$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: PkJJPva1SWD/cCqQurZ9G+olGeyAEEgSUzsYy635E1I= Subject key identifier: AA:6E:D3:7B:DA:68:47:F8:0B:A1:95:76:22:05:F3:A7:36:1D:21:17 Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 2EEAA66462706AF8B7AC020EB7D5B664734F232B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 043B Signing time: Sat 07 Jun 2025 03:52:10 +0000 Manifest this update: Sat 07 Jun 2025 03:47:10 +0000 Manifest next update: Tue 10 Jun 2025 14:04:10 +0000 Files and hashes: 1: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: uzmQnVRpyelOFX5sJ3Cd93wRk4zKfVo0ekM5e4o/GgY=) 2: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: 06ISKC2CwbxxyFrx3ByMaV4Lra2B5W5rP3yiIdrne3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ea:a6:64:62:70:6a:f8:b7:ac:02:0e:b7:d5:b6:64:73:4f:23:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: Jun 7 03:47:10 2025 GMT Not After : Jun 10 14:04:10 2025 GMT Subject: CN=AA6ED37BDA6847F80BA195762205F3A7361D2117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:9a:f0:a9:8d:c7:d3:06:68:dc:11:b1:ef: 8f:67:8d:86:c6:07:68:94:d9:60:08:3c:04:a1:12: a2:60:b8:15:44:d9:ac:28:26:fa:90:c1:4e:ec:71: e2:34:de:6f:8e:9b:a8:b6:8d:06:c0:55:d0:e8:19: cf:da:0e:68:26:4c:ce:94:e2:ca:36:9e:25:14:9f: da:06:3d:df:e7:45:c7:6e:44:f2:87:ee:2e:44:b8: 27:6b:cf:8a:8a:49:66:21:84:82:1a:29:a6:dc:a8: 54:ed:14:03:52:15:47:09:12:78:de:f8:c9:55:e2: eb:98:0d:c7:f2:33:e2:7b:64:97:82:46:1e:10:ea: 50:e0:20:05:6f:90:89:b1:1a:d0:c9:5f:21:db:ae: 8e:bc:ad:5a:a4:f4:d1:55:79:4c:fe:cc:f9:fe:dc: 0e:56:7c:79:14:87:4e:9f:2a:41:8e:a0:40:16:14: 3e:dc:4d:d6:9c:89:54:8a:10:a8:eb:b9:d5:33:45: 2e:9d:12:20:dd:4d:27:8b:b7:4c:aa:e8:6c:51:77: 5d:21:ba:5c:13:bc:26:4f:99:61:31:da:23:22:bc: 6a:be:c3:57:8a:60:76:ba:7b:7c:4c:88:de:36:16: 12:de:b1:5e:e9:71:ee:2d:b2:e8:2e:71:c4:a5:54: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:D3:7B:DA:68:47:F8:0B:A1:95:76:22:05:F3:A7:36:1D:21:17 X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e3:de:80:0a:7f:08:4e:dd:59:b5:af:32:9e:04:6c:cc:d5: a8:8e:6c:31:fb:26:61:3f:48:53:b3:39:10:e6:60:8c:6a:dd: 5f:17:fc:6a:af:22:69:c1:9e:a3:8b:23:72:40:b1:43:84:dc: d3:a2:f1:e3:4c:cd:3e:d9:64:21:2e:30:44:62:66:87:00:d3: 91:5d:54:d0:3a:ab:bf:06:57:af:b2:9e:60:2f:4b:10:02:b9: 35:57:e3:23:f9:ae:93:b4:53:d9:38:2e:1d:4d:6d:ab:bf:37: ce:e3:85:5c:81:70:17:47:ad:b4:24:fd:44:46:bd:fb:17:3a: 61:e5:dc:df:c7:e5:f9:03:da:d5:d0:f4:4a:f3:2d:bb:b6:81: 42:09:26:0a:bf:ff:8c:f0:9f:03:16:c8:76:d1:3a:2a:7d:d6: e2:0d:be:f6:da:4b:d7:ef:59:be:af:cc:83:7e:64:e3:cb:2d: 6b:03:cf:e9:32:94:ca:06:43:ed:99:09:e6:8f:13:d7:44:fd: ed:5d:c2:f1:e1:31:1f:ad:ea:d7:bb:60:fc:f5:63:c7:22:a8: ad:4b:1e:e3:a0:ad:a5:35:df:80:57:12:8d:e5:95:b4:94:61: ac:ba:64:c4:ea:b1:22:28:f1:20:78:79:1f:da:e8:5c:4b:cd: 37:7e:cc:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuqmZGJwavi3rAIOt9W2ZHNPIyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTA2MDcwMzQ3MTBaFw0yNTA2MTAxNDA0MTBaMDMxMTAvBgNV BAMTKEFBNkVEMzdCREE2ODQ3RjgwQkExOTU3NjIyMDVGM0E3MzYxRDIxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W5rwqY3H0wZo3BGx749njYbG B2iU2WAIPAShEqJguBVE2awoJvqQwU7sceI03m+Om6i2jQbAVdDoGc/aDmgmTM6U 4so2niUUn9oGPd/nRcduRPKH7i5EuCdrz4qKSWYhhIIaKabcqFTtFANSFUcJEnje +MlV4uuYDcfyM+J7ZJeCRh4Q6lDgIAVvkImxGtDJXyHbro68rVqk9NFVeUz+zPn+ 3A5WfHkUh06fKkGOoEAWFD7cTdaciVSKEKjrudUzRS6dEiDdTSeLt0yq6GxRd10h ulwTvCZPmWEx2iMivGq+w1eKYHa6e3xMiN42FhLesV7pce4tsuguccSlVKtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqm7Te9poR/gLoZV2IgXzpzYdIRcwHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLj3oAKfwhO3Vm1rzKeBGzM1aiObDH7JmE/ SFOzORDmYIxq3V8X/GqvImnBnqOLI3JAsUOE3NOi8eNMzT7ZZCEuMERiZocA05Fd VNA6q78GV6+ynmAvSxACuTVX4yP5rpO0U9k4Lh1Nbau/N87jhVyBcBdHrbQk/URG vfsXOmHl3N/H5fkD2tXQ9ErzLbu2gUIJJgq//4zwnwMWyHbROip91uINvvbaS9fv Wb6vzIN+ZOPLLWsDz+kylMoGQ+2ZCeaPE9dE/e1dwvHhMR+t6te7YPz1Y8ciqK1L HuOgraU134BXEo3llbSUYay6ZMTqsSIo8SB4eR/a6FxLzTd+zD0= -----END CERTIFICATE-----Generated at Sat Jun 7 16:26:17 2025 by rpki-client