$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: nO7RImn9Vo+dTJ82NwzAbjeg+Zl5jmrLSwOUG2TElzU= Subject key identifier: 7C:FB:05:4A:3D:09:47:D3:BB:ED:E3:37:D7:6A:FF:08:A8:55:B5:D5 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 1BEADB8A7FE07D3ED1B6315109CA5159140D2C2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 04E3 Signing time: Fri 06 Jun 2025 12:41:13 +0000 Manifest this update: Fri 06 Jun 2025 12:36:13 +0000 Manifest next update: Mon 09 Jun 2025 18:33:13 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 2: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: K9yd7igea43iPKTnGJR3HkN6gWhC9t23YmX2v2JpOz4=) 3: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: m+smJFgQDts16c5oEQ+5mQQd2jCWdjsIJsNUoSqe8t0=) 4: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: 0Z1hyixVKIjnj8ECdxc9rChwhaKXmIXyShCAYj8xZLI=) 5: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 6TEL2dsBRYwHl7j9Gt3Q8OuHg9rXDaEOjIkwVxguswU=) 6: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: gwCL3bf8ZYDEakqa3g/8jLVhUBUPIyS/P9TiFjOt9l8=) 7: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: 8zAQ86fhc8OVdskGyzWu9yQ7r5OHZaWOc1iXuXRtqpY=) 8: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: 8kPPHzXghQqLFdKgJ7XYByHPMXkLSq/gvTSF/ClNz60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ea:db:8a:7f:e0:7d:3e:d1:b6:31:51:09:ca:51:59:14:0d:2c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Jun 6 12:36:13 2025 GMT Not After : Jun 9 18:33:13 2025 GMT Subject: CN=7CFB054A3D0947D3BBEDE337D76AFF08A855B5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:01:1a:b9:2a:0b:0c:f1:c8:16:5b:c6:3b:a7: b7:e6:36:e9:19:88:b2:78:14:0b:02:47:5a:e3:d7: d6:cf:f7:ad:95:a7:82:4b:aa:92:85:f3:91:6e:18: 18:02:2d:dd:be:8a:e6:e9:8c:0f:ff:71:b5:d8:e2: 97:68:75:06:54:ec:95:6d:37:0a:5f:de:28:f3:e4: 7c:44:39:b2:85:64:c0:d8:0f:f2:8a:d3:8e:8c:ce: 2a:ec:4f:f8:ae:68:6d:be:cf:46:ed:25:77:59:87: 01:a0:0c:64:14:75:02:74:c4:a6:31:48:1a:f6:71: c0:96:3f:55:6d:0c:03:39:e4:ae:61:a7:45:e5:c9: fd:73:92:8a:36:ce:a1:01:a3:40:dd:42:d1:73:80: 2f:6e:1a:cf:b0:9b:a4:7e:64:e6:70:ff:80:0e:95: 59:60:2d:05:90:a4:86:fe:71:38:94:37:c6:54:0c: ae:77:4e:51:f8:d9:3b:60:0e:46:50:fa:ea:b5:bb: 9a:b5:db:d2:d5:c0:09:21:a2:10:f4:19:b2:7f:5a: 62:5f:11:d7:69:8d:40:0a:48:14:ea:04:8f:ec:e9: 91:f6:09:37:40:3c:f0:49:5b:bd:b6:0e:d9:66:3c: aa:55:e5:e3:63:fc:41:7e:28:e1:8e:f7:ba:06:30: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FB:05:4A:3D:09:47:D3:BB:ED:E3:37:D7:6A:FF:08:A8:55:B5:D5 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:15:c5:ee:c7:1f:cf:40:09:d2:fd:87:b7:d2:f3:31:2f: e7:b0:fb:c5:78:ee:1b:9c:21:f8:7d:ff:4f:6d:fd:f4:b5:45: 77:fe:c9:ba:d1:9a:a7:31:08:aa:6f:2f:d1:73:f4:ff:7f:3c: a6:de:49:df:d3:49:0e:8e:f4:6c:ef:37:e7:54:c3:82:30:a3: 83:6c:04:e5:a9:8d:5d:57:12:05:62:51:3f:20:54:ca:64:62: 58:b0:dc:e6:8f:7e:4b:9e:b1:ab:0f:d5:ec:4d:5d:4f:13:ed: 43:6b:bf:86:e8:af:5f:6b:eb:47:6d:c7:95:1b:a0:13:ce:0e: 17:d9:13:08:85:2e:b2:c9:54:31:e5:29:9e:0f:c0:db:21:3e: f1:42:d1:d0:16:95:43:f0:e1:66:56:59:36:b2:28:a9:3a:c5: ea:50:7b:cd:1f:81:18:31:da:42:d3:27:7b:14:fe:cb:8b:74: 49:11:00:5c:2e:8c:fa:74:03:b8:3c:af:33:9d:e6:b1:fe:6a: c2:db:ec:17:c5:7f:72:39:0f:18:1d:6d:66:8b:78:71:a6:d5: 10:e0:ee:e6:fd:2d:71:0d:68:e4:7e:81:97:67:11:90:8e:bf: 96:3e:16:e1:62:eb:b0:df:fb:fe:cb:50:5b:d6:93:97:a8:b3: b3:52:a3:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+rbin/gfT7RtjFRCcpRWRQNLC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA2MDYxMjM2MTNaFw0yNTA2MDkxODMzMTNaMDMxMTAvBgNV BAMTKDdDRkIwNTRBM0QwOTQ3RDNCQkVERTMzN0Q3NkFGRjA4QTg1NUI1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ARq5KgsM8cgWW8Y7p7fmNukZ iLJ4FAsCR1rj19bP962Vp4JLqpKF85FuGBgCLd2+iubpjA//cbXY4pdodQZU7JVt Nwpf3ijz5HxEObKFZMDYD/KK046MzirsT/iuaG2+z0btJXdZhwGgDGQUdQJ0xKYx SBr2ccCWP1VtDAM55K5hp0Xlyf1zkoo2zqEBo0DdQtFzgC9uGs+wm6R+ZOZw/4AO lVlgLQWQpIb+cTiUN8ZUDK53TlH42TtgDkZQ+uq1u5q129LVwAkhohD0GbJ/WmJf EddpjUAKSBTqBI/s6ZH2CTdAPPBJW722DtlmPKpV5eNj/EF+KOGO97oGMNrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfPsFSj0JR9O77eM312r/CKhVtdUwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcWFcXuxx/PQAnS/Ye30vMxL+ew+8V47huc Ifh9/09t/fS1RXf+ybrRmqcxCKpvL9Fz9P9/PKbeSd/TSQ6O9GzvN+dUw4Iwo4Ns BOWpjV1XEgViUT8gVMpkYliw3OaPfkuesasP1exNXU8T7UNrv4bor19r60dtx5Ub oBPODhfZEwiFLrLJVDHlKZ4PwNshPvFC0dAWlUPw4WZWWTayKKk6xepQe80fgRgx 2kLTJ3sU/suLdEkRAFwujPp0A7g8rzOd5rH+asLb7BfFf3I5DxgdbWaLeHGm1RDg 7ub9LXENaOR+gZdnEZCOv5Y+FuFi67Df+/7LUFvWk5eos7NSo7s= -----END CERTIFICATE-----Generated at Sun Jun 8 01:40:05 2025 by rpki-client