$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: JuQ7I2XrBVtKrvCv2gkIeXvAf+wlOaOv2XxtL2x4BqU= Subject key identifier: 6E:F9:17:0A:3D:19:16:11:8E:97:CE:42:59:3A:02:A4:6D:3D:99:75 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 036E538B944186BAA2AEDEC0E84608127A5A9CF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: E1 Signing time: Tue 03 Jun 2025 15:51:35 +0000 Manifest this update: Tue 03 Jun 2025 15:46:35 +0000 Manifest next update: Fri 06 Jun 2025 17:29:35 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: pGnDvnNzxt+MouqCuwTlhzpZi8ivu78hsjNHMIe4VGw=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6e:53:8b:94:41:86:ba:a2:ae:de:c0:e8:46:08:12:7a:5a:9c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Jun 3 15:46:35 2025 GMT Not After : Jun 6 17:29:35 2025 GMT Subject: CN=6EF9170A3D1916118E97CE42593A02A46D3D9975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:32:c1:a9:4d:2b:7c:7f:9a:f8:f9:c7:8d: c3:ab:51:80:42:df:e5:73:66:32:2b:3c:fc:24:19: f2:b2:a9:ce:73:c1:42:fc:31:a4:c5:16:55:4c:28: 86:ff:40:b6:be:5d:82:85:49:20:e3:d9:61:53:8a: ec:70:c3:a3:2b:d5:4a:43:28:24:5f:0a:54:69:5e: 04:e7:54:f4:57:a9:16:5c:d2:21:17:e1:eb:2d:83: f7:ea:d0:3c:1a:f7:69:9b:a0:fa:85:cd:f9:01:26: 45:10:48:83:b2:1c:37:3f:a6:50:d6:93:b9:f7:51: 54:96:62:33:91:ee:4d:b4:dd:37:1a:b8:92:ee:d2: 7c:bb:46:02:bc:12:18:ca:e6:7a:77:fb:7a:45:7c: ae:55:6e:89:c3:17:a6:8e:62:32:c2:24:2f:38:b9: 5d:e5:d9:29:b3:a6:ca:b1:85:3e:6f:85:2e:0f:00: d4:27:55:90:54:86:9c:51:43:b5:f4:81:7a:f9:e9: 12:5a:8c:ac:33:1c:79:2f:3c:42:6e:a9:91:f2:ce: 60:d3:f6:86:a4:9a:1e:d2:d0:2e:c2:00:ff:56:b6: 47:18:e8:7a:33:52:7c:5a:8f:b1:1f:1a:6e:40:63: 70:c7:69:30:2f:75:01:36:a4:c3:ad:0a:bc:d4:a7: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F9:17:0A:3D:19:16:11:8E:97:CE:42:59:3A:02:A4:6D:3D:99:75 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:04:7f:c5:7d:bb:31:45:b3:06:83:a4:b3:fa:59:cb:45: 18:1c:6f:88:3c:5b:4a:75:ca:40:80:d9:48:22:22:7e:af:47: 8f:3d:17:ad:89:be:5a:8c:a4:99:29:0f:83:ba:7b:22:2e:1d: 87:2c:f4:c2:68:ed:18:ec:4c:94:0e:b6:89:69:a0:be:82:71: d0:14:9a:11:e1:dd:1a:a3:d6:79:24:9a:c2:ca:fa:00:08:38: e3:3f:50:de:57:6b:93:12:d9:ac:c6:05:53:9d:6a:97:22:ca: 16:18:ce:10:ab:c3:2a:c7:21:9b:35:be:a4:1e:40:4c:73:0a: 62:8b:ce:55:4f:0e:4d:01:86:84:57:55:b8:c7:7b:45:5c:91: 05:81:00:d1:74:2c:ab:75:43:f7:8f:49:b7:6e:07:3b:4f:52: 75:87:36:c7:26:30:c8:10:0d:70:25:21:6a:aa:24:10:bb:0d: 00:56:54:d0:f5:1e:1b:66:43:83:2c:d1:9e:71:0b:15:9b:ea: fe:41:01:b2:70:c3:ca:90:34:e6:8d:f0:8c:a3:d6:7e:3d:55: 69:50:fb:f7:26:ed:e5:2b:f9:43:7e:df:23:3a:d9:bd:3e:e5: 5e:bf:4c:21:90:ee:cc:4c:91:f4:3f:9b:c5:2a:f9:c0:b9:1c: ce:b8:63:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA25Ti5RBhrqirt7A6EYIEnpanPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA2MDMxNTQ2MzVaFw0yNTA2MDYxNzI5MzVaMDMxMTAvBgNV BAMTKDZFRjkxNzBBM0QxOTE2MTE4RTk3Q0U0MjU5M0EwMkE0NkQzRDk5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tzLBqU0rfH+a+PnHjcOrUYBC 3+VzZjIrPPwkGfKyqc5zwUL8MaTFFlVMKIb/QLa+XYKFSSDj2WFTiuxww6Mr1UpD KCRfClRpXgTnVPRXqRZc0iEX4estg/fq0Dwa92mboPqFzfkBJkUQSIOyHDc/plDW k7n3UVSWYjOR7k203TcauJLu0ny7RgK8EhjK5np3+3pFfK5VbonDF6aOYjLCJC84 uV3l2SmzpsqxhT5vhS4PANQnVZBUhpxRQ7X0gXr56RJajKwzHHkvPEJuqZHyzmDT 9oakmh7S0C7CAP9WtkcY6HozUnxaj7EfGm5AY3DHaTAvdQE2pMOtCrzUp+LVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbvkXCj0ZFhGOl85CWToCpG09mXUwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhpBH/FfbsxRbMGg6Sz+lnLRRgcb4g8W0p1 ykCA2UgiIn6vR489F62JvlqMpJkpD4O6eyIuHYcs9MJo7RjsTJQOtolpoL6CcdAU mhHh3Rqj1nkkmsLK+gAIOOM/UN5Xa5MS2azGBVOdapciyhYYzhCrwyrHIZs1vqQe QExzCmKLzlVPDk0BhoRXVbjHe0VckQWBANF0LKt1Q/ePSbduBztPUnWHNscmMMgQ DXAlIWqqJBC7DQBWVND1HhtmQ4Ms0Z5xCxWb6v5BAbJww8qQNOaN8Iyj1n49VWlQ +/cm7eUr+UN+3yM62b0+5V6/TCGQ7sxMkfQ/m8Uq+cC5HM64Ywc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:33 2025 by rpki-client