$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: NkGxdlaL3auR+L0k4y+eVJ4zxZw3vSH1LEWJizZfxO0= Subject key identifier: 31:5D:04:A6:23:BF:D1:EC:75:89:32:99:6F:F8:C3:9A:CD:28:E6:CF Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 20D32D3FB329DE51A26786B03C1D0EE1602B084F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 0131 Signing time: Thu 05 Jun 2025 17:20:47 +0000 Manifest this update: Thu 05 Jun 2025 17:15:47 +0000 Manifest next update: Sun 08 Jun 2025 17:34:47 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: xMdFCWuuyD6nJGN4hwkhGULEpZwt6uo10pQ6MCGfWcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 17:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d3:2d:3f:b3:29:de:51:a2:67:86:b0:3c:1d:0e:e1:60:2b:08:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Jun 5 17:15:47 2025 GMT Not After : Jun 8 17:34:47 2025 GMT Subject: CN=315D04A623BFD1EC758932996FF8C39ACD28E6CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:47:8d:ad:ef:ad:e7:2d:74:85:84:fa:55:da: 4f:6e:78:bb:94:b0:2b:ff:24:30:2a:a1:0d:c2:ec: 00:7d:08:10:68:d5:75:c1:5a:bf:d1:6f:1b:a6:22: 74:62:a6:02:3d:a2:1f:ab:41:c2:cb:67:ed:ec:07: 9a:30:e1:3c:90:36:6c:c6:10:29:45:1c:70:c9:94: 9a:95:87:d8:6d:8a:c2:43:61:95:81:df:77:37:33: b4:eb:6e:ed:bd:64:53:71:39:59:af:e4:79:25:2e: 28:a5:62:ca:ec:74:04:88:76:bc:2f:d4:86:b1:6d: c2:8f:0b:d6:bf:74:8c:80:01:e6:c0:42:40:11:03: 9d:cf:1f:db:ce:39:91:8b:95:05:97:24:23:18:16: 14:97:ae:2f:8a:3b:42:32:89:7c:c7:ec:7b:b5:6c: 0b:be:0e:29:92:b0:a8:90:bd:88:6c:3e:27:5c:ca: b9:92:2f:ef:14:d9:78:95:22:a5:ef:c0:d2:60:d6: 00:af:8e:9e:8b:ec:37:a1:11:75:ea:6d:3f:84:7d: 11:5f:c3:f1:fd:2c:e4:92:89:00:d5:50:30:d6:64: 8d:2e:92:a8:29:8b:7c:2b:70:a1:1e:3e:aa:74:41: d7:16:5f:ed:0f:bd:c6:68:44:2d:1a:cd:1c:fa:8e: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:04:A6:23:BF:D1:EC:75:89:32:99:6F:F8:C3:9A:CD:28:E6:CF X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7c:fd:a0:77:11:24:b7:09:2d:ce:86:50:66:95:f6:81:4a: cc:77:c6:07:32:b7:87:e0:da:da:0d:4f:d5:60:a8:67:e9:3f: 34:1d:1f:60:c0:d7:35:3a:97:a8:77:6b:8b:f4:87:0f:65:4d: 43:7c:fb:fe:d6:46:55:45:52:8c:19:9e:7e:51:6b:8e:af:d2: 18:0c:6f:4b:39:0e:f6:85:8b:ca:bd:50:29:35:0b:cf:cc:26: b3:89:e7:44:00:8c:87:97:fd:bf:54:ed:57:98:57:1c:e3:a8: 0f:c4:bf:d8:e3:d5:14:bf:a0:36:29:aa:bd:03:65:7b:a9:14: 32:3a:ae:b8:57:32:a3:b3:60:d0:6e:63:4f:d1:a7:8a:e8:a1: ef:76:7e:d0:b3:11:93:05:0e:71:e5:52:b1:eb:35:c1:52:95: b4:21:7f:ec:ec:f2:31:8e:3d:00:6b:8a:34:0f:2e:80:b1:86: 35:5e:11:53:e2:7d:23:ed:53:0b:5c:7e:f5:00:c5:ad:98:7a: cc:0a:5e:cd:72:ca:bf:58:00:ca:b1:f3:85:9e:3c:da:e0:dc: 78:0f:29:3d:e8:86:c8:c8:93:68:0b:c9:b4:04:be:d4:fc:5c: 87:7d:b8:58:c3:ee:18:cd:45:9f:35:5e:80:2e:9d:eb:56:54: b8:2c:8b:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINMtP7Mp3lGiZ4awPB0O4WArCE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTA2MDUxNzE1NDdaFw0yNTA2MDgxNzM0NDdaMDMxMTAvBgNV BAMTKDMxNUQwNEE2MjNCRkQxRUM3NTg5MzI5OTZGRjhDMzlBQ0QyOEU2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlR42t763nLXSFhPpV2k9ueLuU sCv/JDAqoQ3C7AB9CBBo1XXBWr/RbxumInRipgI9oh+rQcLLZ+3sB5ow4TyQNmzG EClFHHDJlJqVh9htisJDYZWB33c3M7Trbu29ZFNxOVmv5HklLiilYsrsdASIdrwv 1IaxbcKPC9a/dIyAAebAQkARA53PH9vOOZGLlQWXJCMYFhSXri+KO0IyiXzH7Hu1 bAu+DimSsKiQvYhsPidcyrmSL+8U2XiVIqXvwNJg1gCvjp6L7DehEXXqbT+EfRFf w/H9LOSSiQDVUDDWZI0ukqgpi3wrcKEePqp0QdcWX+0PvcZoRC0azRz6jm2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMV0EpiO/0ex1iTKZb/jDms0o5s8wHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN8/aB3ESS3CS3OhlBmlfaBSsx3xgcyt4fg 2toNT9VgqGfpPzQdH2DA1zU6l6h3a4v0hw9lTUN8+/7WRlVFUowZnn5Ra46v0hgM b0s5DvaFi8q9UCk1C8/MJrOJ50QAjIeX/b9U7VeYVxzjqA/Ev9jj1RS/oDYpqr0D ZXupFDI6rrhXMqOzYNBuY0/Rp4rooe92ftCzEZMFDnHlUrHrNcFSlbQhf+zs8jGO PQBrijQPLoCxhjVeEVPifSPtUwtcfvUAxa2YeswKXs1yyr9YAMqx84WePNrg3HgP KT3ohsjIk2gLybQEvtT8XId9uFjD7hjNRZ81XoAunetWVLgsixg= -----END CERTIFICATE-----Generated at Sat Jun 7 03:59:10 2025 by rpki-client