$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: GapVORd6p5tDjoA/bgfjsXb0JgNK5nIBWAo474yB5N4= Subject key identifier: 53:D6:F2:4A:B3:2A:6F:7C:2C:62:0D:28:42:8E:85:57:C0:7C:00:9D Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 742D8E81731BE510CDCE357A61278C842A5EB56C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 016A Signing time: Tue 03 Jun 2025 17:53:20 +0000 Manifest this update: Tue 03 Jun 2025 17:48:20 +0000 Manifest next update: Fri 06 Jun 2025 22:19:20 +0000 Files and hashes: 1: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: T59RxAXBp3nFUAZ6LFP397uN7gdCkdIkNJOClLGGxg0=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2d:8e:81:73:1b:e5:10:cd:ce:35:7a:61:27:8c:84:2a:5e:b5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Jun 3 17:48:20 2025 GMT Not After : Jun 6 22:19:20 2025 GMT Subject: CN=53D6F24AB32A6F7C2C620D28428E8557C07C009D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:77:36:39:48:0a:40:ba:c6:52:05:4f:56:82: b6:2f:95:ac:86:d4:ce:ae:f2:a5:7e:35:9c:c6:f4: 92:b2:aa:b5:ee:f0:11:c3:67:58:d8:8f:5b:73:54: af:8f:eb:02:3c:fe:bd:f7:31:37:65:97:44:d7:ba: 9e:ec:0a:71:ef:58:a6:d5:db:30:15:50:a4:11:79: 98:ed:62:96:4a:c0:20:e7:17:ba:60:f1:2b:94:9c: 28:a1:b6:54:0b:76:b4:7e:f7:39:49:d2:06:f5:4a: fd:d4:29:f5:0a:9e:41:be:1f:c9:13:25:d8:bb:39: 1b:79:97:41:05:81:07:08:46:bf:73:c1:cc:9b:c4: 9e:00:3d:d9:f9:0e:ef:0e:25:1a:99:04:c3:c9:89: de:91:fe:ff:c5:b5:e6:29:16:ac:04:3c:c9:aa:25: 82:3f:a6:e1:9e:9d:1d:dd:8a:de:57:92:50:d2:a5: e0:1b:23:68:b4:03:1c:a5:5d:3d:06:f5:86:ed:87: c0:f1:f5:af:07:91:59:bc:65:dd:57:b3:dc:f2:b2: 83:42:46:03:3f:58:2b:c5:36:bd:44:97:f5:23:6c: 77:81:06:a6:18:1c:49:70:83:9b:72:dc:27:ce:db: 0d:5d:e9:68:e1:5e:0f:d8:41:d6:42:4d:c1:2a:58: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:F2:4A:B3:2A:6F:7C:2C:62:0D:28:42:8E:85:57:C0:7C:00:9D X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4f:76:7f:28:89:07:c4:ce:a2:34:19:22:f0:e4:f3:6f:ab: 00:47:5e:1b:56:c1:79:a9:12:4a:ad:68:01:5d:aa:0b:e3:11: e7:23:fd:b5:07:94:dd:b1:c0:f4:4e:20:e1:48:e0:b7:be:f1: 27:93:c4:34:81:7d:73:6d:2c:94:de:5b:39:3f:5f:19:5c:62: 04:39:55:d3:db:5f:0d:e2:97:ee:fe:0b:3b:f7:10:81:00:51: 48:3d:30:44:c9:74:67:89:5f:dc:18:15:20:42:2a:57:5f:1a: fb:bf:74:63:da:c1:d4:40:e6:1b:18:8a:9f:f2:e8:ad:76:3b: 52:5f:44:f1:a1:92:ff:53:c9:b8:d7:5d:42:fe:4c:70:e3:cc: 9a:1d:e1:a9:6c:5d:c4:6d:17:2f:c2:ea:c3:e2:63:d3:e2:13: fe:87:32:e6:c7:6d:04:61:65:1a:fa:a5:0e:4d:c3:0f:36:e1: 72:71:8a:8c:08:d6:68:79:04:fd:0f:ce:d6:70:85:55:66:4e: b9:2c:61:0c:85:16:9b:91:ec:31:04:b2:99:9d:8c:12:78:b6: c1:7c:9f:a2:1b:9b:7e:aa:f6:2d:50:8f:2c:fe:7e:67:4a:3a: 94:9e:76:89:bc:ca:d1:42:26:70:3c:7b:19:2f:e3:cc:0b:0c: ce:0b:42:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdC2OgXMb5RDNzjV6YSeMhCpetWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTA2MDMxNzQ4MjBaFw0yNTA2MDYyMjE5MjBaMDMxMTAvBgNV BAMTKDUzRDZGMjRBQjMyQTZGN0MyQzYyMEQyODQyOEU4NTU3QzA3QzAwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdzY5SApAusZSBU9WgrYvlayG 1M6u8qV+NZzG9JKyqrXu8BHDZ1jYj1tzVK+P6wI8/r33MTdll0TXup7sCnHvWKbV 2zAVUKQReZjtYpZKwCDnF7pg8SuUnCihtlQLdrR+9zlJ0gb1Sv3UKfUKnkG+H8kT Jdi7ORt5l0EFgQcIRr9zwcybxJ4APdn5Du8OJRqZBMPJid6R/v/FteYpFqwEPMmq JYI/puGenR3dit5XklDSpeAbI2i0AxylXT0G9Ybth8Dx9a8HkVm8Zd1Xs9zysoNC RgM/WCvFNr1El/UjbHeBBqYYHElwg5ty3CfO2w1d6WjhXg/YQdZCTcEqWFSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU9bySrMqb3wsYg0oQo6FV8B8AJ0wHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJPdn8oiQfEzqI0GSLw5PNvqwBHXhtWwXmp EkqtaAFdqgvjEecj/bUHlN2xwPROIOFI4Le+8SeTxDSBfXNtLJTeWzk/XxlcYgQ5 VdPbXw3il+7+Czv3EIEAUUg9METJdGeJX9wYFSBCKldfGvu/dGPawdRA5hsYip/y 6K12O1JfRPGhkv9TybjXXUL+THDjzJod4alsXcRtFy/C6sPiY9PiE/6HMubHbQRh ZRr6pQ5Nww824XJxiowI1mh5BP0PztZwhVVmTrksYQyFFpuR7DEEspmdjBJ4tsF8 n6Ibm36q9i1Qjyz+fmdKOpSedom8ytFCJnA8exkv48wLDM4LQls= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:28 2025 by rpki-client