$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: nBO8ATxCS72g5rl2bgtMIJhQUSWFVvg6AMl8tYz795c= Subject key identifier: 8C:0D:16:F1:EB:7C:E0:AD:35:FB:61:CE:09:8E:7D:AB:5F:50:CD:17 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 52607AB2C8827A4B13C138A018AE4F17FA94B1E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: B8 Signing time: Tue 01 Jul 2025 19:12:25 +0000 Manifest this update: Tue 01 Jul 2025 19:07:25 +0000 Manifest next update: Sat 05 Jul 2025 04:09:25 +0000 Files and hashes: 1: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: Gqurr3H9FfKVYRJ0ibAOoDnUOBFVidGWQdVTZ0rVs6A=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 4: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 04:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:60:7a:b2:c8:82:7a:4b:13:c1:38:a0:18:ae:4f:17:fa:94:b1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jul 1 19:07:25 2025 GMT Not After : Jul 5 04:09:25 2025 GMT Subject: CN=8C0D16F1EB7CE0AD35FB61CE098E7DAB5F50CD17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:13:5a:24:a2:46:db:75:bf:ac:97:91:86: 44:75:c8:d9:db:f5:7a:5b:4b:6e:a1:bb:f5:7e:2e: 11:f8:17:bc:ed:78:c4:d9:a1:38:a9:ff:18:a6:c5: f8:f2:8d:ec:55:72:e0:9d:99:86:fe:cf:54:c7:7e: c6:30:da:4a:6c:5f:f6:9b:f3:b1:f5:e9:45:73:04: f8:bc:3f:a5:4a:2b:14:3d:4b:0e:fa:21:f6:a0:b4: 77:60:40:b8:77:3b:22:11:90:fa:8e:85:e6:ab:d2: bd:b3:e6:c5:7f:1b:3d:af:b2:f0:00:c0:1f:66:e9: 84:77:e2:a9:52:5b:9a:aa:cc:c1:80:dc:c0:79:26: 1a:dc:05:ae:96:8d:9f:1a:71:09:f6:d7:e3:ce:37: c1:d7:07:89:91:e3:0b:86:ae:1f:61:37:82:ec:7e: b3:06:d6:35:01:53:40:c1:ce:ff:07:b3:ad:c1:7d: e0:0b:71:b6:f7:f2:9a:8d:5d:30:0d:90:45:1a:25: 4c:71:84:10:13:21:a5:74:84:25:29:0d:ec:af:9f: 75:8e:77:93:1e:19:9b:df:07:2f:48:0f:d5:e7:f3: ba:f9:56:d7:93:d2:91:2a:57:7d:19:03:b0:29:04: aa:09:e2:46:ec:13:07:bf:bf:b6:dc:fe:92:6f:77: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:16:F1:EB:7C:E0:AD:35:FB:61:CE:09:8E:7D:AB:5F:50:CD:17 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:9b:54:9f:1f:ae:2e:06:a1:e7:af:7f:57:db:ef:c6:c2: e7:ac:e9:85:99:b0:98:01:45:df:18:5e:8f:63:a3:c0:10:3e: 78:d8:c2:63:0d:a9:88:56:36:a6:75:08:15:e0:93:be:a2:72: e2:b0:49:69:ee:ed:cd:f7:ba:9c:4b:5b:8c:20:6f:d7:0d:08: 99:65:6f:6a:f4:b5:ee:4b:09:fd:ce:dc:78:1c:88:48:0f:fc: f4:4f:3c:26:07:17:aa:32:47:0e:63:01:63:a4:78:a0:f0:62: c4:2b:c1:6d:57:2b:79:08:ee:a2:ea:11:3b:7b:e6:7f:ad:d4: f4:fb:66:8d:b4:e5:3a:0f:93:3e:ad:a7:e0:17:fa:34:dd:7d: 54:5e:0e:c9:35:5f:cd:a4:af:3b:0b:b8:b8:68:89:41:e2:18: c5:72:e7:d9:aa:48:a6:87:17:a6:fe:8d:dd:60:56:68:80:f5: 81:1f:39:31:f0:f1:b5:f3:b8:15:7c:10:fc:3d:ea:4a:af:af: 25:97:60:74:6f:fb:2b:24:36:d0:2c:91:4d:f1:71:d7:4d:d6: c7:86:17:9e:91:89:cd:d6:2c:a4:af:7e:a0:af:db:d7:3f:5d: d3:5f:bb:86:0e:85:42:88:39:6c:4f:10:78:e6:2e:14:82:43: 1e:ac:ce:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmB6ssiCeksTwTigGK5PF/qUsekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA3MDExOTA3MjVaFw0yNTA3MDUwNDA5MjVaMDMxMTAvBgNV BAMTKDhDMEQxNkYxRUI3Q0UwQUQzNUZCNjFDRTA5OEU3REFCNUY1MENEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvBNaJKJG23W/rJeRhkR1yNnb 9XpbS26hu/V+LhH4F7zteMTZoTip/ximxfjyjexVcuCdmYb+z1THfsYw2kpsX/ab 87H16UVzBPi8P6VKKxQ9Sw76IfagtHdgQLh3OyIRkPqOhear0r2z5sV/Gz2vsvAA wB9m6YR34qlSW5qqzMGA3MB5JhrcBa6WjZ8acQn21+PON8HXB4mR4wuGrh9hN4Ls frMG1jUBU0DBzv8Hs63BfeALcbb38pqNXTANkEUaJUxxhBATIaV0hCUpDeyvn3WO d5MeGZvfBy9ID9Xn87r5VteT0pEqV30ZA7ApBKoJ4kbsEwe/v7bc/pJvdzjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjA0W8et84K01+2HOCY59q19QzRcwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRJm1SfH64uBqHnr39X2+/Gwues6YWZsJgB Rd8YXo9jo8AQPnjYwmMNqYhWNqZ1CBXgk76icuKwSWnu7c33upxLW4wgb9cNCJll b2r0te5LCf3O3HgciEgP/PRPPCYHF6oyRw5jAWOkeKDwYsQrwW1XK3kI7qLqETt7 5n+t1PT7Zo205ToPkz6tp+AX+jTdfVReDsk1X82krzsLuLhoiUHiGMVy59mqSKaH F6b+jd1gVmiA9YEfOTHw8bXzuBV8EPw96kqvryWXYHRv+yskNtAskU3xcddN1seG F56Ric3WLKSvfqCv29c/XdNfu4YOhUKIOWxPEHjmLhSCQx6szrE= -----END CERTIFICATE-----Generated at Thu Jul 3 03:46:03 2025 by rpki-client