$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: nwJfUE+pr+CtHJYmIzbWOV99CnwsPLzVEN6E+BC3VBI= Subject key identifier: E1:14:83:81:67:F6:3F:09:3A:E1:8F:D3:DB:3A:DD:93:75:63:FE:C6 Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 64BDB4C582097A6764508D997251472041A8A6A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 015D Signing time: Mon 05 May 2025 06:01:05 +0000 Manifest this update: Mon 05 May 2025 05:56:05 +0000 Manifest next update: Thu 08 May 2025 14:14:05 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: LNK4R6NM4xXkR3WoknM7Uaar3ZMxd63hz5zgMhrC31g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bd:b4:c5:82:09:7a:67:64:50:8d:99:72:51:47:20:41:a8:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: May 5 05:56:05 2025 GMT Not After : May 8 14:14:05 2025 GMT Subject: CN=E114838167F63F093AE18FD3DB3ADD937563FEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:da:8a:97:d3:3d:29:bd:f9:88:d4:9a:40: ec:97:e3:92:84:f4:e8:98:c0:37:e8:3d:34:b7:1e: 52:6e:70:d7:9f:8e:0b:06:95:79:fd:58:81:fb:64: 87:7d:7f:c4:04:67:a7:69:2a:24:56:8f:0e:74:ca: 1f:70:c5:99:c7:76:17:42:e4:61:17:45:e3:31:4f: b5:32:f2:b1:d2:5d:ac:d3:9b:f0:e0:3b:2e:78:c5: c5:6b:81:18:96:d0:4d:fd:0a:ce:70:de:be:29:be: e8:6e:e9:df:47:77:2f:1d:b7:6e:4a:57:7d:dd:f7: 79:b0:3d:6c:04:3b:f8:40:94:c6:4a:70:7d:06:97: b3:4e:1b:9f:2b:79:ef:b2:33:51:b2:1b:b0:0e:0f: 3e:8c:bd:c2:b4:7a:20:4e:18:fd:77:fd:f8:13:df: 30:44:19:e0:83:56:52:e2:34:c4:2e:f1:47:12:40: fa:96:ab:97:94:b2:ac:65:ba:ac:c4:50:d1:fe:f6: 1e:dd:c7:3b:d2:d6:b9:05:83:d3:39:43:ec:e4:0f: 28:a2:8d:fb:a3:a0:bc:6f:f2:95:39:e4:e5:7f:1b: 61:82:13:8a:23:5e:a2:da:4c:e9:33:f5:77:01:ee: 86:b6:1a:40:5b:f6:64:0b:14:95:0c:8b:95:bb:b1: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:14:83:81:67:F6:3F:09:3A:E1:8F:D3:DB:3A:DD:93:75:63:FE:C6 X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f5:9d:94:01:bf:d1:4a:fe:4d:33:7c:f0:67:c5:47:8e:eb: 9e:34:e0:18:fc:89:80:fa:3a:41:8c:94:4a:4b:85:81:94:87: 24:3e:a9:41:e4:0b:38:c3:30:89:90:42:9e:1e:46:a3:b1:db: d2:82:b7:d6:38:05:26:31:74:90:4d:75:4b:9b:22:4d:a8:05: 7e:49:ec:62:54:35:a6:fa:37:00:39:15:48:25:78:3f:74:6a: 74:22:29:87:01:22:ef:90:f0:5f:46:47:63:af:17:8e:4e:b8: 66:e1:8c:f0:50:89:1a:26:e6:7c:6b:03:91:46:14:78:99:89: a3:de:97:c9:3f:62:0b:97:e5:77:29:4d:aa:27:a6:f8:c1:16: 6b:b0:df:0f:d5:0c:82:1b:f2:f3:7b:5f:45:97:1c:59:1d:42: 47:bd:72:3e:43:86:31:a4:20:f5:6b:b9:60:c4:ce:f5:0b:a1: 37:90:fa:d7:55:f9:e5:34:f4:c7:de:5b:ce:7c:05:f7:11:60: a5:8f:0f:4a:86:a5:a8:36:4a:1c:96:14:54:3b:a1:1b:1e:7c: 0e:88:24:a1:09:95:e4:37:ab:3e:45:56:ec:80:3e:fe:45:fb: f8:0d:18:58:77:c8:f8:d7:4c:5e:e7:09:5a:84:b7:e8:7d:ef: 80:08:e5:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL20xYIJemdkUI2ZclFHIEGopqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTA1MDUwNTU2MDVaFw0yNTA1MDgxNDE0MDVaMDMxMTAvBgNV BAMTKEUxMTQ4MzgxNjdGNjNGMDkzQUUxOEZEM0RCM0FERDkzNzU2M0ZFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RtqKl9M9Kb35iNSaQOyX45KE 9OiYwDfoPTS3HlJucNefjgsGlXn9WIH7ZId9f8QEZ6dpKiRWjw50yh9wxZnHdhdC 5GEXReMxT7Uy8rHSXazTm/DgOy54xcVrgRiW0E39Cs5w3r4pvuhu6d9Hdy8dt25K V33d93mwPWwEO/hAlMZKcH0Gl7NOG58ree+yM1GyG7AODz6MvcK0eiBOGP13/fgT 3zBEGeCDVlLiNMQu8UcSQPqWq5eUsqxluqzEUNH+9h7dxzvS1rkFg9M5Q+zkDyii jfujoLxv8pU55OV/G2GCE4ojXqLaTOkz9XcB7oa2GkBb9mQLFJUMi5W7sd+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4RSDgWf2Pwk64Y/T2zrdk3Vj/sYwHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD1nZQBv9FK/k0zfPBnxUeO65404Bj8iYD6 OkGMlEpLhYGUhyQ+qUHkCzjDMImQQp4eRqOx29KCt9Y4BSYxdJBNdUubIk2oBX5J 7GJUNab6NwA5FUgleD90anQiKYcBIu+Q8F9GR2OvF45OuGbhjPBQiRom5nxrA5FG FHiZiaPel8k/YguX5XcpTaonpvjBFmuw3w/VDIIb8vN7X0WXHFkdQke9cj5DhjGk IPVruWDEzvULoTeQ+tdV+eU09MfeW858BfcRYKWPD0qGpag2ShyWFFQ7oRsefA6I JKEJleQ3qz5FVuyAPv5F+/gNGFh3yPjXTF7nCVqEt+h974AI5f4= -----END CERTIFICATE-----Generated at Tue May 6 12:36:45 2025 by rpki-client