$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json) Hash identifier: 7SaHPUPJ9kCCuLqvKfmXF1+1w2ZKSOJJm7nWyXfnKU4= Subject key identifier: 4A:62:FF:3D:3C:A0:FB:03:B8:15:91:1F:8D:98:82:72:95:93:5B:46 Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Certificate serial: 2D304084E72EC41B2113711DBC590DC75F8BF340 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft Manifest number: DD Signing time: Thu 08 May 2025 23:41:21 +0000 Manifest this update: Thu 08 May 2025 23:36:21 +0000 Manifest next update: Mon 12 May 2025 00:44:21 +0000 Files and hashes: 1: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: RpWiNQy8/wOeeIrDaor+sMkx5EaGWAlKmLI/at2NgT4=) 2: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: BEbcuDcBXUOvG1JEDnhQR+wFj5wcOSbrHpa0B3ddr6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:30:40:84:e7:2e:c4:1b:21:13:71:1d:bc:59:0d:c7:5f:8b:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Validity Not Before: May 8 23:36:21 2025 GMT Not After : May 12 00:44:21 2025 GMT Subject: CN=4A62FF3D3CA0FB03B815911F8D98827295935B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:d3:66:a9:a4:bb:08:63:f4:a9:fb:88:db: 67:15:cd:ab:04:f7:4b:b3:ea:9a:0b:bf:b9:54:65: 59:56:a5:a8:53:c1:ee:97:e1:7a:a1:3e:06:0f:23: 65:1a:b0:e9:10:2c:19:24:e7:f5:37:74:f1:bd:9b: a0:41:3f:06:ab:c4:c7:f7:82:c9:82:da:4f:df:18: 5d:d9:b4:27:a3:5e:e5:38:b5:d6:7c:5e:6f:d7:83: bb:3e:e0:17:ef:f6:fc:32:d3:b7:05:9b:67:07:68: e5:6d:7e:28:c6:0c:9e:4d:da:5a:8a:82:a6:f3:ab: 77:e4:f8:6c:34:f5:4f:74:b7:62:01:23:04:f1:0f: 2e:1a:dd:e7:ed:9b:f7:96:7c:5a:3f:6b:5a:7d:a5: a0:2c:00:0c:be:fa:52:fc:67:00:98:27:4a:49:5b: 04:65:94:9a:36:22:40:90:a8:7d:12:02:40:f3:aa: 28:5b:e6:61:e3:ae:e4:ac:f6:6a:d0:6b:50:99:d6: 72:d4:c0:ee:df:17:0e:31:a5:3f:87:b8:41:7c:81: 57:89:ae:75:12:c9:09:88:d2:2d:3b:9f:68:a2:3b: 8d:76:de:d9:77:e6:0d:03:a0:db:03:ce:d4:90:41: 0d:90:09:14:8d:0b:5e:72:4f:ff:09:bc:61:92:17: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:62:FF:3D:3C:A0:FB:03:B8:15:91:1F:8D:98:82:72:95:93:5B:46 X509v3 Authority Key Identifier: keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:50:e0:90:51:cd:fb:94:09:94:09:36:d5:9f:df:9c:32:e6: b5:09:c7:9f:79:98:bd:be:01:f5:62:88:48:0f:f0:af:c5:5b: b5:b3:26:42:79:4f:5a:07:5b:59:59:06:f4:d9:34:12:95:0d: ca:ec:4d:fd:1f:51:2f:04:b9:9d:84:f4:e0:71:c7:41:d4:88: d2:bc:24:7f:13:26:ff:eb:28:96:d9:cc:6a:60:d2:1c:e2:da: 64:61:c4:43:3f:38:f9:e6:3c:93:f6:5f:b3:38:71:ae:88:1b: 0f:d8:13:4d:78:db:08:d7:73:d4:81:28:5c:58:67:1c:0f:84: 59:bb:1e:83:d1:05:ac:ef:06:cd:e8:ce:74:9b:bc:8a:4c:67: 4b:2e:16:9e:93:03:96:7f:20:1d:08:eb:08:a5:f6:14:04:c9: f2:5b:dc:13:28:12:c7:ef:4d:11:0c:ef:60:7b:6d:5b:f5:7a: fb:ab:b5:30:72:3c:82:26:d2:08:52:7d:f2:8c:57:e8:c7:2c: f1:28:00:01:74:92:ba:ba:25:40:a3:01:d7:b5:84:f6:ef:ca: 08:55:17:82:e9:62:cc:e7:37:5a:08:06:d4:db:e7:43:02:94: eb:dd:7f:a8:91:db:64:04:46:58:8c:ec:18:4b:62:6e:43:5a: 21:5f:a8:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTBAhOcuxBshE3EdvFkNx1+L80AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE OTg5NTU5NjAeFw0yNTA1MDgyMzM2MjFaFw0yNTA1MTIwMDQ0MjFaMDMxMTAvBgNV BAMTKDRBNjJGRjNEM0NBMEZCMDNCODE1OTExRjhEOTg4MjcyOTU5MzVCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++tNmqaS7CGP0qfuI22cVzasE 90uz6poLv7lUZVlWpahTwe6X4XqhPgYPI2UasOkQLBkk5/U3dPG9m6BBPwarxMf3 gsmC2k/fGF3ZtCejXuU4tdZ8Xm/Xg7s+4Bfv9vwy07cFm2cHaOVtfijGDJ5N2lqK gqbzq3fk+Gw09U90t2IBIwTxDy4a3eftm/eWfFo/a1p9paAsAAy++lL8ZwCYJ0pJ WwRllJo2IkCQqH0SAkDzqihb5mHjruSs9mrQa1CZ1nLUwO7fFw4xpT+HuEF8gVeJ rnUSyQmI0i07n2iiO4123tl35g0DoNsDztSQQQ2QCRSNC15yT/8JvGGSF/u3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmL/PTyg+wO4FZEfjZiCcpWTW0YwHwYDVR0j BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5 NTU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEw RUJEOTg5NTU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBQ4JBRzfuUCZQJNtWf35wy5rUJx595mL2+ AfViiEgP8K/FW7WzJkJ5T1oHW1lZBvTZNBKVDcrsTf0fUS8EuZ2E9OBxx0HUiNK8 JH8TJv/rKJbZzGpg0hzi2mRhxEM/OPnmPJP2X7M4ca6IGw/YE0142wjXc9SBKFxY ZxwPhFm7HoPRBazvBs3oznSbvIpMZ0suFp6TA5Z/IB0I6wil9hQEyfJb3BMoEsfv TREM72B7bVv1evurtTByPIIm0ghSffKMV+jHLPEoAAF0krq6JUCjAde1hPbvyghV F4LpYsznN1oIBtTb50MClOvdf6iR22QERliM7BhLYm5DWiFfqFE= -----END CERTIFICATE-----Generated at Sat May 10 11:41:29 2025 by rpki-client