$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft File: A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json) Hash identifier: JO1sU3bZYIT+wKEmqP+uyDQLQKov+Q0D9cgVAGl+mpw= Subject key identifier: D3:40:1C:ED:83:0A:33:51:B8:B0:3A:02:68:26:43:7B:A3:8D:DC:4A Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Certificate serial: 2AB40241391F774DA6DEF124B7995C171438711D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft Manifest number: 018C Signing time: Fri 09 May 2025 05:12:05 +0000 Manifest this update: Fri 09 May 2025 05:07:05 +0000 Manifest next update: Mon 12 May 2025 14:12:05 +0000 Files and hashes: 1: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: dehAdCQa2rj7pyUCMHYZPbkXEG87vkJWPD4EN4G4cvU=) 2: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: KFUWTEUvZvgc2Sp7OplQf3StiF5G7GN7f9NvxoAUowM=) 3: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: ypcPzEgxuhAZl//q6LGnNHwk0yW8VVC20DcNhIStjuY=) 4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: BOpg9hyAPDl8hg69J18XcZBmeLqMIq91C57NuMalFfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b4:02:41:39:1f:77:4d:a6:de:f1:24:b7:99:5c:17:14:38:71:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Validity Not Before: May 9 05:07:05 2025 GMT Not After : May 12 14:12:05 2025 GMT Subject: CN=D3401CED830A3351B8B03A026826437BA38DDC4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:7c:33:df:88:8e:57:35:80:7f:c5:9c:e9: 2f:e0:69:e6:be:cb:74:8e:86:9b:70:66:f2:4a:90: 81:48:55:07:0d:f7:20:5e:9e:ac:1c:a3:1e:bd:81: c8:d3:d4:4f:fb:44:49:be:1e:db:e2:80:7c:30:b4: 3d:1a:79:a3:13:ef:b1:45:58:fa:7a:5e:7f:9f:bf: 5c:f3:fb:78:6e:16:2d:0f:4a:b7:8d:84:83:9d:7f: 67:32:c8:20:49:f6:89:bc:82:57:46:6c:16:5d:cf: 26:08:5c:3f:55:b4:fc:8e:a9:6f:4a:1a:cd:86:6f: fc:85:47:e0:c9:a4:97:36:b0:1b:0c:6a:a6:28:07: 79:1a:2c:9a:96:eb:fb:2e:2d:f6:0b:cd:6f:73:68: fd:5c:f0:66:72:fc:88:73:98:83:6a:f0:03:e5:03: 1e:30:e1:4a:57:d9:df:58:ec:8f:9c:e5:7d:a8:56: 59:57:8c:f8:fa:95:6c:00:10:45:83:a1:1d:84:4d: 8b:5b:57:6a:42:0b:ba:7b:19:80:d9:fb:11:a3:8b: 6f:54:c7:1a:56:11:c3:2b:c4:84:83:30:19:6b:1f: d8:cf:0f:ce:a9:01:0f:4a:97:ed:2e:a4:d9:dd:19: 94:bc:90:4b:a9:4e:7d:57:8d:e2:a3:6f:40:fa:cc: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:1C:ED:83:0A:33:51:B8:B0:3A:02:68:26:43:7B:A3:8D:DC:4A X509v3 Authority Key Identifier: keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:9b:44:fa:78:cc:bc:2c:09:6f:40:e9:18:e1:7c:44:d7: 18:47:be:8b:32:f1:e4:fe:0f:8c:60:0f:9e:45:3d:a8:73:03: ac:d7:6e:35:9f:c6:16:35:00:5e:73:4e:ea:9b:06:01:ad:6e: a0:f9:24:f7:03:1c:1c:5c:d9:a8:2f:1d:1f:e6:95:08:37:f2: c8:04:34:84:38:94:4c:51:bc:81:64:4f:bb:b5:e5:ab:17:96: 96:1c:6a:3e:c8:d5:cf:c1:0c:5d:da:3d:3b:10:0d:f9:50:5e: 05:72:e5:11:67:d9:c6:c3:3f:ca:dd:27:75:89:54:d2:ce:d7: 28:e8:20:47:79:18:62:f1:5d:30:81:26:73:f8:21:b9:40:62: 0f:b4:3e:31:d6:c0:d5:f8:04:ce:3d:e6:71:67:c4:df:29:9d: 6d:9f:8f:30:c6:b0:93:8f:21:9b:82:bf:84:6a:92:b1:71:17: 5d:8e:68:eb:70:31:d9:4f:ca:b4:ce:f4:51:05:c1:1f:69:be: bd:86:9d:14:cc:a3:42:60:b2:98:44:24:f2:04:55:21:b6:59: 51:3b:6b:2e:28:75:a4:fc:44:70:2f:b3:f6:a3:76:bf:a5:4e: 14:b2:d3:f2:94:b9:97:ca:93:62:36:b6:2f:c5:e6:b7:37:75: 9e:d8:37:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrQCQTkfd02m3vEkt5lcFxQ4cR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQw NjFEN0QyNzAeFw0yNTA1MDkwNTA3MDVaFw0yNTA1MTIxNDEyMDVaMDMxMTAvBgNV BAMTKEQzNDAxQ0VEODMwQTMzNTFCOEIwM0EwMjY4MjY0MzdCQTM4RERDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYaXwz34iOVzWAf8Wc6S/gaea+ y3SOhptwZvJKkIFIVQcN9yBenqwcox69gcjT1E/7REm+HtvigHwwtD0aeaMT77FF WPp6Xn+fv1zz+3huFi0PSreNhIOdf2cyyCBJ9om8gldGbBZdzyYIXD9VtPyOqW9K Gs2Gb/yFR+DJpJc2sBsMaqYoB3kaLJqW6/suLfYLzW9zaP1c8GZy/IhzmINq8APl Ax4w4UpX2d9Y7I+c5X2oVllXjPj6lWwAEEWDoR2ETYtbV2pCC7p7GYDZ+xGji29U xxpWEcMrxISDMBlrH9jPD86pAQ9Kl+0upNndGZS8kEupTn1XjeKjb0D6zNM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00Ac7YMKM1G4sDoCaCZDe6ON3EowHwYDVR0j BBgwFoAUpiIC+IzmHWvUcZX7NhA83QYdfScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDczODMxNC1hOTc1LTRmZDEtOWJjOS01MjEzOGY4M2I1NmUvMC9BNjIyMDJGODhD RTYxRDZCRDQ3MTk1RkIzNjEwM0NERDA2MUQ3RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQwNjFE N0QyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDND REQwNjFEN0QyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9am0T6eMy8LAlvQOkY4XxE1xhHvosy8eT+ D4xgD55FPahzA6zXbjWfxhY1AF5zTuqbBgGtbqD5JPcDHBxc2agvHR/mlQg38sgE NIQ4lExRvIFkT7u15asXlpYcaj7I1c/BDF3aPTsQDflQXgVy5RFn2cbDP8rdJ3WJ VNLO1yjoIEd5GGLxXTCBJnP4IblAYg+0PjHWwNX4BM495nFnxN8pnW2fjzDGsJOP IZuCv4RqkrFxF12OaOtwMdlPyrTO9FEFwR9pvr2GnRTMo0JgsphEJPIEVSG2WVE7 ay4odaT8RHAvs/ajdr+lThSy0/KUuZfKk2I2ti/F5rc3dZ7YN3w= -----END CERTIFICATE-----Generated at Sat May 10 12:27:29 2025 by rpki-client