$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: zONdGHlYHGN+leYBQh/+Yg+Z3zQhEIYX344lzLb1tuI= Subject key identifier: B3:EE:3D:8E:13:7B:76:69:2A:38:E6:76:08:7D:EB:4B:C0:97:10:68 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 481296799917975480860BD2107C4B77B2D6F81B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: C1 Signing time: Tue 03 Jun 2025 13:44:15 +0000 Manifest this update: Tue 03 Jun 2025 13:39:15 +0000 Manifest next update: Fri 06 Jun 2025 16:28:15 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 2: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: GchonzOAQE8AeCKUdATZzseYMQ1D1TjCGSyY8S7xDZw=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:12:96:79:99:17:97:54:80:86:0b:d2:10:7c:4b:77:b2:d6:f8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Jun 3 13:39:15 2025 GMT Not After : Jun 6 16:28:15 2025 GMT Subject: CN=B3EE3D8E137B76692A38E676087DEB4BC0971068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:80:fc:f6:4a:02:e4:8d:dc:ec:12:9d:78: b3:90:1f:47:93:e2:99:1a:4d:2d:f7:3a:19:29:58: 4e:6e:c7:46:50:9c:88:b2:67:c6:34:b4:32:fc:9d: c9:5b:63:f9:7c:a5:fb:0d:11:d3:00:57:b8:40:dd: e2:b7:a1:27:74:b3:72:17:8e:1f:93:f0:46:3f:d7: 08:98:da:0c:e4:58:fd:05:4d:ed:cb:06:01:c3:e6: 62:a1:18:54:fd:8a:b7:e8:8b:e7:b0:52:f1:ee:53: 29:69:eb:a8:51:73:4e:2c:7c:89:02:1e:03:a8:14: e0:15:13:9c:5b:0f:85:6b:cd:1b:e4:3b:29:48:46: 1c:e9:b8:ad:33:09:e3:d6:62:1b:57:50:b7:cd:f6: 9c:ca:8f:84:9a:7a:9d:10:09:82:34:9c:3e:f8:47: 78:c5:e6:6c:4b:8e:6a:d4:d1:5b:c8:40:4e:e8:48: c7:2e:c2:3f:1a:51:64:b8:60:1d:68:a5:71:1b:e6: 52:ed:41:76:87:51:1a:81:21:9d:22:b3:22:6b:27: 56:1f:36:90:b8:77:a3:ac:85:4c:d1:b5:5a:52:e2: df:95:b2:a6:52:2b:45:6b:49:05:6a:64:45:ac:75: 9e:83:6e:91:e4:d4:67:78:31:0a:44:bb:5f:d9:e8: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:3D:8E:13:7B:76:69:2A:38:E6:76:08:7D:EB:4B:C0:97:10:68 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bd:09:de:d3:34:82:68:e1:0a:ef:f6:03:7b:5b:61:1f:89: 3f:0f:4d:af:9e:01:4c:a1:a8:b8:d5:44:b6:50:8a:18:c3:05: a4:1f:90:2a:02:9c:77:93:19:eb:42:4f:c9:4b:b5:a9:83:63: d9:d8:ed:b7:12:53:f1:6d:8e:ca:3b:2a:0f:fa:b3:9d:08:0a: 0c:f2:e0:31:03:31:46:33:08:e0:49:d1:9d:70:e9:21:6d:94: 69:07:0b:60:47:b6:71:e3:f7:bc:f6:19:c0:7b:58:b7:15:8f: f6:f2:8b:db:ef:33:76:03:f2:8f:bf:11:85:c0:09:24:c8:ec: a5:5c:55:ba:e1:8a:5d:c2:93:b6:83:72:77:ed:71:3a:b2:01: da:ff:87:73:51:64:2f:e8:08:6b:f5:ec:44:eb:77:2f:ec:e5: 2e:38:e7:73:85:75:04:c6:00:bf:94:cc:0e:43:96:f6:5d:eb: 05:76:d8:ca:e5:cd:67:2e:f6:70:78:58:3c:7f:79:3c:ec:f1: 1d:ad:b7:2f:c3:73:a3:e8:e7:c2:75:55:22:1f:94:c7:3b:c0: 22:48:ac:fb:98:08:b8:e6:16:a9:c2:57:3d:cb:02:d5:c2:97: 69:5d:d3:a1:20:a1:20:9c:b5:b6:4d:76:9e:ab:a5:40:03:c0: d5:79:39:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBKWeZkXl1SAhgvSEHxLd7LW+BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTA2MDMxMzM5MTVaFw0yNTA2MDYxNjI4MTVaMDMxMTAvBgNV BAMTKEIzRUUzRDhFMTM3Qjc2NjkyQTM4RTY3NjA4N0RFQjRCQzA5NzEwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lID89koC5I3c7BKdeLOQH0eT 4pkaTS33OhkpWE5ux0ZQnIiyZ8Y0tDL8nclbY/l8pfsNEdMAV7hA3eK3oSd0s3IX jh+T8EY/1wiY2gzkWP0FTe3LBgHD5mKhGFT9irfoi+ewUvHuUylp66hRc04sfIkC HgOoFOAVE5xbD4VrzRvkOylIRhzpuK0zCePWYhtXULfN9pzKj4Saep0QCYI0nD74 R3jF5mxLjmrU0VvIQE7oSMcuwj8aUWS4YB1opXEb5lLtQXaHURqBIZ0isyJrJ1Yf NpC4d6OshUzRtVpS4t+VsqZSK0VrSQVqZEWsdZ6DbpHk1Gd4MQpEu1/Z6ABHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+49jhN7dmkqOOZ2CH3rS8CXEGgwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ29Cd7TNIJo4Qrv9gN7W2EfiT8PTa+eAUyh qLjVRLZQihjDBaQfkCoCnHeTGetCT8lLtamDY9nY7bcSU/Ftjso7Kg/6s50ICgzy 4DEDMUYzCOBJ0Z1w6SFtlGkHC2BHtnHj97z2GcB7WLcVj/byi9vvM3YD8o+/EYXA CSTI7KVcVbrhil3Ck7aDcnftcTqyAdr/h3NRZC/oCGv17ETrdy/s5S4453OFdQTG AL+UzA5DlvZd6wV22MrlzWcu9nB4WDx/eTzs8R2tty/Dc6Po58J1VSIflMc7wCJI rPuYCLjmFqnCVz3LAtXCl2ld06EgoSCctbZNdp6rpUADwNV5OdU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:42 2025 by rpki-client