$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: gY9CfLTJdI+uJMK96z/d7u1v2NssZyGG/JvDCOk/QRg= Subject key identifier: 65:85:B9:F1:85:6D:2B:95:65:DA:61:24:98:8C:84:91:EC:C0:74:C3 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 5A97E5176A4A44C6048FEF0FB5B7BBE8B64D7D3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 01FA Signing time: Tue 01 Jul 2025 05:12:42 +0000 Manifest this update: Tue 01 Jul 2025 05:07:42 +0000 Manifest next update: Fri 04 Jul 2025 08:10:42 +0000 Files and hashes: 1: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 2: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 3: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 4: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: 956Zt3oxAONjd9QvMaHqtKIGlsHCStMa9sCvCQzbefU=) 5: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:97:e5:17:6a:4a:44:c6:04:8f:ef:0f:b5:b7:bb:e8:b6:4d:7d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Jul 1 05:07:42 2025 GMT Not After : Jul 4 08:10:42 2025 GMT Subject: CN=6585B9F1856D2B9565DA6124988C8491ECC074C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:c2:94:88:df:f4:8c:1a:75:5e:11:89:5f: 88:b5:59:98:f6:c6:2c:36:d2:7b:95:b3:e7:c1:41: 74:0a:8e:23:ce:ef:45:d0:86:c4:8e:db:28:90:9f: 6f:59:d5:96:8d:f2:a2:61:5e:11:72:93:26:f1:93: 8b:34:73:1d:29:ee:6a:e5:2a:2a:76:2f:35:da:f5: 31:4f:ab:83:13:cb:2c:81:d6:09:7c:ce:4c:cf:91: 46:ea:12:a6:3d:96:07:1d:e4:2b:62:fb:d3:d7:77: 0a:a5:34:a7:f4:5a:80:c0:ec:ac:a4:ec:02:31:4d: 30:97:03:a1:f3:53:71:47:21:e6:bc:7a:a9:87:3a: e0:c7:e5:42:fa:83:52:a6:26:43:b6:61:38:7e:83: 59:02:4f:e4:12:62:8b:50:12:77:06:39:c6:9a:76: 00:ea:35:a9:98:40:eb:d8:54:77:e5:4e:e5:fb:96: 6c:aa:bd:d1:28:37:e1:7a:2c:f9:f2:70:8b:6b:56: 7a:2c:5d:3d:ec:09:f0:39:33:b9:19:73:87:4a:b9: 1a:26:b0:e8:d8:42:45:cb:01:93:ea:62:61:e6:aa: f5:65:e7:03:12:0d:a2:38:8a:36:ae:f3:69:a7:b5: ed:17:a4:9d:af:70:f4:61:7a:6e:d9:55:c6:34:f8: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:B9:F1:85:6D:2B:95:65:DA:61:24:98:8C:84:91:EC:C0:74:C3 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:39:30:80:42:3d:30:12:23:0b:86:32:00:34:1a:f0:f4:11: a9:49:cb:7e:96:dd:88:42:28:af:dc:5b:ff:40:3f:94:05:ee: ee:26:f1:68:32:bb:7b:c5:17:4f:9d:ae:b4:15:01:51:a9:2a: 89:a8:20:56:ed:a7:16:29:94:c2:d6:88:b0:c8:fe:8f:3b:23: 94:9a:30:83:bd:26:4a:47:bd:9c:b2:f9:5a:69:26:cd:47:27: 0e:89:2b:7f:9d:c7:bb:96:09:a4:bf:1a:74:37:80:37:f4:01: 33:1d:db:c9:52:4f:0d:32:1b:87:1f:ab:59:ba:4d:70:e0:ce: 43:5e:0b:47:58:d3:ac:39:94:8a:16:90:ae:da:51:20:58:83: 1a:61:18:fa:75:5a:48:46:63:15:ed:5c:d5:55:3b:7c:11:04: 9b:78:46:5f:4a:92:c7:fe:a0:32:9b:4b:54:68:fe:77:a2:a5: b6:7b:f5:3f:f4:76:fc:cf:5f:47:e4:93:da:ff:79:c3:17:c4: e9:c2:d8:3b:86:b7:ba:50:0a:ba:15:c6:d0:b1:9a:a6:bb:49: 8c:3a:57:eb:e5:0e:c6:38:20:61:37:50:72:69:fb:d6:a4:8b: 4b:21:9b:f6:ed:8e:5b:5c:76:8c:6b:3e:35:fc:b5:a2:61:bb: 49:b4:77:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpflF2pKRMYEj+8Ptbe76LZNfTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA3MDEwNTA3NDJaFw0yNTA3MDQwODEwNDJaMDMxMTAvBgNV BAMTKDY1ODVCOUYxODU2RDJCOTU2NURBNjEyNDk4OEM4NDkxRUNDMDc0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjosKUiN/0jBp1XhGJX4i1WZj2 xiw20nuVs+fBQXQKjiPO70XQhsSO2yiQn29Z1ZaN8qJhXhFykybxk4s0cx0p7mrl Kip2LzXa9TFPq4MTyyyB1gl8zkzPkUbqEqY9lgcd5Cti+9PXdwqlNKf0WoDA7Kyk 7AIxTTCXA6HzU3FHIea8eqmHOuDH5UL6g1KmJkO2YTh+g1kCT+QSYotQEncGOcaa dgDqNamYQOvYVHflTuX7lmyqvdEoN+F6LPnycItrVnosXT3sCfA5M7kZc4dKuRom sOjYQkXLAZPqYmHmqvVl5wMSDaI4ijau82mnte0XpJ2vcPRhem7ZVcY0+ExZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZYW58YVtK5Vl2mEkmIyEkezAdMMwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw5MIBCPTASIwuGMgA0GvD0EalJy36W3YhC KK/cW/9AP5QF7u4m8Wgyu3vFF0+drrQVAVGpKomoIFbtpxYplMLWiLDI/o87I5Sa MIO9JkpHvZyy+VppJs1HJw6JK3+dx7uWCaS/GnQ3gDf0ATMd28lSTw0yG4cfq1m6 TXDgzkNeC0dY06w5lIoWkK7aUSBYgxphGPp1WkhGYxXtXNVVO3wRBJt4Rl9Kksf+ oDKbS1Ro/neipbZ79T/0dvzPX0fkk9r/ecMXxOnC2DuGt7pQCroVxtCxmqa7SYw6 V+vlDsY4IGE3UHJp+9aki0shm/btjltcdoxrPjX8taJhu0m0d5I= -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:55 2025 by rpki-client