$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: qdzYW4BMYWJdoyV/D+NI3ZPGDDJ8Xabc4iYrXi6ZkU8= Subject key identifier: BE:0D:7E:EC:4F:8A:F0:3C:C8:C5:EB:BA:45:7A:55:9F:1D:A7:B6:96 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 28237131DD6BD0A32135E1CE25522FFB41AFA201 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 04B4 Signing time: Sun 08 Jun 2025 16:21:38 +0000 Manifest this update: Sun 08 Jun 2025 16:16:38 +0000 Manifest next update: Wed 11 Jun 2025 21:43:38 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: sc3l8XWA46yVcKy7i7VW+dId2t2AmaozSEsADMIdfW4=) 2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: T3m8FCWNJK+RVPg/hxCti3q4f+FxE3xDrofjxIUWm4Y=) 3: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: zGNuaYnopDQVoD8ragSMiAj6A6F6kfexr9Vv/JnSg6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:23:71:31:dd:6b:d0:a3:21:35:e1:ce:25:52:2f:fb:41:af:a2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Jun 8 16:16:38 2025 GMT Not After : Jun 11 21:43:38 2025 GMT Subject: CN=BE0D7EEC4F8AF03CC8C5EBBA457A559F1DA7B696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:b5:42:a7:2d:92:c6:99:48:b8:ba:3c:d6: 29:cc:f8:a0:85:78:98:82:98:6f:1a:b7:35:1e:dc: 11:40:9f:36:10:d7:8c:6e:86:06:98:f0:c7:28:5e: 74:b6:64:fa:37:69:2e:99:f0:9a:67:57:99:88:e1: a1:9b:18:57:74:a1:ea:79:6a:53:11:f8:e1:62:13: b3:4f:83:16:de:d6:8e:77:ef:4c:52:a7:25:37:07: 02:b8:cd:b8:fb:a4:d4:4a:9f:55:af:22:17:83:c1: bc:60:d6:8c:db:85:64:4b:82:ce:16:3c:03:77:8b: 04:e2:9b:01:6b:15:0a:a2:a8:ec:2b:71:28:52:17: 49:50:79:d1:4a:14:8c:e2:62:b4:52:cb:a0:61:fc: 7d:3a:38:97:ed:a0:f1:c9:08:16:db:8e:a3:fe:dd: 3f:6c:93:98:b1:5b:dc:bc:8a:50:5f:46:b6:af:4b: 8f:36:6b:19:b9:5c:19:58:75:68:c4:26:ac:bc:68: 44:e4:7c:c4:f1:3b:93:6b:20:7d:a4:b5:c4:49:bd: 2c:85:56:ed:37:c0:44:aa:f3:b2:28:79:7e:b4:ff: e8:7e:f6:01:a8:e0:5d:9c:09:96:dd:98:e7:2e:0a: a0:17:b4:73:87:0b:33:9b:34:e8:1e:4d:4e:2b:9d: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0D:7E:EC:4F:8A:F0:3C:C8:C5:EB:BA:45:7A:55:9F:1D:A7:B6:96 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:90:31:9b:0e:68:33:16:03:5d:f8:ce:be:13:b7:51:86:d3: 9c:0f:2a:41:31:62:08:d7:03:2a:02:53:aa:70:3b:4c:e3:ea: 29:e0:dd:26:9a:9c:74:e3:2c:a6:57:72:0b:bd:f8:f6:af:9b: dc:76:ae:82:2e:a6:98:db:f5:d4:c5:fa:25:0e:d1:cf:6e:25: f2:91:72:9c:44:7d:de:3c:0b:c8:91:3f:50:fb:dd:ae:51:2d: 1e:74:cb:67:0c:31:97:83:f8:d5:4b:36:f0:28:ce:61:3e:7e: 03:6b:24:59:d0:a9:1e:ba:59:91:6d:21:1e:7a:c3:16:61:8f: b8:7e:d5:7c:f7:a6:51:2d:fe:33:08:d1:cf:e2:f0:17:39:e1: 35:ab:bc:83:62:45:3a:f1:70:fe:bf:d0:d9:15:4c:f3:c1:dc: 28:e3:b6:fb:cb:03:5b:6d:c4:13:6e:d1:e8:db:4f:ae:3b:8d: a6:a5:e0:79:13:6a:21:39:12:c3:24:db:2f:b3:41:59:37:39: 21:b1:f7:95:b2:cc:ce:19:15:db:a3:9e:0a:8d:f6:93:d8:36: bb:40:bc:df:0e:55:f1:b6:27:64:27:c7:6d:2a:5a:a6:f1:39: 04:cf:00:17:7d:54:c6:9d:04:3f:dc:70:7d:7d:cc:90:df:c3: d6:44:48:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCNxMd1r0KMhNeHOJVIv+0GvogEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNTA2MDgxNjE2MzhaFw0yNTA2MTEyMTQzMzhaMDMxMTAvBgNV BAMTKEJFMEQ3RUVDNEY4QUYwM0NDOEM1RUJCQTQ1N0E1NTlGMURBN0I2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCub7VCpy2SxplIuLo81inM+KCF eJiCmG8atzUe3BFAnzYQ14xuhgaY8McoXnS2ZPo3aS6Z8JpnV5mI4aGbGFd0oep5 alMR+OFiE7NPgxbe1o5370xSpyU3BwK4zbj7pNRKn1WvIheDwbxg1ozbhWRLgs4W PAN3iwTimwFrFQqiqOwrcShSF0lQedFKFIziYrRSy6Bh/H06OJftoPHJCBbbjqP+ 3T9sk5ixW9y8ilBfRravS482axm5XBlYdWjEJqy8aETkfMTxO5NrIH2ktcRJvSyF Vu03wESq87IoeX60/+h+9gGo4F2cCZbdmOcuCqAXtHOHCzObNOgeTU4rneBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvg1+7E+K8DzIxeu6RXpVnx2ntpYwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOQMZsOaDMWA134zr4Tt1GG05wPKkExYgjX AyoCU6pwO0zj6ing3SaanHTjLKZXcgu9+Pavm9x2roIuppjb9dTF+iUO0c9uJfKR cpxEfd48C8iRP1D73a5RLR50y2cMMZeD+NVLNvAozmE+fgNrJFnQqR66WZFtIR56 wxZhj7h+1Xz3plEt/jMI0c/i8Bc54TWrvINiRTrxcP6/0NkVTPPB3CjjtvvLA1tt xBNu0ejbT647jaal4HkTaiE5EsMk2y+zQVk3OSGx95WyzM4ZFdujngqN9pPYNrtA vN8OVfG2J2Qnx20qWqbxOQTPABd9VMadBD/ccH19zJDfw9ZESAc= -----END CERTIFICATE-----Generated at Sun Jun 8 23:21:17 2025 by rpki-client