$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: 1vxd4bWTHOrecFoX80NeFjaN8hhFthnXQAbeHTW7d1s= Subject key identifier: 89:BD:81:51:E7:32:75:AA:DA:37:F2:1F:98:EA:93:E1:52:78:8D:8C Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 460FB51B20C0A4966659058F61928E1FBA66ED5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 0159 Signing time: Sat 10 May 2025 04:12:06 +0000 Manifest this update: Sat 10 May 2025 04:07:06 +0000 Manifest next update: Tue 13 May 2025 05:17:06 +0000 Files and hashes: 1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) 2: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: JAqdQKABMdsx+N592Vi9/71zuE9sOBvPVCWK6fKmWZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 05:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0f:b5:1b:20:c0:a4:96:66:59:05:8f:61:92:8e:1f:ba:66:ed:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: May 10 04:07:06 2025 GMT Not After : May 13 05:17:06 2025 GMT Subject: CN=89BD8151E73275AADA37F21F98EA93E152788D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:9d:1c:f0:45:f7:8a:cc:66:fe:9f:08:a5: 32:3c:df:e2:c2:9c:3c:b6:4e:8e:0c:83:3d:cc:4d: ba:5f:7e:aa:b2:f5:3a:08:bb:b4:90:e2:aa:e9:c3: 6c:10:b9:5b:e2:5b:09:c7:e2:b6:05:d8:17:b6:47: 53:d6:0f:d5:75:2e:fd:e7:06:29:7d:bc:b5:00:f1: 7b:f8:b2:f4:81:61:53:13:f0:11:6c:5b:c6:dd:7d: 1e:7f:8b:ea:e3:cd:d9:82:3c:f3:cb:4b:32:cb:ba: 3f:f1:dc:87:dc:db:fd:e7:65:ce:0d:05:13:bf:3d: 7e:c4:d0:37:45:8c:4f:71:9d:c8:2a:9e:2c:2a:f0: df:ff:97:19:5d:be:6f:06:93:0a:8a:2c:37:92:f2: 26:20:2e:4a:9e:72:d3:11:25:4e:f8:52:a2:2f:0c: 63:9a:25:4e:7e:97:4d:a1:d2:05:aa:31:b3:96:a7: e9:d1:69:08:8d:07:57:fe:de:8a:cd:ee:3b:05:9f: df:9e:88:fe:f5:27:1d:cd:5a:4e:57:0c:22:c8:25: c7:66:95:ad:cc:ce:83:43:78:6a:84:d5:e8:c1:c8: ce:83:69:4f:50:7f:b4:73:b6:f3:35:62:9e:0c:04: c8:77:16:be:32:d7:d5:96:d8:60:2e:53:d6:dd:de: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:81:51:E7:32:75:AA:DA:37:F2:1F:98:EA:93:E1:52:78:8D:8C X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:50:c9:7b:0e:88:fb:84:55:c0:c2:1c:c5:f0:71:c5:af:49: 67:6e:75:fd:dc:90:e0:d6:3b:4d:d0:8f:75:8f:90:c6:d2:d9: e7:d3:ad:2c:43:de:7f:0a:fc:9d:df:70:fa:a4:40:48:ab:ca: 0d:03:d2:8b:27:b9:df:cb:91:5d:23:0b:0d:bc:b3:9a:e2:ab: e2:d9:37:f6:0f:26:e8:a2:a5:18:e0:69:fe:81:eb:64:47:8d: c7:61:ed:75:d1:08:5a:12:94:2d:25:17:22:7c:4f:d9:86:ba: 43:55:4a:31:4a:b2:4b:36:c2:f5:16:66:36:fc:d4:8c:a5:d0: ee:47:f1:fe:a8:07:13:35:43:87:63:49:55:d7:bc:ed:de:13: 74:13:43:72:41:32:4e:96:7a:4e:38:14:b3:9d:d9:d9:83:e4: e4:8a:1f:6a:17:df:75:18:cc:60:5d:1d:51:04:61:6b:9c:04: a5:d8:a2:61:6c:7b:a7:1d:42:a4:9a:f1:4e:0d:f1:75:d6:82: 82:2c:95:db:fb:4a:13:bf:04:f0:07:4d:5b:29:db:a5:20:f0: 0a:51:bc:1e:a2:e6:ad:7b:79:54:2e:1d:7e:56:42:93:88:33: 0d:fb:3b:14:f6:0f:8f:4f:3e:bd:4e:2b:dc:aa:0b:e1:5d:aa: 46:91:1e:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURg+1GyDApJZmWQWPYZKOH7pm7V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTA1MTAwNDA3MDZaFw0yNTA1MTMwNTE3MDZaMDMxMTAvBgNV BAMTKDg5QkQ4MTUxRTczMjc1QUFEQTM3RjIxRjk4RUE5M0UxNTI3ODhEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvo50c8EX3isxm/p8IpTI83+LC nDy2To4Mgz3MTbpffqqy9ToIu7SQ4qrpw2wQuVviWwnH4rYF2Be2R1PWD9V1Lv3n Bil9vLUA8Xv4svSBYVMT8BFsW8bdfR5/i+rjzdmCPPPLSzLLuj/x3Ifc2/3nZc4N BRO/PX7E0DdFjE9xncgqniwq8N//lxldvm8GkwqKLDeS8iYgLkqectMRJU74UqIv DGOaJU5+l02h0gWqMbOWp+nRaQiNB1f+3orN7jsFn9+eiP71Jx3NWk5XDCLIJcdm la3MzoNDeGqE1ejByM6DaU9Qf7RztvM1Yp4MBMh3Fr4y19WW2GAuU9bd3jWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUib2BUecydaraN/IfmOqT4VJ4jYwwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdQyXsOiPuEVcDCHMXwccWvSWdudf3ckODW O03Qj3WPkMbS2efTrSxD3n8K/J3fcPqkQEiryg0D0osnud/LkV0jCw28s5riq+LZ N/YPJuiipRjgaf6B62RHjcdh7XXRCFoSlC0lFyJ8T9mGukNVSjFKsks2wvUWZjb8 1Iyl0O5H8f6oBxM1Q4djSVXXvO3eE3QTQ3JBMk6Wek44FLOd2dmD5OSKH2oX33UY zGBdHVEEYWucBKXYomFse6cdQqSa8U4N8XXWgoIsldv7ShO/BPAHTVsp26Ug8ApR vB6i5q17eVQuHX5WQpOIMw37OxT2D49PPr1OK9yqC+FdqkaRHrU= -----END CERTIFICATE-----Generated at Mon May 12 00:08:06 2025 by rpki-client