$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: Y+J0FBa6PCUA33KSitpc0zmc8MRSLYYs1JT3kVb6aLc= Subject key identifier: 9F:59:DC:42:CA:37:98:C5:C3:44:AD:F1:7B:33:B0:71:9E:2B:CF:D6 Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 4B911AEF4A2A93B68C07D486D1D13055584B368F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 0196 Signing time: Mon 30 Jun 2025 03:51:45 +0000 Manifest this update: Mon 30 Jun 2025 03:46:45 +0000 Manifest next update: Thu 03 Jul 2025 04:33:45 +0000 Files and hashes: 1: 3130332e3135302e3232362e302f32342d3234203d3e20313430343032.roa (hash: rrPHzA78yuwvUrOHC735jgsht0uhyJKhl6X4YZMdm8Q=) 2: 3130332e3135302e3232372e302f32342d3234203d3e20313430343032.roa (hash: 2LrW1zipw+qgfMNeHCf0k3gRVyNP/ytxbK452Dc6wXQ=) 3: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: quj5hoFIBfguHpQG2YnqkqtW60Lo6gRvQFmLiI6Fn/g=) 4: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: xEKvL1Sy6gjieKkSQRdg2opwP1NrCxUV9PFI8nvYCrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:91:1a:ef:4a:2a:93:b6:8c:07:d4:86:d1:d1:30:55:58:4b:36:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Jun 30 03:46:45 2025 GMT Not After : Jul 3 04:33:45 2025 GMT Subject: CN=9F59DC42CA3798C5C344ADF17B33B0719E2BCFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:c8:5a:c6:4f:f5:06:e9:21:c8:b1:c0:6e: a9:ea:69:7b:90:ff:62:db:74:33:ce:4c:b9:89:0d: 6d:13:96:78:0d:b4:8c:a7:3e:5e:1d:6f:47:29:69: 08:10:d2:bf:9d:32:9f:4d:eb:18:52:1b:fe:6d:05: 60:f0:3f:09:0a:3a:bf:31:c5:00:cb:f9:e0:fb:d7: eb:10:91:2a:c1:bf:88:5a:89:e9:fb:6f:4c:3f:4d: f3:d3:48:1d:ab:e9:7f:76:f8:ff:ac:1f:54:a9:47: fb:f2:93:b2:19:80:a0:db:0b:ac:4f:59:f4:00:06: 6a:df:49:1d:74:a8:5f:4f:33:b3:3a:7f:60:66:4a: 0b:00:15:a8:d1:6f:eb:20:68:94:9e:35:61:3f:b0: 97:49:6e:1a:ff:5e:e8:0c:e4:81:48:fc:dc:4a:b4: 8d:b7:d1:54:71:34:4d:4b:68:75:13:7d:45:ad:be: 7c:6c:95:1b:50:76:51:5e:fe:ef:37:35:a7:87:87: 9d:4c:a0:d1:32:ac:05:55:b2:44:ae:cf:68:f4:9b: 26:1b:70:24:dd:b8:28:e6:03:93:e7:4c:10:8e:6b: 15:fb:9e:1b:cd:81:04:36:47:55:43:61:72:64:30: 48:e2:f7:8f:63:82:cf:7c:40:50:a7:2b:ae:10:3f: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:59:DC:42:CA:37:98:C5:C3:44:AD:F1:7B:33:B0:71:9E:2B:CF:D6 X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:00:ad:8f:d9:23:d6:3f:9c:e1:39:fa:8a:4c:4f:5a:64:a8: 17:84:f8:36:5c:97:3c:cc:e3:9c:24:df:50:92:10:b4:bf:8b: c2:c9:8e:9d:ff:fc:ed:b3:cf:4d:35:9f:b5:0a:82:41:b3:2a: c5:f9:84:3e:73:39:5c:56:12:32:19:de:0c:fb:d9:1b:77:c4: cf:23:d6:3f:bc:7a:72:6a:c3:ab:83:0c:51:0b:30:55:89:40: f5:90:cd:70:f7:0e:2d:e4:d9:f8:b6:fe:92:74:11:bd:d5:1b: ef:bc:c4:59:44:46:2b:95:ef:ee:12:44:94:b3:2f:19:0c:05: c0:34:55:9b:df:a9:ac:ce:45:dd:3b:c9:c3:3f:4f:ea:cf:52: 8e:82:68:f6:ac:cb:fd:6e:f0:79:a6:dc:89:2e:fe:1c:66:6d: 3b:11:1d:0d:79:b6:76:78:c5:cf:ef:59:3d:12:f5:e5:be:04: 9f:a3:7d:70:bf:bc:ac:ba:c5:ca:85:f3:86:8d:a9:f2:f7:62: ec:e7:3e:f0:0d:6e:0c:76:46:23:1b:59:f8:b4:74:f5:da:11: ce:62:18:2b:bc:c0:70:4f:6b:bc:e4:17:c4:4b:d6:d5:11:40: 03:8d:ab:d1:96:e2:4d:e7:e3:85:29:99:9f:11:6c:ad:41:ee: eb:15:ea:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5Ea70oqk7aMB9SG0dEwVVhLNo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTA2MzAwMzQ2NDVaFw0yNTA3MDMwNDMzNDVaMDMxMTAvBgNV BAMTKDlGNTlEQzQyQ0EzNzk4QzVDMzQ0QURGMTdCMzNCMDcxOUUyQkNGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDevshaxk/1BukhyLHAbqnqaXuQ /2LbdDPOTLmJDW0TlngNtIynPl4db0cpaQgQ0r+dMp9N6xhSG/5tBWDwPwkKOr8x xQDL+eD71+sQkSrBv4haien7b0w/TfPTSB2r6X92+P+sH1SpR/vyk7IZgKDbC6xP WfQABmrfSR10qF9PM7M6f2BmSgsAFajRb+sgaJSeNWE/sJdJbhr/XugM5IFI/NxK tI230VRxNE1LaHUTfUWtvnxslRtQdlFe/u83NaeHh51MoNEyrAVVskSuz2j0myYb cCTduCjmA5PnTBCOaxX7nhvNgQQ2R1VDYXJkMEji949jgs98QFCnK64QP7NHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn1ncQso3mMXDRK3xezOwcZ4rz9YwHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMArY/ZI9Y/nOE5+opMT1pkqBeE+DZclzzM 45wk31CSELS/i8LJjp3//O2zz001n7UKgkGzKsX5hD5zOVxWEjIZ3gz72Rt3xM8j 1j+8enJqw6uDDFELMFWJQPWQzXD3Di3k2fi2/pJ0Eb3VG++8xFlERiuV7+4SRJSz LxkMBcA0VZvfqazORd07ycM/T+rPUo6CaPasy/1u8Hmm3Iku/hxmbTsRHQ15tnZ4 xc/vWT0S9eW+BJ+jfXC/vKy6xcqF84aNqfL3YuznPvANbgx2RiMbWfi0dPXaEc5i GCu8wHBPa7zkF8RL1tURQAONq9GW4k3n44UpmZ8RbK1B7usV6gc= -----END CERTIFICATE-----Generated at Wed Jul 2 04:07:33 2025 by rpki-client