$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: eKo+Bwomje3G2d6bdGC7b8agZn/yvdphpR64CC/m7Ik= Subject key identifier: 92:FD:A3:FB:93:91:3F:67:E3:0C:30:51:0C:24:2E:A4:CD:CE:70:8A Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 043180A1F71B5ED481C81DBAF90FE24DC317247C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 022A Signing time: Sun 01 Jun 2025 09:21:14 +0000 Manifest this update: Sun 01 Jun 2025 09:16:14 +0000 Manifest next update: Wed 04 Jun 2025 19:11:14 +0000 Files and hashes: 1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: eciHTxkZmTtOd0DLtjuphtrljkeLG17SRYT7S2YuKMk=) 2: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: IYjD3PxgiLKav9unj4BHSznoEuhskywDnizT0dsAaww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 19:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:31:80:a1:f7:1b:5e:d4:81:c8:1d:ba:f9:0f:e2:4d:c3:17:24:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Jun 1 09:16:14 2025 GMT Not After : Jun 4 19:11:14 2025 GMT Subject: CN=92FDA3FB93913F67E30C30510C242EA4CDCE708A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:95:40:a5:3f:16:ff:46:75:09:db:6e:0c: cd:30:2d:71:9d:40:57:8d:95:8d:da:e4:f3:bd:d3: c5:84:52:18:29:c5:5f:24:1f:af:50:0d:fd:9f:eb: 8a:7b:5b:46:8f:0d:f5:be:5f:ac:29:cf:67:2b:4d: f9:84:bb:c0:a6:7b:0d:64:f8:0d:0e:cb:5f:1b:42: bb:bf:00:1e:df:0d:9a:26:e1:a5:3b:36:3d:fc:35: 5a:b5:9e:50:3e:58:5a:ae:23:c2:55:8b:73:b7:ca: 51:4c:9c:5d:98:59:6d:31:db:ea:7b:a8:12:d5:60: 12:57:2c:ad:7e:8b:a5:6d:d1:7c:c6:b8:2f:2c:2f: b1:fd:25:4e:02:41:4f:a2:f4:bd:96:a0:35:7e:85: 5a:ba:63:f2:17:07:0b:ba:f2:a7:7e:23:ae:5b:e8: 8f:a5:da:09:0e:17:0d:cf:e4:ce:b7:1c:85:67:14: 8e:eb:dd:80:88:26:de:51:de:3f:01:c4:cc:67:8b: db:c7:e4:44:3d:ed:6d:68:3d:0f:16:c9:df:58:da: cf:28:ff:1b:a4:33:9c:b5:fd:13:1d:8e:69:b7:92: 35:c3:db:c6:a8:ba:09:b5:47:25:4b:a6:08:27:d1: f1:15:c9:60:b9:73:84:7f:11:7e:69:f7:56:e9:01: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FD:A3:FB:93:91:3F:67:E3:0C:30:51:0C:24:2E:A4:CD:CE:70:8A X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:76:d7:e3:72:66:eb:d9:a0:73:78:63:db:7a:c2:a6:06:0e: a0:df:17:c8:45:b9:4c:9e:ff:2d:a0:b9:8d:7c:88:f6:3b:70: e8:61:39:83:84:c4:05:f9:f7:e2:a3:e7:62:a2:bc:e4:3d:4a: ae:c5:bc:1e:fa:52:d8:dc:85:fb:ee:b5:63:10:fc:76:05:45: d0:4d:d3:9a:1c:c0:34:01:03:38:84:fb:93:78:13:22:91:a2: 28:0c:54:ae:3a:1c:51:15:39:85:dd:07:26:d0:ef:00:3d:aa: 49:7b:08:f0:05:ce:45:5f:12:7c:33:85:c6:c3:2f:a8:01:ad: 87:aa:51:0e:0e:0a:c0:4c:3c:f9:cf:24:32:87:09:85:39:5a: d2:e5:de:ac:9d:79:a5:cb:d8:4f:c0:5a:1b:78:bc:45:03:e9: 3c:ca:2f:2c:1f:3f:c0:08:39:d3:ce:bb:b6:f2:24:ab:a5:f6: 7f:0e:2c:86:72:fb:12:d8:dc:3d:ca:ae:48:2b:32:d9:26:40: b6:9d:c2:41:d9:48:d5:c8:b2:5f:12:65:91:cc:eb:23:7d:af: 45:5d:4f:73:cd:49:2e:44:68:47:d9:df:e3:57:6f:51:bc:81: 6a:92:5b:33:dd:a2:77:b9:7d:05:fa:16:fb:1f:10:e3:55:27: 26:c0:66:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDGAofcbXtSByB26+Q/iTcMXJHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTA2MDEwOTE2MTRaFw0yNTA2MDQxOTExMTRaMDMxMTAvBgNV BAMTKDkyRkRBM0ZCOTM5MTNGNjdFMzBDMzA1MTBDMjQyRUE0Q0RDRTcwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Q5VApT8W/0Z1CdtuDM0wLXGd QFeNlY3a5PO908WEUhgpxV8kH69QDf2f64p7W0aPDfW+X6wpz2crTfmEu8Cmew1k +A0Oy18bQru/AB7fDZom4aU7Nj38NVq1nlA+WFquI8JVi3O3ylFMnF2YWW0x2+p7 qBLVYBJXLK1+i6Vt0XzGuC8sL7H9JU4CQU+i9L2WoDV+hVq6Y/IXBwu68qd+I65b 6I+l2gkOFw3P5M63HIVnFI7r3YCIJt5R3j8BxMxni9vH5EQ97W1oPQ8Wyd9Y2s8o /xukM5y1/RMdjmm3kjXD28aougm1RyVLpggn0fEVyWC5c4R/EX5p91bpAaQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkv2j+5ORP2fjDDBRDCQupM3OcIowHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABN21+NyZuvZoHN4Y9t6wqYGDqDfF8hFuUye /y2guY18iPY7cOhhOYOExAX59+Kj52KivOQ9Sq7FvB76UtjchfvutWMQ/HYFRdBN 05ocwDQBAziE+5N4EyKRoigMVK46HFEVOYXdBybQ7wA9qkl7CPAFzkVfEnwzhcbD L6gBrYeqUQ4OCsBMPPnPJDKHCYU5WtLl3qydeaXL2E/AWht4vEUD6TzKLywfP8AI OdPOu7byJKul9n8OLIZy+xLY3D3KrkgrMtkmQLadwkHZSNXIsl8SZZHM6yN9r0Vd T3PNSS5EaEfZ3+NXb1G8gWqSWzPdone5fQX6FvsfEONVJybAZhU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:09 2025 by rpki-client