$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: 0+ZB9+eWipUlsAvJ3kSLbL/Wn3BweigR0yxCs21mdWY= Subject key identifier: BC:9F:32:4A:90:05:98:7C:03:B7:07:DC:8A:09:4F:91:E1:DF:F8:D7 Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 72F1188E78D5DDF0C4A42D12050C7951B30350FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: DD Signing time: Tue 03 Jun 2025 01:02:03 +0000 Manifest this update: Tue 03 Jun 2025 00:57:03 +0000 Manifest next update: Fri 06 Jun 2025 11:38:03 +0000 Files and hashes: 1: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) 2: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) 3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 4: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: 8U4ufy7So3K0NykD61/18UPpR/GSF793MXm1ymJu5m4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 11:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f1:18:8e:78:d5:dd:f0:c4:a4:2d:12:05:0c:79:51:b3:03:50:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Jun 3 00:57:03 2025 GMT Not After : Jun 6 11:38:03 2025 GMT Subject: CN=BC9F324A9005987C03B707DC8A094F91E1DFF8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:8b:63:c9:ef:c9:ef:37:27:9d:80:ec:05: a4:8e:2a:d1:ab:6d:3e:55:1d:bc:ca:62:ea:b8:8e: 38:71:4e:37:05:93:ab:bd:85:f2:b9:c3:8f:a7:01: b1:94:b9:a9:18:e4:bd:4c:55:92:b1:86:5c:f2:30: eb:df:1f:53:f4:d2:eb:ee:1a:b8:3c:71:33:39:b3: 6a:64:2b:e8:31:38:42:35:1f:52:07:b5:8c:fe:b8: 85:38:32:05:94:2b:27:10:2c:81:c5:f0:4a:84:3d: 12:df:dc:f9:a8:44:3e:07:4a:95:82:7a:c8:b3:3b: 6c:02:f1:15:9c:0e:2e:e4:02:94:89:94:02:de:61: 53:32:fd:ca:b7:a5:3c:d5:a5:b1:68:0b:a5:b6:f3: 60:d3:42:44:12:cf:2b:6b:54:fb:e9:36:d7:01:98: 68:e3:27:40:0f:21:2a:0c:26:f3:9a:96:f6:e6:fc: 26:c7:c3:e9:3a:07:2c:c0:12:c1:bc:9b:53:fd:62: 2d:f2:ba:fa:55:65:a2:b1:c8:c1:a2:29:c6:e8:60: 1c:f7:9a:f7:d9:72:ed:62:19:4f:b6:9d:cf:bd:95: e2:a7:37:dd:5e:f7:9b:2d:97:9f:d3:45:ad:17:9c: 62:c1:fd:79:18:74:b6:da:45:e9:f5:cd:a4:e2:34: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9F:32:4A:90:05:98:7C:03:B7:07:DC:8A:09:4F:91:E1:DF:F8:D7 X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:88:e9:f0:d9:66:67:68:82:09:4b:ea:8e:8f:27:19:18:fb: f3:c6:32:73:9a:d6:5c:18:43:30:0b:0b:95:90:41:4e:ab:4a: 82:21:f5:d6:d1:31:08:f0:4f:28:89:70:4d:5d:a0:1a:8a:fd: b7:91:2e:f3:79:3f:b8:96:c0:f6:30:55:28:3f:a5:e1:af:ae: 0d:cb:d1:94:f2:95:b1:65:02:69:bd:52:b2:8b:3e:3b:46:27: 67:3b:18:7a:90:28:1d:95:c8:ce:c9:e9:3c:5f:5b:bf:c8:ce: 90:57:3d:02:2f:0a:dc:f1:42:80:a9:c0:91:cb:71:3c:55:89: 75:3a:e7:5d:19:fd:12:b5:47:ec:2d:d6:28:7b:ab:bc:2e:c0: bb:c8:b1:92:89:84:42:1b:59:4b:16:d4:35:56:43:20:cc:e1: d7:6e:a3:4d:de:70:0b:43:fd:57:bf:2d:a3:e4:2b:83:4b:ea: 09:9d:b0:9d:13:03:53:78:eb:38:98:76:92:d2:cf:83:79:fb: 3f:13:09:42:f8:68:b4:ad:2b:a5:cf:43:20:95:cd:6e:3f:fc: 26:cd:5d:f2:81:36:39:ca:2e:eb:62:9b:a6:1b:8e:8a:f8:5b: df:80:2d:c0:39:bb:24:37:2e:39:d0:7f:b2:ff:0f:18:47:8e: 7d:84:8a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvEYjnjV3fDEpC0SBQx5UbMDUP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA2MDMwMDU3MDNaFw0yNTA2MDYxMTM4MDNaMDMxMTAvBgNV BAMTKEJDOUYzMjRBOTAwNTk4N0MwM0I3MDdEQzhBMDk0RjkxRTFERkY4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66Ytjye/J7zcnnYDsBaSOKtGr bT5VHbzKYuq4jjhxTjcFk6u9hfK5w4+nAbGUuakY5L1MVZKxhlzyMOvfH1P00uvu Grg8cTM5s2pkK+gxOEI1H1IHtYz+uIU4MgWUKycQLIHF8EqEPRLf3PmoRD4HSpWC esizO2wC8RWcDi7kApSJlALeYVMy/cq3pTzVpbFoC6W282DTQkQSzytrVPvpNtcB mGjjJ0APISoMJvOalvbm/CbHw+k6ByzAEsG8m1P9Yi3yuvpVZaKxyMGiKcboYBz3 mvfZcu1iGU+2nc+9leKnN91e95stl5/TRa0XnGLB/XkYdLbaRen1zaTiNMqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJ8ySpAFmHwDtwfciglPkeHf+NcwHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmI6fDZZmdogglL6o6PJxkY+/PGMnOa1lwY QzALC5WQQU6rSoIh9dbRMQjwTyiJcE1doBqK/beRLvN5P7iWwPYwVSg/peGvrg3L 0ZTylbFlAmm9UrKLPjtGJ2c7GHqQKB2VyM7J6TxfW7/IzpBXPQIvCtzxQoCpwJHL cTxViXU6510Z/RK1R+wt1ih7q7wuwLvIsZKJhEIbWUsW1DVWQyDM4dduo03ecAtD /Ve/LaPkK4NL6gmdsJ0TA1N46ziYdpLSz4N5+z8TCUL4aLStK6XPQyCVzW4//CbN XfKBNjnKLutim6Ybjor4W9+ALcA5uyQ3LjnQf7L/DxhHjn2EimM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:33 2025 by rpki-client