$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: N95cW0maW/FezrtckZErW8Ph36Pz/try6Eh5UkFdqe8= Subject key identifier: E0:53:F6:16:B7:0C:9F:CC:5F:BF:05:C9:32:38:1E:58:BF:5E:31:26 Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 4B924AC929541B77C64DE9EAF724078D85502ED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 01C6 Signing time: Sun 01 Jun 2025 21:51:51 +0000 Manifest this update: Sun 01 Jun 2025 21:46:51 +0000 Manifest next update: Thu 05 Jun 2025 02:00:51 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: k7X14J+QdS7MEz6uDJt6u3xkxSH91jVPDLJqXdryTNc=) 2: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: WIxLJXZwDuqrCRYhO2nULFcD43kpUmKnqhSGMjjh754=) 3: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: /BAWrcQPac6z7r0Aw+CQfRooZAASQixIkDdl1c+PelY=) 4: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: zLfKDuc3jNTwhPewKCkQdrraOM+o8tM8JoTok2PPCpE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:92:4a:c9:29:54:1b:77:c6:4d:e9:ea:f7:24:07:8d:85:50:2e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Jun 1 21:46:51 2025 GMT Not After : Jun 5 02:00:51 2025 GMT Subject: CN=E053F616B70C9FCC5FBF05C932381E58BF5E3126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:37:99:3a:f6:95:44:9c:44:b6:3b:3c:9b: 2e:b7:36:3e:34:c6:26:6d:92:d9:74:06:7f:ca:98: 4e:06:b7:92:73:fa:7c:5f:a0:e0:ff:63:0d:d1:df: b1:7c:30:27:ad:b9:ad:50:bc:34:e6:62:10:63:c4: 3a:cb:b1:2f:9b:40:c4:6f:cb:02:82:eb:2e:63:91: b6:35:5c:af:ea:09:32:09:bc:ae:95:b8:c3:51:cc: d3:af:6b:dd:94:e9:71:00:aa:97:73:0e:f5:e2:39: bc:d4:ab:5c:a8:70:5f:06:8c:63:5a:27:9a:23:8b: 1d:60:2d:9f:5f:75:81:52:4f:87:d7:9f:8b:62:e4: 48:2f:76:f1:09:df:ad:d7:da:b3:73:ed:15:96:12: 94:df:f0:68:39:03:89:cb:9d:c2:69:2d:3b:a7:b6: 08:cd:d6:c6:65:db:05:a5:47:2a:a4:dc:de:f8:02: 77:2e:d7:69:43:d7:1c:18:39:cc:97:9c:d8:b2:15: 00:de:40:3a:c3:82:95:25:2b:90:cd:a6:72:ab:87: 63:74:eb:8d:0c:38:07:1a:5a:58:bf:d9:fb:f0:dc: bf:d0:f3:52:e2:d9:a6:e5:d2:56:ff:9c:5a:3d:5e: 56:0f:60:6f:cc:3d:fd:4b:bf:c5:78:5a:d1:dd:1d: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:53:F6:16:B7:0C:9F:CC:5F:BF:05:C9:32:38:1E:58:BF:5E:31:26 X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:38:3d:93:fd:8f:33:06:4d:70:81:51:65:68:de:2b:4f:f4: ca:cc:80:2b:49:67:2c:dc:51:6c:c2:a5:dd:76:7a:e1:60:97: c4:76:f9:a5:44:8f:f0:82:68:6f:aa:21:d5:87:3e:df:67:1d: d7:4b:31:8d:81:f2:fc:49:1b:8b:4b:7a:c7:17:8e:8c:11:91: 1d:99:f1:74:f4:10:a9:c0:5a:7c:24:88:ee:ab:60:b0:0a:ce: 9b:e9:27:c0:80:a3:b1:85:50:0a:d1:f7:a0:63:c0:03:7e:42: 54:92:71:45:46:d9:7b:6e:55:26:e2:9f:50:8b:4a:b2:9c:56: 96:c1:82:81:91:1c:79:c1:6b:db:d9:85:8f:83:5a:6a:7c:31: 5f:96:08:d1:33:77:64:27:15:49:95:a3:65:d3:7a:02:9c:02: c1:70:e2:0d:50:55:dd:5e:bd:bf:bf:f5:40:af:e5:3b:72:2b: 58:7f:72:71:1a:3a:b5:37:7e:21:f3:54:ed:92:45:36:b0:a6: 2c:95:89:c1:2b:b7:60:c4:cc:1c:fb:15:ab:12:6f:5e:c5:5a: fd:be:41:4d:af:00:ec:66:38:ae:6f:3b:67:ab:a9:f8:47:0c: 66:ea:65:31:dd:19:83:7a:bc:c1:b4:d0:97:25:bd:fd:4b:12: 32:14:60:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5JKySlUG3fGTenq9yQHjYVQLtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNTA2MDEyMTQ2NTFaFw0yNTA2MDUwMjAwNTFaMDMxMTAvBgNV BAMTKEUwNTNGNjE2QjcwQzlGQ0M1RkJGMDVDOTMyMzgxRTU4QkY1RTMxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzDeZOvaVRJxEtjs8my63Nj40 xiZtktl0Bn/KmE4Gt5Jz+nxfoOD/Yw3R37F8MCetua1QvDTmYhBjxDrLsS+bQMRv ywKC6y5jkbY1XK/qCTIJvK6VuMNRzNOva92U6XEAqpdzDvXiObzUq1yocF8GjGNa J5ojix1gLZ9fdYFST4fXn4ti5EgvdvEJ363X2rNz7RWWEpTf8Gg5A4nLncJpLTun tgjN1sZl2wWlRyqk3N74Ancu12lD1xwYOcyXnNiyFQDeQDrDgpUlK5DNpnKrh2N0 640MOAcaWli/2fvw3L/Q81Li2abl0lb/nFo9XlYPYG/MPf1Lv8V4WtHdHUH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4FP2FrcMn8xfvwXJMjgeWL9eMSYwHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMg4PZP9jzMGTXCBUWVo3itP9MrMgCtJZyzc UWzCpd12euFgl8R2+aVEj/CCaG+qIdWHPt9nHddLMY2B8vxJG4tLescXjowRkR2Z 8XT0EKnAWnwkiO6rYLAKzpvpJ8CAo7GFUArR96BjwAN+QlSScUVG2XtuVSbin1CL SrKcVpbBgoGRHHnBa9vZhY+DWmp8MV+WCNEzd2QnFUmVo2XTegKcAsFw4g1QVd1e vb+/9UCv5TtyK1h/cnEaOrU3fiHzVO2SRTawpiyVicErt2DEzBz7FasSb17FWv2+ QU2vAOxmOK5vO2erqfhHDGbqZTHdGYN6vMG00Jclvf1LEjIUYLg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:31 2025 by rpki-client