$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: z/1Cp1PauH5kANlrBoksmpPjqqFnMqonrNob3Z2StxE= Subject key identifier: 4E:C6:25:D4:7E:78:25:61:02:A5:47:30:A2:C8:D0:52:2E:92:1F:E8 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 46F2D574208A8BE86CED06E8BBBB2BCD8DFF22A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 02B7 Signing time: Tue 03 Jun 2025 09:42:32 +0000 Manifest this update: Tue 03 Jun 2025 09:37:32 +0000 Manifest next update: Fri 06 Jun 2025 16:28:32 +0000 Files and hashes: 1: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: Nqgcp/K4UevMl0PfyVMfy6C7HWJO5cOPcTMMdK4Juds=) 2: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: QRB8wY9nzxhP64G15SN78udcoRKNIpV6FgP2s5I8RNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f2:d5:74:20:8a:8b:e8:6c:ed:06:e8:bb:bb:2b:cd:8d:ff:22:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Jun 3 09:37:32 2025 GMT Not After : Jun 6 16:28:32 2025 GMT Subject: CN=4EC625D47E78256102A54730A2C8D0522E921FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:d5:65:dd:90:73:f8:c8:81:e7:77:97:90: 61:b0:fc:45:86:1a:08:0f:b7:4d:95:e0:d9:d2:56: a3:20:a8:91:21:8e:c5:6e:17:99:2e:82:dd:53:11: 48:da:74:45:48:8c:6d:31:d6:ea:01:f2:2f:ab:7c: b3:91:e3:e1:a0:b5:89:f8:d1:f9:7e:2f:2e:8f:56: 49:e5:e9:70:34:35:4b:5c:45:28:e3:24:1d:ea:04: ba:6d:c0:ce:37:f2:b7:84:47:3f:5d:7a:36:a1:b9: 2d:82:7e:1d:0c:51:23:67:74:3e:7b:4c:93:94:3d: 06:03:d6:8e:1a:e2:7b:a0:5d:70:ad:18:9e:ce:76: f8:80:4c:50:00:33:56:0f:03:8f:87:bd:0a:40:25: 6a:4f:1f:d8:f3:09:af:dd:d5:58:f9:8c:d5:15:72: 0c:d9:20:97:c9:f1:db:39:61:01:94:0e:d0:16:a4: fb:cd:05:21:78:df:18:dc:c8:f9:46:28:0c:58:f7: b3:1d:e4:a3:b5:6d:f1:ea:f4:74:51:73:43:65:d7: da:aa:2b:21:98:ce:13:f3:3e:06:37:0a:ac:2f:b3: cf:40:c6:6a:75:6b:5e:36:27:69:45:1c:6a:9c:38: d8:25:50:cd:ef:6e:78:83:6e:0c:37:5b:f4:3f:da: 7b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C6:25:D4:7E:78:25:61:02:A5:47:30:A2:C8:D0:52:2E:92:1F:E8 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a3:b8:3b:9d:21:28:d9:cf:1a:ef:ad:c1:bd:46:4a:51:a5: 21:ff:23:41:eb:7b:27:2f:31:33:2d:11:ff:c0:2f:65:00:ff: a3:82:66:ef:15:e2:d0:1f:60:d7:6a:da:5b:15:72:57:e9:e0: 3e:9b:a1:56:2b:3f:24:67:2d:23:c6:5e:4c:ca:a3:76:d5:b1: 94:6c:e1:89:02:a9:78:fe:b2:89:33:11:b4:ef:5c:66:3b:45: 98:7e:c7:c8:9e:c4:0d:b6:82:06:1e:66:e6:47:b3:78:4b:80: 4a:a8:87:d0:ea:0a:9c:87:40:d3:3c:37:66:a5:d9:4d:36:1d: 6b:db:cc:00:19:cd:d1:84:90:63:9e:d5:2b:7c:a2:36:19:de: eb:e4:e6:a9:a5:1e:09:a1:41:3c:b0:a5:8f:7e:8d:28:07:17: 35:c4:a6:5d:77:c2:e7:a2:0c:d1:fe:b5:04:ed:bd:61:d8:9b: 23:17:2d:32:24:ce:1b:05:bd:93:71:bf:a3:83:45:a6:f2:05: 57:3c:bc:a4:75:98:80:f7:26:fc:1c:51:cf:11:3d:86:74:8d: e7:ea:e8:52:69:77:b6:02:1a:18:f5:c9:98:66:c2:d3:51:a1: 6d:3d:d5:ec:b5:1f:67:69:db:25:f3:9c:f7:d2:01:d7:2d:4d: 35:56:f3:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvLVdCCKi+hs7Qbou7srzY3/IqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNTA2MDMwOTM3MzJaFw0yNTA2MDYxNjI4MzJaMDMxMTAvBgNV BAMTKDRFQzYyNUQ0N0U3ODI1NjEwMkE1NDczMEEyQzhEMDUyMkU5MjFGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs9dVl3ZBz+MiB53eXkGGw/EWG GggPt02V4NnSVqMgqJEhjsVuF5kugt1TEUjadEVIjG0x1uoB8i+rfLOR4+GgtYn4 0fl+Ly6PVknl6XA0NUtcRSjjJB3qBLptwM438reERz9dejahuS2Cfh0MUSNndD57 TJOUPQYD1o4a4nugXXCtGJ7OdviATFAAM1YPA4+HvQpAJWpPH9jzCa/d1Vj5jNUV cgzZIJfJ8ds5YQGUDtAWpPvNBSF43xjcyPlGKAxY97Md5KO1bfHq9HRRc0Nl19qq KyGYzhPzPgY3Cqwvs89Axmp1a142J2lFHGqcONglUM3vbniDbgw3W/Q/2nubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTsYl1H54JWECpUcwosjQUi6SH+gwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGjuDudISjZzxrvrcG9RkpRpSH/I0Hreycv MTMtEf/AL2UA/6OCZu8V4tAfYNdq2lsVclfp4D6boVYrPyRnLSPGXkzKo3bVsZRs 4YkCqXj+sokzEbTvXGY7RZh+x8iexA22ggYeZuZHs3hLgEqoh9DqCpyHQNM8N2al 2U02HWvbzAAZzdGEkGOe1St8ojYZ3uvk5qmlHgmhQTywpY9+jSgHFzXEpl13wuei DNH+tQTtvWHYmyMXLTIkzhsFvZNxv6ODRabyBVc8vKR1mID3JvwcUc8RPYZ0jefq 6FJpd7YCGhj1yZhmwtNRoW091ey1H2dp2yXznPfSAdctTTVW8y8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:20 2025 by rpki-client