$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: H2FcgNf13HqOsAkKd5ADx4DVi+75MJe5YQ8ULYxLvEg= Subject key identifier: 1E:AA:08:B7:58:ED:17:10:23:86:0D:10:AE:64:A9:A8:FA:45:14:D7 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 2A0FCED64E3CAE3DA15BEED3C21DCB784A76C12D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 0246 Signing time: Tue 03 Jun 2025 16:44:16 +0000 Manifest this update: Tue 03 Jun 2025 16:39:16 +0000 Manifest next update: Sat 07 Jun 2025 00:11:16 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: R0Qnq8WCYzzZhm4jH8EzTUEmfeqTmvlt0RhURy5F9Rw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0f:ce:d6:4e:3c:ae:3d:a1:5b:ee:d3:c2:1d:cb:78:4a:76:c1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Jun 3 16:39:16 2025 GMT Not After : Jun 7 00:11:16 2025 GMT Subject: CN=1EAA08B758ED171023860D10AE64A9A8FA4514D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:5d:c0:08:ab:3e:15:37:c5:53:f7:49:ce: 84:88:39:0a:06:0f:f6:70:54:5f:a6:af:d1:b7:be: f6:79:a0:3b:05:83:68:2d:5b:20:4d:cb:9e:fb:0c: b9:bc:f3:a5:df:a5:90:e0:d0:95:2e:71:a3:dc:b3: cc:56:bc:24:b7:fc:c9:d6:1f:88:e9:3f:24:cf:69: 1f:01:83:5f:a1:10:de:c0:79:6c:0b:71:5a:77:86: b4:4c:48:44:65:67:fa:ee:21:bc:e1:0d:f9:54:d3: f8:69:d4:b7:45:55:d8:7c:b4:f4:35:98:c5:66:d6: 7e:07:19:91:21:70:af:40:12:54:d4:b5:93:c0:ef: a0:c5:b5:46:94:bd:24:a2:de:12:a7:f8:d9:b1:a1: d2:4c:4f:1a:3e:61:fa:7c:1a:17:83:d2:e8:88:ee: 83:47:f3:92:33:d4:06:5b:f2:13:e7:63:18:f6:5c: 34:99:09:2a:85:17:e8:ad:f9:7b:6a:36:75:24:47: 08:e4:19:44:82:7c:36:a8:5d:8e:cc:7e:c6:38:20: b1:36:23:a2:b3:5d:fd:85:c0:62:e2:3f:78:8d:ce: 9f:eb:47:48:7c:6f:e7:da:79:54:21:4e:13:e8:47: 76:64:18:cd:41:49:59:cc:3b:31:f4:76:58:45:04: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AA:08:B7:58:ED:17:10:23:86:0D:10:AE:64:A9:A8:FA:45:14:D7 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:aa:c4:ec:29:25:ee:2d:a7:51:ed:3a:2b:da:e8:89:dd:79: a1:07:c3:bb:5c:be:a8:3a:60:0f:c7:48:cf:68:2d:58:a1:e0: 6e:c2:78:2b:21:fa:cb:55:84:9d:fb:3b:67:16:20:6c:2f:fa: 2d:ce:23:4f:29:5c:f0:95:53:6d:1f:ce:f6:80:6e:0b:be:1d: 74:c0:97:d6:cd:a9:4c:2a:24:98:77:13:8b:c8:f3:04:3e:3e: ca:7c:dd:42:60:db:3d:df:bb:bd:57:e3:7e:76:dd:81:1e:73: 0d:2b:ff:d3:f0:79:a4:62:8e:37:18:e4:56:b8:e9:a6:31:ce: 51:31:6a:12:6e:6e:34:25:f4:fd:2f:b7:42:fd:49:4d:60:7c: 24:92:82:ab:6b:31:e7:d6:97:ab:96:e0:af:55:11:0d:ca:81: 41:11:59:95:0b:ec:a4:eb:dd:4f:9c:c9:65:96:4f:a7:3a:37: 4b:d3:25:c6:4a:84:31:67:08:a6:fc:57:41:54:21:d4:28:08: 61:45:a0:1b:f3:c6:8e:40:bf:9a:21:c6:b3:3e:30:53:72:ff: f3:c5:5a:bf:e4:e7:a7:26:11:5f:1a:89:2e:81:47:47:5e:c4: c1:46:10:4d:23:c3:cb:19:a4:15:65:30:2e:58:21:5e:7d:a1: 8f:a1:a0:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg/O1k48rj2hW+7Twh3LeEp2wS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA2MDMxNjM5MTZaFw0yNTA2MDcwMDExMTZaMDMxMTAvBgNV BAMTKDFFQUEwOEI3NThFRDE3MTAyMzg2MEQxMEFFNjRBOUE4RkE0NTE0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ll3ACKs+FTfFU/dJzoSIOQoG D/ZwVF+mr9G3vvZ5oDsFg2gtWyBNy577DLm886XfpZDg0JUucaPcs8xWvCS3/MnW H4jpPyTPaR8Bg1+hEN7AeWwLcVp3hrRMSERlZ/ruIbzhDflU0/hp1LdFVdh8tPQ1 mMVm1n4HGZEhcK9AElTUtZPA76DFtUaUvSSi3hKn+NmxodJMTxo+Yfp8GheD0uiI 7oNH85Iz1AZb8hPnYxj2XDSZCSqFF+it+XtqNnUkRwjkGUSCfDaoXY7MfsY4ILE2 I6KzXf2FwGLiP3iNzp/rR0h8b+faeVQhThPoR3ZkGM1BSVnMOzH0dlhFBMhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqoIt1jtFxAjhg0QrmSpqPpFFNcwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyqxOwpJe4tp1HtOiva6IndeaEHw7tcvqg6 YA/HSM9oLVih4G7CeCsh+stVhJ37O2cWIGwv+i3OI08pXPCVU20fzvaAbgu+HXTA l9bNqUwqJJh3E4vI8wQ+Psp83UJg2z3fu71X43523YEecw0r/9PweaRijjcY5Fa4 6aYxzlExahJubjQl9P0vt0L9SU1gfCSSgqtrMefWl6uW4K9VEQ3KgUERWZUL7KTr 3U+cyWWWT6c6N0vTJcZKhDFnCKb8V0FUIdQoCGFFoBvzxo5Av5ohxrM+MFNy//PF Wr/k56cmEV8aiS6BR0dexMFGEE0jw8sZpBVlMC5YIV59oY+hoKc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:26 2025 by rpki-client