$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: /+pfQq8r0n7D9xuHtve6+cfKmevFZKqWUVmy7RCcCoc= Subject key identifier: 09:FB:0D:62:38:F7:AB:54:C8:38:F7:FC:98:3B:3E:1F:BB:BA:30:AA Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 5E97082ED3B301F421141CE662DFA4E8C4EFD266 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 04B7 Signing time: Fri 27 Jun 2025 11:40:45 +0000 Manifest this update: Fri 27 Jun 2025 11:35:45 +0000 Manifest next update: Mon 30 Jun 2025 19:16:45 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: OKVHNn/fof2nw/W0vPGdyCInf1sE7atwvhqzBeg4ecE=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: hy7MHDWEDjxGDvk+/qutfkgc+zuRrswWd+OhRhF5XYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:97:08:2e:d3:b3:01:f4:21:14:1c:e6:62:df:a4:e8:c4:ef:d2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Jun 27 11:35:45 2025 GMT Not After : Jun 30 19:16:45 2025 GMT Subject: CN=09FB0D6238F7AB54C838F7FC983B3E1FBBBA30AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:1d:0a:7d:ef:0b:8e:1b:1a:50:22:63:8f: b3:a5:d2:a4:da:8b:49:89:08:b9:e9:e5:33:f9:7b: 94:2c:4a:87:e1:b7:e5:44:93:06:50:c7:14:d1:f3: b0:bd:d1:e1:b1:55:8e:04:70:61:33:a1:b0:a7:2d: c1:41:e8:6c:46:7b:63:39:e9:6c:ab:f0:83:64:80: a2:ca:78:45:c3:ee:88:bd:e2:ca:29:c9:74:5a:13: d8:a4:44:e1:71:4e:93:07:7c:35:16:77:94:a9:38: eb:f4:ae:c0:c6:ed:c9:52:d8:2d:91:fe:9f:40:b7: ad:2d:e7:e3:cd:70:76:c3:fe:e3:31:58:2d:08:18: d9:5d:2a:30:25:e7:9e:9b:21:e1:d3:6c:70:aa:7c: 4b:1c:18:30:e2:c8:79:1b:cb:31:1d:f7:24:ec:d3: 5c:5a:34:e1:4c:3c:33:bf:5e:6a:20:98:9b:5e:06: d0:b4:74:d0:06:9b:a8:02:19:0d:df:7b:37:de:f3: 51:b6:42:07:94:94:a7:79:7e:a5:64:04:52:9a:7e: 3c:4c:2e:5b:cb:76:4a:bb:dc:08:19:31:1f:64:41: e0:0b:af:6a:16:52:4f:0c:70:9f:21:90:0d:0c:98: 3d:d5:57:20:62:c6:89:5e:76:31:ef:be:5f:f9:1d: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FB:0D:62:38:F7:AB:54:C8:38:F7:FC:98:3B:3E:1F:BB:BA:30:AA X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ec:76:46:38:7a:3d:52:ab:0e:a1:aa:d1:05:dd:e9:4d:1d: 69:68:27:50:29:7c:e6:9e:5c:8e:38:08:d6:e5:dc:81:da:48: 4e:f7:b8:52:79:32:78:a0:94:71:72:7a:01:20:19:a9:c5:6a: 78:d4:1d:dc:cc:06:6c:0b:9d:47:68:0b:a1:43:87:72:8f:ce: 07:e3:d5:68:f7:5c:08:4c:60:93:11:25:d2:11:f3:d2:ac:d7: 6b:41:17:71:4a:28:99:44:9d:49:d3:dd:61:68:32:f8:67:0c: d5:7c:29:ec:e9:b5:18:5b:ea:cd:95:9f:24:5a:cf:37:df:f2: b6:88:4b:e2:9c:26:28:17:3e:5a:06:2b:20:19:1b:ec:81:0d: ee:cb:3c:b3:76:66:92:cf:95:68:17:65:ba:31:06:bf:29:bf: 8c:2f:ec:20:35:03:c8:e6:ba:f7:93:91:c2:81:ba:de:7e:d4: a4:e1:8e:47:18:57:9c:18:fb:0f:4d:9a:34:c8:19:fc:3c:53: 4a:71:a0:0e:70:e6:27:8c:ae:cf:c7:e8:4c:4e:4e:61:e0:88: ed:0f:7a:3b:61:64:92:2e:97:ad:55:df:ac:5e:19:ae:21:99: a8:a3:94:b6:d7:a3:27:0b:8c:40:0c:ac:f2:c0:e0:6a:87:2e: 2a:1b:1d:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpcILtOzAfQhFBzmYt+k6MTv0mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNTA2MjcxMTM1NDVaFw0yNTA2MzAxOTE2NDVaMDMxMTAvBgNV BAMTKDA5RkIwRDYyMzhGN0FCNTRDODM4RjdGQzk4M0IzRTFGQkJCQTMwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5x0Kfe8LjhsaUCJjj7Ol0qTa i0mJCLnp5TP5e5QsSofht+VEkwZQxxTR87C90eGxVY4EcGEzobCnLcFB6GxGe2M5 6Wyr8INkgKLKeEXD7oi94sopyXRaE9ikROFxTpMHfDUWd5SpOOv0rsDG7clS2C2R /p9At60t5+PNcHbD/uMxWC0IGNldKjAl556bIeHTbHCqfEscGDDiyHkbyzEd9yTs 01xaNOFMPDO/XmogmJteBtC0dNAGm6gCGQ3fezfe81G2QgeUlKd5fqVkBFKafjxM LlvLdkq73AgZMR9kQeALr2oWUk8McJ8hkA0MmD3VVyBixoledjHvvl/5HV9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCfsNYjj3q1TIOPf8mDs+H7u6MKowHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbsdkY4ej1Sqw6hqtEF3elNHWloJ1ApfOae XI44CNbl3IHaSE73uFJ5MniglHFyegEgGanFanjUHdzMBmwLnUdoC6FDh3KPzgfj 1Wj3XAhMYJMRJdIR89Ks12tBF3FKKJlEnUnT3WFoMvhnDNV8KezptRhb6s2VnyRa zzff8raIS+KcJigXPloGKyAZG+yBDe7LPLN2ZpLPlWgXZboxBr8pv4wv7CA1A8jm uveTkcKBut5+1KThjkcYV5wY+w9NmjTIGfw8U0pxoA5w5ieMrs/H6ExOTmHgiO0P ejthZJIul61V36xeGa4hmaijlLbXoycLjEAMrPLA4GqHLiobHdw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:11:56 2025 by rpki-client