$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: outm++yITPo/NSWTex1FN6uUqse7dpTPEIfGsPleCa0= Subject key identifier: 4E:EE:D6:66:71:C7:0F:5B:BA:36:50:53:A1:EE:26:C6:CD:34:FE:DB Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 466AE3A6B67AF8B95F86017B3C061E7F954F5D38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: E8 Signing time: Fri 27 Jun 2025 20:21:39 +0000 Manifest this update: Fri 27 Jun 2025 20:16:39 +0000 Manifest next update: Tue 01 Jul 2025 06:29:39 +0000 Files and hashes: 1: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: NjYP2O6N1iJnHPEyiA3Qgp2TJYDJ3V6KTZzD7MIk/3s=) 2: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: Wq79twJ+9YzQKBjwXi/sFlzpPqc/K91eUGfTowbwJEs=) 3: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: xadn6RpdlvCcbfDvfLur4dNudqygNY0VmMIpwaELNLI=) 4: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: k5DZZSxuzgo1jgebHxJfNyOAsC2XzO0g4+9J83zsZZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6a:e3:a6:b6:7a:f8:b9:5f:86:01:7b:3c:06:1e:7f:95:4f:5d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Jun 27 20:16:39 2025 GMT Not After : Jul 1 06:29:39 2025 GMT Subject: CN=4EEED66671C70F5BBA365053A1EE26C6CD34FEDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:ae:fa:ed:b6:fa:3e:7e:21:b2:2d:b9:48: 54:43:17:e1:55:ce:c4:65:24:8a:39:eb:7c:05:31: ff:7e:83:2a:42:12:9b:e8:55:95:5a:2f:39:7a:fd: 68:c2:c2:b5:30:04:83:21:04:57:13:e1:69:60:72: 37:5c:e4:99:0b:4e:50:cb:5c:08:f2:f5:f6:cd:b3: b9:ff:66:02:23:d6:fe:b0:a7:e6:91:c7:df:a5:20: 9f:23:10:0e:e9:e7:27:60:26:bf:0f:1b:35:b4:ce: d3:5c:58:eb:7a:32:62:db:8b:1f:bd:56:32:26:b5: ae:ce:4b:66:4c:0d:f7:31:84:21:33:b8:5e:68:70: 16:b3:d6:25:5b:03:23:6b:a0:00:58:9f:d0:53:24: 88:d8:58:09:66:3c:06:91:02:b7:4e:13:2f:21:c2: 0d:76:84:e9:12:1f:ae:0b:24:d5:f0:c9:df:94:6f: 58:87:53:56:f0:cb:25:db:b9:45:82:a6:25:3c:f6: a1:fb:33:c4:cd:6f:e4:20:12:9d:06:1b:5e:09:bc: c0:e9:9e:37:15:08:23:af:4e:ef:92:34:92:81:e0: 2a:95:f2:2d:56:19:f5:7a:5a:fa:15:a4:18:7e:0b: 15:09:e2:30:00:c4:63:0b:27:29:4e:9c:f2:a6:68: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:D6:66:71:C7:0F:5B:BA:36:50:53:A1:EE:26:C6:CD:34:FE:DB X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:ad:97:3f:a7:fa:e5:eb:44:d2:b0:d3:11:a6:7d:c1:f3: 7f:55:8e:44:c0:0e:7e:6c:a8:00:18:13:34:a0:40:05:71:93: 7f:d3:2c:69:ad:c5:c0:95:d9:3f:e3:9d:04:3f:1b:ca:73:90: ee:01:54:9f:32:29:8c:d3:27:96:3e:1f:f6:77:e3:67:ad:3c: 9f:a4:02:cd:18:99:a5:60:1d:19:70:be:c2:df:c4:62:23:86: 45:eb:f3:27:2b:fb:6a:4e:41:b5:6c:a8:91:98:9f:51:18:91: ec:3a:8e:0c:aa:a2:8d:81:3b:cb:af:10:72:71:ec:b9:11:5e: 72:d0:fa:91:5d:26:5b:65:82:12:07:6f:b9:da:5e:03:69:8e: 1a:af:8e:45:86:73:33:87:82:e1:39:e3:08:3a:75:2b:3a:a4: a7:f9:07:73:20:db:e4:6e:b3:d6:6e:0d:9c:40:10:57:57:a3: 92:bf:1b:67:23:5c:f6:62:fc:95:73:55:90:46:ae:66:8a:b1: e5:b7:0c:bf:eb:36:42:96:58:06:ec:5e:e5:99:5d:3e:02:18: fd:11:27:29:ef:59:3c:0d:8d:47:32:cd:62:83:7f:2a:52:54: 47:82:16:84:5b:30:6e:6f:e5:00:84:b2:2c:0f:9b:20:6c:81: dc:af:c5:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmrjprZ6+LlfhgF7PAYef5VPXTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNTA2MjcyMDE2MzlaFw0yNTA3MDEwNjI5MzlaMDMxMTAvBgNV BAMTKDRFRUVENjY2NzFDNzBGNUJCQTM2NTA1M0ExRUUyNkM2Q0QzNEZFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDis6767bb6Pn4hsi25SFRDF+FV zsRlJIo563wFMf9+gypCEpvoVZVaLzl6/WjCwrUwBIMhBFcT4Wlgcjdc5JkLTlDL XAjy9fbNs7n/ZgIj1v6wp+aRx9+lIJ8jEA7p5ydgJr8PGzW0ztNcWOt6MmLbix+9 VjImta7OS2ZMDfcxhCEzuF5ocBaz1iVbAyNroABYn9BTJIjYWAlmPAaRArdOEy8h wg12hOkSH64LJNXwyd+Ub1iHU1bwyyXbuUWCpiU89qH7M8TNb+QgEp0GG14JvMDp njcVCCOvTu+SNJKB4CqV8i1WGfV6WvoVpBh+CxUJ4jAAxGMLJylOnPKmaM6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTu7WZnHHD1u6NlBToe4mxs00/tswHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrQrZc/p/rl60TSsNMRpn3B839VjkTADn5s qAAYEzSgQAVxk3/TLGmtxcCV2T/jnQQ/G8pzkO4BVJ8yKYzTJ5Y+H/Z342etPJ+k As0YmaVgHRlwvsLfxGIjhkXr8ycr+2pOQbVsqJGYn1EYkew6jgyqoo2BO8uvEHJx 7LkRXnLQ+pFdJltlghIHb7naXgNpjhqvjkWGczOHguE54wg6dSs6pKf5B3Mg2+Ru s9ZuDZxAEFdXo5K/G2cjXPZi/JVzVZBGrmaKseW3DL/rNkKWWAbsXuWZXT4CGP0R JynvWTwNjUcyzWKDfypSVEeCFoRbMG5v5QCEsiwPmyBsgdyvxeU= -----END CERTIFICATE-----Generated at Mon Jun 30 05:46:11 2025 by rpki-client