$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: tHCVm24Yz+rOph+dLfRyn1voQENaXs2DZ0ohvk20PSk= Subject key identifier: 03:A6:E8:D8:5D:40:3F:D9:F9:1B:AE:12:9F:30:33:EF:67:A6:E9:CE Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 6F597C7F8ECC67C99222ED3116113A778611437B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 01D3 Signing time: Sat 05 Apr 2025 03:12:13 +0000 Manifest this update: Sat 05 Apr 2025 03:07:13 +0000 Manifest next update: Tue 08 Apr 2025 03:16:13 +0000 Files and hashes: 1: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 2: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: bAEwv0OD75CU495fhiGS77uiowOq1cKeiJNHhzplUlk=) 3: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 4: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 5: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:59:7c:7f:8e:cc:67:c9:92:22:ed:31:16:11:3a:77:86:11:43:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Apr 5 03:07:13 2025 GMT Not After : Apr 8 03:16:13 2025 GMT Subject: CN=03A6E8D85D403FD9F91BAE129F3033EF67A6E9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:4d:c9:0c:71:be:5e:22:eb:31:6c:e8:07: a7:0b:9a:5e:d6:04:70:d9:4b:e3:91:79:99:41:a5: b4:53:55:af:65:ec:03:06:b2:f7:0e:f6:40:f1:f8: 99:51:0b:11:89:dc:61:df:66:a8:83:d3:85:46:6d: d5:f0:f4:64:94:9c:07:d4:25:04:a0:53:b0:07:97: 75:9a:a1:04:ed:2c:71:91:56:81:8e:44:a6:1b:1e: 43:93:01:42:65:24:43:7d:b3:08:53:b2:4c:d6:a9: 51:27:c3:05:58:a1:d8:4d:2f:d8:10:ce:ff:9b:9a: c2:da:87:66:da:bb:60:87:1c:f0:63:09:fb:79:1b: 77:6a:b0:82:31:0e:7a:1c:99:71:e7:5f:bd:07:c8: 5d:e2:ca:f5:fa:05:51:21:52:2d:ba:75:10:c8:e8: 91:03:ca:b2:83:7d:69:90:14:2e:06:5c:b7:28:7e: 04:2c:82:8d:0d:4d:ba:2a:27:06:38:36:32:da:39: 9f:98:ec:21:15:c1:1c:be:b4:c5:1b:3f:61:3c:e1: 4e:88:94:58:c6:16:c4:da:ec:ce:e8:b2:4a:d5:0e: ec:7d:63:94:7b:41:82:e9:d2:11:c9:28:56:af:17: aa:1f:f0:a6:83:7c:1d:f3:57:93:18:dd:0a:76:0d: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A6:E8:D8:5D:40:3F:D9:F9:1B:AE:12:9F:30:33:EF:67:A6:E9:CE X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a2:d8:a3:3d:72:5a:fb:3a:7d:ea:3c:55:d9:8b:3d:59:14: 25:ce:cc:a8:f4:49:7f:08:7b:b0:ea:a0:a7:ae:2e:9d:44:de: 25:99:fd:89:f5:e4:60:49:10:12:18:36:1f:85:97:aa:7e:13: 36:7d:35:24:48:74:e1:06:3d:d4:8c:2f:f5:07:c2:b6:c2:24: 76:0d:3d:77:63:d6:58:61:c3:87:18:cd:32:7a:d2:d4:c0:18: 5e:7a:14:e6:11:5a:f8:e0:2d:4b:ae:e7:6c:b4:75:3f:7f:2d: f0:5e:06:5f:9c:7f:c0:75:1e:76:61:78:54:43:35:fb:0b:60: 45:66:60:55:25:15:88:90:f9:e1:6e:90:c5:41:d0:e9:be:43: e3:fd:b7:2a:53:9e:58:10:ad:db:5f:76:f0:c1:4d:33:5f:c8: dd:8d:28:6e:f8:45:d9:24:c5:51:4d:2c:df:50:d3:d0:cc:74: a8:96:e6:be:8a:f6:9d:ad:46:ff:d5:fa:3d:9b:67:47:8e:4e: 38:bb:ab:22:f4:e1:57:0f:48:43:77:fd:22:3d:d7:35:7a:da: 89:ae:06:8e:e8:ab:75:8c:7c:d1:ec:f8:eb:bd:8f:85:e9:5f: 6b:c1:fb:08:70:f6:ec:ad:0d:d5:95:12:c8:a3:89:b6:c1:94: 4c:48:8b:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1l8f47MZ8mSIu0xFhE6d4YRQ3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA0MDUwMzA3MTNaFw0yNTA0MDgwMzE2MTNaMDMxMTAvBgNV BAMTKDAzQTZFOEQ4NUQ0MDNGRDlGOTFCQUUxMjlGMzAzM0VGNjdBNkU5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtCE3JDHG+XiLrMWzoB6cLml7W BHDZS+OReZlBpbRTVa9l7AMGsvcO9kDx+JlRCxGJ3GHfZqiD04VGbdXw9GSUnAfU JQSgU7AHl3WaoQTtLHGRVoGORKYbHkOTAUJlJEN9swhTskzWqVEnwwVYodhNL9gQ zv+bmsLah2bau2CHHPBjCft5G3dqsIIxDnocmXHnX70HyF3iyvX6BVEhUi26dRDI 6JEDyrKDfWmQFC4GXLcofgQsgo0NTboqJwY4NjLaOZ+Y7CEVwRy+tMUbP2E84U6I lFjGFsTa7M7oskrVDux9Y5R7QYLp0hHJKFavF6of8KaDfB3zV5MY3Qp2DffDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6bo2F1AP9n5G64SnzAz72em6c4wHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqi2KM9clr7On3qPFXZiz1ZFCXOzKj0SX8I e7DqoKeuLp1E3iWZ/Yn15GBJEBIYNh+Fl6p+EzZ9NSRIdOEGPdSML/UHwrbCJHYN PXdj1lhhw4cYzTJ60tTAGF56FOYRWvjgLUuu52y0dT9/LfBeBl+cf8B1HnZheFRD NfsLYEVmYFUlFYiQ+eFukMVB0Om+Q+P9typTnlgQrdtfdvDBTTNfyN2NKG74Rdkk xVFNLN9Q09DMdKiW5r6K9p2tRv/V+j2bZ0eOTji7qyL04VcPSEN3/SI91zV62omu Bo7oq3WMfNHs+Ou9j4XpX2vB+whw9uytDdWVEsijibbBlExIiws= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:42 2025 by rpki-client