$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: aCgdo/AQzzsnCGmYIOO1Bo73Luipj+NS9unU0GcYBSA= Subject key identifier: 94:6A:0A:08:49:B6:A4:46:53:A7:A2:4F:15:C6:7E:09:25:34:DC:D4 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 2A05666E92902D3E70ACE9C81CAFD435D3B05889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 04E4 Signing time: Tue 01 Jul 2025 05:32:16 +0000 Manifest this update: Tue 01 Jul 2025 05:27:16 +0000 Manifest next update: Fri 04 Jul 2025 14:51:16 +0000 Files and hashes: 1: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 2: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: 6By/tJjahigAngQqnz0X359pv7JkhniJsVl0robo5Rk=) 3: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 14:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:66:6e:92:90:2d:3e:70:ac:e9:c8:1c:af:d4:35:d3:b0:58:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Jul 1 05:27:16 2025 GMT Not After : Jul 4 14:51:16 2025 GMT Subject: CN=946A0A0849B6A44653A7A24F15C67E092534DCD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:28:9c:cc:f3:75:d1:4f:99:bc:57:a8:ad: 7b:d8:04:55:0c:b8:a1:02:85:25:1f:4e:09:f7:20: db:af:c3:0c:be:78:15:3c:75:60:ac:c1:2c:0b:0f: 42:1a:f2:cb:3a:ac:0b:d9:22:25:c5:c2:b7:ea:15: 20:0f:9e:c1:d0:8d:dd:cb:95:ef:74:ba:b2:f2:80: 70:41:0f:a7:55:ea:dc:76:3e:86:64:3d:35:c8:64: ae:6c:f7:d9:c8:2c:88:a7:c0:2c:05:a3:c4:a6:84: 96:5e:07:da:25:25:37:4d:62:d1:c1:20:bd:b3:dd: dc:0b:a1:77:9b:bb:15:8c:24:9d:a3:6f:0d:98:f4: ea:c3:93:17:9e:15:4f:cf:3c:1c:59:6f:9d:8d:53: d0:25:52:30:79:82:96:7a:57:18:0f:5b:d5:3e:71: ee:06:8f:d5:e7:b9:6a:05:ef:17:5b:f6:1a:be:77: a8:e5:48:6e:7d:5e:69:b0:bb:27:7b:09:98:77:b1: c6:84:ec:7c:33:a4:68:99:5c:ee:5c:e3:de:14:86: 7f:5e:da:36:c3:df:87:28:83:89:9f:7b:28:41:08: 8a:15:06:14:28:b3:be:b8:22:80:30:97:26:06:d2: e8:dc:4c:3d:33:60:b3:44:71:68:5d:f7:84:97:4f: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6A:0A:08:49:B6:A4:46:53:A7:A2:4F:15:C6:7E:09:25:34:DC:D4 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:08:72:4f:4a:8c:f0:ed:f8:4e:3b:ca:6e:04:0c:e7:42:00: b9:83:09:8d:f5:f7:8d:68:65:80:0a:66:d9:de:8e:e3:94:c0: ed:63:7f:9a:e0:c3:85:aa:c8:20:f5:bd:b4:ed:0b:c7:96:f1: 84:a8:e6:e2:31:9d:31:61:86:b1:3c:63:44:81:d4:00:f4:35: 13:f9:0f:54:ed:ce:75:96:e0:2c:a7:ce:74:88:44:f0:97:1c: 77:5d:9a:90:09:24:f0:c3:9a:eb:08:f7:01:4f:8c:ca:ff:c6: 22:50:81:55:c6:fd:b6:c2:63:3b:c3:88:6b:48:7f:8b:fa:d7: 84:49:ae:be:b1:bf:5c:11:9d:b5:0c:9e:7f:51:d3:bc:fd:c9: c7:2e:fe:b5:0e:9e:c4:58:c7:22:eb:29:b0:10:27:c0:9e:3d: a4:3f:7a:bd:39:f6:93:88:eb:2f:42:43:5b:76:78:b3:da:df: f7:5b:fb:ea:f4:3b:36:72:4d:3a:dd:fc:0b:c6:46:e9:4d:7a: 6f:ee:32:f5:89:35:67:92:a4:f8:17:91:77:bf:ec:03:c0:69: 4e:c9:64:6f:b1:13:6e:d8:06:2f:35:ec:a2:69:97:ea:80:ce: fe:12:86:ee:57:32:fa:1c:8d:c6:b5:a9:f8:a0:f3:df:61:02: 86:b9:90:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgVmbpKQLT5wrOnIHK/UNdOwWIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTA3MDEwNTI3MTZaFw0yNTA3MDQxNDUxMTZaMDMxMTAvBgNV BAMTKDk0NkEwQTA4NDlCNkE0NDY1M0E3QTI0RjE1QzY3RTA5MjUzNERDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDToCiczPN10U+ZvFeorXvYBFUM uKEChSUfTgn3INuvwwy+eBU8dWCswSwLD0Ia8ss6rAvZIiXFwrfqFSAPnsHQjd3L le90urLygHBBD6dV6tx2PoZkPTXIZK5s99nILIinwCwFo8SmhJZeB9olJTdNYtHB IL2z3dwLoXebuxWMJJ2jbw2Y9OrDkxeeFU/PPBxZb52NU9AlUjB5gpZ6VxgPW9U+ ce4Gj9XnuWoF7xdb9hq+d6jlSG59Xmmwuyd7CZh3scaE7HwzpGiZXO5c494Uhn9e 2jbD34cog4mfeyhBCIoVBhQos764IoAwlyYG0ujcTD0zYLNEcWhd94SXT/ErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGoKCEm2pEZTp6JPFcZ+CSU03NQwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYIck9KjPDt+E47ym4EDOdCALmDCY31941o ZYAKZtnejuOUwO1jf5rgw4WqyCD1vbTtC8eW8YSo5uIxnTFhhrE8Y0SB1AD0NRP5 D1TtznWW4CynznSIRPCXHHddmpAJJPDDmusI9wFPjMr/xiJQgVXG/bbCYzvDiGtI f4v614RJrr6xv1wRnbUMnn9R07z9yccu/rUOnsRYxyLrKbAQJ8CePaQ/er059pOI 6y9CQ1t2eLPa3/db++r0OzZyTTrd/AvGRulNem/uMvWJNWeSpPgXkXe/7APAaU7J ZG+xE27YBi817KJpl+qAzv4Shu5XMvocjca1qfig899hAoa5kH4= -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:01 2025 by rpki-client