$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft File: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json) Hash identifier: 9KJ5JiMAm5OlplMbfQbWvdWNIID6z7lXPO8+AXcg3Pg= Subject key identifier: 5A:7C:51:F8:05:1D:60:6E:5C:EC:D2:A7:F1:82:17:9C:8D:A2:B7:05 Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Certificate serial: 6602F18738D07301D95EFF4D7FFA44BA3153A56D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft Manifest number: 01BC Signing time: Wed 04 Jun 2025 10:40:04 +0000 Manifest this update: Wed 04 Jun 2025 10:35:04 +0000 Manifest next update: Sat 07 Jun 2025 13:08:04 +0000 Files and hashes: 1: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: J6dvLBn3b6E8t0V/cQzAtBanBd1iD925tlwZ4sUP2yA=) 2: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: KO1zPpzo+NpQZoIXWc2onXHqWaE2F3Pos3ry3GQwJRI=) 3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: uoMaFn6K0kXeGqCIYO963bxjg6ulr+R66p0nlkWHE2E=) 4: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: 06QZdyklcUmWupIhsOVNL9NiOUjK+/J3FEFr90f9R1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:02:f1:87:38:d0:73:01:d9:5e:ff:4d:7f:fa:44:ba:31:53:a5:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3 Validity Not Before: Jun 4 10:35:04 2025 GMT Not After : Jun 7 13:08:04 2025 GMT Subject: CN=5A7C51F8051D606E5CECD2A7F182179C8DA2B705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:e1:83:84:5b:bb:5a:be:61:a1:5e:cb:6f: 3e:4d:61:93:cd:2f:24:1d:3f:25:b0:cc:a2:ef:4c: 49:c1:48:be:bf:a0:98:91:0b:e3:8a:a0:48:91:04: 93:10:40:6e:30:82:bf:90:a6:8c:4e:68:0d:2d:2b: a4:58:6c:c3:6c:d7:d3:45:a9:79:53:d8:ba:56:14: 33:ce:c4:80:6f:50:72:3f:57:fd:3e:39:44:0c:93: 55:69:1f:23:8a:6e:96:f3:d1:31:4c:91:b2:5a:e3: 33:a7:8e:08:09:07:f0:40:25:09:0e:e1:61:b9:09: f5:84:9d:4b:3a:fe:42:a6:a9:ae:9c:a5:27:48:e5: a8:3b:65:8b:12:15:05:64:e1:a4:e5:3b:cb:c3:45: b7:24:25:8e:d8:77:9f:93:8b:0b:e0:f6:26:5d:7f: 25:43:c3:75:87:b1:a5:eb:ca:d2:47:af:58:7c:bc: 01:24:99:01:94:49:35:99:18:2d:47:1b:44:85:6c: 02:ad:49:bc:9d:9f:4f:9a:23:32:39:0c:c0:6d:fe: 39:98:ff:10:fb:ed:fd:25:06:90:d9:80:7d:49:68: 8a:d3:03:18:66:c4:cd:b1:48:b7:3c:13:5f:1f:54: 0f:c2:ec:1e:03:10:1a:e5:0f:f0:93:c7:1d:7f:43: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7C:51:F8:05:1D:60:6E:5C:EC:D2:A7:F1:82:17:9C:8D:A2:B7:05 X509v3 Authority Key Identifier: keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:d1:c6:79:81:a5:b4:27:9c:7d:39:4e:4e:1b:0e:32:81: b3:63:01:e0:33:c9:e8:19:c2:0d:6e:a7:b4:e6:e5:e8:d3:23: d3:2f:ae:36:96:75:3a:a3:b8:e3:eb:d1:3d:c1:30:07:d3:ce: f6:ca:c3:22:e7:e2:ed:f7:c9:0f:08:fe:ed:10:ea:63:14:60: e8:bd:b1:ff:ac:e9:ed:56:ae:f8:44:80:30:73:30:65:15:c5: 9f:94:4b:b4:76:a7:1f:d6:91:e6:6a:b3:9a:3f:85:4c:9e:26: dc:5d:aa:df:f7:ac:d6:e4:b8:3b:b3:be:7d:07:c9:6e:0c:e6: 63:cf:2b:cf:79:f0:4c:d9:1e:3f:8d:4a:e7:7f:13:74:b9:65: 31:3a:14:c2:f4:3c:f6:6e:85:89:79:9a:4f:9d:1d:67:3f:39: 51:fb:6c:df:26:12:7b:4a:71:35:83:8e:cf:b3:01:a1:0a:53: 81:fb:d9:53:c6:08:6e:b3:8c:1b:fb:bc:33:48:75:4b:82:8a: c3:7d:08:c8:54:a1:c4:30:47:49:ec:ee:1e:43:8c:61:00:66: d1:16:e3:64:9e:21:8b:68:a1:fe:83:7e:ca:7d:f0:a7:de:dd: 25:f7:ca:e2:37:9e:9d:19:f1:a0:c6:e1:96:26:09:eb:c5:58: 81:24:3b:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgLxhzjQcwHZXv9Nf/pEujFTpW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF MDY2RUZGMzAeFw0yNTA2MDQxMDM1MDRaFw0yNTA2MDcxMzA4MDRaMDMxMTAvBgNV BAMTKDVBN0M1MUY4MDUxRDYwNkU1Q0VDRDJBN0YxODIxNzlDOERBMkI3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HuGDhFu7Wr5hoV7Lbz5NYZPN LyQdPyWwzKLvTEnBSL6/oJiRC+OKoEiRBJMQQG4wgr+QpoxOaA0tK6RYbMNs19NF qXlT2LpWFDPOxIBvUHI/V/0+OUQMk1VpHyOKbpbz0TFMkbJa4zOnjggJB/BAJQkO 4WG5CfWEnUs6/kKmqa6cpSdI5ag7ZYsSFQVk4aTlO8vDRbckJY7Yd5+Tiwvg9iZd fyVDw3WHsaXrytJHr1h8vAEkmQGUSTWZGC1HG0SFbAKtSbydn0+aIzI5DMBt/jmY /xD77f0lBpDZgH1JaIrTAxhmxM2xSLc8E18fVA/C7B4DEBrlD/CTxx1/Q/o1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnxR+AUdYG5c7NKn8YIXnI2itwUwHwYDVR0j BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4 NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2 RUZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0 RUVFMDY2RUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjv0cZ5gaW0J5x9OU5OGw4ygbNjAeAzyegZ wg1up7Tm5ejTI9MvrjaWdTqjuOPr0T3BMAfTzvbKwyLn4u33yQ8I/u0Q6mMUYOi9 sf+s6e1WrvhEgDBzMGUVxZ+US7R2px/WkeZqs5o/hUyeJtxdqt/3rNbkuDuzvn0H yW4M5mPPK8958EzZHj+NSud/E3S5ZTE6FML0PPZuhYl5mk+dHWc/OVH7bN8mEntK cTWDjs+zAaEKU4H72VPGCG6zjBv7vDNIdUuCisN9CMhUocQwR0ns7h5DjGEAZtEW 42SeIYtoof6Dfsp98Kfe3SX3yuI3np0Z8aDG4ZYmCevFWIEkO2c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:06 2025 by rpki-client