$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: RznGwr3kelV5+MfGhueEg6/CYlTm6zqJLG8NRl45/Fs= Subject key identifier: 29:14:2E:29:A9:E4:D4:0F:67:D0:E0:7B:18:27:A2:6C:94:60:D4:D6 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 7EEF6E884BC0529B57F7395CDFC4A2F7AEEC90B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 01E2 Signing time: Thu 08 May 2025 03:12:12 +0000 Manifest this update: Thu 08 May 2025 03:07:12 +0000 Manifest next update: Sun 11 May 2025 10:59:12 +0000 Files and hashes: 1: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 3: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 4: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 5: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: rE0O2AHuOF3s8w3k9RcEjJwAoAvi2RPffay6T0UfPAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 10:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ef:6e:88:4b:c0:52:9b:57:f7:39:5c:df:c4:a2:f7:ae:ec:90:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: May 8 03:07:12 2025 GMT Not After : May 11 10:59:12 2025 GMT Subject: CN=29142E29A9E4D40F67D0E07B1827A26C9460D4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:14:46:c8:75:8a:97:53:d5:9d:99:e7:7a: e7:ea:ea:fa:e7:7a:fd:42:65:ff:c1:82:d5:0a:11: 0c:2a:f2:8d:31:fb:82:f0:c8:14:1c:37:da:a5:73: bd:ea:4d:b3:5e:e6:09:21:22:59:f3:96:e0:5a:76: 06:7a:8f:9d:25:8a:64:a1:61:1b:a3:b0:11:db:75: 13:74:46:e0:76:20:29:dc:a6:98:81:cc:76:35:5e: 35:31:32:f5:cc:fd:a1:0e:ca:16:1b:e4:90:cc:fe: cd:43:a5:6e:b2:6a:c8:b8:4f:b8:35:a2:26:e9:d7: c6:1f:0e:23:98:71:d4:64:ae:21:29:35:58:5e:9a: 6d:fb:05:2d:af:be:c7:22:ac:30:0f:d9:41:8c:1b: 53:1d:23:de:e4:5a:1b:cd:20:44:96:7d:ae:31:94: bf:d4:00:c2:cb:0f:bf:92:fd:93:c7:e9:4c:e0:2e: e3:28:1c:6c:9c:be:d6:d7:94:f5:1a:22:89:ff:c8: e4:06:31:5c:df:e0:7b:e7:39:b1:53:17:ea:83:5f: 93:6a:71:eb:83:f5:96:a6:ff:2b:f9:9c:23:65:96: e9:8d:3a:2e:5a:0d:b4:72:91:74:d3:d7:fe:67:1c: a5:13:98:51:26:a0:1e:d9:07:62:a9:1a:ee:00:32: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:2E:29:A9:E4:D4:0F:67:D0:E0:7B:18:27:A2:6C:94:60:D4:D6 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4f:53:9b:27:05:11:68:3b:f4:fc:fa:dd:bd:cd:07:80:91: c4:b0:c9:79:60:8d:60:a4:34:0f:fd:f9:3a:08:65:d6:94:f2: 90:8a:9e:ba:d0:cf:1f:d0:2f:3d:73:3b:3c:4d:e7:51:11:bf: 94:59:30:e8:fe:12:89:d9:f2:08:9d:38:e4:a5:df:66:e9:a7: 3f:39:14:43:ea:40:6c:8c:ab:f0:cf:f6:b6:43:73:2c:ce:20: fd:83:e3:0a:96:5f:3b:13:52:2a:2c:ef:ea:d9:e0:6f:18:6d: b5:17:1b:0a:7c:ea:43:79:d5:9e:e0:e9:02:7f:9a:a8:4c:7f: b3:57:6d:92:9f:5c:61:6f:c8:48:6b:67:3c:ca:98:b3:69:a7: aa:3f:2f:1e:cf:3c:4a:15:42:8d:3c:dc:7e:ca:7e:ab:af:56: b5:cb:ca:b0:8e:1a:86:58:ab:a8:7b:66:25:b7:b8:71:6c:cb: 8b:dc:20:be:85:b3:4b:00:71:4d:2f:8e:d7:84:5d:ac:d9:30: 64:d6:05:f1:ed:30:11:79:e9:9e:5a:53:c5:dc:6c:31:94:3c: 56:4b:4c:86:0f:3f:1b:70:6d:60:3c:a3:d5:d2:6d:db:af:63: 85:f0:fe:4b:55:3a:2b:02:f8:8a:28:6a:04:68:d6:4b:89:0d: 59:58:b2:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfu9uiEvAUptX9zlc38Si967skLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA1MDgwMzA3MTJaFw0yNTA1MTExMDU5MTJaMDMxMTAvBgNV BAMTKDI5MTQyRTI5QTlFNEQ0MEY2N0QwRTA3QjE4MjdBMjZDOTQ2MEQ0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsrRRGyHWKl1PVnZnneufq6vrn ev1CZf/BgtUKEQwq8o0x+4LwyBQcN9qlc73qTbNe5gkhIlnzluBadgZ6j50limSh YRujsBHbdRN0RuB2ICncppiBzHY1XjUxMvXM/aEOyhYb5JDM/s1DpW6yasi4T7g1 oibp18YfDiOYcdRkriEpNVhemm37BS2vvscirDAP2UGMG1MdI97kWhvNIESWfa4x lL/UAMLLD7+S/ZPH6UzgLuMoHGycvtbXlPUaIon/yOQGMVzf4HvnObFTF+qDX5Nq ceuD9Zam/yv5nCNllumNOi5aDbRykXTT1/5nHKUTmFEmoB7ZB2KpGu4AMqV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRQuKank1A9n0OB7GCeibJRg1NYwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1PU5snBRFoO/T8+t29zQeAkcSwyXlgjWCk NA/9+ToIZdaU8pCKnrrQzx/QLz1zOzxN51ERv5RZMOj+EonZ8gidOOSl32bppz85 FEPqQGyMq/DP9rZDcyzOIP2D4wqWXzsTUios7+rZ4G8YbbUXGwp86kN51Z7g6QJ/ mqhMf7NXbZKfXGFvyEhrZzzKmLNpp6o/Lx7PPEoVQo083H7KfquvVrXLyrCOGoZY q6h7ZiW3uHFsy4vcIL6Fs0sAcU0vjteEXazZMGTWBfHtMBF56Z5aU8XcbDGUPFZL TIYPPxtwbWA8o9XSbduvY4Xw/ktVOisC+IooagRo1kuJDVlYsuo= -----END CERTIFICATE-----Generated at Thu May 8 06:26:00 2025 by rpki-client