$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: OcWxzxtM4HqrMx/+6igWadXrydZ7oOjADkuPmQaweqI= Subject key identifier: D2:DC:8F:6C:18:B4:D8:3F:62:C8:37:D4:A1:25:BC:C2:19:A5:18:CD Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 48FCEC394AFB56F18B514E36E233E4449E2F76D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 0177 Signing time: Tue 01 Jul 2025 04:50:39 +0000 Manifest this update: Tue 01 Jul 2025 04:45:39 +0000 Manifest next update: Fri 04 Jul 2025 13:15:39 +0000 Files and hashes: 1: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 2: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 3: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 4: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: YNIE/Gvo31m5QiguEQEQpcY54WBW67zHdzIEd0aIW5U=) 5: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) 6: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) 7: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: ETGqi4em3d7iFPvTTbLzNEGHVb50jTVFKGpxmfQ15GI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fc:ec:39:4a:fb:56:f1:8b:51:4e:36:e2:33:e4:44:9e:2f:76:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Jul 1 04:45:39 2025 GMT Not After : Jul 4 13:15:39 2025 GMT Subject: CN=D2DC8F6C18B4D83F62C837D4A125BCC219A518CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:af:27:7e:62:b3:93:d6:e2:79:35:44:72: cf:3c:99:ba:2c:62:a4:6b:3f:2d:31:ac:6f:d2:a1: dc:04:d5:43:c2:1c:da:8d:d1:ed:6e:53:e1:67:f1: bc:15:a8:e7:bd:e5:db:d8:ab:c5:70:3a:e6:88:9e: 96:10:c1:62:93:31:d5:af:aa:1c:08:2e:ee:05:5b: 7b:db:f4:fd:49:8d:eb:53:56:2a:d3:70:b0:eb:49: 6f:8e:a2:2f:3c:ab:b9:a2:85:72:56:ee:de:20:34: df:f8:63:b8:64:c9:d3:f3:2b:0f:59:3d:4b:08:01: 53:af:79:c5:33:b8:68:32:b3:a4:43:79:0e:28:90: 89:96:bd:4e:b4:3e:3a:b6:d5:84:77:2d:84:60:fa: 13:70:43:97:d5:52:17:f9:90:56:b1:40:8f:64:c3: 7f:ef:88:cf:a1:24:76:2e:2e:36:59:c8:c1:c5:78: 88:44:a8:88:2b:75:32:e0:8c:8f:87:62:97:ea:5c: d4:88:07:6e:14:0d:86:b5:60:7c:a3:20:f7:0f:8d: 03:58:ff:46:0d:73:f8:3e:d5:4f:9a:73:3a:75:04: d7:db:ae:0d:27:d4:28:43:08:21:04:a3:c4:72:57: e7:ff:9f:a6:64:40:3b:7e:d8:ec:ee:15:5f:88:15: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:8F:6C:18:B4:D8:3F:62:C8:37:D4:A1:25:BC:C2:19:A5:18:CD X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:36:0a:44:c2:0d:de:e8:db:86:8c:31:c8:60:6c:c6:83:cc: 64:e3:ff:03:b7:7c:07:2d:c9:c9:19:ad:fa:8b:e3:73:88:87: 8b:61:38:41:f0:3d:ec:b9:df:38:60:70:2c:a2:98:f2:9f:86: f0:a5:bb:99:3b:f7:39:c5:ac:07:98:38:0b:10:64:2b:a4:c1: 8a:c2:af:ff:08:04:c8:df:c4:d8:8b:d3:63:b5:c4:0e:54:40: 64:a2:3d:21:dd:ce:8e:d4:23:31:5f:42:36:61:51:ea:19:6a: 7a:6b:68:52:54:d3:e4:bc:37:8b:0f:36:3e:f0:8c:04:fa:54: 1e:ff:48:83:9b:21:78:f4:ba:13:b9:fd:0c:b6:d2:5b:99:20: 7c:cc:54:e4:4f:c3:4b:58:c8:e8:81:91:37:af:fc:a9:48:3b: a0:63:40:1a:77:b1:08:65:e1:81:2a:dd:f8:6b:be:7b:1d:41: a1:da:ec:62:d4:db:71:3f:ff:ea:40:5a:34:b6:ff:96:09:3e: e3:eb:a1:5c:22:4f:f4:fb:04:49:7c:d0:14:48:fc:68:6d:47: fd:88:16:c0:3a:1d:63:96:00:98:39:55:fe:f8:cb:9b:d2:9d: ab:2d:dc:ef:ba:f9:9d:9f:4a:ed:03:7a:dc:c3:11:b8:4d:4f: c2:86:f7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPzsOUr7VvGLUU424jPkRJ4vdtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTA3MDEwNDQ1MzlaFw0yNTA3MDQxMzE1MzlaMDMxMTAvBgNV BAMTKEQyREM4RjZDMThCNEQ4M0Y2MkM4MzdENEExMjVCQ0MyMTlBNTE4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYq8nfmKzk9bieTVEcs88mbos YqRrPy0xrG/SodwE1UPCHNqN0e1uU+Fn8bwVqOe95dvYq8VwOuaInpYQwWKTMdWv qhwILu4FW3vb9P1JjetTVirTcLDrSW+Ooi88q7mihXJW7t4gNN/4Y7hkydPzKw9Z PUsIAVOvecUzuGgys6RDeQ4okImWvU60Pjq21YR3LYRg+hNwQ5fVUhf5kFaxQI9k w3/viM+hJHYuLjZZyMHFeIhEqIgrdTLgjI+HYpfqXNSIB24UDYa1YHyjIPcPjQNY /0YNc/g+1U+aczp1BNfbrg0n1ChDCCEEo8RyV+f/n6ZkQDt+2OzuFV+IFdNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tyPbBi02D9iyDfUoSW8whmlGM0wHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI2CkTCDd7o24aMMchgbMaDzGTj/wO3fAct yckZrfqL43OIh4thOEHwPey53zhgcCyimPKfhvClu5k79znFrAeYOAsQZCukwYrC r/8IBMjfxNiL02O1xA5UQGSiPSHdzo7UIzFfQjZhUeoZanpraFJU0+S8N4sPNj7w jAT6VB7/SIObIXj0uhO5/Qy20luZIHzMVORPw0tYyOiBkTev/KlIO6BjQBp3sQhl 4YEq3fhrvnsdQaHa7GLU23E//+pAWjS2/5YJPuProVwiT/T7BEl80BRI/GhtR/2I FsA6HWOWAJg5Vf74y5vSnast3O+6+Z2fSu0DetzDEbhNT8KG9yU= -----END CERTIFICATE-----Generated at Wed Jul 2 15:03:38 2025 by rpki-client