$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: 7Pvxn2xPIxMOJ8Y0QyN7ql8rNUcpl23E4dae+Xhz+/4= Subject key identifier: 5B:BC:43:27:FE:EF:85:31:10:58:9E:68:20:F3:4B:16:D2:67:75:A1 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 3117E490D2BDB586B4E20016F6D704CDD8775194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: AD Signing time: Sun 29 Jun 2025 12:02:21 +0000 Manifest this update: Sun 29 Jun 2025 11:57:21 +0000 Manifest next update: Wed 02 Jul 2025 21:00:21 +0000 Files and hashes: 1: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 2: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: QYZovn2mKCxY36iboesLS0Zc9gKuAQTbhW6CnSuBtP4=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:17:e4:90:d2:bd:b5:86:b4:e2:00:16:f6:d7:04:cd:d8:77:51:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Jun 29 11:57:21 2025 GMT Not After : Jul 2 21:00:21 2025 GMT Subject: CN=5BBC4327FEEF853110589E6820F34B16D26775A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:35:6a:a0:9e:18:c9:3e:45:f6:53:30:d7: 60:04:6c:eb:05:6d:05:b9:53:ec:7e:8b:55:67:2e: be:ab:13:b9:b9:2e:af:25:03:15:af:46:cc:73:c6: bb:3d:44:ac:ce:05:5e:6d:b2:d2:35:8e:c4:5f:de: c2:40:8f:cb:a4:e7:ca:71:e9:d5:95:9b:59:21:83: c2:4e:9a:d5:9d:f1:33:3f:bb:cf:c8:cc:6c:7f:9a: be:0e:ad:52:78:96:09:b2:9d:b0:dc:d1:31:e0:cf: d4:b3:2f:7d:f0:5b:5a:c2:e0:91:e3:a5:da:15:de: 81:c5:86:97:3d:17:7e:18:10:0b:a8:ea:36:01:8b: 8c:94:54:c1:7d:b5:3b:da:8b:6c:a4:55:a4:45:58: 92:60:d4:e8:ed:80:8f:74:d4:62:ae:8f:65:71:95: 6d:27:e6:a3:da:20:cf:aa:2a:b1:8d:60:df:0d:80: 73:4d:90:c9:6b:d2:82:5a:5d:17:78:d9:f6:10:81: 30:b0:c4:86:a7:07:c7:4a:88:d5:10:8e:04:24:ae: a1:f6:be:70:24:bf:45:23:9b:f8:1e:f7:0d:97:81: 5a:1c:c1:2f:76:1d:02:31:d0:6e:bf:01:e1:1e:c8: b5:35:2b:97:78:8a:c5:c1:d9:7a:da:6a:b7:4a:e9: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:43:27:FE:EF:85:31:10:58:9E:68:20:F3:4B:16:D2:67:75:A1 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:12:c2:2c:be:cf:5a:ce:2a:44:2c:52:60:d2:17:57:51:73: 4f:bc:8f:4d:b8:43:78:c4:73:29:d0:3f:1d:f5:43:1e:2b:df: 37:e9:e0:18:51:10:73:17:66:dd:fe:3b:86:ed:b6:83:f1:4f: 8a:16:52:16:46:b9:1b:f6:4d:d0:63:4a:e9:be:e6:d0:4d:4e: 95:b7:1f:ec:10:9e:c7:f8:5b:3a:68:98:e9:82:04:fd:ed:b9: 8c:18:e5:c4:bf:7e:11:d2:8a:2b:b2:2c:f6:ba:4d:37:07:ba: fe:70:06:f4:0c:00:ab:03:95:09:a6:0f:5a:09:e6:45:9f:ed: a9:8f:73:0b:65:4e:14:54:38:2d:35:a0:1c:90:54:d1:87:a2: cf:5e:33:0b:d1:97:bf:f2:f9:2c:0e:f2:85:25:5a:ea:a1:0b: b7:2f:d6:3c:67:d8:81:ff:f5:c9:6c:57:94:89:00:7e:4c:db: 8d:4e:53:a8:d2:b8:e9:12:a3:7f:40:ab:83:51:ca:cc:f2:e4: 4d:ec:77:91:24:8e:33:a3:e8:c2:ae:37:2d:ef:87:ab:0a:36: 80:80:69:e3:72:38:d5:2f:30:cd:92:53:6a:da:b7:3d:fa:df: 5a:99:83:f7:3e:5b:2d:77:b2:78:b5:55:b5:18:2f:07:8c:f7: 20:e2:3c:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRfkkNK9tYa04gAW9tcEzdh3UZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTA2MjkxMTU3MjFaFw0yNTA3MDIyMTAwMjFaMDMxMTAvBgNV BAMTKDVCQkM0MzI3RkVFRjg1MzExMDU4OUU2ODIwRjM0QjE2RDI2Nzc1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAzVqoJ4YyT5F9lMw12AEbOsF bQW5U+x+i1VnLr6rE7m5Lq8lAxWvRsxzxrs9RKzOBV5tstI1jsRf3sJAj8uk58px 6dWVm1khg8JOmtWd8TM/u8/IzGx/mr4OrVJ4lgmynbDc0THgz9SzL33wW1rC4JHj pdoV3oHFhpc9F34YEAuo6jYBi4yUVMF9tTvai2ykVaRFWJJg1OjtgI901GKuj2Vx lW0n5qPaIM+qKrGNYN8NgHNNkMlr0oJaXRd42fYQgTCwxIanB8dKiNUQjgQkrqH2 vnAkv0Ujm/ge9w2XgVocwS92HQIx0G6/AeEeyLU1K5d4isXB2XraardK6XgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW7xDJ/7vhTEQWJ5oIPNLFtJndaEwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwSwiy+z1rOKkQsUmDSF1dRc0+8j024Q3jE cynQPx31Qx4r3zfp4BhREHMXZt3+O4bttoPxT4oWUhZGuRv2TdBjSum+5tBNTpW3 H+wQnsf4WzpomOmCBP3tuYwY5cS/fhHSiiuyLPa6TTcHuv5wBvQMAKsDlQmmD1oJ 5kWf7amPcwtlThRUOC01oByQVNGHos9eMwvRl7/y+SwO8oUlWuqhC7cv1jxn2IH/ 9clsV5SJAH5M241OU6jSuOkSo39Aq4NRyszy5E3sd5EkjjOj6MKuNy3vh6sKNoCA aeNyONUvMM2SU2ratz3631qZg/c+Wy13sni1VbUYLweM9yDiPFk= -----END CERTIFICATE-----Generated at Tue Jul 1 11:49:09 2025 by rpki-client