$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: XHLagzkxO/uL8JvdDbTmUfkcXsH0xIHvNngO+0xYAQg= Subject key identifier: D8:C3:4B:11:0C:C2:08:98:D9:D6:81:48:D3:3C:55:0D:CC:87:35:A0 Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 5D899377B09FB7331D39CE548D7DD53C76D19343 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: FA Signing time: Mon 02 Jun 2025 23:24:58 +0000 Manifest this update: Mon 02 Jun 2025 23:19:58 +0000 Manifest next update: Fri 06 Jun 2025 08:03:58 +0000 Files and hashes: 1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: UzN78WEP3F43GcR8M2t0g/Jfj4Mv1T6ekzLTGpiwNbk=) 2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: C35SXikIhaDLGx2DtTCZTY1tvAiWcqvbFOy+lIenj/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 08:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:89:93:77:b0:9f:b7:33:1d:39:ce:54:8d:7d:d5:3c:76:d1:93:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Jun 2 23:19:58 2025 GMT Not After : Jun 6 08:03:58 2025 GMT Subject: CN=D8C34B110CC20898D9D68148D33C550DCC8735A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:cf:34:dd:1f:30:d2:90:54:c2:33:01:da: e3:b4:6e:37:18:b7:4b:7e:1f:d7:95:82:ac:c1:df: 73:14:10:8e:74:f3:1a:20:0d:8c:da:ae:3e:bc:f0: 75:0d:90:6e:33:a9:cf:bc:5a:e2:71:a2:68:47:ab: d4:a5:7e:07:9f:50:7f:3b:06:32:96:69:17:7b:98: 70:17:e7:59:b5:87:bc:e9:13:9c:83:c5:af:56:ab: e0:d2:e9:23:68:eb:ce:8f:98:c8:20:5a:f6:2b:09: 74:fd:90:f1:57:55:a9:8f:2d:48:a7:9b:0d:58:a3: 06:59:c9:ce:40:49:75:1e:bb:33:77:06:7b:a9:e9: 42:45:b4:56:37:ac:9b:14:4f:23:bc:65:20:10:0b: c5:11:a4:da:08:61:af:e2:b6:13:c2:27:d2:22:66: 77:23:a6:e1:89:c9:56:4a:c6:5e:31:62:84:c2:4b: 04:af:13:b6:16:94:6f:cd:38:0e:ab:16:dd:cd:a1: 8b:63:b0:69:66:d5:90:c3:49:19:9b:11:78:f6:d6: 88:51:14:11:4d:30:48:67:53:b1:5d:63:39:7f:db: d1:25:bc:21:62:b0:fd:99:7b:fd:fe:31:f1:f3:54: dd:90:6f:eb:31:1b:05:a5:64:17:91:21:57:72:15: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C3:4B:11:0C:C2:08:98:D9:D6:81:48:D3:3C:55:0D:CC:87:35:A0 X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:58:8d:a1:19:61:90:11:e6:04:e3:f4:4a:1e:fe:b5:12:ec: 7b:42:22:84:b4:0b:b0:de:cc:ff:3c:9c:02:cf:fd:25:8b:aa: ba:b1:bd:25:2a:a5:f4:bd:aa:12:7b:8a:07:cf:4f:fb:a4:79: b5:30:8e:4d:c4:c4:74:b7:f7:ed:2a:04:11:7c:cb:bf:63:01: 77:ee:17:98:58:e8:a0:f1:d6:b7:3f:01:51:7e:a0:86:6c:b3: 86:00:2a:b7:ca:5b:68:96:c2:19:b9:0e:01:90:41:e8:b5:24: a3:66:d1:92:2f:29:49:0b:06:f4:f7:22:94:bc:66:64:5b:fd: b3:ed:d3:3b:4a:d7:a7:fb:76:24:e5:87:ea:20:7a:17:41:96: a1:1c:3f:67:f2:f2:47:0f:4c:aa:1b:d1:e7:53:05:73:cf:e6: e6:6f:6e:14:e7:4e:4c:4c:a4:44:fa:23:32:45:d1:69:a3:0d: 5d:73:9d:81:8f:b9:a5:2e:e2:07:1c:f7:d0:35:3f:0f:ee:a8: ec:83:30:2c:e3:a8:71:8e:1e:4a:1f:f7:74:8b:da:65:76:cb: 01:e2:d8:55:a0:2c:d2:c0:d6:e6:c4:cb:dc:5f:b1:2e:da:7a: 2a:54:ad:5e:d9:ff:c6:af:30:15:a2:49:56:c1:69:82:62:87: 46:02:b4:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYmTd7CftzMdOc5UjX3VPHbRk0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNTA2MDIyMzE5NThaFw0yNTA2MDYwODAzNThaMDMxMTAvBgNV BAMTKEQ4QzM0QjExMENDMjA4OThEOUQ2ODE0OEQzM0M1NTBEQ0M4NzM1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UM803R8w0pBUwjMB2uO0bjcY t0t+H9eVgqzB33MUEI508xogDYzarj688HUNkG4zqc+8WuJxomhHq9SlfgefUH87 BjKWaRd7mHAX51m1h7zpE5yDxa9Wq+DS6SNo686PmMggWvYrCXT9kPFXVamPLUin mw1YowZZyc5ASXUeuzN3Bnup6UJFtFY3rJsUTyO8ZSAQC8URpNoIYa/ithPCJ9Ii ZncjpuGJyVZKxl4xYoTCSwSvE7YWlG/NOA6rFt3NoYtjsGlm1ZDDSRmbEXj21ohR FBFNMEhnU7FdYzl/29ElvCFisP2Ze/3+MfHzVN2Qb+sxGwWlZBeRIVdyFd6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MNLEQzCCJjZ1oFI0zxVDcyHNaAwHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVYjaEZYZAR5gTj9Eoe/rUS7HtCIoS0C7De zP88nALP/SWLqrqxvSUqpfS9qhJ7igfPT/ukebUwjk3ExHS39+0qBBF8y79jAXfu F5hY6KDx1rc/AVF+oIZss4YAKrfKW2iWwhm5DgGQQei1JKNm0ZIvKUkLBvT3IpS8 ZmRb/bPt0ztK16f7diTlh+ogehdBlqEcP2fy8kcPTKob0edTBXPP5uZvbhTnTkxM pET6IzJF0WmjDV1znYGPuaUu4gcc99A1Pw/uqOyDMCzjqHGOHkof93SL2mV2ywHi 2FWgLNLA1ubEy9xfsS7aeipUrV7Z/8avMBWiSVbBaYJih0YCtAI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:09 2025 by rpki-client