$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: 6bH7xnJh9DwSOa27FScDPYvzTZ9iLBUUeMlqVCNTISo= Subject key identifier: C8:27:E9:D7:FC:C9:FB:98:0B:8A:DB:E7:2F:8A:86:92:02:09:14:61 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 21D38DCD25876CB18F7C5ADFBDF7FD5B0C5DC171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 01FC Signing time: Sun 29 Jun 2025 05:01:37 +0000 Manifest this update: Sun 29 Jun 2025 04:56:37 +0000 Manifest next update: Wed 02 Jul 2025 09:24:37 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: Ff0or0R5M7AeM1rOR/ibYDlDnujqtOmMBryvxEgMYE0=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: cb90IgbeRY+ZdV0xSX9073GatqTysUS22puie2fiUX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d3:8d:cd:25:87:6c:b1:8f:7c:5a:df:bd:f7:fd:5b:0c:5d:c1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Jun 29 04:56:37 2025 GMT Not After : Jul 2 09:24:37 2025 GMT Subject: CN=C827E9D7FCC9FB980B8ADBE72F8A869202091461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:74:9e:3f:59:07:77:2b:54:d7:96:ec:85: 6b:33:f5:8c:67:9c:6b:59:da:e6:32:c1:37:32:6a: 2d:03:d8:0a:aa:fd:c5:9d:1e:8b:ba:79:62:56:ab: 76:c2:e2:29:e7:6a:b1:21:b1:99:f5:25:df:54:c2: 9b:fe:4a:c6:1e:68:aa:c5:93:bb:56:9b:d1:b1:a2: 47:ef:c9:ec:cb:b6:b0:8a:1a:d5:c3:08:a9:f7:8a: 73:23:f6:38:e4:80:e1:31:d0:a6:ee:54:e5:5c:4e: 4c:b8:f2:38:5a:e6:7c:88:bc:84:af:b1:b3:1e:e4: c1:64:0c:c5:17:6f:82:c8:a9:6d:df:e1:59:51:a8: 98:41:f1:79:d3:35:2d:58:9d:ed:11:50:08:93:02: e9:1b:dc:39:ef:24:f0:36:5a:25:92:4e:3e:ee:e2: f6:cd:91:78:57:4d:dc:37:c9:86:ed:c7:1d:de:a8: 76:0c:36:b5:b0:ec:cb:6c:c5:7e:cc:f2:35:92:94: 90:65:3d:2a:8f:df:13:92:40:be:c5:0c:04:58:59: b2:03:fe:74:9b:51:0c:42:a3:bd:0e:19:b8:66:eb: bb:2d:03:95:07:af:fb:c7:c5:3f:30:c0:a6:99:00: cf:a4:4f:97:50:53:f6:8f:aa:eb:5e:7d:bc:70:8c: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:E9:D7:FC:C9:FB:98:0B:8A:DB:E7:2F:8A:86:92:02:09:14:61 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:b5:65:2a:3b:62:8b:53:9f:8c:10:59:91:6d:9f:de:ec: b5:8c:10:7e:10:a8:a9:2c:a2:73:60:f1:26:45:e8:d4:e4:a0: 89:fc:d6:5f:1f:52:dd:69:5c:5f:de:44:c0:9d:fe:74:21:bd: 62:14:cb:07:cb:de:1b:71:1c:87:2a:6c:20:e5:41:3a:98:5d: c9:a2:9a:26:0e:58:01:e3:a4:cc:88:31:ee:4e:4c:ea:e7:bc: f4:52:17:55:65:57:8c:7f:75:15:56:43:0f:87:2d:84:cd:07: cf:dc:20:35:c1:31:bf:6e:ea:54:3f:72:92:f0:93:37:18:0e: 1a:a9:bd:2d:e5:fa:36:1e:5f:05:99:35:d7:b9:e9:cb:c6:76: 08:ff:eb:62:40:f3:d2:95:bf:3e:bb:ae:8b:4e:92:8e:cb:05: ef:87:86:55:64:7f:39:d9:53:3b:5d:3f:e2:36:93:16:cc:cc: 07:c2:33:6a:d2:66:0c:82:b3:4c:61:3d:6a:68:f2:95:d8:41: d1:bb:4f:93:b3:89:86:66:cd:c5:1b:ba:49:53:5c:b5:6d:21: 4f:0f:3f:5e:b0:00:d2:e0:41:45:54:6a:42:39:93:36:57:f4: 3d:d8:89:e2:c0:7d:a0:2a:7f:20:08:a4:dd:79:2f:f9:fe:2c: 79:3c:44:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdONzSWHbLGPfFrfvff9WwxdwXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNTA2MjkwNDU2MzdaFw0yNTA3MDIwOTI0MzdaMDMxMTAvBgNV BAMTKEM4MjdFOUQ3RkNDOUZCOTgwQjhBREJFNzJGOEE4NjkyMDIwOTE0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKnSeP1kHdytU15bshWsz9Yxn nGtZ2uYywTcyai0D2Aqq/cWdHou6eWJWq3bC4innarEhsZn1Jd9Uwpv+SsYeaKrF k7tWm9GxokfvyezLtrCKGtXDCKn3inMj9jjkgOEx0KbuVOVcTky48jha5nyIvISv sbMe5MFkDMUXb4LIqW3f4VlRqJhB8XnTNS1Yne0RUAiTAukb3DnvJPA2WiWSTj7u 4vbNkXhXTdw3yYbtxx3eqHYMNrWw7MtsxX7M8jWSlJBlPSqP3xOSQL7FDARYWbID /nSbUQxCo70OGbhm67stA5UHr/vHxT8wwKaZAM+kT5dQU/aPqutefbxwjF0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCfp1/zJ+5gLitvnL4qGkgIJFGEwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEAtWUqO2KLU5+MEFmRbZ/e7LWMEH4QqKks onNg8SZF6NTkoIn81l8fUt1pXF/eRMCd/nQhvWIUywfL3htxHIcqbCDlQTqYXcmi miYOWAHjpMyIMe5OTOrnvPRSF1VlV4x/dRVWQw+HLYTNB8/cIDXBMb9u6lQ/cpLw kzcYDhqpvS3l+jYeXwWZNde56cvGdgj/62JA89KVvz67rotOko7LBe+HhlVkfznZ UztdP+I2kxbMzAfCM2rSZgyCs0xhPWpo8pXYQdG7T5OziYZmzcUbuklTXLVtIU8P P16wANLgQUVUakI5kzZX9D3YieLAfaAqfyAIpN15L/n+LHk8RCg= -----END CERTIFICATE-----Generated at Tue Jul 1 05:07:03 2025 by rpki-client