$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: 1DGZGC0na9FN0p+jjWrXQTad/Tar9uN0iqBf8JVksWw= Subject key identifier: 4A:75:93:87:91:9B:00:99:FC:48:9C:A1:FE:A3:24:02:81:78:9E:5F Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 2CC94E0E44A8580C0C7D6F755A5DF5E34942490A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 01A7 Signing time: Sat 07 Jun 2025 02:02:18 +0000 Manifest this update: Sat 07 Jun 2025 01:57:18 +0000 Manifest next update: Tue 10 Jun 2025 10:32:18 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: l8A0dkUzSxH4N0BqHgL6AzXZfIz+kSzGW/8HoGSl7ao=) 3: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: 7Gu69zoJQlqRXdcyL3gwTt8BX8bnGWTdWe7/O0k1Njw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c9:4e:0e:44:a8:58:0c:0c:7d:6f:75:5a:5d:f5:e3:49:42:49:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Jun 7 01:57:18 2025 GMT Not After : Jun 10 10:32:18 2025 GMT Subject: CN=4A759387919B0099FC489CA1FEA3240281789E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:60:85:e5:60:90:65:0e:b8:1f:b4:bf:c8: c5:a6:76:ca:12:37:12:be:32:41:8d:8f:a1:1e:3f: 85:94:aa:b1:ae:62:55:ac:c3:46:16:9b:4c:a9:99: 83:57:bd:08:d5:3e:f6:86:ba:07:62:6e:05:1e:1f: f5:f2:f2:fb:7c:bd:19:96:54:f1:23:9d:b0:09:08: 2e:3a:a0:a1:b5:03:9e:70:bc:7d:15:c0:50:78:df: 51:ec:15:1d:b8:34:52:31:47:78:03:fa:2f:32:2e: de:4b:8b:59:09:1e:c4:4c:b5:18:38:93:f7:55:db: a2:f5:99:70:9c:2d:4f:fd:8c:6a:dd:84:de:4f:39: f6:5d:5a:77:50:2f:44:56:8d:45:0f:98:25:de:4c: 12:d1:61:a7:bc:24:58:76:d7:ea:96:17:ca:47:27: b9:5d:73:61:9d:c8:f3:46:1a:a8:91:72:30:f6:0e: 0a:27:f2:5f:bb:a1:b2:b7:0a:7d:66:6b:70:6a:92: ec:37:bd:4c:39:4e:17:a0:59:38:87:25:ab:73:b4: 0d:94:02:74:31:e1:fb:a8:69:ec:c3:77:c2:16:31: ad:c8:c9:fd:dc:3c:29:55:5b:0f:78:38:c6:68:86: ab:c8:b8:81:cc:32:a9:13:d8:64:30:d1:4c:d8:48: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:93:87:91:9B:00:99:FC:48:9C:A1:FE:A3:24:02:81:78:9E:5F X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0b:30:85:62:a8:98:47:ae:a5:3b:67:ae:0b:a7:1c:27:c8: 6b:60:3e:d0:bb:df:63:4e:36:33:c8:df:73:20:f6:94:8c:65: 03:46:f9:0e:20:1b:c2:7f:85:3f:cd:7e:2b:fe:61:a2:4b:e1: 4d:9b:b1:0a:6d:8d:43:fa:a2:ac:85:be:32:06:18:70:45:e2: ef:ff:9e:39:2c:5c:db:47:2f:10:7d:0c:2e:bd:9d:3e:2f:0d: b7:c3:5a:2f:f0:64:9b:e4:71:32:7a:9e:70:3e:7f:8d:d1:35: d4:f9:7b:7e:6d:19:90:1d:5b:0b:fc:9d:6e:25:c6:3f:da:cd: 2d:9c:e5:e7:1a:71:a9:c2:12:07:0b:95:73:0c:22:db:2b:44: bc:e7:14:02:21:7f:7b:62:4a:77:eb:fd:d8:2a:16:4f:33:dc: e8:59:55:e0:95:57:ac:c3:57:05:de:39:af:fa:2b:d5:93:85: c8:7e:88:b4:87:3d:05:e9:14:89:29:89:5d:2b:ae:e3:c8:a6: c6:74:cc:10:1b:96:41:6b:73:1f:fd:a6:20:f9:f7:9b:56:d9: 45:a3:8f:a4:9d:a8:e5:09:f9:25:1b:ae:58:22:61:f1:c2:53: 11:4b:8c:1f:2b:ab:99:92:23:ad:a5:8f:49:69:35:f2:26:cf: e5:25:7a:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMlODkSoWAwMfW91Wl3140lCSQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTA2MDcwMTU3MThaFw0yNTA2MTAxMDMyMThaMDMxMTAvBgNV BAMTKDRBNzU5Mzg3OTE5QjAwOTlGQzQ4OUNBMUZFQTMyNDAyODE3ODlFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5N2CF5WCQZQ64H7S/yMWmdsoS NxK+MkGNj6EeP4WUqrGuYlWsw0YWm0ypmYNXvQjVPvaGugdibgUeH/Xy8vt8vRmW VPEjnbAJCC46oKG1A55wvH0VwFB431HsFR24NFIxR3gD+i8yLt5Li1kJHsRMtRg4 k/dV26L1mXCcLU/9jGrdhN5POfZdWndQL0RWjUUPmCXeTBLRYae8JFh21+qWF8pH J7ldc2GdyPNGGqiRcjD2Dgon8l+7obK3Cn1ma3Bqkuw3vUw5ThegWTiHJatztA2U AnQx4fuoaezDd8IWMa3Iyf3cPClVWw94OMZohqvIuIHMMqkT2GQw0UzYSLQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSnWTh5GbAJn8SJyh/qMkAoF4nl8wHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcLMIViqJhHrqU7Z64LpxwnyGtgPtC732NO NjPI33Mg9pSMZQNG+Q4gG8J/hT/Nfiv+YaJL4U2bsQptjUP6oqyFvjIGGHBF4u// njksXNtHLxB9DC69nT4vDbfDWi/wZJvkcTJ6nnA+f43RNdT5e35tGZAdWwv8nW4l xj/azS2c5ecacanCEgcLlXMMItsrRLznFAIhf3tiSnfr/dgqFk8z3OhZVeCVV6zD VwXeOa/6K9WThch+iLSHPQXpFIkpiV0rruPIpsZ0zBAblkFrcx/9piD595tW2UWj j6SdqOUJ+SUbrlgiYfHCUxFLjB8rq5mSI62lj0lpNfImz+Uleqo= -----END CERTIFICATE-----Generated at Sat Jun 7 12:03:56 2025 by rpki-client