$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: oyaRHPDACw3lA6r4Dwms0hI3THpThwoYwK+4HhpSJg0= Subject key identifier: C5:62:E5:4F:AA:BF:70:33:21:BB:DB:55:1A:87:4E:85:48:A6:DC:9E Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 27BAFA4593DC04ABC9138D5ED0C7AB907982FCEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 023D Signing time: Mon 12 May 2025 02:12:20 +0000 Manifest this update: Mon 12 May 2025 02:07:20 +0000 Manifest next update: Thu 15 May 2025 09:26:20 +0000 Files and hashes: 1: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: qIgxQq1fSGkZnL/a7DJKhqA06ayVQSGzBqusW1ZSZx8=) 2: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: TnO3pGOiHJftQOd6DXKryLv7FvQHNCeG0oziJLeZSbA=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: +MtI3Paga95mLoPbEq+emS8LducTIoyRFm8yliuN86s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 09:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ba:fa:45:93:dc:04:ab:c9:13:8d:5e:d0:c7:ab:90:79:82:fc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: May 12 02:07:20 2025 GMT Not After : May 15 09:26:20 2025 GMT Subject: CN=C562E54FAABF703321BBDB551A874E8548A6DC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:a2:52:30:5e:f3:4c:47:ca:4f:31:ce:e7: fe:50:bf:67:46:b1:be:54:9c:e4:a1:6d:f7:92:0c: 0f:10:4b:3b:f2:b7:32:b4:54:92:d6:ed:16:88:d5: 31:4e:70:70:4c:c9:19:15:2c:09:fb:28:4b:10:ce: a6:c0:ee:37:d7:6b:eb:ea:9f:38:35:d5:94:db:41: 6a:9e:af:05:c9:c8:f6:a5:8f:64:42:97:b1:42:92: de:0a:ef:b0:f0:70:64:01:d7:d1:92:d1:85:af:c4: 11:56:d7:c3:6b:ce:ea:15:df:a8:93:80:78:df:ee: e7:48:fe:3c:ca:b2:78:88:e3:e4:99:32:f7:60:0f: c6:2f:4e:9f:20:b4:a3:5f:57:ed:5f:78:29:3e:c1: 49:36:99:09:aa:01:88:26:5a:15:76:c6:43:e9:ef: 18:a2:8d:ae:a2:7c:bc:d5:87:9a:25:3a:0a:58:d8: a8:f1:18:56:7f:85:00:05:c4:75:6c:41:a1:1b:99: a0:7b:64:2c:6d:07:97:81:73:66:73:e6:62:fa:32: fe:11:af:06:89:c2:6f:30:ff:0c:f8:b0:bb:b9:33: ec:a6:79:2b:45:3e:a8:1b:03:c4:61:f4:58:55:bc: 59:86:a0:76:c3:c4:eb:49:aa:e4:da:5f:c9:b6:74: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:62:E5:4F:AA:BF:70:33:21:BB:DB:55:1A:87:4E:85:48:A6:DC:9E X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7c:13:62:ba:35:d0:0d:97:fc:9c:c7:67:91:a0:1a:40:9b: 71:f4:c0:1c:41:41:2c:80:d4:ea:2b:2d:af:52:ab:16:a0:db: 48:08:e3:ee:95:a4:43:41:fd:87:ae:5d:3a:19:e0:ff:81:2c: f8:c1:81:8b:93:c2:68:cf:9e:84:8d:93:80:60:23:6e:82:08: 2c:5b:6d:6f:cc:f8:b2:57:91:b9:d2:0a:fb:a2:61:ad:e4:b0: 02:af:37:e7:70:4c:61:b7:fa:52:7c:70:2a:77:01:e7:d2:6f: e9:c7:0e:49:4e:b0:51:e7:9a:59:10:19:6b:0d:fc:75:28:17: 6d:51:e4:23:54:71:40:60:eb:44:45:c2:a7:0d:27:82:9f:72: 94:26:41:5d:21:92:74:bb:3f:16:35:4a:4c:03:b5:89:4d:63: d9:9e:13:b3:13:ed:ef:80:f1:da:eb:0d:ce:65:15:5d:74:66: 82:84:af:56:86:e8:71:f0:da:12:0f:21:f6:9f:65:bd:ba:f8: a1:36:c0:ce:85:f2:5c:44:30:30:d0:6c:0a:44:95:23:45:f4: 51:0c:66:f0:f4:d2:7a:e1:34:f7:a3:41:29:53:b9:34:86:91: 8a:6c:c9:29:a6:a5:16:64:83:cc:98:19:ea:be:4f:73:ac:8d: 7d:9a:bb:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7r6RZPcBKvJE41e0MerkHmC/O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTA1MTIwMjA3MjBaFw0yNTA1MTUwOTI2MjBaMDMxMTAvBgNV BAMTKEM1NjJFNTRGQUFCRjcwMzMyMUJCREI1NTFBODc0RTg1NDhBNkRDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpqJSMF7zTEfKTzHO5/5Qv2dG sb5UnOShbfeSDA8QSzvytzK0VJLW7RaI1TFOcHBMyRkVLAn7KEsQzqbA7jfXa+vq nzg11ZTbQWqerwXJyPalj2RCl7FCkt4K77DwcGQB19GS0YWvxBFW18NrzuoV36iT gHjf7udI/jzKsniI4+SZMvdgD8YvTp8gtKNfV+1feCk+wUk2mQmqAYgmWhV2xkPp 7xiija6ifLzVh5olOgpY2KjxGFZ/hQAFxHVsQaEbmaB7ZCxtB5eBc2Zz5mL6Mv4R rwaJwm8w/wz4sLu5M+ymeStFPqgbA8Rh9FhVvFmGoHbDxOtJquTaX8m2dIOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWLlT6q/cDMhu9tVGodOhUim3J4wHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx8E2K6NdANl/ycx2eRoBpAm3H0wBxBQSyA 1OorLa9Sqxag20gI4+6VpENB/YeuXToZ4P+BLPjBgYuTwmjPnoSNk4BgI26CCCxb bW/M+LJXkbnSCvuiYa3ksAKvN+dwTGG3+lJ8cCp3AefSb+nHDklOsFHnmlkQGWsN /HUoF21R5CNUcUBg60RFwqcNJ4KfcpQmQV0hknS7PxY1SkwDtYlNY9meE7MT7e+A 8drrDc5lFV10ZoKEr1aG6HHw2hIPIfafZb26+KE2wM6F8lxEMDDQbApElSNF9FEM ZvD00nrhNPejQSlTuTSGkYpsySmmpRZkg8yYGeq+T3OsjX2au/8= -----END CERTIFICATE-----Generated at Mon May 12 23:55:57 2025 by rpki-client