$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: +DRgRyRgz9y0zRHu8tQUTBlYL2vnlBlzxjFdsSqC4lA= Subject key identifier: 81:57:E9:28:59:97:4F:D0:CD:EF:51:1E:C3:66:0C:10:F5:89:3C:77 Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 35D05572C00986DA34F42AF68201BF932E993E6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 0161 Signing time: Wed 04 Jun 2025 08:11:00 +0000 Manifest this update: Wed 04 Jun 2025 08:06:00 +0000 Manifest next update: Sat 07 Jun 2025 18:59:00 +0000 Files and hashes: 1: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: g1Ka7yfyJPbCamNmlkRkAf0k4fb7xbeQ8IZXUzIAW64=) 2: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: OOAG3hwElREFp0Oy3uyRyrZSZZiAXyvJexCrf+iPHIs=) 3: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: 7QwG3sKKh+mYjg4jS1AeFszBYeNEnM56jws/Z3GCGMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d0:55:72:c0:09:86:da:34:f4:2a:f6:82:01:bf:93:2e:99:3e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Jun 4 08:06:00 2025 GMT Not After : Jun 7 18:59:00 2025 GMT Subject: CN=8157E92859974FD0CDEF511EC3660C10F5893C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:b2:e4:c5:51:96:73:80:2e:23:19:db:8a: 5b:4b:80:4c:0e:b6:aa:9c:f1:b9:a2:8b:cf:1e:ed: 7e:0f:82:ad:73:f7:2f:77:68:9f:0f:34:5b:a3:ae: d6:38:a6:74:8a:d2:42:27:d7:fe:7d:45:48:08:87: d0:8e:b3:19:ec:7c:31:07:93:ec:43:a9:1c:97:70: c1:96:64:cd:0b:f9:65:5e:65:c4:18:dc:6d:4d:46: eb:55:a0:af:f5:44:58:08:35:2b:03:43:47:d2:62: 48:da:19:02:b9:40:56:5c:08:a6:8f:c9:a3:59:35: fc:b6:c9:5f:af:d2:dd:5b:4d:bd:70:4b:dd:ea:27: 47:01:8d:25:32:85:09:52:80:9a:9c:99:dd:cc:a7: b9:a3:f5:47:ea:24:55:22:d5:01:24:49:fc:ca:6a: 98:b6:f8:ee:a3:ae:78:6c:f0:f0:77:c9:ff:b1:6c: 6a:7f:ff:da:e9:70:a6:88:8d:f8:41:e1:92:ae:5f: f8:39:a8:78:f6:ae:5c:7f:fd:b9:84:fc:56:ce:ed: 7d:6a:4c:35:c4:c0:f2:e9:5c:35:68:8e:e2:8a:ab: 59:4b:8a:88:86:03:fc:05:92:88:c8:22:db:63:80: a6:49:9f:6a:bb:80:fb:ea:79:ce:d9:05:06:05:81: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:E9:28:59:97:4F:D0:CD:EF:51:1E:C3:66:0C:10:F5:89:3C:77 X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f7:74:c5:80:9d:49:f8:4c:27:22:de:c0:9c:0b:a9:d3:bd: 8c:f1:75:12:74:21:4a:7f:20:95:07:4a:a1:67:56:00:48:45: 24:2c:69:99:c3:83:08:8a:cb:06:2e:e7:54:d8:e8:20:fa:4b: c6:2c:c2:fc:02:70:17:9f:2a:3b:ed:1a:b8:18:74:dc:01:f4: 27:17:13:ec:6b:17:90:dc:7d:08:16:ee:1c:be:39:a6:df:60: d3:18:2e:8e:b2:29:4c:de:06:08:3e:5f:f5:65:41:24:e1:c1: b3:f9:d4:fa:97:1f:ed:8c:97:24:00:59:3e:b6:78:c6:82:05: f7:42:2b:6d:5f:d9:8d:11:36:8e:b2:bd:52:29:81:82:6b:73: 12:e7:a2:ad:e0:2e:6c:99:a6:a1:69:02:60:41:0a:e6:ed:97: 0f:64:66:17:8a:3d:2c:53:f8:fc:9a:d2:55:4e:85:78:f9:69: 66:1d:7e:07:ea:aa:e1:5d:e1:fe:8e:13:55:8d:16:84:dd:ce: c0:68:80:1c:fa:7d:d8:e2:25:62:df:9b:88:bf:5a:a1:6d:61: e7:1a:f4:88:66:ce:f3:e5:00:d9:f5:96:32:98:91:25:85:26: 9f:75:aa:56:87:b1:c7:9e:1c:7a:37:ac:64:15:e9:8a:95:74: 8b:e3:2e:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdBVcsAJhto09Cr2ggG/ky6ZPm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNTA2MDQwODA2MDBaFw0yNTA2MDcxODU5MDBaMDMxMTAvBgNV BAMTKDgxNTdFOTI4NTk5NzRGRDBDREVGNTExRUMzNjYwQzEwRjU4OTNDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Z7LkxVGWc4AuIxnbiltLgEwO tqqc8bmii88e7X4Pgq1z9y93aJ8PNFujrtY4pnSK0kIn1/59RUgIh9COsxnsfDEH k+xDqRyXcMGWZM0L+WVeZcQY3G1NRutVoK/1RFgINSsDQ0fSYkjaGQK5QFZcCKaP yaNZNfy2yV+v0t1bTb1wS93qJ0cBjSUyhQlSgJqcmd3Mp7mj9UfqJFUi1QEkSfzK api2+O6jrnhs8PB3yf+xbGp//9rpcKaIjfhB4ZKuX/g5qHj2rlx//bmE/FbO7X1q TDXEwPLpXDVojuKKq1lLioiGA/wFkojIIttjgKZJn2q7gPvqec7ZBQYFgR0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgVfpKFmXT9DN71Eew2YMEPWJPHcwHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG73dMWAnUn4TCci3sCcC6nTvYzxdRJ0IUp/ IJUHSqFnVgBIRSQsaZnDgwiKywYu51TY6CD6S8YswvwCcBefKjvtGrgYdNwB9CcX E+xrF5DcfQgW7hy+OabfYNMYLo6yKUzeBgg+X/VlQSThwbP51PqXH+2MlyQAWT62 eMaCBfdCK21f2Y0RNo6yvVIpgYJrcxLnoq3gLmyZpqFpAmBBCubtlw9kZheKPSxT +Pya0lVOhXj5aWYdfgfqquFd4f6OE1WNFoTdzsBogBz6fdjiJWLfm4i/WqFtYeca 9IhmzvPlANn1ljKYkSWFJp91qlaHsceeHHo3rGQV6YqVdIvjLg8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:20 2025 by rpki-client