:f0:04:5a:0c:49:47:98:2e:94:20:0e:f8:f1:9a:60: 19:ae:f9:b5:cc:0a:dc:7a:cf:e4:e7:e5:13:96:9b:a8:e1:4a: 43:ed:59:12:d5:83:e7:8d:b8:61:94:01:61:96:c8:cc:a4:d7: d6:80:7a:77:7e:38:96:45:7a:31:c4:ff:68:cf:8f:cb:a8:11: fe:6d:83:db:44:f8:a6:e5:a7:4d:74:6f:44:1e:ef:e3:b1:77: 7e:9f:3d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4b7ukhCNHDtDryyeC0eys3Zt3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF MDY2RUZGMzAeFw0yNTA3MTkwNTI1MDRaFw0yNTA3MjIxMjU5MDRaMDMxMTAvBgNV BAMTKEQ2Mjc3QzU2MTNCMDA0NTlEN0E5MDI5NzM4RURBMDE1QTE3NjlBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohhVcTEDAjfC0CbDYzywqFIUG sDh4JZYy7wXayQEX+tnXvc6CKI9vLuf9Fy8y3tXXPqGzGngEZSUFyV3F7kzwURu0 jnfbWzjcRfC12XysWDWyOG14Upay2YN5k2cC2VQMSRDw4lQoAH3AeuX7/Kjtv38Q NzGFDeC0v7XXmoj36ZMxJR9EdQA0HHyb2fkSZpOlLiBciPUgeShw7/Zu7I5v5eeR JF2FiHlFUPpleehPKgZaHOIx1/t18JVRbk0rxUWua59xeQCzTb2oTyukmsxR8m8w bC4q+X3F5MIffNeUE5zcmfLyMCSwzwXSa4c6qLSDOrJD173X/49lVmp+O3ivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1id8VhOwBFnXqQKXOO2gFaF2mhowHwYDVR0j BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4 NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2 RUZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0 RUVFMDY2RUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW7Z9+toLZbS0PVbG9+m/c595LNwIadXsBQ a1xt6HTi3DBATUrZxoZIjk4d74a9XCy8NHe8jR5/iVvsUB9neCJ2gEylYuZ15xLL P3Yr0mz/lup56uIPg0Mnwi3GIF2okChXJZfJcD73+EMAFsho4BS3bvvR3lpf7sFM wB3zsjG0n8Wby/TJBjke1R+3Wc2BDmQN7OViYmAZbQc2QaXMJerMzfZtRvAEWgxJ R5gulCAO+PGaYBmu+bXMCtx6z+Tn5ROWm6jhSkPtWRLVg+eNuGGUAWGWyMyk19aA end+OJZFejHE/2jPj8uoEf5tg9tE+Kblp010b0Qe7+Oxd36fPaU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:35:30 2025 by rpki-client