$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: OoSfN+fpkDI2mOL0DyO4EE8fv5yoBsNbSwcM8MdbxTU= Subject key identifier: 8B:23:37:E8:34:1B:D6:16:5A:36:52:62:AA:20:A0:4F:EC:EB:A7:06 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 5DBFD0A479E99F4A03472135D7C3D4948F0EAA82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 12:40:34 +0000 Manifest this update: Fri 06 Jun 2025 12:35:34 +0000 Manifest next update: Mon 09 Jun 2025 12:57:34 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) 3: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 4: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: fKnH0O6jXvNL6jCvK+taPVZ5eDjwaJRiBmvCw6I7rto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bf:d0:a4:79:e9:9f:4a:03:47:21:35:d7:c3:d4:94:8f:0e:aa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Jun 6 12:35:34 2025 GMT Not After : Jun 9 12:57:34 2025 GMT Subject: CN=8B2337E8341BD6165A365262AA20A04FECEBA706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:30:39:aa:0c:5c:85:6e:8e:71:0e:92:64:18: 4b:b6:b9:25:3e:99:67:e9:4c:15:0b:8c:cc:59:7a: 2e:07:5a:04:f6:8b:5e:28:ee:25:b6:4a:f4:89:e6: 29:b6:2a:b5:80:2d:ed:de:86:fc:6f:5c:2b:43:82: 86:89:4b:e6:fd:fc:24:7e:22:e0:5c:97:0a:dc:32: d5:d7:6e:b5:14:04:23:27:0c:83:a2:18:34:74:90: f4:48:59:a2:06:74:1d:95:34:5a:4e:78:4f:0b:d4: ce:2c:3f:59:83:3f:26:4c:07:ea:bb:6e:50:ba:11: 8e:16:a7:ca:f7:5e:39:06:f1:59:82:56:13:45:cd: 2a:18:c0:5a:b9:0f:32:3b:d4:d3:6e:23:21:59:57: b5:ac:6d:17:2e:ff:0b:f3:7e:59:e3:b2:cf:d8:0e: f0:4b:1a:98:18:53:22:cd:e7:2b:e4:bd:e6:f0:41: 03:0d:8c:2f:da:28:c1:6c:58:72:0f:23:cd:32:81: 57:d8:1c:88:3b:cd:f8:a4:f9:ff:15:0c:4e:77:89: 72:0a:73:46:aa:b6:2c:8a:55:d3:ae:45:fa:27:54: 12:37:f8:fe:39:7b:a7:1f:ce:41:9f:a8:dc:47:6b: 4b:6c:66:ea:4d:b2:e8:f7:72:1f:7e:4c:66:84:be: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:23:37:E8:34:1B:D6:16:5A:36:52:62:AA:20:A0:4F:EC:EB:A7:06 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:71:29:f1:bf:66:7e:da:ec:53:26:70:a3:fd:c7:2a:80:3d: 98:25:6c:73:21:03:ec:d6:88:bb:ab:e0:c3:df:7d:ae:4f:7b: 14:d3:ba:e2:4b:d6:b1:b9:4c:35:68:74:1e:1e:89:d0:40:14: f8:29:70:5a:54:a8:6f:5e:ed:96:b2:20:fd:7c:d7:32:eb:40: 83:e3:03:16:d2:f8:e0:e3:04:9a:2a:f7:d4:0b:5b:42:49:6c: ae:d8:10:b8:1a:72:ab:05:de:47:65:17:46:09:18:1f:65:d2: ac:1f:7a:54:2e:dc:32:01:a9:64:58:93:4d:86:f3:1f:06:51: 8d:ac:37:2a:7f:f8:07:7b:23:59:20:15:ae:48:3a:c3:84:b9: 23:6f:56:16:e7:c7:c4:c7:7b:43:97:df:65:e8:97:84:54:e0: 6f:ab:85:c0:f1:cc:93:31:9d:b4:70:0d:32:f4:37:a0:dd:96: e6:86:d9:a2:88:f3:87:bd:f3:bb:24:24:8a:d9:e8:1c:c4:67: bf:e7:fb:62:3c:10:98:51:c6:0b:69:6d:9d:ef:49:b8:45:e0: c8:1f:a4:88:e2:81:35:ba:7d:cf:f4:9a:fc:a6:21:57:2c:da: 27:58:7e:0b:8b:f8:34:e8:a3:06:58:42:e5:3f:34:a9:36:ac: 41:da:ae:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXb/QpHnpn0oDRyE118PUlI8OqoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTA2MDYxMjM1MzRaFw0yNTA2MDkxMjU3MzRaMDMxMTAvBgNV BAMTKDhCMjMzN0U4MzQxQkQ2MTY1QTM2NTI2MkFBMjBBMDRGRUNFQkE3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmMDmqDFyFbo5xDpJkGEu2uSU+ mWfpTBULjMxZei4HWgT2i14o7iW2SvSJ5im2KrWALe3ehvxvXCtDgoaJS+b9/CR+ IuBclwrcMtXXbrUUBCMnDIOiGDR0kPRIWaIGdB2VNFpOeE8L1M4sP1mDPyZMB+q7 blC6EY4Wp8r3XjkG8VmCVhNFzSoYwFq5DzI71NNuIyFZV7WsbRcu/wvzflnjss/Y DvBLGpgYUyLN5yvkvebwQQMNjC/aKMFsWHIPI80ygVfYHIg7zfik+f8VDE53iXIK c0aqtiyKVdOuRfonVBI3+P45e6cfzkGfqNxHa0tsZupNsuj3ch9+TGaEvrgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiyM36DQb1hZaNlJiqiCgT+zrpwYwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5xKfG/Zn7a7FMmcKP9xyqAPZglbHMhA+zW iLur4MPffa5PexTTuuJL1rG5TDVodB4eidBAFPgpcFpUqG9e7ZayIP181zLrQIPj AxbS+ODjBJoq99QLW0JJbK7YELgacqsF3kdlF0YJGB9l0qwfelQu3DIBqWRYk02G 8x8GUY2sNyp/+Ad7I1kgFa5IOsOEuSNvVhbnx8THe0OX32Xol4RU4G+rhcDxzJMx nbRwDTL0N6DdluaG2aKI84e987skJIrZ6BzEZ7/n+2I8EJhRxgtpbZ3vSbhF4Mgf pIjigTW6fc/0mvymIVcs2idYfguL+DToowZYQuU/NKk2rEHariA= -----END CERTIFICATE-----Generated at Sat Jun 7 05:23:40 2025 by rpki-client