$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: TNksocb9L2FX6sOa8lAetvb8dtTPd9kEcTaTkzauZGU= Subject key identifier: 71:34:84:B2:B8:8E:BF:08:1A:1D:19:15:A2:C5:80:52:43:36:D5:38 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 019C5D3C6C514568E87669561573E2F185357BE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 019A Signing time: Tue 03 Jun 2025 02:10:50 +0000 Manifest this update: Tue 03 Jun 2025 02:05:50 +0000 Manifest next update: Fri 06 Jun 2025 13:26:50 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=) 2: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: uLWxZeHz0olKHI/84mhU3RpXXkRVwxq8BCHZN/B0+/4=) 3: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 2htdgS+1Or0wZzJh4jZYW5oaI6hoP4/N0BvY1mQLhMA=) 4: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: OiTIcbauaRQZkoh05qWm9giYFtWGDu1XoyHAojKPf2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 13:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:5d:3c:6c:51:45:68:e8:76:69:56:15:73:e2:f1:85:35:7b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Jun 3 02:05:50 2025 GMT Not After : Jun 6 13:26:50 2025 GMT Subject: CN=713484B2B88EBF081A1D1915A2C580524336D538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:8c:b9:d6:ce:dd:2c:ba:7a:72:5e:7f:f2: da:d0:40:f7:14:5e:f1:3c:47:98:10:91:78:d1:c1: 01:9f:ab:d4:4b:07:8e:f2:c6:37:57:f9:40:d5:38: 59:fd:b6:5e:98:36:13:90:dc:64:14:34:00:a4:10: 80:9e:d9:0f:70:4e:fa:ec:79:2f:af:33:c7:d0:1c: f7:29:4b:6c:68:70:c7:19:fe:15:ba:38:53:c5:8c: 49:70:35:b6:8c:14:30:c9:79:ff:c2:a4:eb:46:d3: 20:18:62:80:6c:02:d0:fc:19:f5:38:85:53:a2:08: b4:5f:96:1d:58:ea:ca:0c:91:07:42:81:3b:e8:7d: 4b:d3:2f:02:71:f6:c4:df:57:48:95:8e:64:d5:55: 17:2f:13:bf:0f:a7:0b:84:af:52:3a:90:16:70:cf: 44:ea:9c:f2:c3:ba:9c:59:dd:0d:ff:97:2e:23:c0: 48:37:47:70:3a:5d:77:04:f8:22:d5:cd:59:86:ff: c2:4e:34:e4:7f:8a:77:94:ab:b1:e5:6c:dd:2c:14: 31:46:d5:03:22:29:4e:8a:49:b9:ee:0e:6e:18:62: ee:b2:d6:e2:6d:f2:e5:88:53:81:06:b8:02:0f:cb: 03:14:a5:ae:d9:73:28:a6:c7:a1:b9:73:5f:15:61: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:84:B2:B8:8E:BF:08:1A:1D:19:15:A2:C5:80:52:43:36:D5:38 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:42:c8:f0:82:3a:50:f8:00:cf:d0:f5:35:3e:0f:3d:be:c9: 76:03:89:c2:7c:54:67:46:4e:9f:ee:ba:4a:1d:10:f7:e3:97: c8:a4:96:b2:66:21:ca:71:85:89:3d:bb:51:e2:b8:fd:39:ca: 1e:fa:35:cd:30:3d:37:ac:76:f1:df:9c:ff:ba:20:22:52:10: b4:bd:3f:22:68:32:b6:a8:45:0b:77:6a:83:35:f2:d0:a4:74: 24:05:12:5f:84:77:90:81:55:6c:d3:22:77:dc:da:07:04:6e: e9:08:84:09:13:dd:5b:51:65:da:13:ab:ed:16:bf:62:05:35: f6:ae:20:6c:1d:13:87:5e:0a:61:2c:06:e2:66:8a:3e:1a:62: b0:f3:f1:9c:c5:36:86:2a:43:76:09:53:5a:d1:c8:5f:52:d1: c3:13:70:ad:77:1f:2e:b5:60:8b:04:1c:77:f6:47:b5:e0:c7: ac:e3:58:ea:65:ad:06:91:fb:62:d9:45:50:7f:ee:92:84:56: 5b:17:54:3e:b4:94:02:d7:68:07:ea:c8:95:27:ea:e7:8c:e4: 1b:fc:75:f6:fa:33:e1:59:f6:53:19:ed:cb:76:0f:d6:5a:eb: 87:d6:ae:b5:56:9b:ee:71:a7:1f:5a:82:c1:fa:f9:ab:2f:a3: b5:6f:43:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZxdPGxRRWjodmlWFXPi8YU1e+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTA2MDMwMjA1NTBaFw0yNTA2MDYxMzI2NTBaMDMxMTAvBgNV BAMTKDcxMzQ4NEIyQjg4RUJGMDgxQTFEMTkxNUEyQzU4MDUyNDMzNkQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOi4y51s7dLLp6cl5/8trQQPcU XvE8R5gQkXjRwQGfq9RLB47yxjdX+UDVOFn9tl6YNhOQ3GQUNACkEICe2Q9wTvrs eS+vM8fQHPcpS2xocMcZ/hW6OFPFjElwNbaMFDDJef/CpOtG0yAYYoBsAtD8GfU4 hVOiCLRflh1Y6soMkQdCgTvofUvTLwJx9sTfV0iVjmTVVRcvE78PpwuEr1I6kBZw z0TqnPLDupxZ3Q3/ly4jwEg3R3A6XXcE+CLVzVmG/8JONOR/ineUq7HlbN0sFDFG 1QMiKU6KSbnuDm4YYu6y1uJt8uWIU4EGuAIPywMUpa7Zcyimx6G5c18VYWuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcTSEsriOvwgaHRkVosWAUkM21TgwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxCyPCCOlD4AM/Q9TU+Dz2+yXYDicJ8VGdG Tp/uukodEPfjl8iklrJmIcpxhYk9u1HiuP05yh76Nc0wPTesdvHfnP+6ICJSELS9 PyJoMraoRQt3aoM18tCkdCQFEl+Ed5CBVWzTInfc2gcEbukIhAkT3VtRZdoTq+0W v2IFNfauIGwdE4deCmEsBuJmij4aYrDz8ZzFNoYqQ3YJU1rRyF9S0cMTcK13Hy61 YIsEHHf2R7Xgx6zjWOplrQaR+2LZRVB/7pKEVlsXVD60lALXaAfqyJUn6ueM5Bv8 dfb6M+FZ9lMZ7ct2D9Za64fWrrVWm+5xpx9agsH6+asvo7VvQx4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:40 2025 by rpki-client