$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: vrHTBmo60dXjKDU5NRUw6zSkxPpWHIw1zJSz/BJt/50= Subject key identifier: F1:E7:24:A5:71:4E:EF:F8:70:A3:1A:4D:D9:2B:89:F8:52:9A:79:43 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 128C3640F4226763428F01EADDDC964E9C3C942F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 0441 Signing time: Tue 01 Jul 2025 01:00:00 +0000 Manifest this update: Tue 01 Jul 2025 00:55:00 +0000 Manifest next update: Fri 04 Jul 2025 06:28:00 +0000 Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: Hpje1TGx+Rop2OagRV5RjQq5DAVtwk5CzTohWVr3QjI=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: qIkZtUPswOLSzAKIW4faoAC7V/pmv5To5cLrgWfUSjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 06:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8c:36:40:f4:22:67:63:42:8f:01:ea:dd:dc:96:4e:9c:3c:94:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Jul 1 00:55:00 2025 GMT Not After : Jul 4 06:28:00 2025 GMT Subject: CN=F1E724A5714EEFF870A31A4DD92B89F8529A7943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:de:39:f4:91:45:eb:f3:0b:f2:2d:cc:9d: 1e:ea:9f:09:d2:78:99:b5:e0:45:a8:d9:78:36:91: 42:03:a3:a1:04:62:98:c5:c4:9e:8a:83:86:21:0f: c1:c9:11:2e:59:84:f0:9c:76:e5:16:54:4f:a9:b4: 57:38:17:03:cd:13:48:c2:1b:9e:56:9e:17:a2:2b: 0e:1b:16:d4:96:6d:25:58:a5:46:22:b9:e7:64:92: e4:3e:44:84:01:d5:6b:9e:9d:b5:c9:b5:03:5c:9d: eb:5b:64:e4:a1:fa:f5:eb:b2:7f:41:d3:6b:03:e0: 0b:c9:26:61:03:7d:24:3e:a9:ab:e1:61:bb:f2:32: 95:38:d7:7e:db:cd:76:9a:76:df:17:8b:1d:76:13: a1:d5:c1:ca:9d:57:2f:3c:b1:2f:45:e7:d8:61:2d: 72:1a:be:ca:c9:5e:d6:f9:bc:7d:1d:c2:c6:9d:38: c3:db:e2:b2:f1:1a:25:46:b2:d8:a9:88:2b:3c:e5: ac:f3:ef:6f:a2:4b:6c:9e:5d:e0:0f:85:87:b9:d7: ff:e2:d6:08:d2:a9:d4:ba:e8:43:a8:57:25:18:09: 5e:ef:ea:8b:44:eb:a5:00:41:77:73:5d:6c:d3:81: 1e:3d:f0:90:db:3c:45:bc:24:77:31:28:41:53:b4: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E7:24:A5:71:4E:EF:F8:70:A3:1A:4D:D9:2B:89:F8:52:9A:79:43 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d3:5f:af:62:02:4c:71:77:b6:55:78:26:9f:d9:83:66:29: ee:7e:29:b6:91:0a:7e:8e:9d:17:98:65:21:a3:cc:1b:95:ca: 58:72:1e:8c:64:6e:b1:0c:73:74:a6:04:85:b5:33:a6:8b:d8: 38:a8:4f:c7:39:36:7b:76:be:77:b4:aa:ff:6a:d1:f8:e3:6c: ab:2b:5b:e1:c5:92:55:29:f7:6d:b0:c3:04:82:fb:d2:ec:de: 0f:8d:ae:7e:d0:8f:29:f4:36:86:6d:4d:85:90:cb:75:5d:c5: 70:e0:0c:f0:f0:d3:3f:ab:ff:0e:d9:7d:0a:e7:9e:44:7a:a3: 03:57:46:db:6f:da:50:d5:b0:80:ad:25:f2:86:73:dd:5a:06: a9:a5:2a:05:51:12:62:6c:8c:0b:28:0f:bc:32:bc:f5:92:71: f7:61:65:3d:f6:90:50:71:57:b2:55:13:ec:16:c8:1a:68:68: cb:78:39:c1:64:6e:00:91:20:f0:01:dc:d3:18:f6:89:08:3b: c0:2c:0b:7f:45:9a:7e:e0:a5:3f:21:8c:a3:19:cc:23:33:53: a0:5b:01:cf:4c:81:55:df:ee:13:60:6a:a3:e7:49:ad:c1:0b: 55:ef:13:75:8c:62:cf:4a:11:fb:5d:6c:31:1e:4c:5a:2e:7f: 5d:c8:9d:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEow2QPQiZ2NCjwHq3dyWTpw8lC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTA3MDEwMDU1MDBaFw0yNTA3MDQwNjI4MDBaMDMxMTAvBgNV BAMTKEYxRTcyNEE1NzE0RUVGRjg3MEEzMUE0REQ5MkI4OUY4NTI5QTc5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozd459JFF6/ML8i3MnR7qnwnS eJm14EWo2Xg2kUIDo6EEYpjFxJ6Kg4YhD8HJES5ZhPCcduUWVE+ptFc4FwPNE0jC G55WnheiKw4bFtSWbSVYpUYiuedkkuQ+RIQB1WuenbXJtQNcnetbZOSh+vXrsn9B 02sD4AvJJmEDfSQ+qavhYbvyMpU4137bzXaadt8Xix12E6HVwcqdVy88sS9F59hh LXIavsrJXtb5vH0dwsadOMPb4rLxGiVGstipiCs85azz72+iS2yeXeAPhYe51//i 1gjSqdS66EOoVyUYCV7v6otE66UAQXdzXWzTgR498JDbPEW8JHcxKEFTtBQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eckpXFO7/hwoxpN2SuJ+FKaeUMwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPTX69iAkxxd7ZVeCaf2YNmKe5+KbaRCn6O nReYZSGjzBuVylhyHoxkbrEMc3SmBIW1M6aL2DioT8c5Nnt2vne0qv9q0fjjbKsr W+HFklUp922wwwSC+9Ls3g+Nrn7Qjyn0NoZtTYWQy3VdxXDgDPDw0z+r/w7ZfQrn nkR6owNXRttv2lDVsICtJfKGc91aBqmlKgVREmJsjAsoD7wyvPWScfdhZT32kFBx V7JVE+wWyBpoaMt4OcFkbgCRIPAB3NMY9okIO8AsC39Fmn7gpT8hjKMZzCMzU6Bb Ac9MgVXf7hNgaqPnSa3BC1XvE3WMYs9KEftdbDEeTFouf13IneM= -----END CERTIFICATE-----Generated at Thu Jul 3 03:44:21 2025 by rpki-client