$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: r8Rf1ojGIK7bpo9TEonCM3Xir8DV5LtbW/59EuBlmuM= Subject key identifier: C9:93:1F:0A:6E:CF:9F:30:36:93:49:C6:79:C8:32:1F:6C:44:85:1E Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 5B4AE033461779F2CD65972C8C94C7FCBED1CEEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 0210 Signing time: Tue 03 Jun 2025 08:35:02 +0000 Manifest this update: Tue 03 Jun 2025 08:30:02 +0000 Manifest next update: Fri 06 Jun 2025 13:11:02 +0000 Files and hashes: 1: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: omQCe9i6UAQabn658NY546AFhSlSDQxwejMwWzEAolo=) 2: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: 132Kizc+R6ps/hT6AogJkCilm9HX7+ORPphZ8hVhLQ8=) 3: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: 44SCHSEy9QAhKrJgsNpkDpL/p5Owev6yBVQPHHT24sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4a:e0:33:46:17:79:f2:cd:65:97:2c:8c:94:c7:fc:be:d1:ce:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Jun 3 08:30:02 2025 GMT Not After : Jun 6 13:11:02 2025 GMT Subject: CN=C9931F0A6ECF9F30369349C679C8321F6C44851E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:dd:3f:fa:c9:d3:8a:4c:c0:d9:55:91:d0: 55:09:bc:05:c1:12:b7:98:e2:4b:9e:ae:09:01:3e: 1b:47:99:a1:7e:62:8d:84:34:88:21:29:71:b1:db: 4f:f2:61:81:ed:b9:3a:a7:f6:bc:d2:ad:26:42:8a: 10:ed:59:8c:c1:0c:9d:36:74:1e:8b:16:4d:ff:ae: 25:e5:1c:9a:60:47:0c:b1:d5:f7:37:1b:40:02:18: 43:cb:ba:40:62:de:c3:13:e9:fd:33:f3:77:29:3c: 4c:74:dd:0d:fe:14:6e:6b:53:ec:96:fe:b2:39:a1: f7:5f:7a:e8:37:35:06:ad:19:6d:e7:5e:73:31:c6: 69:8e:68:4c:98:6e:47:9d:71:6a:cc:da:f8:c6:3e: c0:21:c5:ce:09:c3:ae:33:0b:a7:eb:d3:32:32:07: f8:dd:32:c3:fa:87:64:8d:3c:c4:96:d8:f6:72:b8: 5c:98:40:23:d7:7f:84:a1:03:96:c0:9b:50:5a:99: 30:13:64:1d:9b:00:08:04:f5:f8:97:84:c7:10:2e: 5e:c1:7b:35:55:88:7f:71:0a:da:8e:9e:3d:ce:2d: 78:90:1f:30:2c:95:87:a5:b8:0a:75:2c:1c:3d:e1: 11:40:a6:ed:c7:22:a4:bb:08:90:da:19:6f:af:21: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:1F:0A:6E:CF:9F:30:36:93:49:C6:79:C8:32:1F:6C:44:85:1E X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:da:b5:ad:de:82:eb:4f:c1:26:16:c1:aa:ff:9f:3e:d7:86: a1:f5:57:14:62:bc:84:5c:b7:04:24:58:32:5e:ed:5a:f8:8a: 9f:08:24:00:5a:ff:94:81:19:69:4b:33:04:31:ae:02:21:86: 0f:0c:b0:5b:01:4f:57:3e:56:0f:a9:43:be:f5:97:61:2c:d0: a9:34:f5:23:fb:eb:8f:2a:6f:6b:b8:66:4c:60:92:e1:61:c3: 6b:64:0c:33:92:a7:5f:f0:d9:46:63:38:79:fc:24:9c:cd:5a: 18:c6:a5:44:d5:0b:00:1e:48:a2:1f:22:57:89:db:18:f8:71: c5:91:e5:3f:ad:cd:67:bb:df:54:fc:9e:a8:bf:d8:60:34:5f: 3f:49:c4:e5:9e:90:9d:99:30:a4:b8:a8:cb:a4:5c:f8:1d:cd: 32:b6:00:f6:2a:e8:7d:45:cb:67:3d:ae:02:3e:fd:ad:86:40: b1:de:e3:63:6c:24:a7:f3:39:e6:2f:bd:49:7c:c0:af:45:06: 4e:0b:c4:dd:1a:ee:3c:f3:1a:76:4c:c6:19:eb:83:55:1d:83: 18:4f:48:95:5e:22:a8:01:09:05:21:4e:8a:f3:b3:f3:8e:d9: 63:b6:15:13:61:55:f5:2c:93:4a:0a:37:d4:16:ea:d9:32:b5: b7:eb:27:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0rgM0YXefLNZZcsjJTH/L7RzuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNTA2MDMwODMwMDJaFw0yNTA2MDYxMzExMDJaMDMxMTAvBgNV BAMTKEM5OTMxRjBBNkVDRjlGMzAzNjkzNDlDNjc5QzgzMjFGNkM0NDg1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ed0/+snTikzA2VWR0FUJvAXB EreY4kuergkBPhtHmaF+Yo2ENIghKXGx20/yYYHtuTqn9rzSrSZCihDtWYzBDJ02 dB6LFk3/riXlHJpgRwyx1fc3G0ACGEPLukBi3sMT6f0z83cpPEx03Q3+FG5rU+yW /rI5ofdfeug3NQatGW3nXnMxxmmOaEyYbkedcWrM2vjGPsAhxc4Jw64zC6fr0zIy B/jdMsP6h2SNPMSW2PZyuFyYQCPXf4ShA5bAm1BamTATZB2bAAgE9fiXhMcQLl7B ezVViH9xCtqOnj3OLXiQHzAslYeluAp1LBw94RFApu3HIqS7CJDaGW+vIZKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZMfCm7PnzA2k0nGecgyH2xEhR4wHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/ata3egutPwSYWwar/nz7XhqH1VxRivIRc twQkWDJe7Vr4ip8IJABa/5SBGWlLMwQxrgIhhg8MsFsBT1c+Vg+pQ771l2Es0Kk0 9SP7648qb2u4ZkxgkuFhw2tkDDOSp1/w2UZjOHn8JJzNWhjGpUTVCwAeSKIfIleJ 2xj4ccWR5T+tzWe731T8nqi/2GA0Xz9JxOWekJ2ZMKS4qMukXPgdzTK2APYq6H1F y2c9rgI+/a2GQLHe42NsJKfzOeYvvUl8wK9FBk4LxN0a7jzzGnZMxhnrg1UdgxhP SJVeIqgBCQUhTorzs/OO2WO2FRNhVfUsk0oKN9QW6tkytbfrJ54= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:08 2025 by rpki-client