$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: in8kPqnLnM5gSFJLFJZe8tZVUL4ermwUUSWFvfLo4pk= Subject key identifier: 1B:AC:FE:56:AD:9A:F2:92:D5:3B:CC:F6:3B:74:BA:23:F5:73:7F:7C Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 0CD3047424294DE814EE19F6303D7C0766D639F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: 9A Signing time: Thu 05 Jun 2025 19:02:45 +0000 Manifest this update: Thu 05 Jun 2025 18:57:45 +0000 Manifest next update: Mon 09 Jun 2025 02:22:45 +0000 Files and hashes: 1: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: h5crpZBJcGq8ZK3GfT+4GKwQkBZavqRFlUO6Ntwvcq8=) 2: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 3: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 4: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d3:04:74:24:29:4d:e8:14:ee:19:f6:30:3d:7c:07:66:d6:39:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Jun 5 18:57:45 2025 GMT Not After : Jun 9 02:22:45 2025 GMT Subject: CN=1BACFE56AD9AF292D53BCCF63B74BA23F5737F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:ea:2e:74:4f:f1:b0:14:fe:4d:cc:41:11: f6:8a:b4:51:93:7a:28:45:f0:91:ab:13:87:ce:9c: fb:24:04:b8:e5:2a:f0:ea:01:a9:7a:3b:d0:56:35: 12:8e:04:a4:4b:9d:9a:be:82:a2:df:9c:e6:62:d1: ca:a3:3b:2d:a2:5e:65:a7:00:f9:7a:0d:fb:d7:aa: df:48:e7:c0:76:dd:db:87:07:8b:a9:c6:ef:f0:79: 7a:51:d0:59:7f:fb:e9:09:fa:3a:4e:d3:5c:9a:26: 8a:8a:77:cb:c9:b4:7e:68:82:60:01:b3:77:cf:94: c5:95:fe:87:6e:58:41:8b:b5:b2:b6:09:3e:79:91: 25:11:c9:82:65:f0:17:a6:ba:a0:73:d0:c4:5b:f2: ae:99:43:95:a2:3f:b9:13:d5:b1:78:69:7f:78:77: d1:9c:68:46:8c:05:27:0c:da:63:a2:a0:b4:2b:80: f2:88:30:01:7f:a8:65:98:12:d1:c4:cd:45:a9:8d: 21:d2:7d:4f:8e:5f:a0:ea:53:79:32:8d:63:56:07: 6a:80:54:d4:b0:c0:aa:28:ce:be:b6:b7:e4:f9:d2: 0a:c0:16:b0:59:46:24:c3:83:19:22:52:e1:f4:68: 07:0d:c6:5c:44:9d:29:41:c9:76:3e:96:0e:fc:bb: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AC:FE:56:AD:9A:F2:92:D5:3B:CC:F6:3B:74:BA:23:F5:73:7F:7C X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:cd:ad:ce:52:01:ec:33:96:d8:22:c8:ef:40:3a:d0:5e:d1: 5e:5d:3a:7c:02:c7:08:a9:18:08:9f:4d:72:cf:06:bd:c6:ad: b5:c4:5d:9b:d5:a8:3e:ed:a2:be:f4:fb:76:f6:0e:7d:f3:38: 6b:1b:b6:23:18:5d:b8:87:7e:a7:d9:a6:e6:37:4f:9f:fa:47: f1:ce:5d:17:1b:eb:b5:bf:7d:e3:80:33:00:19:c5:d7:e4:0a: 6a:b6:d8:25:e5:a8:bb:32:d1:04:42:07:89:b6:6b:46:43:75: 53:07:6f:84:e2:e7:93:1a:3b:35:d7:29:97:29:29:4b:a8:01: b3:03:d5:a8:8e:c8:75:08:82:9f:9b:20:c7:d4:aa:71:6e:4a: a1:7e:85:0a:3f:02:d4:8e:15:34:a7:53:32:7f:55:01:38:5d: 6a:9a:44:14:f0:ad:76:24:dd:81:9d:f2:17:2b:e2:9e:b3:d3: 72:a0:ec:7f:e5:c3:94:13:7b:6b:c7:f9:11:00:b1:87:12:c3: 2b:c4:27:ad:36:7c:dd:59:d1:c1:d3:0e:56:97:25:e3:71:62: 25:92:cb:f4:95:30:6b:0b:50:d1:fe:06:37:7c:79:1d:a4:7c: 92:63:37:25:a7:7b:6b:0b:a8:54:58:79:91:a2:a6:86:fa:10: 7c:f9:b1:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNMEdCQpTegU7hn2MD18B2bWOfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTA2MDUxODU3NDVaFw0yNTA2MDkwMjIyNDVaMDMxMTAvBgNV BAMTKDFCQUNGRTU2QUQ5QUYyOTJENTNCQ0NGNjNCNzRCQTIzRjU3MzdGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXOoudE/xsBT+TcxBEfaKtFGT eihF8JGrE4fOnPskBLjlKvDqAal6O9BWNRKOBKRLnZq+gqLfnOZi0cqjOy2iXmWn APl6DfvXqt9I58B23duHB4upxu/weXpR0Fl/++kJ+jpO01yaJoqKd8vJtH5ogmAB s3fPlMWV/oduWEGLtbK2CT55kSURyYJl8BemuqBz0MRb8q6ZQ5WiP7kT1bF4aX94 d9GcaEaMBScM2mOioLQrgPKIMAF/qGWYEtHEzUWpjSHSfU+OX6DqU3kyjWNWB2qA VNSwwKoozr62t+T50grAFrBZRiTDgxkiUuH0aAcNxlxEnSlByXY+lg78u5CPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6z+Vq2a8pLVO8z2O3S6I/Vzf3wwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODNrc5SAewzltgiyO9AOtBe0V5dOnwCxwip GAifTXLPBr3GrbXEXZvVqD7tor70+3b2Dn3zOGsbtiMYXbiHfqfZpuY3T5/6R/HO XRcb67W/feOAMwAZxdfkCmq22CXlqLsy0QRCB4m2a0ZDdVMHb4Ti55MaOzXXKZcp KUuoAbMD1aiOyHUIgp+bIMfUqnFuSqF+hQo/AtSOFTSnUzJ/VQE4XWqaRBTwrXYk 3YGd8hcr4p6z03Kg7H/lw5QTe2vH+REAsYcSwyvEJ602fN1Z0cHTDlaXJeNxYiWS y/SVMGsLUNH+Bjd8eR2kfJJjNyWne2sLqFRYeZGipob6EHz5saI= -----END CERTIFICATE-----Generated at Sat Jun 7 04:14:05 2025 by rpki-client