$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: FuqQAQJmYv3Ubvr62p9gk118W9isT59fAGsDmvR1MII= Subject key identifier: 2B:6A:00:CD:6A:7A:A6:27:B5:0E:C9:CA:81:6A:78:56:0B:55:BC:63 Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 6F42C5D7B15C5A46EC4BE99910D025EC9F85EA70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 01CC Signing time: Tue 03 Jun 2025 13:06:54 +0000 Manifest this update: Tue 03 Jun 2025 13:01:54 +0000 Manifest next update: Fri 06 Jun 2025 16:36:54 +0000 Files and hashes: 1: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 2: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: qODIBQA2Ggqm7AcmQZ2gqIvB0SNb1v/BfuYOMWTt1c0=) 3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 4: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:42:c5:d7:b1:5c:5a:46:ec:4b:e9:99:10:d0:25:ec:9f:85:ea:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Jun 3 13:01:54 2025 GMT Not After : Jun 6 16:36:54 2025 GMT Subject: CN=2B6A00CD6A7AA627B50EC9CA816A78560B55BC63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:86:6d:03:8b:a1:e8:29:7f:72:fa:d6:60: 37:23:b3:6d:b8:34:ab:40:59:dd:67:12:e5:1a:15: 3a:77:af:2a:01:05:96:f4:85:ad:be:b8:be:59:02: e7:85:89:45:41:9b:83:1e:c5:2a:98:9c:6c:be:9b: bf:ad:83:c0:e4:59:cc:17:bc:2c:a8:2e:d1:41:8a: 00:08:9b:fc:66:7c:5e:a6:e3:06:ca:cf:bc:5a:fa: d9:84:be:21:ef:48:c2:44:14:79:21:40:f3:8f:c4: 16:4b:7f:8b:7c:51:94:0a:5d:c8:1b:2b:c3:38:ad: df:1a:6c:08:96:9b:f6:e2:9f:df:3b:db:97:35:a5: 02:69:c2:d4:fa:a1:2e:d5:67:8b:87:c0:7b:53:49: 89:2a:5c:43:f6:6c:79:b7:0e:34:32:32:84:f2:11: e3:42:33:e6:c2:a7:4c:49:3d:c1:9b:8e:1c:a7:24: 04:2a:14:1f:7f:0c:d5:ca:07:c1:4c:52:63:e7:9e: 4d:bb:e8:5f:5c:5f:30:8c:aa:22:04:71:a4:4a:6d: 07:5b:69:5d:6c:09:80:6d:7b:ce:a7:55:ef:ef:e6: 82:25:d0:f6:a8:63:e2:47:cd:e2:93:7a:4a:00:43: fe:c9:72:db:19:c2:6f:81:21:8a:19:49:70:ee:23: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:00:CD:6A:7A:A6:27:B5:0E:C9:CA:81:6A:78:56:0B:55:BC:63 X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:81:06:d7:59:9d:96:61:fd:62:d5:39:aa:99:5c:fb:8f:1a: e2:fb:eb:5b:6c:3b:33:0f:43:0b:f5:da:a2:dd:b6:ec:1b:97: 7e:68:d3:3f:f9:85:38:ba:ec:da:ff:d5:28:eb:86:af:c8:ce: c4:68:df:08:a2:23:2c:62:c6:db:08:99:aa:f0:f6:1d:e3:0a: 14:bb:7f:cc:82:71:a9:04:c7:9d:8a:65:7c:77:20:9f:88:03: 27:5f:96:e6:29:a5:cb:1c:75:6e:f9:c4:25:e6:7e:63:f7:22: 04:b6:72:78:64:2a:79:be:49:9d:ed:45:cb:f7:84:91:8a:10: 4e:30:37:17:c5:1d:98:20:da:3d:5d:dc:f8:3d:a2:96:ff:ed: 0d:6e:3c:af:27:af:92:46:f0:66:d5:c4:f6:a0:a1:43:f6:bc: 79:dd:9a:24:0f:d8:27:b1:09:07:9c:b6:ba:dc:b9:cb:47:8b: 53:97:0c:8d:a7:d9:30:66:39:d1:ae:68:0d:f3:b2:83:b3:2d: d5:99:8a:4e:71:bb:9e:ba:f8:ea:de:61:47:17:3c:47:b6:d0: f3:cb:09:b5:a8:d9:6f:f8:28:bf:6a:da:af:0d:98:f6:9a:55: 54:f9:1e:67:29:6b:29:f6:f4:31:27:87:86:14:d7:83:26:6f: 4e:eb:db:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0LF17FcWkbsS+mZENAl7J+F6nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTA2MDMxMzAxNTRaFw0yNTA2MDYxNjM2NTRaMDMxMTAvBgNV BAMTKDJCNkEwMENENkE3QUE2MjdCNTBFQzlDQTgxNkE3ODU2MEI1NUJDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2IZtA4uh6Cl/cvrWYDcjs224 NKtAWd1nEuUaFTp3ryoBBZb0ha2+uL5ZAueFiUVBm4MexSqYnGy+m7+tg8DkWcwX vCyoLtFBigAIm/xmfF6m4wbKz7xa+tmEviHvSMJEFHkhQPOPxBZLf4t8UZQKXcgb K8M4rd8abAiWm/bin98725c1pQJpwtT6oS7VZ4uHwHtTSYkqXEP2bHm3DjQyMoTy EeNCM+bCp0xJPcGbjhynJAQqFB9/DNXKB8FMUmPnnk276F9cXzCMqiIEcaRKbQdb aV1sCYBte86nVe/v5oIl0PaoY+JHzeKTekoAQ/7JctsZwm+BIYoZSXDuI8k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2oAzWp6pie1DsnKgWp4VgtVvGMwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiBBtdZnZZh/WLVOaqZXPuPGuL761tsOzMP Qwv12qLdtuwbl35o0z/5hTi67Nr/1Sjrhq/IzsRo3wiiIyxixtsImarw9h3jChS7 f8yCcakEx52KZXx3IJ+IAydfluYppcscdW75xCXmfmP3IgS2cnhkKnm+SZ3tRcv3 hJGKEE4wNxfFHZgg2j1d3Pg9opb/7Q1uPK8nr5JG8GbVxPagoUP2vHndmiQP2Cex CQectrrcuctHi1OXDI2n2TBmOdGuaA3zsoOzLdWZik5xu566+OreYUcXPEe20PPL CbWo2W/4KL9q2q8NmPaaVVT5Hmcpayn29DEnh4YU14Mmb07r20I= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:14 2025 by rpki-client