$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: QhQWsqZm//+3pcVqjjpldw4A9Q5gmLyHHhbjBZwgdLM= Subject key identifier: 3C:20:5F:03:8A:0B:70:98:DB:69:4B:8F:67:4E:EC:6C:DC:CD:6B:88 Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 0266EAAAE2F4D93BF4559F4E0ADD1DA02A5267FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 0175 Signing time: Sat 28 Jun 2025 05:31:05 +0000 Manifest this update: Sat 28 Jun 2025 05:26:05 +0000 Manifest next update: Tue 01 Jul 2025 16:15:05 +0000 Files and hashes: 1: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: 1/EMP6ogATWPFjxZ/WcV1JyFqBhGcivqhBfpIybmrzI=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:66:ea:aa:e2:f4:d9:3b:f4:55:9f:4e:0a:dd:1d:a0:2a:52:67:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Jun 28 05:26:05 2025 GMT Not After : Jul 1 16:15:05 2025 GMT Subject: CN=3C205F038A0B7098DB694B8F674EEC6CDCCD6B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:1d:93:cb:9e:fc:11:9d:99:4d:a2:88:1a: 61:52:ab:bc:81:96:b4:e4:72:f8:5d:3c:86:ba:41: 13:ff:18:66:eb:22:7f:36:b7:16:b0:c4:e6:1e:d3: 1a:0d:ed:49:5c:69:9b:98:d7:c4:46:c7:4d:9e:e9: 7e:89:dd:ef:87:08:63:6d:ec:1a:3e:27:b7:ef:a3: 4b:b8:cb:2b:e2:f3:e2:c3:af:07:06:2d:e9:5c:f8: 7a:57:d9:86:36:5f:50:57:27:3e:73:ff:c6:7f:68: 97:e9:ec:44:d9:7f:3a:09:b2:48:95:74:27:72:c3: 50:f9:be:b5:ae:00:14:85:f0:64:bf:fe:19:39:b7: a0:44:a3:7d:25:54:9c:34:64:5f:fc:1d:06:9f:3f: 70:4e:d3:d2:fe:fd:8f:6d:15:72:c1:55:c3:e5:16: 69:1d:c0:ad:4f:26:17:ae:d9:fb:3e:15:1d:e2:c4: 72:66:b0:06:71:ae:a6:0d:a6:cc:98:71:c2:d8:b3: 2e:5b:1b:74:02:87:cd:e9:10:c5:81:97:16:ec:5d: 1a:14:3c:0e:8d:6c:11:dc:5d:6e:49:83:5d:ec:3a: 54:da:b1:b1:72:c9:13:79:1b:f4:fc:fe:c1:27:ee: 4f:b7:c1:19:c0:e9:a1:f7:f4:12:25:9a:70:b3:33: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:5F:03:8A:0B:70:98:DB:69:4B:8F:67:4E:EC:6C:DC:CD:6B:88 X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8d:f5:26:4b:e3:93:c8:5d:83:a1:7e:11:ab:c5:f0:46:ef: 1f:af:75:23:b4:2c:16:26:90:4a:2a:7c:f5:44:3f:db:25:59: 06:b1:99:7c:d8:eb:18:82:2a:0b:8d:60:61:79:b3:15:91:42: c8:a0:15:54:f0:9e:54:72:3c:85:86:66:36:fe:33:91:57:8c: 00:81:c3:24:ba:5f:b1:93:2d:89:1e:62:6a:19:b2:cd:17:8d: 4d:70:87:9e:37:3b:00:5f:4a:74:6b:bc:cc:9c:a4:c1:2a:1a: 5f:4f:15:01:ee:c3:9a:bb:aa:8d:b9:7d:22:c6:ff:08:03:88: 9c:65:e9:4c:ec:72:e4:c4:a2:2c:29:01:38:b1:47:3f:8e:ce: 2b:bd:23:06:b4:30:f9:1f:35:06:14:ab:a1:34:e5:63:ec:8e: 7b:ee:62:63:40:2d:74:02:4d:ad:c1:0e:0e:6b:16:f9:e5:bd: a0:db:df:42:64:81:d3:bb:3c:20:49:3a:dc:4c:0f:62:b5:73: f5:21:c1:ff:24:10:5e:e8:6b:68:24:d5:51:40:21:27:e9:89: 22:29:b8:a2:42:3b:94:57:fc:ee:bd:78:4b:48:e3:87:07:a8: 34:6e:44:3b:64:e9:29:05:b0:2d:c9:9e:ca:08:8b:e2:b4:1d: fa:23:ee:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmbqquL02Tv0VZ9OCt0doCpSZ/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTA2MjgwNTI2MDVaFw0yNTA3MDExNjE1MDVaMDMxMTAvBgNV BAMTKDNDMjA1RjAzOEEwQjcwOThEQjY5NEI4RjY3NEVFQzZDRENDRDZCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+B2Ty578EZ2ZTaKIGmFSq7yB lrTkcvhdPIa6QRP/GGbrIn82txawxOYe0xoN7UlcaZuY18RGx02e6X6J3e+HCGNt 7Bo+J7fvo0u4yyvi8+LDrwcGLelc+HpX2YY2X1BXJz5z/8Z/aJfp7ETZfzoJskiV dCdyw1D5vrWuABSF8GS//hk5t6BEo30lVJw0ZF/8HQafP3BO09L+/Y9tFXLBVcPl FmkdwK1PJheu2fs+FR3ixHJmsAZxrqYNpsyYccLYsy5bG3QCh83pEMWBlxbsXRoU PA6NbBHcXW5Jg13sOlTasbFyyRN5G/T8/sEn7k+3wRnA6aH39BIlmnCzM1ZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPCBfA4oLcJjbaUuPZ07sbNzNa4gwHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmN9SZL45PIXYOhfhGrxfBG7x+vdSO0LBYm kEoqfPVEP9slWQaxmXzY6xiCKguNYGF5sxWRQsigFVTwnlRyPIWGZjb+M5FXjACB wyS6X7GTLYkeYmoZss0XjU1wh543OwBfSnRrvMycpMEqGl9PFQHuw5q7qo25fSLG /wgDiJxl6UzscuTEoiwpATixRz+Oziu9Iwa0MPkfNQYUq6E05WPsjnvuYmNALXQC Ta3BDg5rFvnlvaDb30JkgdO7PCBJOtxMD2K1c/Uhwf8kEF7oa2gk1VFAISfpiSIp uKJCO5RX/O69eEtI44cHqDRuRDtk6SkFsC3JnsoIi+K0Hfoj7kE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:53 2025 by rpki-client