$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: 9liWCmpDeKXA9ny1t7QPs9f/eKZZAmS0qcZW1QNV1s0= Subject key identifier: E7:CD:38:85:02:B1:08:A1:84:03:6E:2B:C3:FF:ED:C4:5E:DA:59:AD Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 5B9441429786F2A04A7EB5AA2BDE8AF6BDC4FA3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 017B Signing time: Mon 30 Jun 2025 00:51:04 +0000 Manifest this update: Mon 30 Jun 2025 00:46:04 +0000 Manifest next update: Thu 03 Jul 2025 05:29:04 +0000 Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) 2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) 3: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: tdU0ovceIHD/r1YIcpjNb6kaokBOlHvDIgmSXeHzEBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:94:41:42:97:86:f2:a0:4a:7e:b5:aa:2b:de:8a:f6:bd:c4:fa:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Jun 30 00:46:04 2025 GMT Not After : Jul 3 05:29:04 2025 GMT Subject: CN=E7CD388502B108A184036E2BC3FFEDC45EDA59AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:dd:5b:3f:c7:39:90:4d:3f:4a:07:e3:14: 9f:0b:d3:73:3f:12:86:35:d3:e7:16:92:90:7b:39: 9a:91:f0:92:da:16:f7:44:66:f8:e5:93:68:27:40: 20:e7:6e:1e:85:29:dd:cb:f3:33:a6:e1:36:e6:6f: df:6d:a7:51:8b:a3:b8:02:af:7c:33:c1:13:b0:0e: d3:eb:d7:78:67:c6:36:57:00:74:97:3f:61:d6:a2: 91:1b:11:d4:28:db:3c:59:cf:21:0b:08:36:fb:87: 32:88:44:76:b1:b5:e9:ca:9e:0a:29:f2:cd:7d:db: ab:ca:f0:0d:33:20:74:09:79:29:86:29:50:28:42: 07:fc:ca:59:f6:30:0b:1d:f7:b3:e3:cc:7f:c7:92: 47:ef:79:43:82:12:92:05:ed:19:36:59:15:c4:ce: 2b:80:ac:92:52:65:df:9e:12:0d:61:b1:65:91:1c: fc:84:52:d0:0a:ef:a9:96:37:83:c0:1f:3b:fa:bd: 74:27:8f:c9:74:67:22:2a:9b:f1:44:67:7f:8c:bd: 86:8d:1f:25:31:1a:b1:22:06:fc:b8:f4:2f:0d:71: 1a:4e:6d:c7:ea:2e:50:32:5e:21:9a:9f:b3:69:cd: 62:34:38:c4:17:81:80:9b:cb:0a:63:ad:e1:a6:19: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:38:85:02:B1:08:A1:84:03:6E:2B:C3:FF:ED:C4:5E:DA:59:AD X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:1f:3a:f8:92:87:86:ec:06:a1:da:fc:61:9b:02:18:97: 1c:ae:99:f0:02:c6:53:4d:a6:1d:ce:4b:9c:68:ec:59:c4:04: 74:70:28:e7:bd:b7:33:6c:db:bf:49:fd:eb:6f:97:4b:b9:b8: 40:a8:19:f8:51:e2:7e:bd:09:d5:61:ff:04:b6:a8:dd:22:73: a2:ba:de:d8:33:e1:68:19:61:38:d1:0d:47:e3:b8:04:ab:f6: b4:40:42:3f:77:00:51:04:6a:86:67:19:21:b5:b8:fb:2e:44: 64:9c:27:7c:ed:be:7e:17:44:5f:bc:a3:be:c8:13:55:4c:81: 02:bf:13:46:16:3d:35:a5:43:f8:48:d0:d8:9d:35:c4:d8:56: 68:71:05:0c:45:13:f3:ba:f3:bb:7a:66:ea:b0:82:b3:da:71: 87:db:39:55:1c:22:d6:7c:dc:51:e0:9c:a3:ba:46:8f:ca:a9: 52:ca:0f:9f:49:2a:96:1e:2c:d4:d5:73:8a:0a:36:04:e9:47: d8:98:80:8f:f0:6f:06:2e:08:5e:52:ed:98:9e:f9:6f:5d:d5: a7:62:3d:b8:e0:90:f1:3a:00:ab:e1:49:36:61:b1:7b:67:1b: a5:ee:89:c2:fd:45:60:0e:13:81:14:35:f9:31:55:6b:14:66: 73:a9:11:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5RBQpeG8qBKfrWqK96K9r3E+j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTA2MzAwMDQ2MDRaFw0yNTA3MDMwNTI5MDRaMDMxMTAvBgNV BAMTKEU3Q0QzODg1MDJCMTA4QTE4NDAzNkUyQkMzRkZFREM0NUVEQTU5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCapt1bP8c5kE0/SgfjFJ8L03M/ EoY10+cWkpB7OZqR8JLaFvdEZvjlk2gnQCDnbh6FKd3L8zOm4Tbmb99tp1GLo7gC r3wzwROwDtPr13hnxjZXAHSXP2HWopEbEdQo2zxZzyELCDb7hzKIRHaxtenKngop 8s1926vK8A0zIHQJeSmGKVAoQgf8yln2MAsd97PjzH/HkkfveUOCEpIF7Rk2WRXE ziuArJJSZd+eEg1hsWWRHPyEUtAK76mWN4PAHzv6vXQnj8l0ZyIqm/FEZ3+MvYaN HyUxGrEiBvy49C8NcRpObcfqLlAyXiGan7NpzWI0OMQXgYCbywpjreGmGTb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5804hQKxCKGEA24rw//txF7aWa0wHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwFHzr4koeG7Aah2vxhmwIYlxyumfACxlNN ph3OS5xo7FnEBHRwKOe9tzNs279J/etvl0u5uECoGfhR4n69CdVh/wS2qN0ic6K6 3tgz4WgZYTjRDUfjuASr9rRAQj93AFEEaoZnGSG1uPsuRGScJ3ztvn4XRF+8o77I E1VMgQK/E0YWPTWlQ/hI0NidNcTYVmhxBQxFE/O687t6ZuqwgrPacYfbOVUcItZ8 3FHgnKO6Ro/KqVLKD59JKpYeLNTVc4oKNgTpR9iYgI/wbwYuCF5S7Zie+W9d1adi PbjgkPE6AKvhSTZhsXtnG6XuicL9RWAOE4EUNfkxVWsUZnOpEZ8= -----END CERTIFICATE-----Generated at Tue Jul 1 13:56:54 2025 by rpki-client