$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: J4QLihQE89XbtoUA9ZBrt64EEvuAOOKtf9x6JJdCmss= Subject key identifier: 09:38:10:57:9E:06:D8:1F:98:17:2B:30:83:B1:54:EA:2E:4C:BE:5E Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 70894EB37D177EB7CBDFEE5A92FCF9F30DE7E161 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 019A Signing time: Sat 07 Jun 2025 01:51:07 +0000 Manifest this update: Sat 07 Jun 2025 01:46:07 +0000 Manifest next update: Tue 10 Jun 2025 11:36:07 +0000 Files and hashes: 1: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: J8hK76n9jAxJfoZwmgnUWZPJmdbHYnBHcHNL1o/2t5w=) 2: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: ZCV9DdfuN/6IEhlDqfG6uMvgNY4RO8RZPwryaGyLtc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:89:4e:b3:7d:17:7e:b7:cb:df:ee:5a:92:fc:f9:f3:0d:e7:e1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Jun 7 01:46:07 2025 GMT Not After : Jun 10 11:36:07 2025 GMT Subject: CN=093810579E06D81F98172B3083B154EA2E4CBE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:bd:d6:8b:69:18:2e:9b:87:32:d0:25:38: 3b:ad:50:91:c5:8b:1c:6b:9c:a8:03:70:df:6c:12: 28:ca:ba:a1:04:8c:8f:13:70:f6:24:c1:4f:21:3b: 0a:71:ec:71:f3:3f:5b:0a:4e:1d:88:2d:41:8d:ac: 6b:8e:70:54:a1:82:ff:25:f4:db:0b:8d:ec:52:2d: 89:89:10:d2:42:08:7e:e2:23:38:41:96:66:24:33: 59:94:17:0a:51:4c:fa:27:a1:a4:1e:bb:64:4d:a6: 10:85:b7:25:53:a8:88:71:07:94:16:cd:72:3a:a1: f3:59:ec:7a:83:73:10:15:c7:44:43:fd:aa:1e:d8: 32:ba:d0:64:cf:60:58:c6:cc:03:39:39:f5:a5:5f: c9:12:38:e9:88:b0:26:79:45:29:fe:d2:6e:42:ff: 61:6e:54:91:77:11:bd:be:32:af:a7:14:9b:85:28: 8c:81:31:66:9b:7d:5f:06:d5:a4:4c:8d:7e:bf:f7: 59:d2:bf:71:aa:57:25:7b:8e:bb:56:52:63:c6:7d: 12:ae:92:31:f6:16:d3:5e:62:9a:6b:39:66:1d:34: 5d:70:a0:ec:d4:9a:6b:b3:89:c6:cd:87:97:d0:16: 6a:7e:91:80:78:59:61:b5:78:7a:86:5d:b1:16:a4: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:38:10:57:9E:06:D8:1F:98:17:2B:30:83:B1:54:EA:2E:4C:BE:5E X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:96:fc:51:d8:90:88:f2:af:a9:a1:88:ff:c9:d7:a9:86: 6a:8d:a3:ef:e0:34:6c:3f:5e:66:32:e2:dc:60:02:d1:57:40: a4:76:97:db:4d:b8:16:49:9d:07:49:8c:ff:d2:25:c7:5b:ad: 11:d0:2e:19:68:4b:c1:34:00:0a:b7:7b:39:5a:42:7d:92:cb: 88:43:f0:51:38:7e:6e:86:d6:7f:80:60:a2:bb:a6:78:c9:e7: 8d:4e:8d:98:91:6c:65:7a:34:fd:07:28:0f:16:29:ae:18:0f: 86:14:37:b3:36:6b:0a:4a:d2:91:13:12:08:d3:5b:af:26:b5: 20:6d:6f:49:cd:33:61:c6:a7:66:03:5f:6e:03:cb:14:04:20: a7:3b:46:ff:f2:4b:37:fd:0e:31:ba:0b:c2:24:85:c2:87:29: 81:1a:8f:87:94:5e:f1:b9:f0:a5:ad:69:1b:8b:86:51:6b:f1: 61:54:2a:b9:38:12:05:a6:b9:a3:0e:b1:8f:b1:1c:5e:f9:4e: a6:9f:72:0a:6a:b0:71:78:f9:0b:55:3a:ad:ab:35:69:63:90: b2:fb:6c:20:9d:6f:20:66:ab:03:9b:7b:a3:0b:8b:68:8a:74: b5:ee:f2:31:8c:d1:e2:81:c4:23:94:81:8f:37:ae:2a:9e:85: 2a:94:1f:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIlOs30XfrfL3+5akvz58w3n4WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTA2MDcwMTQ2MDdaFw0yNTA2MTAxMTM2MDdaMDMxMTAvBgNV BAMTKDA5MzgxMDU3OUUwNkQ4MUY5ODE3MkIzMDgzQjE1NEVBMkU0Q0JFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhb3Wi2kYLpuHMtAlODutUJHF ixxrnKgDcN9sEijKuqEEjI8TcPYkwU8hOwpx7HHzP1sKTh2ILUGNrGuOcFShgv8l 9NsLjexSLYmJENJCCH7iIzhBlmYkM1mUFwpRTPonoaQeu2RNphCFtyVTqIhxB5QW zXI6ofNZ7HqDcxAVx0RD/aoe2DK60GTPYFjGzAM5OfWlX8kSOOmIsCZ5RSn+0m5C /2FuVJF3Eb2+Mq+nFJuFKIyBMWabfV8G1aRMjX6/91nSv3GqVyV7jrtWUmPGfRKu kjH2FtNeYpprOWYdNF1woOzUmmuzicbNh5fQFmp+kYB4WWG1eHqGXbEWpEv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCTgQV54G2B+YFyswg7FU6i5Mvl4wHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxklvxR2JCI8q+poYj/ydephmqNo+/gNGw/ XmYy4txgAtFXQKR2l9tNuBZJnQdJjP/SJcdbrRHQLhloS8E0AAq3ezlaQn2Sy4hD 8FE4fm6G1n+AYKK7pnjJ541OjZiRbGV6NP0HKA8WKa4YD4YUN7M2awpK0pETEgjT W68mtSBtb0nNM2HGp2YDX24DyxQEIKc7Rv/ySzf9DjG6C8IkhcKHKYEaj4eUXvG5 8KWtaRuLhlFr8WFUKrk4EgWmuaMOsY+xHF75TqafcgpqsHF4+QtVOq2rNWljkLL7 bCCdbyBmqwObe6MLi2iKdLXu8jGM0eKBxCOUgY83riqehSqUH5o= -----END CERTIFICATE-----Generated at Sat Jun 7 14:04:00 2025 by rpki-client