$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: GCU63C/0kwnWhQ+6s4SdRSyTF+cDZQHNNxyVbW+dTcw= Subject key identifier: E9:B0:C6:EF:33:26:1C:E8:B5:64:72:4B:FB:3D:12:74:62:07:48:A9 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 516BA0EBE7F84C76C39C856A922D53B1860F8816 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 047D Signing time: Sun 29 Jun 2025 15:51:38 +0000 Manifest this update: Sun 29 Jun 2025 15:46:38 +0000 Manifest next update: Wed 02 Jul 2025 17:12:38 +0000 Files and hashes: 1: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: 1fEiPH/G9fCjDBQ4oad//udu42DfAH6jGQ/5XcCA2n4=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=) 3: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=) 4: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6b:a0:eb:e7:f8:4c:76:c3:9c:85:6a:92:2d:53:b1:86:0f:88:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Jun 29 15:46:38 2025 GMT Not After : Jul 2 17:12:38 2025 GMT Subject: CN=E9B0C6EF33261CE8B564724BFB3D1274620748A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:8f:87:03:72:e5:43:50:e4:23:8e:74:8f: 37:07:ff:68:c7:33:fc:b7:cf:db:7f:5b:b5:2d:44: e7:13:08:0a:62:4b:42:34:16:c2:fc:42:f8:b9:08: dd:6b:75:d5:32:51:46:ee:f0:83:3f:81:69:25:c7: bc:4b:93:5b:be:49:ac:bb:dd:1f:c1:d4:54:7d:8c: 7e:63:ce:d4:fb:c3:fa:5a:3c:93:42:cd:8c:fe:2b: ac:52:11:a0:69:e2:50:b7:d7:ac:7e:e0:e9:17:9b: b1:13:67:27:bb:95:11:23:74:62:3a:57:45:e1:93: 88:c8:25:37:cd:37:72:6d:d9:73:6d:c7:5c:ac:98: b1:ec:52:e3:4f:a4:7a:7b:cf:b1:ae:43:7f:4a:f8: e2:dd:f7:1c:c1:72:a4:12:9e:a3:06:1f:15:66:5b: 2c:44:7a:77:a7:f1:86:4c:4e:03:ac:78:b6:af:fb: 30:56:4f:d7:34:b0:83:72:e6:39:79:60:9a:b7:40: 9e:e7:ed:19:21:9e:3a:a5:86:6f:35:35:e9:4a:57: 11:2b:96:bc:7f:1e:53:61:f2:08:41:a1:29:8c:47: 0c:10:29:97:1a:33:c1:64:1a:b0:af:4b:48:2d:9e: 2d:b6:a3:c7:6f:dc:93:80:04:47:58:00:b3:a3:da: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:C6:EF:33:26:1C:E8:B5:64:72:4B:FB:3D:12:74:62:07:48:A9 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:eb:a3:ff:14:e2:61:e3:02:d6:ae:e0:0c:a2:a5:3f:c5:36: ba:9c:7e:de:df:53:4a:86:44:66:92:78:be:f0:e2:c4:3b:9c: 72:83:f7:9a:66:bf:7e:c4:30:39:3e:70:a2:3e:4d:b4:92:57: 09:ed:79:24:b9:0e:96:d9:13:2c:05:94:be:57:bc:72:34:32: 90:dd:94:83:0d:e2:6a:ff:bf:10:c8:4b:af:98:ea:9b:e7:b9: b8:25:97:7c:db:ce:41:6d:b3:1b:e8:67:03:5c:42:5e:21:05: 8c:97:82:a3:ff:78:9b:24:e9:3f:83:3e:0c:5e:55:3e:aa:d0: 4d:eb:98:1e:0d:35:14:de:eb:43:c3:f8:6a:54:07:e4:1a:69: 96:31:d7:77:b7:42:9b:3f:e4:56:e9:3e:00:7a:ab:1f:8d:b9: 7f:f2:c4:8e:eb:08:e9:a2:52:e7:99:7d:8b:6b:3e:0b:5a:83: 5f:ea:f0:b9:13:d3:db:41:96:21:b8:72:4a:fd:81:1e:5f:da: ac:eb:88:d1:8d:21:9e:2f:a7:1b:1a:56:5b:42:a4:fa:a8:a3: c9:eb:e8:71:36:02:0f:10:a1:fe:2f:4d:14:b5:47:d0:61:bb: 45:31:6d:ed:ea:7d:a7:18:32:b4:a8:c2:d4:d6:41:b3:51:41: 0b:08:6a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWug6+f4THbDnIVqki1TsYYPiBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTA2MjkxNTQ2MzhaFw0yNTA3MDIxNzEyMzhaMDMxMTAvBgNV BAMTKEU5QjBDNkVGMzMyNjFDRThCNTY0NzI0QkZCM0QxMjc0NjIwNzQ4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RI+HA3LlQ1DkI450jzcH/2jH M/y3z9t/W7UtROcTCApiS0I0FsL8Qvi5CN1rddUyUUbu8IM/gWklx7xLk1u+Say7 3R/B1FR9jH5jztT7w/paPJNCzYz+K6xSEaBp4lC316x+4OkXm7ETZye7lREjdGI6 V0Xhk4jIJTfNN3Jt2XNtx1ysmLHsUuNPpHp7z7GuQ39K+OLd9xzBcqQSnqMGHxVm WyxEenen8YZMTgOseLav+zBWT9c0sINy5jl5YJq3QJ7n7Rkhnjqlhm81NelKVxEr lrx/HlNh8ghBoSmMRwwQKZcaM8FkGrCvS0gtni22o8dv3JOABEdYALOj2gqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bDG7zMmHOi1ZHJL+z0SdGIHSKkwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfro/8U4mHjAtau4AyipT/FNrqcft7fU0qG RGaSeL7w4sQ7nHKD95pmv37EMDk+cKI+TbSSVwnteSS5DpbZEywFlL5XvHI0MpDd lIMN4mr/vxDIS6+Y6pvnubgll3zbzkFtsxvoZwNcQl4hBYyXgqP/eJsk6T+DPgxe VT6q0E3rmB4NNRTe60PD+GpUB+QaaZYx13e3Qps/5FbpPgB6qx+NuX/yxI7rCOmi UueZfYtrPgtag1/q8LkT09tBliG4ckr9gR5f2qzriNGNIZ4vpxsaVltCpPqoo8nr 6HE2Ag8Qof4vTRS1R9Bhu0Uxbe3qfacYMrSowtTWQbNRQQsIamA= -----END CERTIFICATE-----Generated at Mon Jun 30 08:50:44 2025 by rpki-client