$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: WPmdEyCnG7EQfu+3LiNdTH+iF4TJOxJGp+4WstwFU94= Subject key identifier: 5A:9E:0A:BB:C1:8C:6D:6C:7A:21:21:13:DB:8E:7F:F6:DE:82:9E:D7 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 43A4166EC1795E9B10B808F1E62D2F436E5644FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 02E8 Signing time: Sun 01 Jun 2025 18:51:37 +0000 Manifest this update: Sun 01 Jun 2025 18:46:37 +0000 Manifest next update: Wed 04 Jun 2025 23:42:37 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: 0bVqeMnECCyNR7eBNJ3xMMiXVrqEpIHqfHrQ232boqg=) 2: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: i+gbmLv/cDTRzVSCU7nzrBuTZdrg904knWZTmS6Nm1M=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: rW2LU9K/rfb3qygTA6381vvcBFybx4fuXGfuXbWXxfQ=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /BdahLT6vSLpuEBY3+9TOtbzLb267nsMd1TmGCjkxzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 23:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:16:6e:c1:79:5e:9b:10:b8:08:f1:e6:2d:2f:43:6e:56:44:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Jun 1 18:46:37 2025 GMT Not After : Jun 4 23:42:37 2025 GMT Subject: CN=5A9E0ABBC18C6D6C7A212113DB8E7FF6DE829ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:38:0e:12:59:8e:62:14:96:4e:56:9a:49: a7:df:d3:39:c8:0f:2b:d7:67:dc:79:07:30:07:63: e5:2d:84:4f:d5:0b:9b:a0:6a:ab:d8:56:50:9c:fd: cb:7e:e6:51:66:ac:e3:39:a5:e2:3c:2c:34:e1:dc: ca:ad:b4:6a:af:22:0d:38:25:8b:4c:6f:c2:5b:bb: 57:80:37:45:23:88:93:da:a4:79:7b:df:b9:72:20: 30:7c:5a:fb:4f:aa:c2:6c:d5:f1:29:b6:0b:7f:da: 81:d2:60:8e:2d:50:87:9f:9e:9b:43:a4:ce:ee:26: db:f1:d0:90:f9:d3:cf:aa:68:94:28:13:64:3c:8e: 6f:14:9f:8f:69:56:18:d9:82:76:9b:b1:5a:c7:72: c4:41:81:04:e2:7b:6c:9c:27:02:4b:f2:63:58:75: ed:83:f0:0f:39:67:9e:d3:c8:75:b8:7e:b3:b8:ca: 0f:fb:61:da:40:16:52:81:48:f1:b5:87:dd:36:fc: ea:73:b5:54:a9:9f:ad:40:3d:c2:94:f5:00:63:e0: 76:c5:cb:20:6c:5d:c5:11:b6:2c:30:d9:94:d0:b2: 54:83:25:3a:9a:96:03:01:9b:e7:a0:b4:a1:72:55: f8:48:fa:05:54:d3:c8:6e:96:52:a5:83:d7:d0:24: 67:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9E:0A:BB:C1:8C:6D:6C:7A:21:21:13:DB:8E:7F:F6:DE:82:9E:D7 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b6:82:64:54:b7:82:4c:d4:53:a3:96:06:4a:76:90:d9:23: 8d:c6:7b:74:f6:9d:39:a6:b2:db:97:9f:86:bf:9f:48:a2:42: 1e:02:1c:2c:16:9f:64:aa:00:3e:94:72:17:40:b8:74:f6:00: 58:3a:6f:46:e9:5b:e3:d4:0e:e2:3b:7b:82:bc:f5:cf:00:5a: 7f:28:91:7b:c4:e0:b8:e8:94:44:30:df:cd:a4:1f:11:a7:a4: ef:e8:2e:b5:90:10:70:7e:1b:dd:ae:b3:c1:57:e7:d3:27:7c: 83:35:3f:9f:ef:aa:e8:40:51:7c:fa:b9:b8:6d:d1:ba:8a:d5: 9a:50:95:4f:9c:4d:70:20:f6:67:1c:48:7a:b8:9d:16:a6:5c: cb:2e:68:a9:0d:30:d5:38:2d:7f:e4:8b:2b:db:bf:06:44:f3: ae:0f:15:23:35:b6:82:85:5e:09:0b:54:b4:94:e8:47:02:57: 77:a9:09:23:63:95:9e:f2:65:a3:81:ad:3c:47:37:92:52:7b: cb:cf:b2:65:d9:c5:8f:b4:07:75:48:9a:b4:e0:17:5f:6e:de: 86:ca:80:80:06:4a:3a:17:73:ef:59:d3:01:46:de:c9:b1:4b: ba:41:03:82:b8:c5:89:c3:52:23:95:bf:b8:57:f0:f2:f8:c4: 5b:7f:78:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6QWbsF5XpsQuAjx5i0vQ25WRPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA2MDExODQ2MzdaFw0yNTA2MDQyMzQyMzdaMDMxMTAvBgNV BAMTKDVBOUUwQUJCQzE4QzZENkM3QTIxMjExM0RCOEU3RkY2REU4MjlFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChTgOElmOYhSWTlaaSaff0znI DyvXZ9x5BzAHY+UthE/VC5ugaqvYVlCc/ct+5lFmrOM5peI8LDTh3MqttGqvIg04 JYtMb8Jbu1eAN0UjiJPapHl737lyIDB8WvtPqsJs1fEptgt/2oHSYI4tUIefnptD pM7uJtvx0JD508+qaJQoE2Q8jm8Un49pVhjZgnabsVrHcsRBgQTie2ycJwJL8mNY de2D8A85Z57TyHW4frO4yg/7YdpAFlKBSPG1h902/OpztVSpn61APcKU9QBj4HbF yyBsXcURtiww2ZTQslSDJTqalgMBm+egtKFyVfhI+gVU08hullKlg9fQJGfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp4Ku8GMbWx6ISET245/9t6CntcwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIa2gmRUt4JM1FOjlgZKdpDZI43Ge3T2nTmm stuXn4a/n0iiQh4CHCwWn2SqAD6UchdAuHT2AFg6b0bpW+PUDuI7e4K89c8AWn8o kXvE4LjolEQw382kHxGnpO/oLrWQEHB+G92us8FX59MnfIM1P5/vquhAUXz6ubht 0bqK1ZpQlU+cTXAg9mccSHq4nRamXMsuaKkNMNU4LX/kiyvbvwZE864PFSM1toKF XgkLVLSU6EcCV3epCSNjlZ7yZaOBrTxHN5JSe8vPsmXZxY+0B3VImrTgF19u3obK gIAGSjoXc+9Z0wFG3smxS7pBA4K4xYnDUiOVv7hX8PL4xFt/ePQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:35 2025 by rpki-client