$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: 0p02yIeoVkwHU+ZeffX211T253fJ177dReo/y0nxcV4= Subject key identifier: 03:63:B2:C8:8F:8F:51:62:D7:78:46:EB:93:D9:17:91:FA:B4:51:23 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 0DBBA83DC8D58ECBE6034BB0FCFF809235A23AB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 0473 Signing time: Fri 06 Jun 2025 11:31:40 +0000 Manifest this update: Fri 06 Jun 2025 11:26:40 +0000 Manifest next update: Mon 09 Jun 2025 23:08:40 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: quXFrVkUIkA2q3a/AvSd2ZBu3FZk2YI+qwRAfe1HFHQ=) 2: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=) 3: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bb:a8:3d:c8:d5:8e:cb:e6:03:4b:b0:fc:ff:80:92:35:a2:3a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Jun 6 11:26:40 2025 GMT Not After : Jun 9 23:08:40 2025 GMT Subject: CN=0363B2C88F8F5162D77846EB93D91791FAB45123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:7a:59:f9:44:1b:b7:cf:18:c7:cb:15:10: 37:b0:5e:2c:04:0b:2a:9d:0f:cf:69:71:c8:05:5e: 4e:77:d0:f2:34:57:0f:3c:d4:91:34:19:1d:03:2b: 19:44:93:0d:4c:ce:6c:a6:e3:53:4c:1e:b3:88:c7: 2d:ff:48:a4:90:d8:fb:b5:b3:79:98:b7:d1:be:51: 70:14:f2:f7:2f:8b:1c:46:6f:18:d5:27:f6:e9:96: f3:54:f5:8a:0f:e7:bc:dd:7f:f0:4c:57:9b:89:72: 33:8b:14:34:4a:44:9e:98:c5:51:43:7b:e3:b9:eb: 6c:14:8f:02:46:0a:e1:4c:e2:74:39:16:00:90:ac: 5d:e0:73:07:ba:31:a6:bd:c4:ad:90:60:e3:45:35: 41:29:80:91:f0:13:18:f3:7b:a0:c4:db:62:90:1d: 74:d9:e2:a7:98:81:bf:96:c1:2c:e4:b5:39:1e:08: b1:ab:93:aa:21:2d:0d:54:eb:0c:93:75:f7:9b:00: 8f:09:3d:36:0a:2d:03:aa:39:11:08:72:6e:47:a8: 3e:d7:51:7d:df:e7:a1:7f:ff:c6:d8:06:65:1b:87: 58:fd:25:2f:fd:bd:60:4d:01:7b:c6:b9:f5:8b:cc: d5:a1:14:da:10:6a:cd:05:4c:b1:e1:ab:fa:24:44: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:B2:C8:8F:8F:51:62:D7:78:46:EB:93:D9:17:91:FA:B4:51:23 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:37:86:b7:c5:a5:7f:d1:a5:b4:98:05:9a:a1:26:cb:dd:bc: d4:c7:74:3b:5e:f5:79:4f:e7:1e:96:fd:b7:8b:dd:87:27:44: a3:ea:4d:c1:d0:f7:d9:66:30:9c:a0:97:00:eb:a4:7b:e6:79: 90:29:85:39:ab:9e:22:97:18:e6:88:96:74:99:a6:24:f3:64: f5:c3:b4:b8:33:ca:22:5f:46:79:1e:a8:da:61:ae:a9:c0:93: 96:1e:4a:d3:b9:76:a7:81:c6:c6:c8:82:7d:af:a2:76:5b:80: 6b:3f:44:71:bd:44:d7:82:94:08:b9:d1:c5:30:67:6e:6f:8b: 5a:6e:c6:05:fd:cc:3a:7c:a8:4d:82:c8:75:e8:c6:2d:c5:44: c2:b4:05:6a:a0:bb:79:ca:0c:6f:3f:82:3b:0a:55:70:ff:69: 08:0d:1b:e3:a5:8f:3c:25:c5:26:a6:82:f6:c0:ae:ed:be:62: 72:b0:90:58:e5:80:db:ef:e6:3a:3c:44:7d:67:0a:d6:0a:5e: 8a:38:44:2a:7a:14:19:5f:e7:98:f7:b0:f6:46:f2:55:2e:53: f2:3e:f7:f5:c7:3e:d0:a1:cc:1a:36:c4:7f:9c:b4:dc:fb:00: c7:d5:7f:cc:2d:2f:91:02:94:4e:aa:01:ea:39:46:6d:f7:4b: 15:59:4a:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbuoPcjVjsvmA0uw/P+AkjWiOrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA2MDYxMTI2NDBaFw0yNTA2MDkyMzA4NDBaMDMxMTAvBgNV BAMTKDAzNjNCMkM4OEY4RjUxNjJENzc4NDZFQjkzRDkxNzkxRkFCNDUxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jHpZ+UQbt88Yx8sVEDewXiwE CyqdD89pccgFXk530PI0Vw881JE0GR0DKxlEkw1Mzmym41NMHrOIxy3/SKSQ2Pu1 s3mYt9G+UXAU8vcvixxGbxjVJ/bplvNU9YoP57zdf/BMV5uJcjOLFDRKRJ6YxVFD e+O562wUjwJGCuFM4nQ5FgCQrF3gcwe6Maa9xK2QYONFNUEpgJHwExjze6DE22KQ HXTZ4qeYgb+WwSzktTkeCLGrk6ohLQ1U6wyTdfebAI8JPTYKLQOqOREIcm5HqD7X UX3f56F//8bYBmUbh1j9JS/9vWBNAXvGufWLzNWhFNoQas0FTLHhq/okRK4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA2OyyI+PUWLXeEbrk9kXkfq0USMwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKk3hrfFpX/RpbSYBZqhJsvdvNTHdDte9XlP 5x6W/beL3YcnRKPqTcHQ99lmMJyglwDrpHvmeZAphTmrniKXGOaIlnSZpiTzZPXD tLgzyiJfRnkeqNphrqnAk5YeStO5dqeBxsbIgn2vonZbgGs/RHG9RNeClAi50cUw Z25vi1puxgX9zDp8qE2CyHXoxi3FRMK0BWqgu3nKDG8/gjsKVXD/aQgNG+Oljzwl xSamgvbAru2+YnKwkFjlgNvv5jo8RH1nCtYKXoo4RCp6FBlf55j3sPZG8lUuU/I+ 9/XHPtChzBo2xH+ctNz7AMfVf8wtL5EClE6qAeo5Rm33SxVZSiU= -----END CERTIFICATE-----Generated at Sat Jun 7 23:17:15 2025 by rpki-client