$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: pxUv0/nuloBl9gagOCYX2tAq+tfQEjRy88OzCSYHdEs= Subject key identifier: E9:57:60:8B:8B:F2:7D:F2:CE:53:0A:AE:14:B9:1F:3E:1E:68:F9:68 Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 649CDCB05FDDED5D6E5BBEAB0E5E255DA9ABA0F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 04DD Signing time: Wed 04 Jun 2025 09:10:02 +0000 Manifest this update: Wed 04 Jun 2025 09:05:02 +0000 Manifest next update: Sat 07 Jun 2025 11:27:02 +0000 Files and hashes: 1: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: VeW7SEFSWukrxjkAtcY5tFHiicFdy4+Abrf5rhxhLc4=) 2: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:dc:b0:5f:dd:ed:5d:6e:5b:be:ab:0e:5e:25:5d:a9:ab:a0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Jun 4 09:05:02 2025 GMT Not After : Jun 7 11:27:02 2025 GMT Subject: CN=E957608B8BF27DF2CE530AAE14B91F3E1E68F968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:56:44:f2:44:8e:8c:bd:d2:fd:f6:5f:13: 03:36:79:9e:67:f6:db:32:b5:4f:8f:34:79:9d:8e: ee:b5:7d:88:37:24:a5:c0:41:84:8f:ce:ca:bd:b2: 8f:8a:11:60:e1:93:ef:16:7c:76:42:c5:18:35:2b: 88:e6:ff:3e:1d:e1:36:05:e6:cd:81:01:c7:b3:52: 97:42:9e:c0:0c:9a:e7:74:1b:bd:a4:d6:fc:ff:50: 2d:97:de:a8:dd:fd:b8:e8:54:d4:8a:99:61:ef:11: bf:91:37:09:8a:cb:11:d8:bc:38:eb:67:7b:01:b1: e3:b2:83:c3:b5:2a:a0:73:b8:9a:3d:e8:9b:03:8f: 7e:f5:03:f2:a3:7e:b5:b2:83:da:0d:af:f4:1c:15: 7c:23:f1:0e:e9:e6:14:23:96:40:fe:27:3f:86:38: 77:98:ef:fe:fa:71:d8:5b:de:36:d1:d2:ee:d3:c7: 68:ea:4f:f9:45:e9:68:e7:cd:62:f8:7c:d5:3b:f6: da:ae:13:57:3a:f4:ab:1c:d4:9b:0f:a4:4a:14:81: 5e:1d:77:cd:b1:e3:77:fd:3b:8f:88:fe:fc:cc:72: 2b:23:8f:39:57:cd:93:73:62:14:62:50:ce:78:fe: 0a:a4:17:9b:62:31:8c:5a:0e:04:da:c7:68:4d:63: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:57:60:8B:8B:F2:7D:F2:CE:53:0A:AE:14:B9:1F:3E:1E:68:F9:68 X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:31:c6:fa:ea:dd:ee:7d:0c:9b:e9:48:09:09:f6:fa:b3:ba: e3:27:18:74:35:32:14:97:96:0e:20:7c:e9:5a:8e:99:77:b7: 8b:0d:b2:09:61:87:37:08:9b:c6:65:e2:65:21:bf:d1:b4:d8: cb:fd:92:b1:68:4d:f5:86:ac:d6:81:ff:c3:b5:83:8e:4c:f8: 4d:ee:be:cf:20:e3:30:37:87:b5:1b:d1:54:38:4f:a6:49:81: aa:db:38:0f:3c:65:74:06:dc:2b:12:bc:87:b6:f7:2d:09:80: 63:85:44:f9:d4:2e:20:d8:25:67:7a:70:93:aa:a1:5b:26:ca: 5a:28:78:a1:6f:25:12:77:4e:f5:3d:f4:85:e8:67:ed:75:f9: 11:e8:25:b5:7b:5d:7a:0a:41:ce:1d:0c:d4:41:2b:62:ba:95: 61:08:cf:b3:ed:b3:15:3f:14:c6:e4:22:c6:9c:38:16:4b:a2: 56:0d:4c:0a:c5:f5:7a:23:2c:fc:d4:f8:c1:24:bc:ce:39:8c: 62:2d:05:5a:5a:63:c7:29:07:e6:df:d5:2d:de:43:45:a3:06: bd:9d:9f:f3:a1:26:bf:fd:8a:8a:d4:0b:e4:67:4c:7e:60:ce: 31:05:1d:f1:4b:59:11:18:b0:59:e1:6b:37:6d:ec:36:0e:0a: a6:2e:27:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJzcsF/d7V1uW76rDl4lXamroPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTA2MDQwOTA1MDJaFw0yNTA2MDcxMTI3MDJaMDMxMTAvBgNV BAMTKEU5NTc2MDhCOEJGMjdERjJDRTUzMEFBRTE0QjkxRjNFMUU2OEY5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDao1ZE8kSOjL3S/fZfEwM2eZ5n 9tsytU+PNHmdju61fYg3JKXAQYSPzsq9so+KEWDhk+8WfHZCxRg1K4jm/z4d4TYF 5s2BAcezUpdCnsAMmud0G72k1vz/UC2X3qjd/bjoVNSKmWHvEb+RNwmKyxHYvDjr Z3sBseOyg8O1KqBzuJo96JsDj371A/KjfrWyg9oNr/QcFXwj8Q7p5hQjlkD+Jz+G OHeY7/76cdhb3jbR0u7Tx2jqT/lF6WjnzWL4fNU79tquE1c69Ksc1JsPpEoUgV4d d82x43f9O4+I/vzMcisjjzlXzZNzYhRiUM54/gqkF5tiMYxaDgTax2hNYxrtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Vdgi4vyffLOUwquFLkfPh5o+WgwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMxxvrq3e59DJvpSAkJ9vqzuuMnGHQ1MhSX lg4gfOlajpl3t4sNsglhhzcIm8Zl4mUhv9G02Mv9krFoTfWGrNaB/8O1g45M+E3u vs8g4zA3h7Ub0VQ4T6ZJgarbOA88ZXQG3CsSvIe29y0JgGOFRPnULiDYJWd6cJOq oVsmylooeKFvJRJ3TvU99IXoZ+11+RHoJbV7XXoKQc4dDNRBK2K6lWEIz7PtsxU/ FMbkIsacOBZLolYNTArF9XojLPzU+MEkvM45jGItBVpaY8cpB+bf1S3eQ0WjBr2d n/OhJr/9iorUC+RnTH5gzjEFHfFLWREYsFnhazdt7DYOCqYuJy8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:51 2025 by rpki-client