$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: h6xseNzObxv3l85n/adm4F99sr4QOsVPsXCDMRz0ezE= Subject key identifier: 9A:C2:43:15:78:26:94:BA:B6:23:1D:30:90:13:7B:61:F3:F5:3A:4C Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 509764B9BC24A753EA0290C581E1898976154175 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: A4 Signing time: Fri 27 Jun 2025 20:21:04 +0000 Manifest this update: Fri 27 Jun 2025 20:16:04 +0000 Manifest next update: Tue 01 Jul 2025 05:39:04 +0000 Files and hashes: 1: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: MDwoleiTA2jdD+y/VY0jacPWG8rB0y82arQs3fIvfxk=) 2: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: Z4LRNVaLQ1hi8Ydy7xrl21o+50Pt9MglpRIcPSCMBxs=) 3: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: z5FuzQq5IWJxtrYkioNa17iEC2vijOFvS7kwlLSVjgE=) 4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: 0aoBwt+h97D/BWgv9F1UKeVjETegL18nlQ0MJHeXSDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:97:64:b9:bc:24:a7:53:ea:02:90:c5:81:e1:89:89:76:15:41:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Jun 27 20:16:04 2025 GMT Not After : Jul 1 05:39:04 2025 GMT Subject: CN=9AC24315782694BAB6231D3090137B61F3F53A4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:d9:a9:80:70:23:da:73:2d:6b:88:7a:0c: 3e:33:3a:bd:41:38:19:c3:9d:10:88:e7:ae:66:88: 46:ce:78:5a:c5:b2:7a:70:8d:e3:db:22:3d:cf:3c: 83:1e:c4:45:b1:7e:53:21:87:2b:2b:56:e8:03:56: a7:9b:83:b5:93:a1:f8:de:ae:d0:c2:5d:74:d3:65: 59:ba:61:7a:63:09:6b:3b:61:11:f9:c2:04:60:f5: bb:d3:37:be:55:f8:a8:5d:34:b8:0c:f1:1b:1b:18: 80:f0:43:4f:84:86:90:59:4a:32:52:81:a1:67:1b: 79:12:44:af:40:19:57:ca:2e:a5:ca:ac:fd:42:26: 2a:37:f5:18:01:74:0e:46:6e:a6:d4:6f:56:d5:c3: 83:e2:ba:20:42:3b:f9:88:43:8c:cb:37:f8:63:14: 4c:fa:ca:6d:0a:7e:10:c9:5b:ea:1e:c7:b2:5f:ca: 1c:d0:54:a7:5c:1f:c4:ee:6e:13:ba:2c:32:52:66: bc:da:b6:1a:e9:28:91:3a:46:f6:51:29:53:a6:8a: e4:a8:c8:ac:95:e6:c0:c3:ff:ed:b5:7a:46:3f:d7: 12:70:ac:ab:30:fb:e0:ff:6b:bb:94:2f:40:1c:09: a0:05:41:4b:37:34:49:8c:89:99:1f:ae:44:52:a9: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C2:43:15:78:26:94:BA:B6:23:1D:30:90:13:7B:61:F3:F5:3A:4C X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0a:b5:a0:8f:f4:42:99:18:9f:5b:c6:14:c5:bf:5f:1c:94: 20:cf:df:a4:cb:70:bc:b9:00:17:be:65:21:7b:31:ba:22:25: 8c:43:97:67:8e:11:2c:1b:75:fe:26:37:c8:ba:65:c8:63:1b: 54:3a:5b:d1:7f:e8:0b:52:1e:d2:72:a6:31:f9:d1:e4:a7:e0: 4f:7f:4e:f4:0c:d7:a5:11:8b:ca:74:fd:18:be:f4:95:cb:8f: 27:16:0b:ef:23:35:5f:41:f5:34:d5:bf:a3:16:b0:23:11:9e: 30:7c:13:24:94:e4:9b:5b:32:98:da:de:a4:07:81:0f:bd:e9: 60:cc:8c:65:18:14:19:2e:af:ae:43:61:d0:c7:76:56:2d:c6: 29:45:f3:a1:4b:9a:d0:3e:28:64:b1:4f:88:8d:71:c7:1a:de: ba:d3:2e:a0:b2:d0:28:e6:5b:4a:6f:94:30:09:3e:d4:3f:49: 05:21:d7:90:1f:32:0d:99:fa:0b:50:ce:be:c8:7c:ba:3d:57: 0d:4c:3f:9c:fd:67:7b:ee:7b:c9:04:9c:80:c9:5e:a0:03:90: 0f:6d:16:b4:5d:b2:c4:33:be:8e:99:95:7d:71:38:7e:53:7a: 67:32:8a:8e:7f:d5:41:c5:fd:92:c7:19:26:34:b0:1f:1c:69: b9:63:46:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJdkubwkp1PqApDFgeGJiXYVQXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTA2MjcyMDE2MDRaFw0yNTA3MDEwNTM5MDRaMDMxMTAvBgNV BAMTKDlBQzI0MzE1NzgyNjk0QkFCNjIzMUQzMDkwMTM3QjYxRjNGNTNBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vdmpgHAj2nMta4h6DD4zOr1B OBnDnRCI565miEbOeFrFsnpwjePbIj3PPIMexEWxflMhhysrVugDVqebg7WTofje rtDCXXTTZVm6YXpjCWs7YRH5wgRg9bvTN75V+KhdNLgM8RsbGIDwQ0+EhpBZSjJS gaFnG3kSRK9AGVfKLqXKrP1CJio39RgBdA5GbqbUb1bVw4PiuiBCO/mIQ4zLN/hj FEz6ym0KfhDJW+oex7JfyhzQVKdcH8TubhO6LDJSZrzathrpKJE6RvZRKVOmiuSo yKyV5sDD/+21ekY/1xJwrKsw++D/a7uUL0AcCaAFQUs3NEmMiZkfrkRSqRknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsJDFXgmlLq2Ix0wkBN7YfP1OkwwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkKtaCP9EKZGJ9bxhTFv18clCDP36TLcLy5 ABe+ZSF7MboiJYxDl2eOESwbdf4mN8i6ZchjG1Q6W9F/6AtSHtJypjH50eSn4E9/ TvQM16URi8p0/Ri+9JXLjycWC+8jNV9B9TTVv6MWsCMRnjB8EySU5JtbMpja3qQH gQ+96WDMjGUYFBkur65DYdDHdlYtxilF86FLmtA+KGSxT4iNccca3rrTLqCy0Cjm W0pvlDAJPtQ/SQUh15AfMg2Z+gtQzr7IfLo9Vw1MP5z9Z3vue8kEnIDJXqADkA9t FrRdssQzvo6ZlX1xOH5Temcyio5/1UHF/ZLHGSY0sB8cabljRl0= -----END CERTIFICATE-----Generated at Sun Jun 29 21:38:54 2025 by rpki-client