$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: HaOhzBYlo4hQs8zTgIONowgH1At8NYmxWD/nMtaevMg= Subject key identifier: 73:97:3D:BD:4A:60:B9:F3:D3:47:5B:39:5F:22:CE:AA:91:DB:6B:FA Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 6C61F1398757DBAFCACA7814D54AD0ABF033A42A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: AC Signing time: Sat 07 Jun 2025 01:12:15 +0000 Manifest this update: Sat 07 Jun 2025 01:07:15 +0000 Manifest next update: Tue 10 Jun 2025 06:58:15 +0000 Files and hashes: 1: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: 3O/OW1Umefwg6OchQ44jpt1RJGa/f0UGdAnIHZM+ihI=) 2: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: lc89lFRvMQIz7uTqrlcEMfYnshZrWUp2xbVgo2KfUEM=) 3: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: 9o2iTmycX8ipf8PIS5Gu264qZOiSnlZGLlWBakt+l3Q=) 4: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: EvJq4OLjEBVOFbG73OwOsPdQAb4z66x1zbfCbpT8orA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:61:f1:39:87:57:db:af:ca:ca:78:14:d5:4a:d0:ab:f0:33:a4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jun 7 01:07:15 2025 GMT Not After : Jun 10 06:58:15 2025 GMT Subject: CN=73973DBD4A60B9F3D3475B395F22CEAA91DB6BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:b1:ba:ce:c1:cc:2a:bf:69:a8:53:ca:95: 10:8a:dd:bd:e5:7a:bf:ac:40:63:b8:8b:ea:a6:0c: 16:e0:6d:58:92:a8:50:8f:17:c0:e3:a8:c1:57:65: 45:84:a5:6b:db:a2:b8:e6:6a:10:5c:37:1b:a8:1e: 8a:27:25:40:a1:f2:88:4b:15:22:77:c8:0a:d4:79: cb:6f:17:cb:29:88:90:48:d3:e8:9e:c6:24:89:96: 1e:79:fe:84:f2:32:4c:1c:09:d0:a0:91:60:fc:55: c9:8b:c3:d2:76:28:bd:c7:6c:70:0c:64:75:ef:49: 93:f0:7f:54:96:6b:a5:ed:81:5d:8a:60:21:80:a9: 5e:91:c6:9d:c2:be:18:36:7c:e3:87:3c:33:ef:ef: 1e:a4:96:a2:bb:c7:34:66:76:11:66:75:54:9a:26: e3:55:ad:6e:b0:e7:3c:0a:39:ac:cd:46:1f:1c:68: bc:e3:e5:a1:ea:7a:28:5e:61:83:39:fc:99:1d:f5: 75:fb:89:8e:ba:e7:7d:0e:aa:75:9a:8a:ab:9d:61: 7a:0b:b8:d0:01:98:d5:2b:0a:c7:ec:e8:e6:f0:52: b0:0e:d7:82:c5:4d:7e:fe:f7:c8:7f:a8:3a:35:53: 1c:b5:ef:fb:41:ce:80:2c:87:5f:b0:7b:a4:7d:7f: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:97:3D:BD:4A:60:B9:F3:D3:47:5B:39:5F:22:CE:AA:91:DB:6B:FA X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:71:5c:24:f9:50:46:36:25:ca:87:fe:03:26:46:70:a7:60: 70:4c:f0:4e:57:84:da:21:b0:b6:77:d7:7d:73:a8:f4:81:5a: 3a:61:3b:d5:b1:df:c0:e0:e3:ab:cf:f5:75:cb:ba:59:ea:85: 3c:bd:f1:7f:74:b4:34:20:c2:46:7b:ab:8d:0f:2b:63:89:77: 36:ee:f9:fb:f7:38:1a:73:b1:49:58:cf:29:f9:c8:ad:e0:28: 91:4a:f0:7a:87:c1:18:10:e6:1c:ae:42:5a:75:66:39:24:60: 42:8e:d6:24:3f:fd:70:58:4b:d1:89:e6:72:30:46:74:3e:5b: 97:ae:05:96:9c:f1:96:ce:79:3f:ca:4a:06:2c:0b:69:6e:32: 31:a2:41:d2:21:86:cc:46:40:fd:c5:45:7e:9b:b1:ff:4a:2b: 93:58:26:69:0c:47:25:c7:58:00:24:a5:90:58:af:67:b7:01: f3:77:56:e4:59:0a:9b:c3:03:09:39:cc:99:73:34:fb:45:e9: d6:b1:7f:46:26:21:8e:3d:fe:4b:82:cd:e9:b6:4a:1e:9a:73: 01:7e:26:b7:44:e4:b3:ab:b4:ae:c8:23:d8:52:e8:2d:68:ff: 03:ad:94:e3:99:da:30:bd:5b:5e:5b:c5:61:da:10:61:91:e3: 2b:e6:db:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGHxOYdX26/KyngU1UrQq/AzpCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA2MDcwMTA3MTVaFw0yNTA2MTAwNjU4MTVaMDMxMTAvBgNV BAMTKDczOTczREJENEE2MEI5RjNEMzQ3NUIzOTVGMjJDRUFBOTFEQjZCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcB7G6zsHMKr9pqFPKlRCK3b3l er+sQGO4i+qmDBbgbViSqFCPF8DjqMFXZUWEpWvborjmahBcNxuoHoonJUCh8ohL FSJ3yArUectvF8spiJBI0+iexiSJlh55/oTyMkwcCdCgkWD8VcmLw9J2KL3HbHAM ZHXvSZPwf1SWa6XtgV2KYCGAqV6Rxp3Cvhg2fOOHPDPv7x6klqK7xzRmdhFmdVSa JuNVrW6w5zwKOazNRh8caLzj5aHqeiheYYM5/Jkd9XX7iY66530OqnWaiqudYXoL uNABmNUrCsfs6ObwUrAO14LFTX7+98h/qDo1Uxy17/tBzoAsh1+we6R9f+WXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc5c9vUpgufPTR1s5XyLOqpHba/owHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1xXCT5UEY2JcqH/gMmRnCnYHBM8E5XhNoh sLZ3131zqPSBWjphO9Wx38Dg46vP9XXLulnqhTy98X90tDQgwkZ7q40PK2OJdzbu +fv3OBpzsUlYzyn5yK3gKJFK8HqHwRgQ5hyuQlp1ZjkkYEKO1iQ//XBYS9GJ5nIw RnQ+W5euBZac8ZbOeT/KSgYsC2luMjGiQdIhhsxGQP3FRX6bsf9KK5NYJmkMRyXH WAAkpZBYr2e3AfN3VuRZCpvDAwk5zJlzNPtF6daxf0YmIY49/kuCzem2Sh6acwF+ JrdE5LOrtK7II9hS6C1o/wOtlOOZ2jC9W15bxWHaEGGR4yvm22g= -----END CERTIFICATE-----Generated at Sun Jun 8 13:46:14 2025 by rpki-client