$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: j0GPoe2Y/RrO2DJPE2s5mGJE4TB1A7upvvdOvDy1Osc= Subject key identifier: D7:C2:A2:7C:2D:DF:E6:8A:47:30:4E:4E:8C:26:43:10:38:A0:C4:A0 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 729EDCF6BD82FE8FC16605D699CF830C52D8FF57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 01F0 Signing time: Mon 02 Jun 2025 18:21:38 +0000 Manifest this update: Mon 02 Jun 2025 18:16:38 +0000 Manifest next update: Thu 05 Jun 2025 19:36:38 +0000 Files and hashes: 1: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) 2: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: Y0eQRiMARH1RmoGmCC4SjFQP+wb4C4VmueMaGLke+Ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 19:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9e:dc:f6:bd:82:fe:8f:c1:66:05:d6:99:cf:83:0c:52:d8:ff:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Jun 2 18:16:38 2025 GMT Not After : Jun 5 19:36:38 2025 GMT Subject: CN=D7C2A27C2DDFE68A47304E4E8C26431038A0C4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:24:ac:ab:7a:b1:c0:4d:ed:8f:be:ac:7e: a8:ad:31:c5:7e:a7:ea:9f:e7:2b:92:2d:12:5b:39: 4e:51:a1:c1:2c:cb:72:08:03:b4:d4:5c:dc:f6:81: 5c:1f:71:34:3d:1d:d8:9e:32:e8:db:b7:2d:8f:a3: 95:7b:9f:55:93:f4:a0:54:cd:f1:8c:7c:8a:a2:d3: 2b:37:a1:04:75:42:41:fb:79:dc:3a:d4:18:43:18: 32:88:39:48:5c:53:be:84:d4:a3:2f:ba:92:ee:92: 5d:7e:10:32:68:17:d9:cb:2e:2a:a1:f5:ea:56:7a: 48:ae:d2:1a:b4:4e:d8:24:81:c9:d2:a0:1d:0b:9f: 64:ba:2c:7c:91:ac:a3:15:e0:bc:0f:eb:ab:5d:a9: 96:2b:1c:40:c3:46:86:26:c5:c8:f6:55:b9:ac:9f: 38:d8:9a:6b:2a:33:95:94:18:48:68:cc:ba:86:ce: 60:1c:97:16:b4:51:75:05:09:8b:5a:4f:dd:fb:59: 4f:43:a6:c3:8a:90:c1:bc:43:c9:fb:09:3c:b6:68: a2:6c:56:f1:4b:e8:d1:d8:a5:34:da:8f:c5:a1:77: ef:77:36:c1:f4:bd:d3:2f:2f:04:e0:4e:b3:79:5c: 38:09:d4:7c:a8:b1:b1:42:9e:13:17:46:4f:c3:46: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C2:A2:7C:2D:DF:E6:8A:47:30:4E:4E:8C:26:43:10:38:A0:C4:A0 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e6:c1:11:43:f5:9b:c4:9b:c7:96:db:7d:b5:89:38:a9:74: ee:93:18:ce:82:6b:fe:e0:4e:98:64:86:53:d8:83:ca:9e:e2: 6c:93:b4:f9:6e:b6:39:5d:a4:ff:08:64:62:0f:00:aa:05:c5: e3:a2:2b:a3:ec:89:d4:16:45:55:d3:eb:43:65:82:cf:50:53: 49:5b:49:4f:a1:0b:93:b7:26:15:29:fc:cb:30:8e:75:1e:63: 9c:f5:b3:1a:85:c6:83:3c:67:50:8f:65:86:f9:08:4c:50:25: f0:f2:ef:52:c4:91:58:af:de:cf:57:50:58:04:80:c7:53:ce: d1:de:eb:61:dc:50:71:bd:25:a1:c2:b6:be:46:3a:eb:02:c6: 95:3d:27:09:3b:32:17:1f:d5:45:7f:a6:15:1c:dc:11:ee:56: 29:33:48:88:34:23:3f:62:5e:90:b8:8c:31:ec:7f:a5:75:2c: cd:d9:f5:1f:aa:4a:98:61:94:b0:54:be:c3:cf:b0:fe:83:16: 4e:88:07:07:c3:0a:0e:8f:d8:af:4b:b9:8d:3d:3e:2d:f8:85: e2:5f:62:a1:62:55:64:82:41:d6:81:f1:d9:b0:26:02:66:6b: de:80:c5:1b:20:e7:70:ac:20:09:dd:62:e6:18:d8:05:02:c9: 69:45:a7:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcp7c9r2C/o/BZgXWmc+DDFLY/1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA2MDIxODE2MzhaFw0yNTA2MDUxOTM2MzhaMDMxMTAvBgNV BAMTKEQ3QzJBMjdDMkRERkU2OEE0NzMwNEU0RThDMjY0MzEwMzhBMEM0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FCSsq3qxwE3tj76sfqitMcV+ p+qf5yuSLRJbOU5RocEsy3IIA7TUXNz2gVwfcTQ9HdieMujbty2Po5V7n1WT9KBU zfGMfIqi0ys3oQR1QkH7edw61BhDGDKIOUhcU76E1KMvupLukl1+EDJoF9nLLiqh 9epWekiu0hq0TtgkgcnSoB0Ln2S6LHyRrKMV4LwP66tdqZYrHEDDRoYmxcj2Vbms nzjYmmsqM5WUGEhozLqGzmAclxa0UXUFCYtaT937WU9DpsOKkMG8Q8n7CTy2aKJs VvFL6NHYpTTaj8Whd+93NsH0vdMvLwTgTrN5XDgJ1HyosbFCnhMXRk/DRt1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU18KifC3f5opHME5OjCZDEDigxKAwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7mwRFD9ZvEm8eW2321iTipdO6TGM6Ca/7g TphkhlPYg8qe4myTtPlutjldpP8IZGIPAKoFxeOiK6PsidQWRVXT60Nlgs9QU0lb SU+hC5O3JhUp/MswjnUeY5z1sxqFxoM8Z1CPZYb5CExQJfDy71LEkViv3s9XUFgE gMdTztHe62HcUHG9JaHCtr5GOusCxpU9Jwk7Mhcf1UV/phUc3BHuVikzSIg0Iz9i XpC4jDHsf6V1LM3Z9R+qSphhlLBUvsPPsP6DFk6IBwfDCg6P2K9LuY09Pi34heJf YqFiVWSCQdaB8dmwJgJma96AxRsg53CsIAndYuYY2AUCyWlFpx8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:15 2025 by rpki-client